Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
File:                     3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa (raw, json)
Hash identifier:          p9nIhhAXDA1VGK03OeTNU5iCdtRuqI9pYS72qu+FFmM=
Subject key identifier:   CD:1C:7C:15:51:92:8D:B6:31:65:3E:83:DC:27:A9:EE:19:84:F7:12
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       7ED8E36E9F9D6DD5501F9C9E74F9BC2E8EE903E1
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa
Signing time:             Fri 23 Aug 2024 18:01:18 +0000
ROA not before:           Fri 23 Aug 2024 17:56:18 +0000
ROA not after:            Fri 22 Aug 2025 18:01:18 +0000
asID:                     59288
IP address blocks:        103.229.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Mar 2025 05:19:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d8:e3:6e:9f:9d:6d:d5:50:1f:9c:9e:74:f9:bc:2e:8e:e9:03:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Aug 23 17:56:18 2024 GMT
            Not After : Aug 22 18:01:18 2025 GMT
        Subject: CN=CD1C7C1551928DB631653E83DC27A9EE1984F712
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e9:5b:f8:fb:c7:aa:04:74:1d:4f:53:06:94:
                    71:a8:8a:98:b5:bb:9f:e9:30:ca:58:7b:ec:a8:27:
                    a4:4e:5f:be:3c:84:c0:20:6f:9d:41:c3:f4:a2:29:
                    6d:16:6e:36:39:4a:ff:19:60:b6:cd:8f:7d:5d:79:
                    d2:9d:37:f5:b3:cb:ca:2c:21:77:0f:9a:b3:b2:d9:
                    3c:18:a0:67:16:b7:aa:c3:23:5d:92:1b:1e:01:4a:
                    f0:ef:63:f4:88:f6:c9:50:a6:19:90:73:24:72:c4:
                    52:c4:1e:d5:83:b2:ea:56:87:49:96:d6:8f:79:17:
                    ec:a2:cc:78:9e:19:96:61:4f:96:0f:f6:77:85:27:
                    ec:ec:78:52:84:44:cc:8d:17:fa:d1:1a:e2:76:23:
                    bb:ad:49:55:d6:86:c5:5a:ff:16:a6:1c:21:cb:52:
                    4c:68:f4:e8:a1:c9:fd:e8:26:69:f1:40:71:61:db:
                    4c:96:eb:bd:0b:37:b0:3b:b7:e5:f0:24:9c:a8:2c:
                    f0:50:18:43:fd:a4:19:65:ac:45:cf:ee:af:2b:85:
                    c2:ef:87:fb:41:ae:8e:fd:58:56:bf:dc:f8:a5:75:
                    fa:e9:a3:3e:fc:0d:39:7b:49:93:37:85:40:0e:44:
                    50:d9:4c:2f:5d:1c:fd:ed:ce:44:d0:09:88:cc:ab:
                    c3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1C:7C:15:51:92:8D:B6:31:65:3E:83:DC:27:A9:EE:19:84:F7:12
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32322d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         47:cf:ab:16:24:9c:30:9d:f0:be:ed:6e:f7:63:be:6b:7f:af:
         eb:33:0f:be:63:04:5b:26:1e:a2:f1:3d:eb:68:dc:28:51:cd:
         0c:d7:65:02:5e:67:3c:70:d8:06:7a:f6:73:02:c0:ed:98:23:
         52:32:79:b0:33:90:a0:e8:04:6e:e0:3a:58:5e:0d:1d:c0:a8:
         55:6b:b0:40:3b:e8:9d:ee:ff:b0:f4:55:31:a2:ec:85:1a:93:
         0e:b9:07:91:df:30:fd:7f:f4:b0:e6:69:f0:09:77:c9:d3:eb:
         7a:c6:d4:76:e0:b9:52:9b:39:15:d4:d5:b5:e3:62:a6:a7:1c:
         80:a7:ba:0a:d3:32:ac:96:94:11:d3:5d:fd:69:27:5f:cc:40:
         fd:01:7b:a4:ed:b5:a1:6f:44:27:68:17:1a:7c:6a:6a:95:3f:
         c2:ed:b6:06:f2:ab:77:48:44:4f:ce:78:ac:34:9e:50:b6:e6:
         46:4f:93:c8:2a:5c:46:93:1d:e4:66:93:83:51:b2:9b:c6:c9:
         1d:de:1b:f8:12:d6:96:e2:c8:04:3d:05:d6:a2:bc:8f:d8:6f:
         7b:96:41:cd:31:1d:55:52:ca:ae:b0:49:71:6e:fa:80:5e:45:
         3f:8d:0e:6d:2f:70:dc:8d:20:3d:48:48:f6:d3:5c:fb:91:63:
         bc:81:17:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:04:54 2025 by rpki-client