Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
File:                     3130332e32382e35392e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier:          R5g3FK1RRxclqvD4x2B9kA/ZoI/KrqkS/aBjypqlKGE=
Subject key identifier:   0A:CD:0C:A0:D7:3C:CF:D1:D2:23:95:89:FA:19:EB:5E:94:0A:1E:F6
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       3673A3C88F1538433B43123353DF5C73F1B6DDF0
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
Signing time:             Sun 24 Sep 2023 06:00:01 +0000
ROA not before:           Sun 24 Sep 2023 05:55:01 +0000
ROA not after:            Sun 22 Sep 2024 06:00:01 +0000
asID:                     58474
IP address blocks:        103.28.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:73:a3:c8:8f:15:38:43:3b:43:12:33:53:df:5c:73:f1:b6:dd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Sep 24 05:55:01 2023 GMT
            Not After : Sep 22 06:00:01 2024 GMT
        Subject: CN=0ACD0CA0D73CCFD1D2239589FA19EB5E940A1EF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:24:6b:6d:d3:79:84:51:33:84:e9:56:92:7f:
                    3f:60:64:77:d8:21:c5:c4:bf:e1:46:7d:54:34:47:
                    cd:15:d0:23:d5:0e:a6:a9:e2:c3:df:df:11:9d:40:
                    b3:02:35:45:a2:c5:3c:fe:09:77:46:b3:a7:4f:fd:
                    74:af:ae:64:de:bd:7b:2e:01:6f:86:5f:5b:fb:08:
                    5c:4a:20:56:31:cf:db:6e:de:21:01:b5:0b:45:47:
                    09:28:83:a7:71:0b:4d:d4:e8:de:a9:2b:93:3c:50:
                    69:b3:1a:67:19:af:08:8e:be:3c:ba:20:70:bc:90:
                    2f:5e:38:16:6d:16:77:90:c7:2c:fd:18:98:2a:6e:
                    13:0c:3f:09:cf:8e:9c:66:56:a1:c6:24:e6:1f:73:
                    12:ad:b8:fc:2e:5b:1e:39:65:01:9a:cc:c3:d1:12:
                    bd:b4:cb:b6:47:a4:c2:9e:89:d3:2c:b1:4b:a7:a6:
                    88:40:0b:a9:71:e3:5b:aa:78:5b:d7:0f:b2:d9:bc:
                    a1:4a:f8:dc:fc:a7:ce:0a:4b:6e:98:68:eb:9f:9c:
                    ee:ac:de:b0:0b:b6:5b:03:25:75:15:58:cd:45:e7:
                    41:6a:2a:4f:e7:9f:d6:b2:28:a4:aa:a3:34:76:75:
                    cd:4d:96:b4:b0:a9:ff:aa:4b:4d:c7:b5:19:0f:de:
                    f1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CD:0C:A0:D7:3C:CF:D1:D2:23:95:89:FA:19:EB:5E:94:0A:1E:F6
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:40:21:1f:40:2d:42:a7:c4:b9:58:10:ab:f7:25:5a:07:f2:
         12:b8:4f:e6:43:82:9b:6b:51:11:4c:3d:74:81:19:b9:6a:89:
         11:6f:a1:4c:c7:3e:08:18:79:4b:fe:c0:c0:b8:7a:74:ac:36:
         93:14:0c:53:ed:92:2a:24:f0:34:7c:8d:45:0d:ea:6b:8d:35:
         4d:26:10:bf:67:78:dc:39:a4:a1:3b:51:85:ed:0a:67:cc:9f:
         04:6f:0a:b0:f4:bf:f0:5e:31:c2:5b:74:74:8e:ba:e5:11:04:
         0d:88:a5:fe:3d:d2:6c:0f:29:80:55:bd:59:87:32:e7:e5:33:
         77:cb:74:bf:60:8d:2a:55:cd:5c:63:93:5c:07:48:3f:80:54:
         c4:c0:8f:ec:25:91:df:a9:dc:0f:e7:ea:f9:18:16:fa:58:eb:
         8b:a5:12:e3:26:cd:b8:19:46:3e:19:a5:53:ab:26:a2:c9:db:
         14:5c:24:ca:0c:52:90:96:cf:9f:fd:ba:b1:f7:94:92:7c:2d:
         1e:c9:e7:ca:b4:b4:57:28:97:ab:2f:c4:c8:2f:15:11:2c:a7:
         23:32:a0:b6:e0:06:eb:c1:3a:4d:a6:c7:e5:78:93:2e:9c:56:
         76:93:c9:72:6b:39:96:94:39:e9:fa:e9:3b:00:e5:ec:04:af:
         05:2d:2f:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 20:20:00 2024 by rpki-client on console-fra.rpki-client.org