Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa
File:                     3130332e36372e38302e302f32342d3234203d3e20313532303031.roa (raw, json)
Hash identifier:          q1trzY4CS13c5wbkGDBza5FaJUXw1dCYGJImourD/eI=
Subject key identifier:   E1:73:C8:28:34:64:50:3C:8E:CE:75:E4:77:C3:DB:C8:61:6B:83:39
Certificate issuer:       /CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
Certificate serial:       7E860F5A6815096FD149E1FA4FCFBDB2DF54A2FF
Authority key identifier: 16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa
Signing time:             Tue 09 Jan 2024 07:24:24 +0000
ROA not before:           Tue 09 Jan 2024 07:19:24 +0000
ROA not after:            Tue 07 Jan 2025 07:24:24 +0000
asID:                     152001
IP address blocks:        103.67.80.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl
                          rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:86:0f:5a:68:15:09:6f:d1:49:e1:fa:4f:cf:bd:b2:df:54:a2:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16889A9053AE7EB169CF822E9EE670A5C618F97E
        Validity
            Not Before: Jan  9 07:19:24 2024 GMT
            Not After : Jan  7 07:24:24 2025 GMT
        Subject: CN=E173C8283464503C8ECE75E477C3DBC8616B8339
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:45:05:89:4d:cd:0d:5c:7a:39:9d:f8:12:6c:
                    a0:ed:8b:ed:ed:ec:99:8c:83:69:8f:56:d1:f6:19:
                    17:c5:e6:50:96:c5:de:bc:e1:7c:a5:94:c3:78:57:
                    98:05:61:81:7e:b4:a3:fa:c4:6b:33:e6:37:1e:8e:
                    e6:7f:10:b9:7b:c4:44:8e:64:30:5a:4b:7f:5e:7d:
                    0c:2b:1f:a1:b1:67:8b:c1:25:8c:60:25:cd:5d:d7:
                    34:cf:b1:96:82:95:8d:44:5b:28:82:25:df:35:15:
                    6b:5b:59:9e:7b:26:41:f7:91:6e:58:44:a8:0a:ad:
                    59:e6:8b:95:55:50:06:57:91:05:3f:0f:66:cf:90:
                    b0:87:2c:8c:39:3e:a7:41:16:f1:d3:22:eb:14:e0:
                    6c:aa:e7:7c:22:db:fb:ba:07:fd:81:b3:5b:2d:da:
                    72:0f:14:c5:c0:75:09:ea:78:d1:00:5c:22:fb:84:
                    07:da:05:8b:7d:b8:91:bb:d3:7c:8e:77:ad:0f:2c:
                    f3:2f:a8:23:87:f1:ff:18:eb:ec:88:5a:72:be:e8:
                    28:e9:52:51:8f:ca:06:5e:b0:ca:10:91:22:7b:b6:
                    db:a6:90:0b:ea:f7:30:a4:45:b6:c6:9d:b6:8c:6f:
                    4e:0b:fa:6a:cb:90:ed:ad:61:6e:c9:a8:32:de:b1:
                    97:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:73:C8:28:34:64:50:3C:8E:CE:75:E4:77:C3:DB:C8:61:6B:83:39
            X509v3 Authority Key Identifier:
                keyid:16:88:9A:90:53:AE:7E:B1:69:CF:82:2E:9E:E6:70:A5:C6:18:F9:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/16889A9053AE7EB169CF822E9EE670A5C618F97E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16889A9053AE7EB169CF822E9EE670A5C618F97E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de3f2e9b-1068-4fa9-ba1d-59d071a412a2/0/3130332e36372e38302e302f32342d3234203d3e20313532303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:13:90:62:9b:34:3b:db:8f:2a:a5:e7:c1:2b:e0:8d:a7:99:
         0d:e0:c5:bd:9e:84:6f:3e:a9:cb:4e:61:35:5b:79:8b:9a:3a:
         a4:d1:df:9a:9b:e5:c5:b0:3b:e2:65:79:ea:45:99:35:37:8e:
         f5:92:05:c2:55:6e:a6:fe:e8:4a:fe:b5:f6:2e:cc:db:57:57:
         7b:42:e2:e7:3e:02:7d:d4:fa:5b:03:88:53:c2:0b:f7:da:98:
         7a:11:2b:bc:ab:61:d6:63:09:9a:72:43:4e:22:92:fa:8a:a2:
         dd:56:bc:c3:21:13:07:60:12:03:69:cf:f8:6e:26:2a:9e:b5:
         e7:cc:78:48:4d:ca:a5:e1:c1:36:e7:cd:1d:75:24:98:a2:ea:
         8e:b7:27:12:2f:a4:e7:aa:39:e9:92:7f:b3:39:36:ad:55:cc:
         c3:e8:aa:20:a9:ff:f9:51:e8:d8:36:78:0f:cf:8f:0a:40:bc:
         06:77:29:8a:1f:0c:81:e3:fa:83:16:09:5b:1c:92:56:d7:87:
         a4:c5:4f:d0:29:36:45:09:3d:af:8b:e1:b5:e2:6c:e8:32:06:
         70:f0:0e:9e:67:40:16:df:b2:46:dd:47:15:4a:64:1a:fa:c1:
         72:46:3e:b9:8d:5c:df:bb:39:36:0b:2c:c5:08:6f:22:38:51:
         80:60:c6:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org