Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          fO3eEq4uo5D9uIibEBc7FEduqole3mz8BXlv8dxHvqU=
Subject key identifier:   28:5A:11:1C:33:D3:44:11:4B:1A:C2:23:3B:6A:27:37:0F:00:68:CA
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       010243CB186D1E333054CA1458AC7EA187942B15
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 31 May 2023 16:02:28 +0000
ROA not before:           Wed 31 May 2023 15:57:28 +0000
ROA not after:            Wed 29 May 2024 16:02:28 +0000
asID:                     58381
IP address blocks:        163.53.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 21:55:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:02:43:cb:18:6d:1e:33:30:54:ca:14:58:ac:7e:a1:87:94:2b:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May 31 15:57:28 2023 GMT
            Not After : May 29 16:02:28 2024 GMT
        Subject: CN=285A111C33D344114B1AC2233B6A27370F0068CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d6:4e:a4:e1:4d:13:9d:29:33:ec:9b:ac:8c:
                    ca:51:b0:4f:29:f4:cd:81:31:c0:3b:83:fc:a8:1c:
                    ac:35:f9:2a:29:b4:a2:f0:69:19:5f:16:05:81:95:
                    cb:2e:15:8a:37:e6:ad:50:92:09:d3:38:ba:23:e1:
                    ac:ff:17:6e:15:11:1f:1b:71:b0:b7:2f:7d:1e:d0:
                    85:b0:1f:39:91:44:86:77:f0:70:37:29:f3:95:b4:
                    00:d1:f7:59:9d:09:95:15:ea:b3:f3:b8:39:ce:13:
                    b1:b8:bf:c9:91:2c:c6:f0:02:02:83:90:7e:b7:a9:
                    0a:4d:a0:9b:79:01:94:a2:50:dd:42:f9:53:da:5f:
                    ed:01:b1:2d:f1:07:41:48:96:14:89:57:36:82:bc:
                    c7:df:dd:b5:2e:c7:54:33:06:f3:11:2d:8f:1e:37:
                    ca:7a:ca:81:a3:d4:cf:df:f0:f5:4c:6e:53:a1:97:
                    30:65:d4:60:fb:09:a6:e7:6d:67:c1:cf:f9:fc:cf:
                    58:07:94:92:b8:9b:ab:e3:f2:da:04:07:a2:93:6e:
                    66:92:ef:15:f9:76:bd:91:ca:8c:40:30:d1:c6:31:
                    1c:65:34:c0:36:3f:4c:8f:c0:82:d2:bc:37:d1:82:
                    f1:57:36:48:60:d7:18:28:5e:c5:54:7b:3c:e6:5f:
                    f0:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5A:11:1C:33:D3:44:11:4B:1A:C2:23:3B:6A:27:37:0F:00:68:CA
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:1b:76:e4:0d:0e:ee:3a:43:bf:d1:e3:12:37:f6:c8:c4:15:
         e1:6b:f9:02:3d:f8:cf:37:e2:11:4b:23:0a:ec:b2:33:b7:2c:
         41:e6:74:76:bc:67:68:6d:ea:d1:c4:92:88:8b:2b:58:9a:38:
         43:42:a7:aa:32:77:0e:23:8e:d1:2e:e5:91:a3:d0:c3:d5:12:
         cb:79:d7:6c:4c:76:3b:e7:54:a2:d7:5d:f3:6f:1d:89:c6:72:
         61:70:6b:fd:5f:83:52:07:63:a5:dd:1a:e4:80:df:0d:7a:42:
         5f:4d:b3:09:29:fa:30:e1:a4:f1:40:2c:e4:67:d7:d7:21:99:
         ab:2f:87:44:61:76:03:ea:85:fe:fa:cd:6c:fc:a3:68:7a:db:
         c8:5e:e1:81:58:0e:d3:f7:3a:a8:ba:2f:c3:14:d8:7f:7b:8f:
         c1:0a:f7:23:f3:d7:e7:7c:cb:a3:dc:e5:8a:36:d2:e7:ce:ab:
         f2:b9:b3:47:48:42:22:4a:75:8e:f0:7e:b0:fd:d5:d0:a8:7b:
         d9:b0:a1:a3:9c:c2:db:1d:c7:d9:27:9d:95:24:ad:68:09:cf:
         e2:b0:a3:09:83:47:15:8b:37:86:e5:e7:a9:ce:58:bc:fe:52:
         06:9c:2f:f6:b1:61:89:d8:86:88:b8:25:5c:6e:79:3e:6a:0a:
         02:41:d7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 05:31:58 2024 by rpki-client on console-ams.rpki-client.org