Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
File:                     3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          4jL23HOR2MxYYBMdU8rmaFDSkz/Cs+HRpgVI/SVocUU=
Subject key identifier:   0C:D7:8D:D2:82:A9:D2:BA:8C:E6:A9:9C:45:25:96:0B:1A:37:32:B3
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       798AF5BCB8DF5EA3D436408B7376C502CA6193D0
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
Signing time:             Wed 18 Dec 2024 09:00:02 +0000
ROA not before:           Wed 18 Dec 2024 08:55:02 +0000
ROA not after:            Wed 17 Dec 2025 09:00:02 +0000
asID:                     58495
IP address blocks:        103.160.164.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 16:52:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8a:f5:bc:b8:df:5e:a3:d4:36:40:8b:73:76:c5:02:ca:61:93:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Dec 18 08:55:02 2024 GMT
            Not After : Dec 17 09:00:02 2025 GMT
        Subject: CN=0CD78DD282A9D2BA8CE6A99C4525960B1A3732B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:77:f8:db:79:60:16:d8:40:f4:24:77:03:4d:
                    4b:a8:db:9a:c3:66:e5:ea:c7:fc:3a:c0:7c:99:51:
                    2a:87:aa:89:bd:b3:12:ce:5b:a2:ab:b3:a0:05:16:
                    33:ac:20:3f:81:14:16:f9:b0:43:dc:24:44:ee:fe:
                    97:4d:b9:9b:f1:69:e8:1c:81:14:bd:de:10:ef:20:
                    d5:51:7d:ac:87:07:0f:c0:17:ef:9a:60:69:61:ee:
                    45:35:d2:97:e0:b7:28:2e:b6:2b:9c:e5:f4:48:c2:
                    50:9c:6d:aa:c7:b8:d3:b3:6e:7b:2c:ab:77:f0:15:
                    9e:04:5c:51:aa:cc:50:0c:be:b9:79:70:8c:89:a3:
                    60:75:bf:ce:34:d3:a2:85:e4:4e:83:d2:38:1c:1a:
                    21:1d:45:68:9a:f4:2a:fd:d8:69:86:a7:54:24:b9:
                    54:74:0f:6c:e9:9a:ef:f5:ef:29:b4:07:6d:48:71:
                    65:7d:19:17:a3:62:57:06:a2:1a:c2:45:f2:87:45:
                    9c:8c:73:59:b5:6b:c9:ec:21:4b:10:83:b3:f3:c4:
                    65:3a:cc:35:5c:29:04:63:c0:91:2a:a5:a1:95:d5:
                    5b:73:aa:8f:9b:05:64:39:28:cf:46:a4:fa:05:bc:
                    f6:67:e5:f1:ca:64:bb:d9:72:bf:84:56:e6:89:44:
                    cc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:D7:8D:D2:82:A9:D2:BA:8C:E6:A9:9C:45:25:96:0B:1A:37:32:B3
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:f4:ed:33:e2:f0:6e:9d:b7:72:c5:8b:60:84:f6:e8:30:ca:
         42:c5:4f:db:08:fd:54:42:a5:0a:e0:36:d1:46:e0:f5:d1:de:
         59:d4:22:5c:62:18:7f:df:96:55:f7:34:d2:ab:83:f6:a4:c4:
         9a:91:36:92:36:ec:3d:ff:e8:67:80:78:94:81:6a:c2:16:ff:
         be:7e:a7:27:95:1d:e9:c6:99:a3:ac:db:6d:2e:22:52:6c:eb:
         08:aa:d8:dd:3f:42:7f:4a:d4:08:d1:f7:bb:2a:f8:91:f2:2d:
         f4:6a:b3:86:cc:b8:60:b1:49:95:cf:94:37:ec:36:34:15:bc:
         85:f6:a9:df:eb:67:72:1a:74:55:06:b2:49:e9:40:6d:2b:89:
         f7:d3:5a:11:c9:3a:dd:3d:b4:df:87:99:3c:bc:2b:5e:df:4e:
         92:9f:78:21:6e:e7:41:5c:79:01:35:50:46:a2:3f:06:f9:7e:
         34:fa:96:b5:e2:38:e9:91:ca:2d:47:22:6f:01:97:9d:a6:88:
         7e:d7:f9:51:3b:b2:81:6e:54:3e:5d:d1:cc:5a:06:49:dc:00:
         4d:cd:b0:dc:d5:ff:12:43:e3:63:f6:47:73:cd:d7:0b:61:49:
         86:b7:eb:a5:02:c1:9d:d6:35:ee:28:23:74:c7:cd:1d:a1:22:
         39:c6:60:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:24:19 2025 by rpki-client