Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa
File:                     3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa (raw, json)
Hash identifier:          q9Y/LW+GvgpQns3JaxXDJK5aiDeS3kCAGsXt4jOSFx0=
Subject key identifier:   33:AB:96:27:CB:73:FE:CF:C1:E9:40:3C:CF:CE:00:6C:F9:BE:99:AF
Certificate issuer:       /CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
Certificate serial:       17B5293E4F2B558C89015C7522972D97DBB5E840
Authority key identifier: 6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa
Signing time:             Wed 03 Jul 2024 14:00:00 +0000
ROA not before:           Wed 03 Jul 2024 13:55:00 +0000
ROA not after:            Wed 02 Jul 2025 14:00:00 +0000
asID:                     150554
IP address blocks:        103.167.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl
                          rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:22:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:b5:29:3e:4f:2b:55:8c:89:01:5c:75:22:97:2d:97:db:b5:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D958AAEBD8946E47C968284B2652E02A2017E9E
        Validity
            Not Before: Jul  3 13:55:00 2024 GMT
            Not After : Jul  2 14:00:00 2025 GMT
        Subject: CN=33AB9627CB73FECFC1E9403CCFCE006CF9BE99AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0d:1f:bb:c2:a1:d2:e3:89:8f:97:01:41:7c:
                    45:05:82:1d:a2:ad:f6:32:59:60:9c:ad:03:9e:30:
                    8f:bf:52:34:28:25:0d:2a:92:1f:5e:95:e8:46:8f:
                    dd:86:49:55:7a:a0:01:08:55:79:16:00:36:05:50:
                    60:d9:79:f0:2b:3d:03:d9:5e:69:68:38:61:87:c1:
                    e7:67:4c:30:da:34:f0:b7:fa:2f:42:c1:42:b0:7d:
                    19:d0:b6:bf:53:e3:29:ed:62:04:0b:d5:fb:a9:74:
                    b3:6c:9b:35:53:01:b2:a0:a6:8a:da:66:05:58:97:
                    0b:a7:30:bf:33:72:ec:05:3d:05:ee:6c:ca:9d:78:
                    59:26:97:66:d4:8e:41:d1:00:72:08:04:a5:b7:6e:
                    e9:fc:c2:02:19:4c:13:cc:19:93:1f:42:92:7d:51:
                    06:56:ab:03:61:7a:0e:ea:62:0a:77:32:c6:6d:13:
                    7e:09:ed:b8:8b:b7:ed:f9:25:a8:8d:4f:02:e1:7f:
                    c2:d6:10:9b:6d:4b:9f:ea:fe:0d:a4:dd:a0:0b:b7:
                    75:04:e1:96:ba:aa:2f:5e:88:6a:2e:e0:61:d5:1e:
                    f7:44:05:e1:45:3b:49:b7:b2:41:05:2a:61:ef:eb:
                    8d:74:37:28:ed:ff:fb:52:97:4e:3b:5f:72:3d:7c:
                    6f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:AB:96:27:CB:73:FE:CF:C1:E9:40:3C:CF:CE:00:6C:F9:BE:99:AF
            X509v3 Authority Key Identifier:
                keyid:6D:95:8A:AE:BD:89:46:E4:7C:96:82:84:B2:65:2E:02:A2:01:7E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/6D958AAEBD8946E47C968284B2652E02A2017E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D958AAEBD8946E47C968284B2652E02A2017E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1803125-d777-4056-844d-8d1befd0163d/0/3130332e3136372e3135362e302f32342d3234203d3e20313530353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:72:b7:59:b7:51:21:a8:54:52:af:a8:37:0e:41:0f:1c:7a:
         2b:dd:98:b6:0a:36:55:e8:d5:d4:2f:9e:ea:49:9d:d6:39:5c:
         5f:2d:da:25:57:f9:d0:20:11:8e:91:84:70:fc:33:37:7e:3c:
         8a:06:8b:a7:06:25:a0:e0:1a:09:03:87:f5:cf:7c:69:5b:99:
         ef:12:ce:05:3e:8e:04:69:26:6d:25:a0:04:48:d8:7c:aa:35:
         9f:91:aa:ef:af:06:27:9f:45:91:e0:9d:c2:e1:3b:bc:e4:51:
         d5:a3:4d:95:be:a7:0b:0d:08:a9:20:4b:0d:79:61:7d:ec:90:
         5c:25:1a:e3:0e:c7:57:96:9c:da:3d:08:18:f0:3c:ef:16:8d:
         4d:54:c7:9b:56:12:5d:3f:a8:b8:56:16:48:94:ba:62:a1:b6:
         18:f3:34:cb:36:43:80:97:52:fa:78:9a:94:f6:49:38:d2:02:
         40:21:6e:5d:c4:fc:ab:f1:72:f4:ea:bb:ba:87:48:29:c0:a6:
         ae:64:70:88:93:ba:6c:23:e9:17:0e:ce:a3:28:fe:69:37:3a:
         9c:bb:b5:96:e1:ae:18:01:34:97:b4:ab:13:da:70:33:d4:a4:
         b5:41:28:28:11:ad:52:40:69:72:a2:6a:ac:ed:5c:e4:bc:27:
         be:a0:18:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org