Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
File:                     3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa (raw, json)
Hash identifier:          FjYPomJ0AzbaXbD9/WUE6idvRbMY3k6eEzwYKKnbKFQ=
Subject key identifier:   9A:D7:8A:D4:59:84:D5:67:0B:51:3F:8C:1E:70:36:0A:21:5E:C1:46
Certificate issuer:       /CN=462310BC71429E762524CFB126D88F0808C17EA6
Certificate serial:       236420F29A3119388B945E3A90AF46FDD8EFB65A
Authority key identifier: 46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa
Signing time:             Thu 06 Jun 2024 12:00:01 +0000
ROA not before:           Thu 06 Jun 2024 11:55:01 +0000
ROA not after:            Thu 05 Jun 2025 12:00:01 +0000
asID:                     141589
IP address blocks:        103.160.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl
                          rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 08:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:64:20:f2:9a:31:19:38:8b:94:5e:3a:90:af:46:fd:d8:ef:b6:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=462310BC71429E762524CFB126D88F0808C17EA6
        Validity
            Not Before: Jun  6 11:55:01 2024 GMT
            Not After : Jun  5 12:00:01 2025 GMT
        Subject: CN=9AD78AD45984D5670B513F8C1E70360A215EC146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:11:33:eb:4c:34:12:3c:54:e6:0b:bb:ee:8b:
                    7a:5f:bd:90:72:47:32:6e:6e:e5:52:46:e4:95:55:
                    89:77:9a:2a:48:6d:53:ff:7a:49:eb:98:89:4b:19:
                    43:ba:33:13:67:89:a8:c8:13:05:1c:80:8e:7c:5c:
                    75:f4:c7:87:49:d5:10:68:39:b9:dc:2b:28:85:b6:
                    85:2a:39:7e:4d:5c:c0:e0:a0:fd:74:ab:0a:1e:14:
                    ba:89:a0:4a:50:79:49:98:47:f1:09:39:2d:f4:8a:
                    27:66:11:d2:0b:4e:f8:ae:17:1e:61:87:68:ce:7c:
                    82:80:a1:90:56:08:cc:95:2c:65:57:07:29:bc:75:
                    e8:b6:81:67:f6:cd:5e:a4:68:f0:b6:1f:f2:ab:b0:
                    4c:ad:ea:e4:94:8e:71:5c:1f:8c:53:a1:7f:5a:7a:
                    3c:a3:8e:b3:a7:a8:1d:11:23:ad:71:f7:7e:90:43:
                    5f:ec:15:8e:b6:47:83:73:36:7d:83:11:39:59:1a:
                    d6:e9:78:16:00:bf:4e:0d:77:d4:ff:ea:13:da:7d:
                    3e:d7:be:2c:29:93:11:a2:91:6b:f9:f7:98:3c:3c:
                    17:84:50:0a:8d:46:81:29:59:3b:06:71:97:ff:3b:
                    c1:86:df:3c:1d:5e:dc:7e:f3:76:18:85:b9:ca:5b:
                    0b:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:8A:D4:59:84:D5:67:0B:51:3F:8C:1E:70:36:0A:21:5E:C1:46
            X509v3 Authority Key Identifier:
                keyid:46:23:10:BC:71:42:9E:76:25:24:CF:B1:26:D8:8F:08:08:C1:7E:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/462310BC71429E762524CFB126D88F0808C17EA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/462310BC71429E762524CFB126D88F0808C17EA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c36d6a4f-cc39-4d9e-841d-00bd7dcb175a/0/3130332e3136302e3131392e302f32342d3234203d3e20313431353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:41:a2:68:2e:20:05:03:4f:6e:50:f4:a5:9f:40:4d:55:13:
         14:20:11:cf:8e:42:c9:a9:0a:4a:90:55:30:59:bb:05:aa:64:
         5f:c4:08:a3:26:af:58:25:c5:76:52:90:c4:89:b2:cd:05:4c:
         27:fe:80:e2:82:ca:66:a0:c6:9f:40:82:90:32:25:4b:cd:e5:
         ee:ea:dd:06:e3:dd:73:50:92:47:17:b6:b0:7e:6d:90:2b:48:
         22:e4:5d:ca:b4:04:06:8d:06:d3:68:38:3b:5b:8a:b9:6d:59:
         52:7e:8e:6b:9f:7f:35:02:26:9a:6a:0d:75:ef:c7:74:38:7d:
         c5:a1:7a:7f:80:55:b1:ed:1e:87:89:4d:0d:da:ac:01:18:3c:
         9c:6e:2f:0b:21:78:4a:4d:d4:b9:8a:35:88:da:dc:1d:f6:c0:
         9a:94:ab:ac:29:fc:d5:c0:11:8b:1d:62:81:f4:8a:55:9f:88:
         4f:f3:fa:72:6b:2e:40:a3:c4:3f:fd:4e:57:23:b6:80:1c:84:
         34:6f:f1:86:7e:36:81:8b:f5:fe:3a:32:79:88:9e:6f:b8:ad:
         6a:92:a3:fc:d0:98:4a:20:bd:5a:4f:4b:01:29:8a:fb:06:a9:
         3b:49:e0:e4:71:29:c2:28:a8:58:cd:5a:91:01:66:3a:5a:79:
         4f:58:76:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 09:00:39 2024 by rpki-client on console-fra.rpki-client.org