Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa
File:                     3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (raw, json)
Hash identifier:          mJt5h2NejSfGkXob7zn1cD1yVfgovr1Egj0ZRpFgzw8=
Subject key identifier:   BB:9C:29:9B:32:BD:4A:64:51:D5:E2:9C:63:75:D8:01:19:20:4D:EA
Certificate issuer:       /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
Certificate serial:       764B11ECBF13C3BEBB74562345B7D23BD28F9EB2
Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa
Signing time:             Thu 19 Dec 2024 13:00:00 +0000
ROA not before:           Thu 19 Dec 2024 12:55:00 +0000
ROA not after:            Thu 18 Dec 2025 13:00:00 +0000
asID:                     150208
IP address blocks:        103.160.182.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl
                          rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 14:48:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:4b:11:ec:bf:13:c3:be:bb:74:56:23:45:b7:d2:3b:d2:8f:9e:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
        Validity
            Not Before: Dec 19 12:55:00 2024 GMT
            Not After : Dec 18 13:00:00 2025 GMT
        Subject: CN=BB9C299B32BD4A6451D5E29C6375D80119204DEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:9c:0b:9f:cd:c4:c1:ea:95:83:a9:7c:a6:
                    5e:e6:87:e4:83:ee:69:62:bf:84:c7:90:64:c3:a7:
                    19:7e:86:3e:75:c5:ce:50:dc:c1:c7:54:4d:c4:6c:
                    cb:f2:7d:15:2a:f2:de:c1:ef:22:93:72:fa:cf:34:
                    55:88:e1:92:e4:4d:31:cb:0a:0a:78:29:23:4f:f1:
                    f6:36:eb:10:76:54:5c:a6:d8:d3:32:72:56:19:1a:
                    1a:0d:2e:cb:ce:83:e8:70:0d:a5:52:ce:43:43:64:
                    1a:a6:03:d2:73:8b:71:a3:26:1a:84:d9:ff:3f:7e:
                    a8:32:2c:bd:4e:40:9a:ca:67:8f:90:4f:b8:9f:29:
                    d7:a7:1f:d9:86:7b:8a:20:0b:36:4f:98:6d:2a:40:
                    b7:2d:86:83:50:95:26:a2:24:e8:76:d4:1c:c3:a3:
                    b5:f2:42:5f:b9:98:17:88:7b:d4:7f:ab:ae:b7:05:
                    a3:ae:f0:51:1c:22:4e:30:a3:98:55:2b:23:df:59:
                    e0:91:b5:34:d6:0d:77:a9:cd:97:37:af:ad:4e:3d:
                    13:ed:7d:cf:4f:31:4c:f1:8c:86:74:18:f8:c7:e3:
                    08:26:ac:73:42:7b:e4:0b:29:8d:b1:a9:00:21:c9:
                    9f:0d:d6:a4:fb:24:ab:fe:c2:fe:91:27:16:10:c7:
                    ac:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:9C:29:9B:32:BD:4A:64:51:D5:E2:9C:63:75:D8:01:19:20:4D:EA
            X509v3 Authority Key Identifier:
                keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:24:e3:36:5e:a2:92:10:52:8f:d1:10:1f:e0:bd:f2:2c:0c:
         32:25:33:66:ef:67:e1:b9:d7:6f:6a:d5:b0:20:b3:81:66:ba:
         1f:c8:a2:22:1a:93:dd:1d:55:20:d6:2f:85:ab:57:b4:27:21:
         d2:b7:e0:fb:3f:c4:b2:45:80:1f:be:0a:55:75:45:c5:c9:27:
         bc:96:d1:7a:02:3a:39:6d:73:28:c6:09:02:32:e7:3b:5e:c2:
         f3:18:90:99:35:59:b1:f1:66:7e:00:10:66:c9:e5:33:86:f5:
         66:02:97:0b:80:f3:45:0c:c9:a4:35:9f:3d:4b:6d:d0:36:5d:
         74:f3:ae:4e:0f:06:65:b8:73:6d:a2:31:e1:b2:b7:31:fb:fe:
         a2:73:ae:2d:8a:9b:de:e7:6e:10:10:96:a7:03:2c:0f:12:1f:
         20:73:86:87:d3:39:66:0e:a4:50:3b:de:be:f9:99:a6:fb:0a:
         0c:22:1e:2a:7b:81:7b:6e:a9:79:fe:2f:d7:03:36:1e:e9:33:
         c1:8b:9b:51:10:39:ac:27:97:74:bc:8a:b0:69:30:57:16:18:
         07:7f:81:58:9c:fd:1e:2b:07:82:58:5e:02:fe:87:3d:cb:a5:
         6d:d7:37:f1:2b:7e:28:6d:5d:da:38:2f:ed:40:41:dc:04:88:
         57:01:fe:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 18:16:23 2025 by rpki-client