Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          ZcyzUqd1mm5B0d2i3HXw5r3ChXyjazYskOg4oPaP1PQ=
Subject key identifier:   1E:4A:2A:C0:D7:F8:5E:1F:4B:2A:96:7B:1C:91:81:BF:55:DB:FC:D2
Certificate issuer:       /CN=E44D4DE701D932713536A084F76894A6B0473F5E
Certificate serial:       59743C8E89B4EDCF79BBF1DCD9C9B830E7F13346
Authority key identifier: E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 03:15:24 +0000
ROA not before:           Mon 15 Jul 2024 03:10:24 +0000
ROA not after:            Mon 14 Jul 2025 03:15:24 +0000
asID:                     48465
IP address blocks:        103.162.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl
                          rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 10:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:74:3c:8e:89:b4:ed:cf:79:bb:f1:dc:d9:c9:b8:30:e7:f1:33:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E44D4DE701D932713536A084F76894A6B0473F5E
        Validity
            Not Before: Jul 15 03:10:24 2024 GMT
            Not After : Jul 14 03:15:24 2025 GMT
        Subject: CN=1E4A2AC0D7F85E1F4B2A967B1C9181BF55DBFCD2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:35:6c:d3:59:87:31:7c:76:6b:d0:eb:cb:
                    62:15:af:64:17:bf:c5:cf:50:21:fd:f5:f6:10:1b:
                    ae:bb:12:16:89:01:b5:72:f1:c3:40:e2:da:c5:6a:
                    8b:bd:d5:a7:02:0d:e6:52:b0:8b:41:c3:de:4a:27:
                    d5:52:71:87:35:10:8d:bd:4f:4d:6b:1f:3b:0a:45:
                    f4:eb:f4:c4:aa:2d:6e:5f:ac:ad:2e:10:ec:11:10:
                    21:b7:fc:e1:b7:51:70:38:c1:96:41:6b:c4:74:69:
                    f5:9b:83:1b:76:fd:e4:69:8b:47:44:53:cb:50:47:
                    9d:e7:b8:dd:60:8b:8f:80:4d:94:0c:48:64:61:1e:
                    24:62:6d:f4:cc:03:a4:39:26:8a:b5:d9:d0:ef:da:
                    99:1e:85:20:2b:e7:3c:a4:cd:db:c4:80:09:91:fd:
                    2a:7b:45:28:5a:0d:c6:1c:ea:14:83:11:7d:b3:32:
                    aa:2f:a0:b0:77:49:c1:2c:d0:dc:f0:41:58:b0:62:
                    65:bd:f3:43:e7:4a:78:48:09:5d:db:e7:cc:f0:9d:
                    b5:2f:3c:e1:30:c0:fd:cb:40:b8:02:c0:94:5e:ab:
                    b3:78:0b:57:a9:f7:22:68:26:68:58:48:3d:50:58:
                    aa:1b:32:12:51:b9:8a:a9:25:4a:f1:00:e7:2f:e6:
                    a7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:4A:2A:C0:D7:F8:5E:1F:4B:2A:96:7B:1C:91:81:BF:55:DB:FC:D2
            X509v3 Authority Key Identifier:
                keyid:E4:4D:4D:E7:01:D9:32:71:35:36:A0:84:F7:68:94:A6:B0:47:3F:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/E44D4DE701D932713536A084F76894A6B0473F5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E44D4DE701D932713536A084F76894A6B0473F5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c64f0ffa-e031-4ee1-bf0f-64bacfcf2942/0/3130332e3136322e3232322e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:68:22:ed:d1:16:b7:2e:f9:88:e2:e0:8d:39:02:4b:88:0f:
         32:48:f9:7d:cd:9d:45:27:1b:df:f3:c5:5b:43:ce:79:b4:63:
         e5:a5:c8:c0:2e:64:1b:ba:93:0c:56:73:96:58:26:87:ab:d3:
         0f:6e:1e:63:41:bc:e6:d9:08:78:2b:c8:7d:bf:02:da:df:aa:
         81:1a:1e:4b:fb:36:9b:97:63:d2:3f:c5:ea:03:1b:53:8d:9d:
         79:90:31:ec:19:bc:2a:f9:5f:e9:05:09:2d:d5:d1:e0:2a:c6:
         81:1a:b3:b0:a8:d2:43:87:7a:03:ef:d4:16:f8:c3:bb:f2:41:
         1c:0c:22:16:ad:bf:64:1e:0a:66:16:37:b2:a6:28:4d:f4:39:
         e4:34:8f:c5:9c:b9:8f:8d:4a:f8:94:85:1e:cd:aa:33:7f:92:
         8b:95:0b:25:3e:3c:d9:ad:70:51:03:b5:5d:49:70:b2:06:43:
         f3:09:71:d7:0f:a1:b3:23:9e:7e:54:de:81:a1:74:dd:53:04:
         57:dc:59:19:61:99:bd:30:d5:4c:70:e6:de:03:de:31:9d:73:
         d4:42:0f:f3:87:a1:75:39:e2:97:ca:a9:0b:76:f2:ed:90:c6:
         39:15:7c:92:49:40:71:a0:f4:9c:fe:35:26:19:89:14:e1:82:
         7f:23:2b:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:52:57 2024 by rpki-client on console-ams.rpki-client.org