Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
File:                     3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          TJd7Y3wfP84prGibqKk8GLq8tUoRV9YHBFdrUmigk/0=
Subject key identifier:   06:4E:44:77:04:8E:5C:58:04:34:F2:B3:C0:05:D6:86:AD:28:E7:0F
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       356B6FE35F32E50D265F79ABA6131C82AE0F5BF3
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa
Signing time:             Wed 17 Jan 2024 09:00:02 +0000
ROA not before:           Wed 17 Jan 2024 08:55:02 +0000
ROA not after:            Wed 15 Jan 2025 09:00:02 +0000
asID:                     58495
IP address blocks:        103.160.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:6b:6f:e3:5f:32:e5:0d:26:5f:79:ab:a6:13:1c:82:ae:0f:5b:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Jan 17 08:55:02 2024 GMT
            Not After : Jan 15 09:00:02 2025 GMT
        Subject: CN=064E4477048E5C580434F2B3C005D686AD28E70F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7b:7c:a8:81:ae:7c:5d:6c:eb:05:cd:47:0b:
                    78:82:07:d2:96:8a:7a:7b:68:47:98:9c:60:95:0d:
                    f2:63:60:37:3d:5a:f8:ea:e0:85:bd:52:fd:a6:7b:
                    e6:21:8c:69:d0:5e:c5:b9:b8:20:88:db:90:60:44:
                    a8:f7:96:ab:66:16:5c:fd:05:20:52:60:de:fd:0a:
                    c7:c8:08:0d:5a:49:68:26:e3:48:b8:26:64:e8:12:
                    9d:72:d2:cd:cd:12:d4:7b:27:df:0d:49:6e:55:ff:
                    a6:20:1e:92:12:8b:c4:a9:55:51:46:ff:9f:0d:57:
                    08:3d:92:6a:ff:1d:de:3a:e3:5e:70:25:47:16:ca:
                    6e:9e:35:0f:bd:2f:c4:c7:dc:ed:a3:21:89:77:2b:
                    8b:4e:69:73:b0:5d:b3:9b:81:5b:d1:74:7a:a3:7c:
                    5e:ed:8f:e6:a3:13:cb:61:ce:1d:eb:3a:6f:f0:69:
                    8f:40:46:f7:f6:fc:03:60:e3:3c:f9:6b:19:be:58:
                    59:28:11:34:2f:56:80:4d:d1:8f:23:ab:da:41:2d:
                    b3:f4:e6:91:4b:95:b8:80:af:5c:66:d6:c7:60:e5:
                    34:8a:38:90:c7:d1:7c:86:89:53:8b:b8:f8:3c:52:
                    ae:a2:ee:40:c9:33:a2:6b:7f:71:a7:88:21:29:0d:
                    55:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:4E:44:77:04:8E:5C:58:04:34:F2:B3:C0:05:D6:86:AD:28:E7:0F
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136342e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:de:a5:80:e4:bd:02:69:66:d4:b9:1e:2a:bc:ce:0e:ff:
         86:9d:f0:6c:38:ca:4d:7d:8f:d4:f4:ef:fb:a7:f0:30:b7:8b:
         ef:af:4c:45:d9:96:42:9e:fa:7c:c2:88:db:2a:c9:9d:b0:f6:
         97:8c:22:3c:bd:92:f2:b1:72:22:ce:0c:55:e7:b0:3d:73:9d:
         8a:3a:50:0e:97:39:d6:a2:aa:8a:cf:3c:e9:83:9c:64:96:d3:
         b8:d1:78:56:d2:9a:74:e7:54:ca:ff:f0:9b:ad:bb:f8:87:ab:
         60:1a:f8:10:fb:fe:dc:22:c6:fc:08:f1:74:5c:d0:73:4c:99:
         a5:78:8e:36:54:39:47:cf:ca:88:ce:d0:64:36:4f:55:39:3f:
         70:48:aa:c7:b6:ce:72:b1:72:5d:de:bb:8a:7e:1a:e3:16:f0:
         f0:cb:61:36:f7:e5:d1:df:b5:35:6e:df:11:f9:c6:ec:b9:30:
         eb:db:f2:a9:3d:05:15:64:e9:49:83:f3:b3:41:c9:75:e9:f6:
         f3:a3:9b:0e:90:b9:43:b2:86:79:7f:1e:7f:c4:77:77:0b:1a:
         4e:11:09:ee:f9:61:c0:de:36:8e:bc:f0:ad:b3:05:01:21:70:
         af:53:3f:44:7f:6f:65:52:08:fd:8c:92:b0:cb:2c:1a:0c:2b:
         a4:dc:f6:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org