Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa
File:                     3130332e342e3136362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          qEjLQrwRxBf4RQreRFTtKOpzqW9uG7Ggg7MGOrnMFDo=
Subject key identifier:   0D:19:04:7B:46:75:F3:B2:C8:7F:6E:ED:E4:94:DE:E9:18:71:22:CF
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2EB55186129C0BA18A505E94043B360971D25F8D
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:33 +0000
ROA not before:           Mon 31 Jul 2023 00:02:33 +0000
ROA not after:            Mon 29 Jul 2024 00:07:33 +0000
asID:                     58369
IP address blocks:        103.4.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 17:27:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:51:86:12:9c:0b:a1:8a:50:5e:94:04:3b:36:09:71:d2:5f:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:33 2023 GMT
            Not After : Jul 29 00:07:33 2024 GMT
        Subject: CN=0D19047B4675F3B2C87F6EEDE494DEE9187122CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:d1:6b:8b:a7:fe:f7:50:b4:d7:72:e6:ed:
                    08:eb:2a:62:02:38:a7:11:f3:ee:bb:c7:35:8d:68:
                    a1:b3:74:69:d0:62:c5:75:df:30:51:fd:9a:67:e5:
                    71:46:e6:95:55:49:1e:44:fb:5b:69:4a:17:fa:19:
                    e1:eb:26:e3:fc:88:f2:d7:43:9a:af:4c:27:15:54:
                    86:82:28:57:8b:26:79:f4:1e:75:42:20:7d:d9:88:
                    fb:e2:41:1a:13:01:2d:b2:b3:6c:ba:81:80:20:07:
                    9c:58:d3:20:69:7d:c6:08:bb:c7:3c:30:6b:9b:9f:
                    05:7f:a8:bc:a7:fc:87:d7:e7:0c:6e:60:f2:b7:af:
                    e9:73:67:a2:54:fa:fe:ce:19:71:50:e5:a0:28:5c:
                    db:7f:08:9c:bf:7a:91:e6:41:bc:c5:6d:2c:35:1e:
                    4a:3a:a0:ff:4f:7e:9a:58:48:44:a4:a0:b9:a0:34:
                    67:c2:0c:c8:f3:9f:b3:75:c0:43:41:8e:a1:68:5a:
                    77:57:ff:db:d8:8e:82:c9:ff:40:29:5b:cb:67:e9:
                    10:d9:61:7d:06:62:2e:04:5c:25:5e:f9:4c:c8:99:
                    91:46:72:40:bf:cd:04:32:62:0b:a7:83:9d:fa:32:
                    b6:48:10:ed:c9:7a:30:4b:16:a0:20:f4:5e:ea:5b:
                    3c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:19:04:7B:46:75:F3:B2:C8:7F:6E:ED:E4:94:DE:E9:18:71:22:CF
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9d:b1:27:19:bd:07:23:04:ce:25:6b:77:2b:3d:35:85:dd:17:
         10:22:07:8e:22:68:d7:93:27:50:6d:0a:41:52:63:8a:ca:2b:
         8c:a4:8b:34:ec:b5:d6:4f:c3:14:71:88:24:c5:42:a0:56:e7:
         00:e7:80:1d:a8:12:94:bb:f8:0f:92:a3:87:68:d1:ab:6f:b6:
         12:94:66:72:71:13:28:45:55:d6:69:e3:cd:aa:31:ef:78:6e:
         c3:d2:48:ad:04:b6:be:ad:97:62:0a:e5:55:74:e4:d8:04:44:
         11:57:a9:23:cb:f2:cd:ee:89:d9:2a:95:e5:88:ba:f5:ad:a2:
         77:47:52:3e:61:50:0d:85:38:eb:20:d8:a1:42:af:30:d9:26:
         b1:dc:c6:c9:06:59:ae:8e:0e:b3:ea:81:04:84:f4:e1:e3:57:
         ea:1e:0c:6e:0e:61:63:ac:e1:ba:ad:18:19:8d:eb:00:c4:cf:
         31:0f:44:7a:f6:7e:97:34:c5:71:03:5b:36:1d:e7:54:0e:e0:
         d7:88:2e:f5:42:d0:b0:a2:37:d1:e7:ca:72:4b:49:0b:69:3d:
         1f:3a:c1:c9:f6:59:20:e4:bc:8e:0c:1d:34:0c:8d:4e:81:37:
         d9:95:f2:c3:55:9e:84:3a:5b:20:d4:9d:0c:ae:85:1b:7c:80:
         f6:5c:d2:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 13:13:44 2024 by rpki-client on console-ams.rpki-client.org