Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          EzfUcVppF7kV0tBYky+ji9HzTpbBoE7AvZdEKau3gSw=
Subject key identifier:   99:00:0D:8B:D8:77:EF:B7:FA:43:8C:6F:78:20:1C:F0:88:AD:23:61
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       6E71639A8BF15BFD7BDEBD4504EA97D7295DCDD3
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa
Signing time:             Tue 07 May 2024 05:00:01 +0000
ROA not before:           Tue 07 May 2024 04:55:01 +0000
ROA not after:            Tue 06 May 2025 05:00:01 +0000
asID:                     141910
IP address blocks:        103.164.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 23:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:71:63:9a:8b:f1:5b:fd:7b:de:bd:45:04:ea:97:d7:29:5d:cd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: May  7 04:55:01 2024 GMT
            Not After : May  6 05:00:01 2025 GMT
        Subject: CN=99000D8BD877EFB7FA438C6F78201CF088AD2361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:d8:4c:10:3d:98:dc:9d:26:a6:19:c5:6d:02:
                    92:9b:da:e6:d8:fd:0a:ec:3b:d4:08:1f:b6:b8:54:
                    f2:87:f3:ad:03:a0:71:48:7b:5a:a5:f8:47:e7:97:
                    48:ac:27:5f:1a:26:61:d1:f4:1b:86:31:a8:38:ea:
                    3b:63:a0:38:28:3c:a7:19:23:68:9c:f9:9a:97:af:
                    f8:f7:9d:07:d7:22:5c:a7:b9:94:e1:18:ed:3a:db:
                    28:8c:67:84:31:ee:e8:9c:a7:b6:5a:d7:fc:90:84:
                    6b:bc:87:ff:99:15:f3:07:0b:a0:49:4e:fb:b3:b2:
                    65:f9:68:95:48:00:6a:ed:e1:85:bb:c4:85:51:a3:
                    ad:78:2a:db:50:82:b4:49:97:16:8c:1b:f3:fc:19:
                    76:0a:3b:7c:2a:f0:cd:21:c2:fa:fe:4d:6c:f6:36:
                    85:b7:ad:0f:14:84:08:24:a5:33:f7:0a:2a:9d:a2:
                    09:01:ff:8c:24:00:41:df:33:79:70:32:ae:3b:89:
                    46:d4:c9:e6:ec:28:d6:3a:d1:a1:44:bd:87:57:7d:
                    06:d5:e6:4f:db:50:64:b8:b6:65:8e:b9:ce:a5:37:
                    34:ba:7c:90:68:98:ba:5f:59:ef:68:d0:fc:2f:09:
                    6b:ad:f2:9a:e1:de:f3:ca:60:55:df:37:d6:85:e1:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:00:0D:8B:D8:77:EF:B7:FA:43:8C:6F:78:20:1C:F0:88:AD:23:61
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35392e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:10:3d:fd:13:3b:11:6a:e3:7d:44:04:f0:42:22:0e:3f:7c:
         52:64:b0:0b:21:5e:e0:40:42:14:1a:98:75:d9:9b:d7:12:7f:
         e7:c6:33:2c:a1:1d:7e:11:77:8c:e5:38:c4:a2:20:8c:4a:31:
         56:8a:0c:4c:71:68:99:ad:05:50:7f:04:18:fe:e2:38:40:72:
         23:11:eb:77:48:e8:70:43:7c:9b:31:fb:fa:c3:5e:ee:e7:6b:
         cf:f7:a8:0a:2d:4e:55:67:7c:cd:41:89:3d:53:5e:4b:dc:7e:
         a7:09:26:22:cc:6d:10:f7:a5:d3:7c:ee:27:b6:0f:2c:1a:ce:
         68:f3:bf:05:fd:f8:93:fc:bb:53:4d:16:37:d6:24:2b:3e:20:
         f4:0e:48:b2:5e:aa:b6:14:98:74:78:80:3d:63:97:ca:9a:69:
         12:19:db:98:ad:4a:88:92:a6:0f:9c:16:ca:7d:63:31:83:60:
         f3:ea:44:bf:ea:22:2d:7a:e2:12:b7:92:48:d1:99:11:2c:91:
         92:78:ee:7d:a3:27:4e:0b:a2:5d:9c:d2:5d:fb:88:fd:f1:1d:
         bc:ac:49:28:d8:22:1e:c5:2c:c7:ed:10:35:6c:6b:2d:0b:e9:
         d2:10:2f:fa:c6:6f:4a:51:65:18:5e:12:e1:fc:2b:dc:13:bb:
         23:a6:f2:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:17:52 2025 by rpki-client