Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32342d3234203d3e203137393935.roa
File:                     3130332e3135382e35382e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          f7qGBhpZfudNDlxiCxHvWwCFC6dZu7G9atYkSMIiNyc=
Subject key identifier:   4E:9F:36:AF:0C:05:64:6E:55:DE:11:3C:5F:DD:68:33:AD:8A:7F:A4
Certificate issuer:       /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial:       691783588461CBA6CFE18007266305149E4BAF59
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 07:00:00 +0000
ROA not before:           Thu 08 Jun 2023 06:55:00 +0000
ROA not after:            Thu 06 Jun 2024 07:00:00 +0000
asID:                     17995
IP address blocks:        103.158.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
                          rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 13:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:17:83:58:84:61:cb:a6:cf:e1:80:07:26:63:05:14:9e:4b:af:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
        Validity
            Not Before: Jun  8 06:55:00 2023 GMT
            Not After : Jun  6 07:00:00 2024 GMT
        Subject: CN=4E9F36AF0C05646E55DE113C5FDD6833AD8A7FA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:cd:15:59:12:f2:9b:c8:0a:e5:94:fb:8b:
                    11:e1:d0:68:8d:01:8f:14:ee:0c:3b:09:32:f9:3e:
                    82:09:40:6e:75:2e:37:ee:f7:c3:30:78:b2:29:5c:
                    f7:e9:df:f5:6f:4d:23:04:5e:b4:18:14:4a:77:01:
                    f1:4a:78:4a:96:02:fb:ca:30:d3:f2:a1:9d:bf:df:
                    97:e7:2f:34:30:bb:33:9b:d1:14:9f:ea:af:8b:32:
                    e2:92:c7:36:89:0f:20:33:36:d7:e9:54:33:ec:8c:
                    ae:0e:65:05:ac:24:bf:69:be:5a:3b:fe:a3:e1:2f:
                    ac:8b:b8:51:3e:92:7d:09:f0:6f:3e:4f:e7:47:5f:
                    d7:91:e3:c9:b7:54:b2:17:42:96:35:bb:d3:45:7b:
                    fe:e6:8d:5f:76:4b:86:bf:73:7b:c2:6e:be:c3:e2:
                    10:86:d7:ac:ed:2a:2c:55:00:ef:48:7a:c3:d7:93:
                    e1:37:38:f2:2b:be:de:e5:ad:05:0a:7c:12:12:09:
                    0f:ea:c6:a3:a8:84:78:9c:b1:3f:ba:ea:ac:c7:83:
                    5b:40:ec:3d:b5:30:fb:b7:0e:54:bf:ba:49:65:31:
                    6c:50:93:4d:a6:e3:c5:b5:f5:fa:68:f6:0d:f8:3c:
                    ca:c9:2f:20:9a:92:93:34:f1:43:1b:36:a2:fd:bf:
                    d9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:9F:36:AF:0C:05:64:6E:55:DE:11:3C:5F:DD:68:33:AD:8A:7F:A4
            X509v3 Authority Key Identifier:
                keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:8d:67:16:80:51:87:8d:3e:b8:53:f7:bb:cf:0b:30:db:09:
         09:bd:d7:98:ea:35:70:b6:db:a0:09:43:0d:1c:6e:17:f9:7a:
         45:00:46:96:79:ac:ff:79:f3:ed:a8:e7:5f:cf:db:01:fb:dc:
         66:66:2b:f0:ad:9f:d9:f6:db:bd:c0:d9:41:1c:ec:bc:50:47:
         f9:1b:72:64:2c:9a:4f:66:f7:bb:e0:52:82:0c:11:01:bd:ea:
         83:7c:92:77:c8:a3:47:ff:d1:99:31:ef:04:2e:c6:d9:58:28:
         83:93:8b:8e:f8:78:9a:1b:91:14:00:56:b6:ba:97:6a:91:ae:
         93:2b:64:94:e3:48:b7:d0:83:9e:22:75:56:86:14:dd:0f:b1:
         95:56:d6:ea:7f:2b:89:92:e2:e0:bb:cc:27:0c:10:69:3b:e6:
         37:4b:52:8c:7b:ca:e5:6d:a5:bb:4f:b4:43:84:4d:9c:cc:8e:
         3e:22:a2:f8:fe:c3:58:d9:40:8e:3d:f3:d3:68:b4:d7:3a:f2:
         e4:cc:f2:93:40:59:76:44:b1:b9:21:7d:a5:2f:7d:44:54:68:
         8d:29:39:d3:b5:75:ff:5e:b6:49:5c:1c:7c:5f:21:96:01:65:
         c7:9d:6b:e0:4a:6b:a6:73:e9:f9:68:e0:d7:b8:5a:a5:67:ae:
         9d:b2:27:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org