Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa
File:                     3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa (raw, json)
Hash identifier:          s2HfYY6y+CbJjfHBKwiQFPerdOSY88MtYjv649qibUg=
Subject key identifier:   D6:A5:33:06:A8:A8:19:B3:CC:47:4F:5D:EA:FE:1D:E6:AD:B5:5E:66
Certificate issuer:       /CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
Certificate serial:       1674EE24C42FD687B5277A4AD5D5A479153CBE60
Authority key identifier: 21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa
Signing time:             Fri 09 Feb 2024 10:13:05 +0000
ROA not before:           Fri 09 Feb 2024 10:08:05 +0000
ROA not after:            Fri 07 Feb 2025 10:13:05 +0000
asID:                     150185
IP address blocks:        103.193.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl
                          rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:74:ee:24:c4:2f:d6:87:b5:27:7a:4a:d5:d5:a4:79:15:3c:be:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=210BE7BD512F122FD63FE9057A7F1522DC9B81A7
        Validity
            Not Before: Feb  9 10:08:05 2024 GMT
            Not After : Feb  7 10:13:05 2025 GMT
        Subject: CN=D6A53306A8A819B3CC474F5DEAFE1DE6ADB55E66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:95:c8:4b:8e:a3:30:43:15:85:4b:56:4b:ed:
                    65:37:5d:4b:a3:46:27:1e:53:42:23:1f:66:35:dc:
                    a0:36:2c:14:0a:73:06:9c:5b:31:14:c6:1d:6a:b6:
                    96:14:cc:15:cc:dd:1a:c4:f8:11:4a:d8:89:42:9a:
                    02:ab:04:dc:b0:f7:49:bf:ca:3a:76:d0:03:8f:b0:
                    a0:fe:d3:e2:6b:82:fa:35:52:ed:97:c0:43:fe:68:
                    37:95:01:e4:d8:51:96:d5:30:1d:f9:e5:55:0e:0b:
                    91:a2:d1:82:7b:a9:06:cb:ae:aa:b0:00:29:09:6f:
                    f8:0a:44:5e:77:ba:84:37:b9:95:1b:56:ae:54:d0:
                    cf:94:eb:00:0b:3f:b5:70:0a:8d:e1:d9:ec:6a:95:
                    e7:27:3f:b9:19:cc:4d:7b:e9:4c:c6:f0:1b:b1:08:
                    05:2e:18:c6:b9:2e:1b:61:17:3e:a5:a1:31:2b:56:
                    23:9d:21:33:d5:59:56:9e:89:f3:45:c6:20:73:cb:
                    a5:b3:fc:6e:f7:9a:c2:ef:54:0c:89:bf:a4:6e:1e:
                    13:56:e7:69:45:6c:ac:cc:0f:c3:a9:12:c3:fe:b4:
                    a3:f4:a8:0f:4d:de:dd:b7:ca:b4:90:be:d6:b2:5c:
                    d5:f6:64:78:b2:0d:19:d1:18:56:4e:d9:0c:02:1c:
                    9a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:A5:33:06:A8:A8:19:B3:CC:47:4F:5D:EA:FE:1D:E6:AD:B5:5E:66
            X509v3 Authority Key Identifier:
                keyid:21:0B:E7:BD:51:2F:12:2F:D6:3F:E9:05:7A:7F:15:22:DC:9B:81:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/210BE7BD512F122FD63FE9057A7F1522DC9B81A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7036974-8131-45af-94ce-f49b4811c173/0/3130332e3139332e3136372e302f32342d3234203d3e20313530313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:a7:16:01:30:0b:db:9f:04:51:85:7f:06:00:eb:cb:71:7b:
         88:7d:45:a2:b6:44:da:82:cf:9e:d8:6c:68:ae:9d:cc:07:40:
         6a:37:77:6e:5b:95:ac:64:10:58:34:4e:39:a6:66:e8:6f:1e:
         2d:e9:d0:b2:2c:0b:a1:47:31:39:fd:69:2d:dc:8b:73:86:66:
         6e:ce:df:72:a9:f6:24:f9:d0:82:cc:07:db:a2:61:ba:4e:0e:
         39:bf:83:fd:1c:73:cb:c5:2d:2e:a7:af:49:f8:b2:ed:52:5e:
         a8:f1:5c:b0:88:36:a7:e2:04:0e:ff:14:a7:bb:4a:d1:0d:95:
         83:bd:d1:3a:e2:bd:eb:93:2f:4f:8f:dc:75:72:97:04:8c:a4:
         ab:73:83:0f:45:ee:7b:bb:3e:8a:83:5f:c1:d4:48:01:02:ba:
         c9:e5:43:1b:ef:af:08:36:a2:82:e6:84:79:ae:1e:3e:85:b6:
         b3:14:31:d7:90:45:67:29:61:e9:4c:3e:17:15:0b:9d:f4:ea:
         a2:30:ba:b9:3f:20:58:ea:f7:a8:28:b3:56:b7:de:38:40:3d:
         85:f9:ce:c4:1c:ae:a2:b3:48:f0:9d:52:cb:71:54:66:d3:c3:
         50:df:75:83:17:5b:66:39:d9:49:c5:60:5d:11:a1:4c:77:f0:
         dd:08:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org