Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa
File:                     3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa (raw, json)
Hash identifier:          eKpLvQj+nJ5uGcmLTs3lDM32/li8MSIqi4cPxxFaj5s=
Subject key identifier:   19:5A:73:EE:39:AC:95:69:5D:5A:4A:6D:DD:B0:48:5C:07:26:F0:A3
Certificate issuer:       /CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
Certificate serial:       6873CDB90EFBF921EF7B9EE39D9BE29530114A13
Authority key identifier: 17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa
Signing time:             Sat 05 Oct 2024 06:41:05 +0000
ROA not before:           Sat 05 Oct 2024 06:36:05 +0000
ROA not after:            Sat 04 Oct 2025 06:41:05 +0000
asID:                     141954
IP address blocks:        103.166.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl
                          rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:73:cd:b9:0e:fb:f9:21:ef:7b:9e:e3:9d:9b:e2:95:30:11:4a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17B62F0E5DF5F2306F0656875EF6187F83423CBD
        Validity
            Not Before: Oct  5 06:36:05 2024 GMT
            Not After : Oct  4 06:41:05 2025 GMT
        Subject: CN=195A73EE39AC95695D5A4A6DDDB0485C0726F0A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:09:6d:08:2b:84:4c:6a:56:ab:eb:3e:6b:
                    ea:a4:80:5d:0c:9a:88:17:dd:41:4d:b4:49:3e:9f:
                    1a:7f:31:3a:bf:56:1a:c8:90:89:eb:48:54:6a:19:
                    9b:c5:48:2d:3b:04:ed:ca:18:cf:c7:31:78:38:64:
                    c1:a1:76:79:80:53:c9:46:96:54:ff:20:ba:08:1a:
                    83:67:ec:7b:79:57:a6:5d:1d:73:a3:73:e7:9d:f0:
                    a5:e9:ac:de:5e:c4:92:8d:be:26:28:bd:aa:0b:a6:
                    24:74:44:42:7a:a1:90:e1:83:67:d2:ff:75:87:39:
                    2c:de:3d:5b:af:3f:a2:86:a3:57:22:ef:5b:16:68:
                    e8:60:30:3f:fd:3a:86:23:13:af:0b:15:82:33:42:
                    58:74:77:24:19:a2:4f:e7:d7:0d:e5:93:97:81:a8:
                    8a:af:41:81:3a:70:6f:ed:72:96:7a:1a:90:08:a8:
                    11:fc:d5:f0:8d:33:92:c7:45:1e:68:45:e9:07:90:
                    70:bd:e8:8e:c8:57:a4:37:70:47:4b:82:8d:e8:d5:
                    a9:10:de:f2:2e:dd:e7:32:d4:1e:1f:89:12:fd:42:
                    da:be:64:89:c2:11:57:e2:d0:b5:4f:51:5c:55:0b:
                    e4:25:1d:c9:fe:27:34:1e:7d:8b:3d:56:32:aa:f7:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5A:73:EE:39:AC:95:69:5D:5A:4A:6D:DD:B0:48:5C:07:26:F0:A3
            X509v3 Authority Key Identifier:
                keyid:17:B6:2F:0E:5D:F5:F2:30:6F:06:56:87:5E:F6:18:7F:83:42:3C:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/17B62F0E5DF5F2306F0656875EF6187F83423CBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17B62F0E5DF5F2306F0656875EF6187F83423CBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d90ac5ca-35df-4607-9405-397b7aadb2a7/0/3130332e3136362e3137382e302f32342d3234203d3e20313431393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:48:a6:63:99:ce:4c:91:48:4c:54:64:0c:45:eb:08:70:05:
         5c:ba:81:37:af:4d:d5:3b:12:07:cc:d6:92:8d:e2:c1:86:b6:
         e3:38:d5:d7:d8:f6:75:cd:25:02:63:d3:fb:89:41:44:cf:96:
         86:16:13:c6:4c:82:55:f2:4d:2d:4b:56:eb:d8:82:2d:6d:ac:
         37:88:40:26:28:6c:3b:bf:03:6f:bb:1f:7e:55:62:b4:3a:f3:
         15:93:25:0b:83:07:2d:81:f6:1a:d3:ee:b3:67:0d:3d:d5:38:
         34:2c:fe:72:8c:d6:fc:82:27:6b:e7:32:dc:f6:2a:33:21:9c:
         c2:25:c5:3b:e7:7d:bf:00:17:ba:a7:29:fb:65:d7:44:a2:ad:
         36:df:01:e1:2e:d9:89:14:30:f9:3e:3d:22:d5:94:0f:93:6d:
         10:8f:c7:0b:fb:00:04:74:f0:1b:ff:21:b3:35:0f:92:c5:61:
         8a:2b:e3:62:96:5e:4f:00:89:ea:2a:28:d0:08:34:b5:34:f7:
         e1:ab:17:b8:59:01:cc:8e:10:17:3c:65:5e:84:ac:c7:40:34:
         84:c9:24:ee:0d:54:64:ad:51:80:7d:e1:8d:65:22:57:09:d7:
         0d:ab:c9:9d:b7:a2:ad:0a:6c:b5:44:be:d9:3b:23:5f:54:be:
         cc:ba:2a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 23:06:10 2024 by rpki-client on console-ams.rpki-client.org