Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa
File:                     3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa (raw, json)
Hash identifier:          LaUmdsA0P0deIenBqrE3rn8TDNZPOKJgzqPX3Sp3apY=
Subject key identifier:   AD:42:CD:A0:8C:10:F2:36:4B:9B:C7:27:FE:36:36:EB:31:D8:58:E2
Certificate issuer:       /CN=16B946F06E300C41DA2C037393837F098BA659D1
Certificate serial:       7E929AF413B815075F6464FEEA9D30DC2F3CCC38
Authority key identifier: 16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa
Signing time:             Wed 11 Sep 2024 09:02:11 +0000
ROA not before:           Wed 11 Sep 2024 08:57:11 +0000
ROA not after:            Wed 10 Sep 2025 09:02:11 +0000
asID:                     150956
IP address blocks:        103.101.140.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl
                          rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:92:9a:f4:13:b8:15:07:5f:64:64:fe:ea:9d:30:dc:2f:3c:cc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=16B946F06E300C41DA2C037393837F098BA659D1
        Validity
            Not Before: Sep 11 08:57:11 2024 GMT
            Not After : Sep 10 09:02:11 2025 GMT
        Subject: CN=AD42CDA08C10F2364B9BC727FE3636EB31D858E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:7e:d6:80:d1:61:51:ec:18:c8:82:5d:8b:
                    58:46:53:32:3e:34:a3:49:69:38:f6:66:62:72:f9:
                    96:3a:a0:ff:6f:fc:92:7d:33:e0:e5:c1:99:d8:af:
                    12:5a:d7:64:64:3c:02:32:b6:26:88:f1:64:62:3d:
                    60:cf:d7:69:e4:67:cb:98:f6:c1:fa:67:8b:b9:b6:
                    d4:2e:ad:0d:ee:57:0e:ae:1f:12:d2:18:e2:28:4f:
                    db:0d:b7:58:02:98:f6:00:2e:c9:96:2c:07:24:8b:
                    ca:40:86:19:0f:1a:c2:26:c6:01:33:ee:e0:b6:b3:
                    12:b0:a0:de:a7:91:ca:a3:07:d6:7c:75:5e:50:9f:
                    84:d1:17:fe:a4:49:1f:ea:98:46:12:f7:a9:f0:b1:
                    68:20:d6:19:f7:18:f1:b8:70:ea:83:18:63:3a:44:
                    ed:fc:93:94:d7:aa:b5:8b:b3:57:35:54:ed:db:f5:
                    d3:fc:34:c7:69:b8:55:11:72:82:32:09:b2:50:e2:
                    1c:26:26:c0:44:1f:7c:32:14:19:a8:75:a1:ac:1c:
                    cc:5c:99:7f:67:11:7a:1f:7f:e9:a5:a3:34:c5:5d:
                    2c:08:c0:44:40:88:01:d4:d4:44:b4:98:31:26:ae:
                    98:7e:10:fd:22:05:20:ff:d2:15:4b:24:5a:70:07:
                    49:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:42:CD:A0:8C:10:F2:36:4B:9B:C7:27:FE:36:36:EB:31:D8:58:E2
            X509v3 Authority Key Identifier:
                keyid:16:B9:46:F0:6E:30:0C:41:DA:2C:03:73:93:83:7F:09:8B:A6:59:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/16B946F06E300C41DA2C037393837F098BA659D1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/16B946F06E300C41DA2C037393837F098BA659D1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e11a3d56-ac75-4981-9726-c440214c81ed/0/3130332e3130312e3134302e302f32332d3234203d3e20313530393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.140.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:60:c9:36:2e:d1:e8:27:26:5d:ff:fc:46:7d:41:56:53:01:
         28:81:67:ad:3c:5f:3b:12:0a:d5:aa:9d:4f:46:43:34:2e:59:
         3f:0c:66:c2:58:32:6b:70:16:75:07:40:01:09:61:be:c6:6c:
         d1:bc:07:01:96:98:f8:46:6c:71:9f:e1:80:9f:fe:4e:b1:7a:
         73:a5:4b:c8:86:de:9a:15:0b:6b:7b:1f:8f:c4:83:c1:f5:2f:
         02:04:1f:6c:e3:4e:04:26:96:36:f4:fa:02:4d:e2:01:2c:3f:
         dd:47:c4:f4:f8:fa:10:8e:5a:3f:d1:5b:a7:45:cb:23:9c:20:
         59:85:90:5c:96:ad:61:57:f8:4e:cd:57:bd:2e:0c:85:2a:57:
         be:30:d9:5a:a7:9c:3b:21:90:38:a3:f9:0d:d5:b2:94:c9:d4:
         28:78:d3:1a:a0:4f:bf:98:c1:a2:bb:c0:6d:c6:16:1d:45:e6:
         8d:0c:02:8f:a2:fb:55:25:be:fd:1d:b4:ba:a3:7d:b2:54:70:
         48:21:cb:e8:96:f0:0a:e9:f2:51:34:0c:47:a8:24:73:e9:be:
         45:eb:d3:68:ba:5e:98:ef:5d:84:21:96:11:09:7d:9f:e7:5c:
         ac:a4:71:2f:19:7d:08:ae:1d:40:da:e7:54:d6:0b:05:46:b2:
         93:f7:33:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org