Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136362e362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          7NN25xpp2UcfJ9gsuZji/qymPimRcVlHB2NW9ChDUdM=
Subject key identifier:   C1:A0:CE:5C:33:F6:76:88:F2:24:82:D0:E6:36:6F:32:DF:41:30:01
Certificate issuer:       /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318
Certificate serial:       265D37049C0A3BE81EF768EE5EFD668097EE3BC5
Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 02 Aug 2024 10:03:53 +0000
ROA not before:           Fri 02 Aug 2024 09:58:53 +0000
ROA not after:            Fri 01 Aug 2025 10:03:53 +0000
asID:                     17995
IP address blocks:        103.166.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl
                          rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5d:37:04:9c:0a:3b:e8:1e:f7:68:ee:5e:fd:66:80:97:ee:3b:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318
        Validity
            Not Before: Aug  2 09:58:53 2024 GMT
            Not After : Aug  1 10:03:53 2025 GMT
        Subject: CN=C1A0CE5C33F67688F22482D0E6366F32DF413001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6d:d6:70:de:23:e3:49:2f:17:c5:68:f0:00:
                    59:21:54:05:46:c7:e2:24:6b:9a:59:5a:89:6b:f5:
                    4c:a6:db:6a:f8:84:38:34:5d:65:2a:86:16:0d:43:
                    5a:6d:aa:21:ac:a3:10:a8:22:0e:e8:f3:b3:b5:bc:
                    00:0d:2f:16:12:ca:54:59:4e:e1:a1:89:c3:9a:46:
                    bb:95:26:74:39:98:e4:8d:c0:c0:f2:bf:a7:3a:e0:
                    38:d7:0f:03:9f:cd:f3:7f:47:37:c8:2d:18:4b:83:
                    69:ce:98:89:ef:43:ca:ff:40:d4:88:44:13:ca:35:
                    b7:d5:8e:f7:25:c5:65:7b:a4:e3:13:bc:1c:25:c8:
                    af:87:c8:f7:79:53:09:c3:56:51:b6:50:6b:cd:ec:
                    f3:65:bc:9e:b6:9a:7e:3c:ad:b8:21:5b:0a:53:ad:
                    92:36:e6:16:60:ac:85:4b:e0:71:25:6e:0c:8b:98:
                    f1:a6:85:8e:30:59:22:83:88:75:05:f7:18:ed:28:
                    44:6f:75:dc:39:50:59:88:1c:4b:6d:6f:70:07:48:
                    d8:dd:97:c2:85:6d:4c:37:6c:25:b0:c5:9b:90:ee:
                    21:de:1a:fd:8e:7d:83:92:4c:90:8b:a1:a5:eb:88:
                    12:49:20:c3:96:82:d7:40:cd:55:40:27:8b:b7:ef:
                    1e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A0:CE:5C:33:F6:76:88:F2:24:82:D0:E6:36:6F:32:DF:41:30:01
            X509v3 Authority Key Identifier:
                keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:b3:a3:ea:f5:dc:ba:d7:17:a2:98:67:a6:cc:2e:38:b6:bf:
         a0:58:aa:d1:f6:b2:5c:e4:36:3c:5c:e1:ab:a8:22:e6:ac:e5:
         b5:75:83:39:97:17:70:f3:57:53:5f:3c:b2:49:83:6a:67:56:
         66:cc:c9:f6:53:21:db:45:1d:ea:bf:3c:5d:e8:56:5c:5d:14:
         b8:63:ec:40:42:7d:20:d1:0d:14:69:d4:81:d1:8a:f2:3e:ed:
         b6:33:96:2d:b0:fc:37:15:41:06:eb:7c:5b:53:91:43:66:1d:
         36:4e:97:a4:33:c2:0a:79:80:5d:2b:5d:14:5f:1a:46:58:5d:
         e8:7b:1f:79:8b:d6:a5:69:27:46:e3:cf:d9:56:d0:28:50:f7:
         b3:f4:30:54:a0:6c:74:a1:b8:db:de:10:98:9c:ad:9a:fe:3e:
         95:73:57:a4:a5:f7:16:1e:b8:89:3c:37:6c:82:28:e0:b5:4b:
         cb:64:20:d7:cf:27:45:e9:d0:06:10:7b:90:12:34:6b:53:41:
         0c:c2:33:e1:6a:1f:6a:6a:5f:ab:8e:20:45:ce:45:19:d7:e9:
         79:e1:30:b4:1c:f3:aa:0b:0f:09:81:f6:00:fa:81:43:30:df:
         57:eb:21:76:e4:8a:38:d9:61:d0:16:10:1a:31:58:40:67:fe:
         fc:26:fe:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:01:34 2024 by rpki-client on console-fra.rpki-client.org