Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa
File:                     3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa (raw, json)
Hash identifier:          3pgOydvNbpZwVB5mPXv3bSjUcgwAH6ZdDbAHHVvZ1s8=
Subject key identifier:   56:55:4C:CE:44:B4:18:C0:7E:E4:4A:C2:90:94:76:A2:D9:F5:B2:0A
Certificate issuer:       /CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
Certificate serial:       762A17CEF467411379B5F17A71E2627D1D6FAFD7
Authority key identifier: FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa
Signing time:             Thu 18 Jan 2024 13:00:00 +0000
ROA not before:           Thu 18 Jan 2024 12:55:00 +0000
ROA not after:            Thu 16 Jan 2025 13:00:00 +0000
asID:                     150208
IP address blocks:        103.160.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl
                          rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:2a:17:ce:f4:67:41:13:79:b5:f1:7a:71:e2:62:7d:1d:6f:af:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FDE6ABEE1B952F4DF85D632A8923FE58A818792A
        Validity
            Not Before: Jan 18 12:55:00 2024 GMT
            Not After : Jan 16 13:00:00 2025 GMT
        Subject: CN=56554CCE44B418C07EE44AC2909476A2D9F5B20A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:b2:2b:01:74:13:0d:8b:2f:9e:ae:a3:36:36:
                    c0:16:3f:d1:eb:83:32:6f:3b:10:f8:9c:35:af:12:
                    01:35:ee:8c:c9:20:88:51:65:c6:7d:9e:f7:c4:f1:
                    d3:aa:03:92:97:fc:f6:a5:e8:2c:d4:05:47:f7:d8:
                    92:c7:0f:b8:01:62:74:f3:65:56:f3:16:14:4c:3a:
                    e7:be:1a:45:47:aa:7f:63:51:f5:22:2c:d0:91:2b:
                    fb:9d:0e:91:88:7e:5c:6f:a1:af:79:e2:25:86:c5:
                    e7:e3:9a:f5:ee:1e:5b:88:e3:e9:fb:d7:66:48:42:
                    14:6c:73:ff:dd:62:cb:38:02:96:3b:47:4b:a0:98:
                    84:b3:05:13:38:4d:92:26:88:7b:3b:fe:2b:93:2f:
                    9e:15:af:e3:cf:3a:63:d8:cc:bc:a5:2b:5d:d8:98:
                    eb:e5:44:b0:d5:27:d8:d5:fe:94:7d:1a:f2:a8:54:
                    ad:08:3e:3d:38:e7:73:78:0d:d4:ef:19:ec:e2:86:
                    c0:40:67:77:63:5e:50:ea:75:84:31:f2:20:b7:4c:
                    cd:2b:8f:61:3e:c4:01:c1:95:b3:e3:20:b3:37:1e:
                    b6:04:d1:75:e1:73:24:a1:fd:44:5a:05:7e:a0:a6:
                    9b:87:70:22:8b:c5:d5:8c:2d:29:0d:6a:c2:a6:34:
                    b3:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:55:4C:CE:44:B4:18:C0:7E:E4:4A:C2:90:94:76:A2:D9:F5:B2:0A
            X509v3 Authority Key Identifier:
                keyid:FD:E6:AB:EE:1B:95:2F:4D:F8:5D:63:2A:89:23:FE:58:A8:18:79:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FDE6ABEE1B952F4DF85D632A8923FE58A818792A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2744dde-7c1f-4cba-93c0-9f0669eeed92/0/3130332e3136302e3138322e302f32332d3234203d3e20313530323038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:0f:c7:ed:15:f5:2b:9a:77:68:7b:17:b8:d8:d0:e9:7e:33:
         b2:56:88:67:33:a0:12:4d:c1:b3:7a:f2:e9:31:7a:e1:76:5b:
         27:89:09:96:2d:e1:e5:e2:8d:d6:d1:f2:c3:1b:6c:94:14:75:
         c0:18:ba:2a:e6:73:f2:17:6e:7c:41:2b:2b:13:6d:1e:5a:e4:
         ea:88:24:1a:19:d9:a0:59:a0:29:55:e0:67:83:67:c8:c8:fa:
         e2:d3:c2:ff:41:28:b0:24:63:20:54:2e:3a:dd:e7:d3:0f:8a:
         35:76:ed:9d:3b:bd:74:b5:9f:16:fa:49:f3:00:17:03:29:3b:
         e0:eb:03:e0:0c:67:01:c6:99:00:f0:22:70:b6:14:db:be:a6:
         56:0c:95:a1:51:8b:6c:45:63:26:39:f8:c7:cc:28:5b:fb:17:
         06:d4:ae:90:19:e9:12:d5:0c:66:0c:0e:95:aa:e5:d5:1d:b4:
         e0:62:98:2f:bb:64:03:8c:c0:f2:09:52:ef:2b:cc:ca:29:ee:
         36:01:b5:70:2e:3b:b5:96:2f:04:63:4b:87:36:fd:7f:35:e1:
         45:dc:0c:3d:62:ce:4f:53:fb:89:ed:9a:bc:3b:e7:f5:8a:ce:
         08:77:3b:cd:5a:93:79:3c:ff:ec:1a:f5:7d:07:1d:40:49:35:
         4f:0b:e7:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org