Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa
File:                     3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa (raw, json)
Hash identifier:          BrAZK6t4rNqxbvw5hbo0N9Bep4jWhJ5dcPoSe1WYzIY=
Subject key identifier:   5F:EA:2F:96:04:F3:8D:01:5F:DC:D6:00:95:AA:9B:7A:F2:0E:A8:0B
Certificate issuer:       /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
Certificate serial:       0DF0960F61B37AB6D39249DA9070C178486B003E
Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa
Signing time:             Tue 20 Aug 2024 13:00:00 +0000
ROA not before:           Tue 20 Aug 2024 12:55:00 +0000
ROA not after:            Tue 19 Aug 2025 13:00:00 +0000
asID:                     149924
IP address blocks:        103.191.169.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl
                          rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:f0:96:0f:61:b3:7a:b6:d3:92:49:da:90:70:c1:78:48:6b:00:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
        Validity
            Not Before: Aug 20 12:55:00 2024 GMT
            Not After : Aug 19 13:00:00 2025 GMT
        Subject: CN=5FEA2F9604F38D015FDCD60095AA9B7AF20EA80B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:ad:47:2f:9e:ec:ee:41:e7:5a:28:25:fb:
                    89:d5:f8:9c:af:2c:13:cf:b1:4d:bb:d1:e2:91:d3:
                    02:e0:be:07:4a:44:96:d0:18:f1:36:3b:c9:e5:88:
                    d0:d1:8d:97:39:e0:70:d0:aa:ea:f5:d9:56:ee:11:
                    51:09:e4:d6:d2:45:e9:91:52:f8:bf:f5:68:a2:35:
                    45:75:4d:2e:2a:91:4b:97:37:00:99:5c:9a:6d:53:
                    de:81:64:99:45:05:2f:b9:a8:94:39:71:9a:f5:eb:
                    2d:ae:90:58:87:da:3c:70:da:b5:62:e8:ca:23:f6:
                    70:5c:64:12:a7:95:b9:82:41:82:cb:ee:37:5a:5a:
                    91:70:13:68:ff:6e:79:2f:7c:8e:e6:19:12:f3:de:
                    15:3e:90:e8:4b:7b:42:4e:b4:e2:85:df:24:41:5e:
                    96:d4:a0:d2:93:b0:40:c8:4e:eb:36:6a:d7:6b:0f:
                    a1:f9:7e:b0:5b:5b:77:a4:24:9e:10:20:e2:89:04:
                    83:9a:0b:49:53:00:1a:95:10:41:9e:10:61:77:08:
                    23:a7:ba:a7:ae:9a:a4:5a:4b:39:2a:53:bb:36:27:
                    d5:54:a5:86:57:75:97:b1:3f:af:44:4f:e2:d2:dd:
                    18:73:56:12:22:17:07:42:a6:3c:4b:d7:f1:56:40:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:EA:2F:96:04:F3:8D:01:5F:DC:D6:00:95:AA:9B:7A:F2:0E:A8:0B
            X509v3 Authority Key Identifier:
                keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136392e302f32342d3234203d3e20313439393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:42:7d:dd:e0:d2:b8:4c:ce:dc:84:8d:00:bf:bb:49:32:b3:
         13:1d:9b:d9:59:93:bc:41:3f:8a:53:2e:e1:1c:4a:fd:56:b4:
         d6:59:4f:9d:cb:89:ac:20:bb:7b:ec:49:33:03:ac:29:b7:ba:
         c0:f8:7b:45:98:23:4d:dc:fa:17:89:c2:25:02:79:b5:1f:64:
         6a:f9:b1:82:87:6a:52:9f:c4:ec:ff:bd:37:e4:89:04:03:42:
         e9:14:3d:30:98:80:c5:58:a0:28:10:94:c9:a5:75:50:f7:84:
         75:4a:93:93:57:a1:20:d6:99:6c:72:de:ca:1d:e3:0c:d0:8a:
         aa:19:81:3b:ae:fc:89:56:b0:7b:1e:a4:6c:ed:2c:e5:a8:a8:
         1b:ad:d5:b0:85:9d:dc:df:b2:d8:07:32:75:dc:72:ae:97:42:
         b6:86:f5:ab:68:de:2d:48:fc:0c:31:b8:ec:53:ed:20:c5:60:
         8e:89:00:a9:4d:a6:1d:90:fd:3a:0e:5b:cd:b5:f8:54:68:b8:
         73:27:78:51:ad:cb:c4:2c:30:16:23:55:b4:43:11:b6:79:c6:
         2f:ad:63:fe:79:d1:4c:48:90:82:00:48:fa:8d:27:57:f6:d5:
         28:17:de:ea:30:6d:ed:9b:41:0d:ab:d9:3c:27:2e:d7:b6:0a:
         4b:68:ef:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:09 2024 by rpki-client on console-ams.rpki-client.org