Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e203338333230.roa
File:                     3130332e3136352e3234362e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          U2GkmsJmMeKcIcXC7be7d23AqAriCJKebJTFtljImYE=
Subject key identifier:   C0:E6:BD:DC:ED:46:18:BF:9E:2B:79:AD:F6:A0:0C:67:51:61:94:24
Certificate issuer:       /CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
Certificate serial:       629E9975EACEF222CEE405E3923155A77EA0A498
Authority key identifier: A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 16 May 2024 04:02:10 +0000
ROA not before:           Thu 16 May 2024 03:57:10 +0000
ROA not after:            Thu 15 May 2025 04:02:10 +0000
asID:                     38320
IP address blocks:        103.165.246.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl
                          rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 01:35:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:9e:99:75:ea:ce:f2:22:ce:e4:05:e3:92:31:55:a7:7e:a0:a4:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1918C156A9ACFCDF2471DEAFC618EE162DCB340
        Validity
            Not Before: May 16 03:57:10 2024 GMT
            Not After : May 15 04:02:10 2025 GMT
        Subject: CN=C0E6BDDCED4618BF9E2B79ADF6A00C6751619424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:16:1f:45:35:3d:e7:25:bf:28:64:5a:64:a7:
                    10:f0:b7:17:06:90:8a:8c:08:67:45:1d:be:34:1c:
                    7b:df:6a:71:03:11:dd:b0:ee:cb:b8:0c:bc:fb:73:
                    f0:85:f0:5a:96:68:be:53:cb:5b:b0:4e:6f:08:0b:
                    3e:0a:64:ee:3f:f1:0a:2e:40:b2:5f:de:6b:78:ac:
                    c9:0f:66:22:80:15:03:65:ba:3c:bb:ca:e8:2f:3f:
                    49:30:cc:fe:c0:e3:df:9d:dc:96:77:a5:ce:02:cc:
                    a2:1a:a4:1d:ce:b5:a5:9d:06:40:1b:d2:1b:02:75:
                    af:55:b8:37:38:cc:18:f7:67:3c:f4:74:34:74:eb:
                    3f:6e:87:81:ec:13:83:27:57:b1:46:dc:41:d1:83:
                    0f:b5:c7:49:d4:e4:fe:83:87:21:9b:0d:4f:97:f6:
                    59:4a:2e:91:72:21:a6:c4:9f:b0:48:9b:4c:af:6c:
                    09:84:cd:07:73:bc:af:16:fd:83:2c:ec:c1:e6:26:
                    60:95:07:28:2e:96:c2:b0:0b:52:73:47:9c:e6:41:
                    3d:25:9b:99:31:57:8a:8d:57:85:00:2c:3e:c4:e2:
                    d7:bf:a3:bb:bd:ad:a8:82:17:72:15:84:c0:46:79:
                    ce:0b:5f:06:50:45:ef:15:f2:61:f1:ad:c0:68:11:
                    0e:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:E6:BD:DC:ED:46:18:BF:9E:2B:79:AD:F6:A0:0C:67:51:61:94:24
            X509v3 Authority Key Identifier:
                keyid:A1:91:8C:15:6A:9A:CF:CD:F2:47:1D:EA:FC:61:8E:E1:62:DC:B3:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A1918C156A9ACFCDF2471DEAFC618EE162DCB340.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d68c7a34-ba31-4d29-8384-186789b384f1/0/3130332e3136352e3234362e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:50:b5:5b:78:da:3b:13:17:3d:98:8c:d6:a1:67:23:23:7d:
         ae:1a:78:2f:d4:6a:5f:23:96:52:c5:14:4f:92:22:ee:c8:2b:
         e8:fc:cd:1b:d6:5a:4f:3e:48:32:fb:45:ed:59:e6:99:4c:cf:
         a8:2f:90:11:6a:4b:b3:42:16:62:02:e6:7a:8a:0e:83:4e:e7:
         72:15:4a:27:b8:60:09:0d:0d:64:a1:5a:fe:2c:f9:26:35:27:
         fb:d4:53:c9:e6:a2:1d:1b:f2:ce:ae:36:99:8a:07:6a:4c:0d:
         ae:3e:68:7b:0f:9b:99:ca:0a:ff:80:24:33:47:96:24:fa:00:
         23:83:84:68:3f:68:17:14:5b:37:bd:ba:aa:f5:06:bb:50:0c:
         44:51:fc:f6:4e:e2:7e:01:7e:55:29:49:7a:cc:33:b7:04:bd:
         91:b5:80:4a:79:c9:b5:8c:31:29:78:ed:5a:05:fc:40:3c:53:
         ac:77:80:a9:47:b1:91:f4:a7:5b:2f:4f:3c:94:87:f1:a8:57:
         7c:09:1c:d1:bf:6d:48:33:e3:c7:57:d8:cb:c8:d1:d5:a6:4b:
         e7:f3:65:ec:d0:2b:ef:e1:1f:eb:91:8c:b1:1a:f4:f1:17:71:
         60:0c:d1:ab:b5:93:ac:9e:f6:29:f8:dd:61:d4:4b:87:08:01:
         31:46:95:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org