Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
File:                     3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa (raw, json)
Hash identifier:          QXc5SZ2mcrzRGa7HMiuP65CO59Id/j9bwy5WhnEqFAY=
Subject key identifier:   C4:C9:EA:2D:4D:AD:08:47:BC:05:0B:DE:0E:AA:F8:E1:00:C7:24:40
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       59EBDB8A96963F35982D2714DFB8FE0E68D4C3E3
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa
Signing time:             Sat 22 Jun 2024 16:00:01 +0000
ROA not before:           Sat 22 Jun 2024 15:55:01 +0000
ROA not after:            Sat 21 Jun 2025 16:00:01 +0000
asID:                     141665
IP address blocks:        103.162.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
                          rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:eb:db:8a:96:96:3f:35:98:2d:27:14:df:b8:fe:0e:68:d4:c3:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: Jun 22 15:55:01 2024 GMT
            Not After : Jun 21 16:00:01 2025 GMT
        Subject: CN=C4C9EA2D4DAD0847BC050BDE0EAAF8E100C72440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:bf:0e:b4:10:54:82:2a:39:33:69:1b:90:90:
                    13:43:17:54:0b:2e:e2:9c:35:85:63:a0:4d:f6:a1:
                    e1:f3:18:b6:71:ab:1f:ca:a2:61:97:65:4b:55:6a:
                    42:3e:f2:9b:68:be:76:81:d6:c1:fd:1e:20:c2:ad:
                    04:83:53:1b:2e:44:e4:12:44:7a:5d:a4:2d:33:14:
                    eb:4b:6f:38:5a:29:49:3e:ea:22:02:e8:21:75:7d:
                    6a:e6:c1:16:2e:cc:29:bb:6e:62:c9:84:cc:ea:9c:
                    7f:b1:7e:80:e1:67:4d:b3:60:06:95:b8:39:ee:52:
                    09:86:fc:5e:b9:1d:3d:88:a9:55:d9:42:85:54:ea:
                    c4:fe:cf:93:cf:7f:af:29:d1:63:f0:64:65:cb:c5:
                    a5:aa:12:7d:0e:cf:b0:ae:87:ea:4e:88:52:7e:51:
                    66:49:03:9a:f3:2c:7c:ed:38:62:56:86:44:38:32:
                    18:52:4f:07:7a:95:9d:22:dc:22:f1:59:84:4f:39:
                    1e:2f:2f:17:ff:c7:8c:4c:46:a6:8a:2e:0f:0d:47:
                    81:b9:4a:5c:eb:88:30:ba:81:f3:50:4b:e7:cf:15:
                    27:81:c3:aa:31:d5:47:b9:f8:54:fd:d8:27:50:d4:
                    72:b8:1f:1e:70:ae:f5:c1:26:2f:19:88:3a:e6:2d:
                    0c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C9:EA:2D:4D:AD:08:47:BC:05:0B:DE:0E:AA:F8:E1:00:C7:24:40
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e20313431363635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:55:27:66:74:d6:be:05:81:c3:7b:fd:24:17:a3:f7:a6:27:
         7f:eb:1e:90:83:31:61:21:51:48:92:6a:de:c5:ce:13:58:19:
         32:b2:b9:7b:f9:ae:67:2c:1d:dc:bb:f3:e1:31:c5:7c:54:f4:
         0c:f3:f0:af:a5:66:79:fa:cc:54:84:fc:93:ab:af:58:b8:92:
         b7:0e:6e:81:f1:1a:f4:75:87:5f:df:4b:66:0e:88:de:ef:9d:
         c5:80:1f:d4:cd:1f:fa:55:75:75:57:b8:81:1e:03:d1:da:ae:
         75:03:36:1c:13:f2:e9:72:0c:63:af:a3:58:84:9a:8f:be:a1:
         fa:ab:4d:8f:53:e4:13:bc:31:80:42:20:2c:93:c6:7d:fd:3b:
         1c:4a:3a:e9:cf:11:18:a3:41:d1:7e:53:4f:9b:38:7b:9b:23:
         64:55:78:05:bc:6a:70:45:d9:4d:9e:c4:bd:8f:79:43:f7:50:
         a5:f7:8a:e5:6b:c8:66:55:b6:be:b9:98:80:73:a9:bc:ea:19:
         c7:e8:a1:d1:6e:0b:4e:57:be:90:fd:1b:80:69:cb:56:b5:5f:
         56:4f:8c:d1:7e:ad:cc:c6:91:d2:77:6a:06:0d:55:b9:df:de:
         73:ac:e5:da:76:5c:43:df:53:21:b7:d2:f3:41:19:0e:3f:62:
         34:52:56:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org