Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa
File:                     3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa (raw, json)
Hash identifier:          ngrdocdXCLVakY3o3x80D+CanRE8UguawMO/do6CMzU=
Subject key identifier:   93:1E:07:B7:FB:5D:0C:EC:95:50:E6:FC:A3:84:B0:4B:A4:B4:33:9A
Certificate issuer:       /CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
Certificate serial:       3A121AC9AF94171445C6A856796A8AC3E59C5D68
Authority key identifier: 05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa
Signing time:             Fri 12 Jul 2024 15:00:00 +0000
ROA not before:           Fri 12 Jul 2024 14:55:00 +0000
ROA not after:            Fri 11 Jul 2025 15:00:00 +0000
asID:                     141622
IP address blocks:        103.161.195.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl
                          rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:12:1a:c9:af:94:17:14:45:c6:a8:56:79:6a:8a:c3:e5:9c:5d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052EE59C1D4149A77DF1555311C056DCDBC5FF4C
        Validity
            Not Before: Jul 12 14:55:00 2024 GMT
            Not After : Jul 11 15:00:00 2025 GMT
        Subject: CN=931E07B7FB5D0CEC9550E6FCA384B04BA4B4339A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c9:a3:ba:f3:a0:7d:f5:18:4b:d1:83:61:e0:
                    a5:90:04:1c:5f:88:36:0a:1d:2a:e5:25:a3:31:f4:
                    b4:b7:62:32:8c:96:3e:fe:28:12:7d:1e:cc:7b:1a:
                    d2:09:3e:01:18:f9:42:95:96:22:bc:5f:8c:6d:fa:
                    6b:be:46:ce:c6:4a:35:1a:68:db:ee:c9:52:41:01:
                    56:7a:f0:cc:bb:f8:d2:c7:eb:63:ff:d4:1d:8c:a2:
                    73:6d:7e:d5:1d:98:f8:ab:91:2c:61:88:7a:6a:04:
                    f0:7f:60:83:81:6a:12:82:a6:58:66:fb:e5:25:f4:
                    1f:f6:1e:b3:74:e9:bd:7e:34:49:bd:ed:3a:89:f1:
                    b3:62:23:af:40:93:d3:4f:18:05:ee:62:d9:a7:1a:
                    8d:de:29:3a:88:dc:32:78:d8:73:13:c2:b7:7a:a3:
                    86:b2:75:65:c7:75:1f:67:64:b0:8f:22:b8:5e:a7:
                    fe:78:da:b0:06:ac:d5:34:d4:55:b8:18:3d:ca:e7:
                    44:87:c2:c8:ee:01:6b:f4:54:eb:a4:0f:d6:bf:c1:
                    d6:ce:e1:c6:fd:86:77:be:e8:9e:9e:28:7f:a6:a8:
                    48:c2:e3:db:c9:e4:b9:8d:c7:f3:d9:f3:ac:51:1d:
                    07:77:12:24:00:0e:6c:a5:ce:d9:73:84:4b:16:fd:
                    7e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:1E:07:B7:FB:5D:0C:EC:95:50:E6:FC:A3:84:B0:4B:A4:B4:33:9A
            X509v3 Authority Key Identifier:
                keyid:05:2E:E5:9C:1D:41:49:A7:7D:F1:55:53:11:C0:56:DC:DB:C5:FF:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/052EE59C1D4149A77DF1555311C056DCDBC5FF4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbfb228-fd05-4afd-87bd-ed580b55036f/0/3130332e3136312e3139352e302f32342d3234203d3e20313431363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         30:7d:40:48:8d:b0:c9:a0:fc:9f:0c:c5:5d:18:bd:3b:ae:79:
         d8:72:bf:26:36:64:aa:12:2a:2b:83:48:20:31:96:eb:33:76:
         98:75:d4:1c:9b:fa:2f:c5:eb:97:bc:29:a6:a2:aa:b0:26:48:
         f1:2b:85:52:01:ac:c5:59:a0:04:a5:c2:cb:87:06:cf:03:f7:
         24:f6:0e:c5:45:f6:90:b8:ce:ef:ef:ef:dd:dc:85:21:bf:5c:
         e6:6c:8f:12:8c:df:ec:f0:55:af:4f:de:9d:b2:00:db:00:0c:
         77:02:9b:a9:3e:fa:4b:be:e8:f4:be:16:50:a9:30:d5:79:e2:
         5e:bf:19:17:f0:1b:44:be:e5:7f:39:4b:2d:ef:fd:57:8d:c8:
         12:07:24:6e:67:7f:3a:66:ac:7b:a2:7c:db:65:5f:e9:85:37:
         87:7a:bb:d4:79:0e:20:e9:d3:84:7f:eb:a0:0f:cc:84:ee:ac:
         87:46:5f:23:9b:c5:13:39:58:53:1f:89:01:75:f9:d0:89:d5:
         79:79:e0:de:6e:56:7b:13:34:d7:b1:0c:2d:56:3f:3c:24:15:
         9f:26:83:76:62:87:6d:6f:8f:0e:54:f9:bb:f6:3e:d3:46:be:
         6d:72:01:45:a4:f8:b7:ca:a7:61:9d:17:0c:6f:cd:7b:b6:4f:
         56:db:7f:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 20:57:50 2024 by rpki-client on console-fra.rpki-client.org