Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa
File:                     3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa (raw, json)
Hash identifier:          OdP2TfiqUWApHaObqMMUNNENRPSoZ9LwV4JxCC3bJBQ=
Subject key identifier:   B8:07:83:2C:42:E3:2C:8F:E2:C2:64:1D:0F:F7:E1:40:3B:40:9F:6E
Certificate issuer:       /CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE
Certificate serial:       6BCA6C60F1304990CF511140522D10E8010C454F
Authority key identifier: 21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa
Signing time:             Thu 26 Oct 2023 12:00:00 +0000
ROA not before:           Thu 26 Oct 2023 11:55:00 +0000
ROA not after:            Thu 24 Oct 2024 12:00:00 +0000
asID:                     141623
IP address blocks:        103.161.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl
                          rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ca:6c:60:f1:30:49:90:cf:51:11:40:52:2d:10:e8:01:0c:45:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=215FC7E5E22B8C46910D4D7CA214C923A096B2FE
        Validity
            Not Before: Oct 26 11:55:00 2023 GMT
            Not After : Oct 24 12:00:00 2024 GMT
        Subject: CN=B807832C42E32C8FE2C2641D0FF7E1403B409F6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:19:b4:dc:1d:4b:66:17:5e:ad:94:7c:72:
                    66:dd:71:ff:20:42:4e:2e:b5:fe:5c:1b:0c:08:9b:
                    5b:32:ec:bc:ba:c6:ef:00:90:b2:7a:08:9d:5d:94:
                    81:3e:38:46:85:ea:d8:af:45:1f:56:7e:96:81:14:
                    af:5d:14:9f:eb:3e:5a:f8:a9:48:8e:11:3e:91:87:
                    81:04:56:1f:ea:38:93:70:6f:2b:93:87:5a:2d:74:
                    00:b4:fc:79:ae:79:e3:ce:a4:0e:08:f5:30:75:be:
                    c2:ba:7f:52:16:40:0c:23:49:db:ae:a7:72:fd:3f:
                    8f:f8:02:5d:b8:58:f1:a7:70:f6:fa:50:77:88:47:
                    65:ad:e1:8f:a9:ff:57:70:31:62:6c:d7:e9:bf:1f:
                    19:6b:05:41:fb:0d:47:ee:27:f4:d6:75:e6:0c:e8:
                    aa:8c:10:cc:b1:6e:c5:9a:65:bf:27:5d:1c:d9:bf:
                    48:ef:49:82:28:d6:db:30:37:ee:09:15:34:89:2c:
                    28:68:8c:75:19:ba:3b:c0:94:0e:3a:7f:67:e9:d2:
                    5c:ee:76:9e:3c:e5:84:fa:5f:6b:8d:22:3e:94:2d:
                    67:64:4e:4d:a1:71:7e:d7:b7:3d:93:95:dd:37:b6:
                    1c:a0:df:a4:05:64:8d:bb:11:f3:8b:62:ab:a0:ea:
                    e4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:07:83:2C:42:E3:2C:8F:E2:C2:64:1D:0F:F7:E1:40:3B:40:9F:6E
            X509v3 Authority Key Identifier:
                keyid:21:5F:C7:E5:E2:2B:8C:46:91:0D:4D:7C:A2:14:C9:23:A0:96:B2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/215FC7E5E22B8C46910D4D7CA214C923A096B2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3eac9c0-de1b-46dd-bf37-18fe3a8d5fbf/0/3130332e3136312e3138342e302f32342d3234203d3e20313431363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:92:7d:82:2b:ab:b9:a4:45:53:71:60:80:d7:ee:5a:4d:1a:
         14:11:32:89:3b:77:dd:e0:99:e8:c4:48:f9:03:0e:99:a1:64:
         19:59:47:3f:9b:fb:10:a8:9a:35:9d:d6:be:f0:95:3f:64:61:
         4c:2d:e1:ed:d9:bb:b4:60:1e:ad:c2:ca:b1:57:74:b7:98:8f:
         4c:f3:a5:8f:c9:c4:3a:b6:95:80:0a:b0:8f:b8:36:8e:c5:ed:
         88:3a:df:fe:79:c2:2a:8b:31:7f:c2:52:09:f2:5d:60:a0:05:
         4e:1e:47:10:b2:aa:ca:ea:14:ca:40:dc:a4:89:6a:9a:9f:07:
         2e:1f:d6:a0:a4:06:80:6d:83:35:ad:c4:8b:d1:80:60:3a:7b:
         56:ec:05:6d:42:eb:4a:c4:d4:5a:bb:3b:89:3c:a5:f1:25:61:
         15:ca:45:62:71:5f:0f:13:ef:63:86:13:76:8e:e1:2e:46:8c:
         7f:3c:30:e2:47:45:d2:c5:d8:06:3b:f4:96:81:f9:07:71:b2:
         6d:62:87:2d:dd:8c:13:ef:08:2c:ca:29:7a:4d:73:30:2c:c4:
         19:24:9c:0a:ec:af:17:6a:08:20:47:d2:a8:ed:4b:9c:6e:34:
         74:b9:55:20:b4:ea:c0:3a:e8:0e:67:a2:41:c2:92:51:35:29:
         bc:1c:d2:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 01:27:24 2024 by rpki-client on console-ams.rpki-client.org