Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
File:                     3130332e31352e33372e302f32342d3234203d3e203538343939.roa (raw, json)
Hash identifier:          PPgatbzw+ItpjlCllyl7m5G+ltQY1uWHf4RpZ2YB6us=
Subject key identifier:   4B:8C:64:71:DE:83:01:54:A7:5F:B0:EF:7B:35:10:47:48:04:F0:E9
Certificate issuer:       /CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
Certificate serial:       56122E1FCF71469769CEEFB3D0F42680E3BF8561
Authority key identifier: F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa
Signing time:             Mon 31 Jul 2023 00:03:09 +0000
ROA not before:           Sun 30 Jul 2023 23:58:09 +0000
ROA not after:            Mon 29 Jul 2024 00:03:09 +0000
asID:                     58499
IP address blocks:        103.15.37.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl
                          rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 17:34:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:12:2e:1f:cf:71:46:97:69:ce:ef:b3:d0:f4:26:80:e3:bf:85:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5
        Validity
            Not Before: Jul 30 23:58:09 2023 GMT
            Not After : Jul 29 00:03:09 2024 GMT
        Subject: CN=4B8C6471DE830154A75FB0EF7B3510474804F0E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b7:7e:fa:4a:46:68:e0:13:a9:fd:2b:c6:33:
                    9c:8c:e8:74:06:04:c5:0a:7b:f1:9b:1f:5e:9e:27:
                    f2:87:32:43:74:21:12:c9:37:73:49:d8:a6:48:38:
                    df:f5:fe:9f:78:9f:d1:96:30:50:51:88:a2:14:68:
                    02:23:6e:be:29:d5:ea:9a:f9:8b:2b:41:9a:d4:62:
                    be:36:53:12:a5:bc:ec:0f:2e:d2:7e:ae:b7:98:cc:
                    e9:c5:e7:65:4e:85:b2:b8:57:5a:8c:68:ea:83:93:
                    c3:3e:08:ce:60:83:32:4f:62:48:c0:8d:76:fb:76:
                    ed:96:74:38:e7:a0:d0:99:1d:cc:96:cc:e6:81:e5:
                    0a:1d:4b:72:43:cf:c6:83:44:ee:c5:2a:d5:6e:5d:
                    31:ad:0d:f7:58:b8:f3:83:06:8b:7d:9e:62:84:32:
                    96:4b:2b:92:2e:1f:e2:ab:a6:d8:36:84:97:56:89:
                    81:be:92:ca:59:27:9f:c4:af:33:42:a2:fc:55:b1:
                    a9:58:66:97:02:38:ad:5a:91:9a:ce:2d:9a:03:93:
                    a7:72:9a:c1:ab:13:cd:f7:f2:98:f6:2a:ef:40:09:
                    3d:f4:40:02:81:b9:83:74:53:7b:a0:c9:41:cd:2d:
                    45:8e:61:ee:a3:f1:bf:0e:7a:0a:39:de:67:1d:d0:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:8C:64:71:DE:83:01:54:A7:5F:B0:EF:7B:35:10:47:48:04:F0:E9
            X509v3 Authority Key Identifier:
                keyid:F9:F2:1F:18:D0:C5:65:6D:8F:24:B3:FF:EE:0B:17:A1:70:FA:D4:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9F21F18D0C5656D8F24B3FFEE0B17A170FAD4A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b1c9579-56ba-4a70-ba13-3b05a6ccb21e/0/3130332e31352e33372e302f32342d3234203d3e203538343939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:10:b7:db:a0:14:35:88:18:36:bb:fb:58:86:5b:e6:b6:8e:
         79:52:35:fa:4e:8f:58:83:25:e2:24:f1:34:77:a9:c0:03:86:
         ae:2e:bf:f1:4b:35:46:77:13:0c:48:8c:37:d3:df:78:42:36:
         fa:b1:9d:aa:1c:ad:ed:e7:a4:7a:98:4d:31:d1:4a:ac:01:49:
         7f:a3:78:dc:67:bf:8b:d3:11:ce:d0:e1:1c:d5:21:a2:e0:19:
         5b:af:9d:ea:ea:b5:2b:80:db:c0:05:f1:94:25:44:4a:38:af:
         6e:bf:75:20:99:06:99:7e:25:0d:2c:6f:3b:4e:0e:ce:d4:23:
         f0:9c:65:48:35:ab:62:d3:14:48:17:d4:e7:f0:9f:69:57:a4:
         bc:d7:d9:37:da:7c:85:e2:55:79:f5:0b:30:84:16:f7:a4:1c:
         f5:82:e1:55:22:81:38:ef:b5:01:e0:8e:c3:e3:8b:1b:c5:f6:
         20:96:e2:f2:d7:6b:97:00:40:9c:24:3f:99:0a:fb:fb:5f:8f:
         68:8b:da:13:c5:27:36:5d:14:3e:c5:cc:75:0e:41:90:61:0c:
         e1:26:05:8a:3d:cf:63:fd:58:39:15:9b:34:93:10:60:d1:2f:
         e5:1c:59:0f:24:08:2b:e9:df:52:a0:af:e1:3d:41:5f:9a:32:
         78:dc:df:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org