Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
File:                     3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa (raw, json)
Hash identifier:          36BE9n6WV91maxO5GlAf2fK0lfyiWZQfuF7lsrGEJUk=
Subject key identifier:   01:DC:9F:7A:96:55:85:24:95:11:EA:ED:DC:34:58:86:7A:90:5B:89
Certificate issuer:       /CN=23093B0E58201D339EAA3983654297729EB3D7FD
Certificate serial:       3FB78EFDF19837DED0D7F2011835B0343DF81682
Authority key identifier: 23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa
Signing time:             Tue 12 Nov 2024 02:00:03 +0000
ROA not before:           Tue 12 Nov 2024 01:55:03 +0000
ROA not after:            Tue 11 Nov 2025 02:00:03 +0000
asID:                     141957
IP address blocks:        103.166.212.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl
                          rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:b7:8e:fd:f1:98:37:de:d0:d7:f2:01:18:35:b0:34:3d:f8:16:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23093B0E58201D339EAA3983654297729EB3D7FD
        Validity
            Not Before: Nov 12 01:55:03 2024 GMT
            Not After : Nov 11 02:00:03 2025 GMT
        Subject: CN=01DC9F7A965585249511EAEDDC3458867A905B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c7:db:fe:b5:f4:14:c9:4a:97:44:5d:07:6f:
                    0e:82:3b:8d:75:81:dc:bc:b9:ee:77:ab:92:c3:b8:
                    5f:e7:52:23:e4:f1:47:6c:79:52:7d:25:9b:9b:e6:
                    6c:e2:e3:91:00:8a:31:0f:05:1a:34:15:fa:aa:9d:
                    4d:90:47:df:ac:d2:c6:1a:99:e2:0e:a4:21:7f:00:
                    60:b8:f0:ea:08:8f:1d:2b:1e:b0:66:33:79:e7:00:
                    90:8e:ab:91:6e:63:75:dd:5a:cd:be:0b:80:5d:e8:
                    bd:2a:00:48:eb:a0:c3:d0:2d:28:7c:af:8b:cc:a3:
                    be:e7:7c:50:ec:7f:4f:ad:0b:58:cf:0a:bf:5d:6b:
                    9f:f3:8a:02:28:f1:47:9e:77:06:66:18:1e:b4:03:
                    a9:68:61:43:bb:f0:83:25:9b:c9:69:62:bd:a4:e9:
                    1f:f4:c2:dc:54:d1:4e:4b:6a:ff:9a:e7:ec:bf:a4:
                    d7:14:7d:c2:00:05:19:38:a6:43:03:7a:c0:fa:d6:
                    04:9d:33:7c:1e:22:03:b4:82:e0:40:92:62:3b:d3:
                    a6:fa:94:2f:1f:cf:94:6e:0e:a8:5e:4f:66:83:11:
                    c9:b3:fa:04:01:66:0e:b9:90:14:79:06:0b:6a:4d:
                    80:2c:06:c9:cc:22:a5:81:4d:f3:4d:fa:4a:aa:85:
                    a5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:DC:9F:7A:96:55:85:24:95:11:EA:ED:DC:34:58:86:7A:90:5B:89
            X509v3 Authority Key Identifier:
                keyid:23:09:3B:0E:58:20:1D:33:9E:AA:39:83:65:42:97:72:9E:B3:D7:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/23093B0E58201D339EAA3983654297729EB3D7FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/23093B0E58201D339EAA3983654297729EB3D7FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e595b7d4-3aab-4b83-94b2-c4267b2ae0a0/0/3130332e3136362e3231322e302f32332d3233203d3e20313431393537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:08:8e:42:52:0c:38:ad:aa:5f:1d:76:76:9e:00:dd:fa:ec:
         55:83:18:55:b5:21:c8:b4:9b:36:1a:2e:28:b3:9c:29:d7:36:
         86:d9:d6:ca:20:bf:62:23:77:0e:29:b8:e2:e9:0a:d8:a7:47:
         28:1a:8e:83:45:c3:f4:67:90:c3:5b:ae:0d:f2:61:cf:d4:80:
         3e:ae:d6:0f:62:0f:cb:15:83:96:65:57:dc:de:85:4b:a7:09:
         d8:bf:99:f4:10:9a:16:bb:56:df:21:f6:4c:03:56:08:c5:e1:
         e6:dd:2e:34:40:53:6d:0c:14:f0:6f:34:21:bf:8c:56:70:d2:
         80:c2:b8:e5:64:4e:e0:16:0e:62:a8:a9:e2:83:98:dc:6f:b5:
         7d:e6:48:4b:ac:f4:d1:12:99:9a:e7:31:f8:f1:7e:78:e6:4f:
         84:7b:c0:96:12:d2:01:66:d9:e5:19:6a:40:93:f3:56:bf:cd:
         82:7d:5d:78:4d:5e:1a:55:c5:c2:d5:86:0a:28:a8:0a:33:5a:
         2b:e8:a4:58:38:d5:8f:fa:d9:b2:45:7d:c3:99:9b:99:29:b9:
         c5:a9:93:b6:60:56:24:65:a4:e0:1b:6b:36:ab:a9:0c:23:99:
         68:4f:87:01:ea:4a:a9:02:6a:ee:c3:41:ba:ad:64:89:18:ce:
         8b:39:73:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:10 2024 by rpki-client on console-fra.rpki-client.org