Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa
File:                     3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier:          xBbH/qa7emlAazl7AgMIRMoJ2KENMxyPsay4LXhh5D0=
Subject key identifier:   C0:97:92:AD:0D:EC:14:85:DF:0F:2F:3C:62:5B:52:F4:3A:8D:8D:9F
Certificate issuer:       /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial:       1D87E713FCD46D754F0B2060C5DB71D4B011508F
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 07:00:00 +0000
ROA not before:           Thu 08 Jun 2023 06:55:00 +0000
ROA not after:            Thu 06 Jun 2024 07:00:00 +0000
asID:                     17995
IP address blocks:        103.158.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
                          rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 13:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:87:e7:13:fc:d4:6d:75:4f:0b:20:60:c5:db:71:d4:b0:11:50:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
        Validity
            Not Before: Jun  8 06:55:00 2023 GMT
            Not After : Jun  6 07:00:00 2024 GMT
        Subject: CN=C09792AD0DEC1485DF0F2F3C625B52F43A8D8D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:25:ba:3d:c7:03:73:2a:0b:81:72:32:07:f4:
                    59:a8:0b:92:79:f2:d1:77:03:f5:3b:d9:32:80:c8:
                    d3:6a:2a:90:4a:86:b0:29:9a:0d:9b:8e:f2:4d:3c:
                    92:2b:07:39:d9:a0:d9:02:4e:d9:d8:43:97:55:da:
                    9d:ec:64:49:38:d2:73:30:c5:b0:9c:9b:6c:90:d8:
                    75:b2:4e:f1:67:82:47:5a:cb:e6:30:04:93:05:05:
                    4c:1e:49:4f:73:47:19:a5:36:ae:da:1b:8d:8d:80:
                    52:89:79:c2:4b:4c:4a:43:a3:c9:fb:d5:44:7a:1d:
                    91:02:a2:48:4b:3b:6d:64:e1:d4:77:39:a8:bb:13:
                    99:b0:54:e3:3c:bb:ca:65:ae:1c:e0:18:12:9a:2f:
                    1b:7a:67:44:2e:5d:f1:64:b7:3d:e7:95:9e:89:cf:
                    37:85:1a:ff:35:39:d4:a5:0c:dd:95:d0:1a:69:f1:
                    92:bd:4f:68:63:58:0d:be:5e:55:8d:88:f4:e4:6c:
                    77:08:bf:eb:8d:82:38:d5:02:a5:5b:a9:04:57:17:
                    17:46:2d:a5:2e:e9:d4:25:33:21:40:87:39:2e:60:
                    b7:95:77:48:dd:65:bf:6a:8b:b6:bb:58:58:51:4c:
                    dc:d2:b0:b7:c8:1f:4d:58:32:4d:fd:52:00:b8:4c:
                    4a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:97:92:AD:0D:EC:14:85:DF:0F:2F:3C:62:5B:52:F4:3A:8D:8D:9F
            X509v3 Authority Key Identifier:
                keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:71:b9:28:a8:e1:52:73:39:8b:3d:f4:9b:11:0a:92:20:7c:
         2d:19:94:86:58:51:8c:81:84:cb:d7:1b:e2:6b:6e:bd:69:bd:
         53:d4:a3:3d:df:e4:5f:17:c4:be:cd:62:a3:9b:95:aa:9d:b7:
         52:de:61:39:42:bb:a4:7c:d8:97:83:c4:d3:a3:61:a9:b6:34:
         12:dc:68:3b:75:fb:a9:d7:26:7c:c6:a2:c7:36:58:7e:b7:6b:
         53:93:34:e8:20:f9:6e:3c:2c:20:8f:d8:56:9b:cf:d5:7e:92:
         da:a3:dc:0e:b3:78:89:95:49:90:65:24:10:93:0c:12:c1:2d:
         68:ee:c1:bb:46:fa:66:69:22:98:8a:d8:19:ad:b9:fe:f4:79:
         a5:55:5e:9a:fa:eb:54:55:dc:7c:2e:23:8b:92:78:76:c9:ef:
         67:56:78:28:0b:a1:3e:ea:b2:b6:ee:79:ab:41:11:98:7d:5f:
         b8:6d:e3:c4:ba:47:5a:23:23:f1:28:10:30:a5:3a:17:e4:95:
         40:f7:20:93:ea:02:1e:60:55:0d:f3:02:ad:bc:de:1c:a6:3d:
         b3:30:e1:7d:c5:4c:32:eb:ec:91:6f:17:84:30:f2:ea:fb:cc:
         60:aa:af:90:6a:d2:43:6a:94:8d:08:f5:99:07:59:c1:05:86:
         82:2c:b2:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org