Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa
File:                     3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa (raw, json)
Hash identifier:          GNR1G9qgqANJN1bFgQVrQ3f5CNVGdCJvyCo5IAjGvvE=
Subject key identifier:   CB:68:99:7D:B3:26:27:25:06:E2:8F:89:4B:BF:B7:29:6D:B7:24:43
Certificate issuer:       /CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
Certificate serial:       68835CE614188C4492F030A776EA719AA5AA59D2
Authority key identifier: BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa
Signing time:             Wed 07 Feb 2024 05:00:02 +0000
ROA not before:           Wed 07 Feb 2024 04:55:02 +0000
ROA not after:            Wed 05 Feb 2025 05:00:02 +0000
asID:                     58495
IP address blocks:        103.160.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl
                          rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:83:5c:e6:14:18:8c:44:92:f0:30:a7:76:ea:71:9a:a5:aa:59:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC18FDA249B3BD56020648E83F0B24DDBF1E66E5
        Validity
            Not Before: Feb  7 04:55:02 2024 GMT
            Not After : Feb  5 05:00:02 2025 GMT
        Subject: CN=CB68997DB326272506E28F894BBFB7296DB72443
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1b:6e:0b:40:ba:bf:e8:61:13:9b:c6:58:9c:
                    56:98:e5:ca:46:34:a3:41:8e:8c:4b:c6:67:80:40:
                    e8:12:be:56:25:6f:47:52:cc:ce:e2:a9:3b:6f:46:
                    6f:b7:48:2f:1e:66:f8:51:0a:50:20:74:72:59:62:
                    b0:3c:b1:47:0a:c7:5e:ab:13:23:ed:90:e2:68:ab:
                    99:2e:60:d2:9b:b9:09:c9:ba:fb:db:4d:ff:ba:96:
                    3f:ed:54:61:67:6f:81:84:a8:86:61:97:1c:d7:7e:
                    45:ce:f3:b2:e3:00:22:11:88:b3:1e:7c:41:38:51:
                    1d:6a:09:8b:f4:3b:93:d2:e9:66:c5:6d:0f:b5:ef:
                    fc:85:d8:b5:d6:4f:59:09:f5:e2:84:6d:22:5f:a1:
                    d0:1e:de:d1:d4:7b:e5:71:ff:50:aa:ac:07:01:ad:
                    5b:ba:95:8d:f3:06:7d:64:6c:1e:0a:dc:c5:e3:b0:
                    a9:4e:29:e2:01:e5:0a:1c:0b:a0:aa:22:67:f6:ab:
                    ad:fc:56:06:c2:f1:67:88:89:fc:47:f1:e5:78:76:
                    49:c2:b3:85:c3:51:9d:57:77:58:b8:13:a7:07:5a:
                    9b:28:db:c0:6f:c6:35:6c:88:0d:65:41:eb:5b:f5:
                    52:75:d7:80:a1:36:a6:2b:af:bc:ee:fb:e6:b0:a2:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:68:99:7D:B3:26:27:25:06:E2:8F:89:4B:BF:B7:29:6D:B7:24:43
            X509v3 Authority Key Identifier:
                keyid:BC:18:FD:A2:49:B3:BD:56:02:06:48:E8:3F:0B:24:DD:BF:1E:66:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC18FDA249B3BD56020648E83F0B24DDBF1E66E5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c647a6a2-1ad0-46c7-9cad-58bbd71fb5a4/0/3130332e3136302e3136352e302f32342d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:62:44:54:99:2b:d6:cb:eb:30:b7:73:cd:b5:dd:5e:ee:71:
         2c:58:2a:14:ce:43:de:15:a0:59:aa:74:0d:9f:e0:01:bb:9b:
         40:92:94:ce:82:ea:fb:28:8c:7f:d7:b0:59:75:af:6a:d9:5c:
         d8:4b:22:ee:e1:99:49:15:67:6b:14:cd:0f:54:c3:2f:e0:7e:
         3c:b7:b4:17:c4:e2:06:fc:1a:4e:0f:dc:c9:d4:fd:22:52:89:
         48:47:17:6e:f0:73:b1:22:87:3b:11:e5:65:c6:45:d2:9c:fa:
         e8:3a:58:01:1a:ea:4b:ea:6f:c8:a5:df:de:d0:b3:f9:8e:80:
         0a:0c:8c:f2:c2:e8:24:b6:b2:88:20:70:dc:2d:fa:22:b9:1f:
         3d:0d:95:62:99:25:13:03:cc:2f:dd:83:d5:bb:8b:23:c1:97:
         d3:f4:09:f4:2c:89:9d:4b:99:24:95:7f:fe:77:8b:ff:c5:72:
         8b:c4:df:b8:4f:44:29:f2:ee:4a:e0:7a:e4:e8:bc:20:71:da:
         51:70:88:6f:d6:00:83:e9:75:a4:4d:59:72:4d:f9:19:3c:a9:
         41:78:3e:71:7c:58:48:66:58:15:f2:60:1f:22:29:5a:36:5b:
         b4:8b:33:18:e7:fa:2a:5b:c6:63:58:f2:30:b9:ee:50:0b:0e:
         bb:a6:b4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org