Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
File:                     3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier:          VBnVAglAu3wUmGSG3XIkEL+XLItaDIwz9PUSP3miJtc=
Subject key identifier:   0B:BB:DC:B9:66:D1:D9:81:4B:A9:81:13:E7:E6:72:0F:29:02:6F:80
Certificate issuer:       /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial:       32128B379E2A8485990DF4E5E2207F83DF78C986
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa
Signing time:             Wed 07 Jun 2023 09:00:01 +0000
ROA not before:           Wed 07 Jun 2023 08:55:01 +0000
ROA not after:            Wed 05 Jun 2024 09:00:01 +0000
asID:                     17995
IP address blocks:        103.158.162.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
                          rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:12:8b:37:9e:2a:84:85:99:0d:f4:e5:e2:20:7f:83:df:78:c9:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
        Validity
            Not Before: Jun  7 08:55:01 2023 GMT
            Not After : Jun  5 09:00:01 2024 GMT
        Subject: CN=0BBBDCB966D1D9814BA98113E7E6720F29026F80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:2d:4f:b6:0a:e4:07:19:81:ac:45:e6:2a:
                    7d:e3:65:af:ce:e2:e8:3c:ef:b1:ff:81:73:5a:98:
                    40:df:0f:3e:8d:e5:31:4f:29:d7:69:a7:15:c0:e2:
                    e4:33:1f:68:11:98:8d:7b:90:26:82:cc:1f:c0:32:
                    43:df:29:ca:09:85:79:e0:05:ec:0f:44:72:45:d4:
                    1f:ad:49:fd:e3:a3:b8:12:ac:bc:9f:5a:04:f0:fa:
                    de:20:f1:e9:f6:93:9c:0f:44:f0:3d:d7:1f:73:ea:
                    ea:3d:c8:db:21:65:87:51:c5:65:d4:a8:7b:9e:42:
                    98:de:74:94:8a:a4:08:5b:91:9e:9c:c4:fd:23:cc:
                    06:87:11:46:df:9d:68:c4:ac:0b:db:d5:59:dc:fd:
                    04:13:61:de:bf:08:d2:ab:2d:fe:41:a4:c4:b1:59:
                    73:cd:cf:d2:f5:da:b8:32:af:16:c2:e2:3c:d9:6a:
                    2d:a0:8d:c9:25:a7:a4:23:ee:ba:57:06:ea:5d:ef:
                    14:51:27:c9:d7:f0:56:c9:e9:df:76:ce:28:ef:48:
                    49:00:a7:e4:87:9c:56:5e:b8:43:52:51:6e:11:b6:
                    2e:f5:17:84:1f:4a:41:59:6e:f0:55:d6:04:4c:38:
                    4e:b6:44:bc:fb:5b:40:97:70:b4:8a:6d:fd:f3:c3:
                    b2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:BB:DC:B9:66:D1:D9:81:4B:A9:81:13:E7:E6:72:0F:29:02:6F:80
            X509v3 Authority Key Identifier:
                keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32332d3233203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.162.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:a2:5b:d6:15:ce:e6:f1:1d:70:f9:63:d2:dd:6e:c6:c2:13:
         fe:10:18:ce:76:1d:fd:e0:8e:14:a3:46:4b:03:df:d5:b0:5d:
         b7:5c:e7:eb:70:c6:c8:c0:91:c7:b4:39:4d:28:0c:9d:fa:4b:
         4c:3e:91:73:bf:d4:b0:59:61:03:39:38:8e:75:71:e7:d1:52:
         f3:c9:b8:f3:35:94:98:e3:ea:7b:15:36:d0:4b:40:62:89:66:
         60:00:2b:5a:38:f8:a4:61:26:f0:b4:ba:71:62:ae:29:58:a5:
         86:d7:6a:df:09:d1:eb:68:37:c8:e9:b2:a5:e6:c0:5e:87:9c:
         c9:8e:bb:9b:8f:7b:4a:55:1d:19:43:df:33:c0:d8:cc:2f:75:
         fc:22:d9:a2:a1:4a:e9:e3:39:35:a1:e2:c2:86:66:50:b1:82:
         5e:e4:44:e2:6a:7d:5a:9d:45:1b:ab:53:ad:6b:68:61:ec:cb:
         bb:b5:27:cf:7f:d4:b5:ce:eb:cd:46:2c:dc:f1:ce:50:3c:62:
         3a:fa:f1:cf:ee:35:ef:1e:18:56:b4:a3:e9:07:ed:0e:f9:be:
         18:94:ad:da:10:b8:16:2c:77:55:4c:51:e1:b9:65:e1:5c:a4:
         7f:99:90:b6:04:be:d8:6a:52:73:39:d2:1d:7d:ec:f4:34:a8:
         48:08:2d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:40 2024 by rpki-client on console-ams.rpki-client.org