Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa
File:                     3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa (raw, json)
Hash identifier:          mEzd38YxKhJp+MBizFTrVMus18X/KqN2dgbg6ZALV3A=
Subject key identifier:   A6:B1:4E:23:C5:E8:0C:B9:C3:1D:07:54:AD:C0:0F:F3:3B:0B:EC:F9
Certificate issuer:       /CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
Certificate serial:       3C948A14257058DB83B0857F6C84BCB221226650
Authority key identifier: B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa
Signing time:             Wed 31 Jul 2024 10:00:38 +0000
ROA not before:           Wed 31 Jul 2024 09:55:38 +0000
ROA not after:            Wed 30 Jul 2025 10:00:38 +0000
asID:                     59288
IP address blocks:        103.229.160.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl
                          rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:43:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:94:8a:14:25:70:58:db:83:b0:85:7f:6c:84:bc:b2:21:22:66:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D
        Validity
            Not Before: Jul 31 09:55:38 2024 GMT
            Not After : Jul 30 10:00:38 2025 GMT
        Subject: CN=A6B14E23C5E80CB9C31D0754ADC00FF33B0BECF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d9:f2:a8:d2:3d:43:61:fc:cb:ce:55:9c:8a:
                    45:ab:79:07:0d:f0:be:94:61:8e:02:75:0b:b6:27:
                    b7:0f:cf:ae:fe:8c:ad:5e:9a:b4:b0:b8:ff:cc:3d:
                    da:ca:ec:20:2a:a3:cd:2d:17:8e:13:9e:ac:c3:88:
                    4c:e5:88:2f:47:1e:54:3b:29:18:de:27:95:fb:ad:
                    5c:a1:7e:e0:cd:e8:e5:6d:84:d2:9e:0c:42:09:5d:
                    10:40:d9:58:7e:67:12:70:3e:c0:f9:6f:55:18:f9:
                    ac:ca:1c:33:1f:2a:52:fc:a3:ad:fa:29:30:bc:3d:
                    ac:84:7c:96:01:e9:d5:84:5b:35:db:79:55:1d:0f:
                    e4:64:57:e2:bf:b1:3c:37:39:00:34:fd:69:c3:fa:
                    0b:a4:23:74:e4:f9:4b:d2:29:1b:e3:2e:eb:37:50:
                    23:0d:6f:b4:99:48:1b:fd:27:a4:5d:30:28:85:6a:
                    cb:af:7f:6d:90:ce:0f:dd:87:61:8a:55:02:3c:e6:
                    1f:50:b2:e6:77:d0:58:b3:5d:fc:fc:2c:92:0b:e3:
                    6f:58:75:6e:96:40:50:da:54:a4:62:6d:40:9a:da:
                    d4:72:1f:40:2f:9e:91:22:f8:8f:2a:62:ec:23:39:
                    d4:3c:27:9e:c5:72:63:99:a1:e8:46:73:e0:60:89:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B1:4E:23:C5:E8:0C:B9:C3:1D:07:54:AD:C0:0F:F3:3B:0B:EC:F9
            X509v3 Authority Key Identifier:
                keyid:B1:1A:6E:BA:7C:0F:02:09:30:47:3F:B7:FA:FC:2D:9C:97:E4:98:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B11A6EBA7C0F020930473FB7FAFC2D9C97E4982D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d93eb8f6-bb6c-4ea7-86df-b243c5164d22/0/3130332e3232392e3136302e302f32342d3234203d3e203539323838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.229.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:46:85:65:8f:b0:1b:96:48:80:07:c7:53:e9:58:6b:26:da:
         c9:55:49:51:37:6c:d2:00:07:73:a2:7d:4e:e9:88:f5:ba:54:
         cb:02:e9:8d:d6:20:bd:84:32:30:e2:64:c7:8e:ad:f5:a2:1f:
         ff:4c:33:2e:0d:c8:06:93:4d:d0:92:2f:2e:40:4b:ef:54:1f:
         0e:8b:a7:18:ce:cf:09:2f:87:32:71:2d:ab:8d:18:3f:0f:c2:
         94:04:42:59:31:2b:2b:3a:44:c9:05:70:c0:36:fb:10:50:63:
         20:b6:ab:8d:d9:89:e4:77:93:c1:9f:d8:51:e3:bd:42:04:6e:
         08:7f:e0:2f:4a:62:56:50:bd:ff:3f:8a:29:64:f0:07:3e:7a:
         c8:73:16:58:b7:37:bc:d2:58:ca:85:24:ba:7c:58:5d:07:bb:
         5e:36:0a:64:0a:0d:e3:e3:4a:12:85:36:82:2c:de:b1:b4:ba:
         f2:e7:eb:e5:ca:44:21:e9:2b:97:48:cb:e3:8a:65:3c:69:07:
         bc:35:0a:33:14:0f:a3:77:4f:20:eb:58:46:d6:03:9e:6b:83:
         7c:79:69:46:15:d7:6b:96:47:0f:52:bd:74:d3:9f:eb:a7:5a:
         4d:20:93:6a:4b:46:d5:1b:93:60:27:cb:d7:af:dd:ca:9b:2e:
         39:a7:c6:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org