Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa
File:                     3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          sApe1b7ebViAoyyfNsDpX4LdZ/9aKnzsCq1z0Vu1GM4=
Subject key identifier:   61:63:10:6B:49:C9:46:2B:57:03:BB:8B:0E:F0:DA:48:D6:27:AD:14
Certificate issuer:       /CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
Certificate serial:       3F5DB70E5761B4E4B2EAFED5755A8B00D0BE2C04
Authority key identifier: A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa
Signing time:             Wed 07 Jun 2023 09:00:01 +0000
ROA not before:           Wed 07 Jun 2023 08:55:01 +0000
ROA not after:            Wed 05 Jun 2024 09:00:01 +0000
asID:                     17995
IP address blocks:        103.158.162.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl
                          rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:5d:b7:0e:57:61:b4:e4:b2:ea:fe:d5:75:5a:8b:00:d0:be:2c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A398FBDF357790C7DC67C6D92A15A3D4617558A6
        Validity
            Not Before: Jun  7 08:55:01 2023 GMT
            Not After : Jun  5 09:00:01 2024 GMT
        Subject: CN=6163106B49C9462B5703BB8B0EF0DA48D627AD14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c8:0f:91:1c:0d:89:be:0f:e1:25:d5:b0:73:
                    03:aa:e6:13:ab:9b:78:b4:99:27:d7:e1:bb:0c:0f:
                    dd:bf:52:17:35:ab:4b:95:87:ba:d8:31:82:72:84:
                    f8:c7:cc:2c:3c:34:83:9d:83:f0:f4:00:37:00:e7:
                    2d:4a:20:fe:e8:e6:9f:b2:f2:39:c4:f3:cf:6a:e7:
                    31:66:fb:2a:bb:c6:90:d1:b4:5e:76:ee:84:fa:88:
                    98:d9:e1:15:58:3b:65:7c:81:ec:16:36:01:cf:af:
                    30:e8:f2:9e:2f:d3:4b:41:8a:41:e0:f1:ca:a1:91:
                    2d:09:60:91:9e:71:b7:fd:41:ce:8a:e8:75:cc:45:
                    35:4b:c7:d4:8e:51:50:82:21:27:05:2f:e0:1c:be:
                    8f:b3:c6:57:d2:58:3a:84:d6:e3:03:8f:b7:d0:65:
                    ac:44:a8:cc:9d:ab:a7:42:fc:b0:4b:d4:fa:81:d2:
                    a2:a3:79:cc:dc:f7:60:b6:7d:98:cf:6f:c6:9a:43:
                    7c:d5:26:b2:a1:d8:9e:7e:fd:b7:52:04:c5:b8:6e:
                    5d:cd:4c:be:b7:5c:b2:c8:b8:96:3f:d6:d1:85:c7:
                    4c:ea:c2:e4:ed:c0:58:db:84:f3:85:9a:08:88:40:
                    40:d4:1a:83:c7:2f:04:8d:07:db:d3:a5:b9:86:59:
                    96:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:63:10:6B:49:C9:46:2B:57:03:BB:8B:0E:F0:DA:48:D6:27:AD:14
            X509v3 Authority Key Identifier:
                keyid:A3:98:FB:DF:35:77:90:C7:DC:67:C6:D9:2A:15:A3:D4:61:75:58:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/A398FBDF357790C7DC67C6D92A15A3D4617558A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A398FBDF357790C7DC67C6D92A15A3D4617558A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16c1c529-6244-4503-af56-69459e4a760f/0/3130332e3135382e3136322e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:b5:58:00:6b:e8:1f:0f:49:47:e0:60:88:b4:54:5e:c8:77:
         49:67:5b:fd:7c:27:10:e4:4e:e2:c8:c8:a4:65:92:df:36:af:
         e4:06:b5:22:e2:30:7a:77:8d:ea:e3:a9:01:28:c6:45:37:71:
         e6:2d:f3:74:64:7d:8b:8f:46:89:5e:81:09:18:be:67:f4:47:
         53:13:91:a0:92:fb:e1:21:f7:f6:b4:ec:12:15:f4:49:c0:5e:
         c7:90:fb:2d:3e:37:95:aa:88:17:90:a8:10:da:92:76:93:89:
         1b:50:ca:2d:05:10:5e:fd:2a:0a:9a:3a:e3:53:41:ee:3d:9f:
         20:3f:8f:d8:93:36:12:12:26:37:f6:8d:ea:40:00:3d:f0:b7:
         0f:e7:f9:83:fa:5f:2e:b3:01:52:eb:aa:29:64:16:98:3f:46:
         d8:f2:25:58:7b:25:ca:f9:0b:39:09:85:50:fb:66:d9:4e:fe:
         8c:cf:dc:7f:40:20:f6:22:41:f2:30:dc:1e:77:69:45:2c:c3:
         e5:ee:97:dd:ae:93:d4:03:ec:29:2e:b8:61:e5:dd:f6:d6:11:
         30:8c:a2:19:df:28:c7:78:f8:42:99:02:0a:6b:07:0d:1e:3b:
         3f:4d:d9:87:46:5d:b4:ee:34:81:e4:cc:f3:54:37:e9:9d:77:
         e0:ef:14:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:40 2024 by rpki-client on console-ams.rpki-client.org