Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa (raw, json)
Hash identifier:          lMn4B5ZtWuKl1Bl6ww7A6nnwbozYKsT8LQKj0eXDwpU=
Subject key identifier:   9D:C1:4A:3F:EC:F9:B5:66:EE:81:2F:36:E0:F9:84:8F:36:8A:0E:E4
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       798E02D94FFFFB047E4BAE400ECD17925CE51459
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa
Signing time:             Tue 09 Jul 2024 11:00:00 +0000
ROA not before:           Tue 09 Jul 2024 10:55:00 +0000
ROA not after:            Tue 08 Jul 2025 11:00:00 +0000
asID:                     141621
IP address blocks:        103.161.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:8e:02:d9:4f:ff:fb:04:7e:4b:ae:40:0e:cd:17:92:5c:e5:14:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Jul  9 10:55:00 2024 GMT
            Not After : Jul  8 11:00:00 2025 GMT
        Subject: CN=9DC14A3FECF9B566EE812F36E0F9848F368A0EE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:15:35:c7:38:72:13:6e:87:67:09:1b:31:93:
                    4b:0d:3b:16:bb:0b:01:ae:39:93:90:39:24:55:2b:
                    7e:a3:8d:54:aa:45:c6:b7:7d:6d:38:4a:4b:42:9d:
                    b7:92:64:64:22:0f:6a:9a:86:09:1a:bf:24:e5:c3:
                    62:b1:eb:9b:23:5f:4b:a5:ab:d3:83:20:d6:18:05:
                    d7:a9:ed:95:f0:43:c1:3e:35:c7:84:54:d8:70:27:
                    8f:c7:c8:03:ec:1f:ec:f3:9f:90:51:60:e3:85:66:
                    8b:52:61:cf:91:78:4c:0b:3b:ab:05:b8:8b:7f:59:
                    df:d7:8c:dd:7d:a9:9c:d1:c1:d4:f0:f4:99:95:b9:
                    28:5e:fa:12:28:18:01:e9:ee:e4:24:92:5b:68:fe:
                    b5:75:d1:04:df:e6:1f:85:89:3c:02:57:16:b0:c8:
                    da:e8:8f:e8:27:a0:b4:34:c5:ae:37:66:c1:13:28:
                    8f:13:72:3d:9d:e3:c4:bb:3b:69:a1:f9:37:88:a7:
                    40:fa:fd:19:43:bf:af:4c:42:03:f4:52:29:1b:e1:
                    70:80:69:97:f9:0a:08:88:08:44:27:f9:ca:39:5d:
                    85:bb:e2:db:96:b7:95:d2:5b:73:07:61:43:fc:d6:
                    d8:02:c6:77:a1:b8:b7:4c:d8:15:61:5d:26:0f:97:
                    d5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:4A:3F:EC:F9:B5:66:EE:81:2F:36:E0:F9:84:8F:36:8A:0E:E4
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32332d3233203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a3:0c:27:a4:f2:f2:1d:11:a5:ee:ac:8a:3e:40:22:c4:70:15:
         5e:30:3f:20:d8:b4:92:e0:22:77:3f:8f:8e:20:04:17:f0:9c:
         e5:db:3a:26:58:72:98:9a:b5:c4:c9:7c:5f:ae:d1:8e:e1:ec:
         29:4c:c9:75:62:ca:98:47:20:4c:1a:94:8a:ac:a7:9f:a2:97:
         fb:2c:8c:49:d6:e1:d7:f2:27:0c:39:bb:91:7c:b3:6c:36:5e:
         fc:6d:b2:5e:fe:cd:10:74:1b:94:93:4d:30:61:6a:c6:5c:44:
         24:a0:20:35:eb:93:23:6f:d6:17:a8:d8:5c:81:f2:b2:74:36:
         cc:8a:2c:b6:14:d7:84:c4:c5:fe:9e:e8:3d:c6:83:35:a8:44:
         d6:62:a6:7a:21:77:e1:6e:21:f8:70:d5:6f:e7:41:62:05:39:
         f4:7a:a4:2e:96:93:34:80:0a:28:b0:8c:41:52:63:6d:7a:44:
         58:d8:38:16:16:13:13:d2:51:7b:c6:93:da:59:a0:6f:bd:28:
         b0:76:6f:50:29:66:f0:37:2e:2f:65:3f:06:3c:76:01:ec:9c:
         0a:1f:50:0d:0c:8d:4f:d6:c0:28:5b:43:60:8d:de:78:ce:c6:
         f1:f8:55:fc:25:44:48:03:5b:2e:d2:cb:e6:5c:95:05:77:a6:
         bd:81:29:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org