Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
File:                     3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          J+QZPa0iRBadwQdN4R9X8cYET2owXIaBqYuZ7epKyC0=
Subject key identifier:   59:87:55:CD:43:CB:F0:37:8E:35:23:1B:0C:5C:ED:F4:94:BD:70:95
Certificate issuer:       /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
Certificate serial:       54D39CA49EBF7B4F3BA19811D202614580D55BAF
Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
Signing time:             Fri 01 Sep 2023 11:00:50 +0000
ROA not before:           Fri 01 Sep 2023 10:55:50 +0000
ROA not after:            Fri 30 Aug 2024 11:00:50 +0000
asID:                     141107
IP address blocks:        103.216.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl
                          rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:d3:9c:a4:9e:bf:7b:4f:3b:a1:98:11:d2:02:61:45:80:d5:5b:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
        Validity
            Not Before: Sep  1 10:55:50 2023 GMT
            Not After : Aug 30 11:00:50 2024 GMT
        Subject: CN=598755CD43CBF0378E35231B0C5CEDF494BD7095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:be:49:51:46:fc:d6:c5:e8:43:92:4f:f3:9f:
                    a1:a0:60:65:2b:73:d8:35:94:ad:5a:c1:87:60:cc:
                    e5:3b:d8:6f:f4:fe:48:fc:5a:de:11:dd:a2:ca:04:
                    8a:ee:7d:3d:3e:84:bd:a0:28:7d:80:db:d0:89:43:
                    55:18:22:46:7c:05:ec:c2:52:b0:fe:2a:4a:3a:8f:
                    75:95:a5:5f:c5:7f:3e:76:57:0d:0a:e9:2e:bc:27:
                    ac:8c:81:54:62:2e:88:d9:1d:3d:af:84:28:c7:79:
                    eb:31:63:8b:fe:7c:ee:e0:ff:02:e6:d7:95:84:dd:
                    ed:83:46:59:d0:23:e1:a7:3b:6c:0d:18:67:93:74:
                    8e:ba:71:70:18:bb:7e:a3:d6:33:6e:12:07:50:6d:
                    aa:96:db:63:05:4b:28:fb:0a:ae:e4:ba:14:44:b6:
                    0a:fd:8f:7c:0e:41:dc:8c:ec:0c:5d:7f:a1:47:79:
                    d7:bf:be:0e:e2:92:6c:e0:5f:ae:9d:a1:fb:6c:07:
                    a6:69:75:56:3b:60:a7:f1:47:ae:90:48:ff:25:2d:
                    00:14:08:f7:5f:f3:a6:89:61:71:c0:a2:aa:f4:62:
                    32:c3:e8:e7:b3:72:9d:5a:84:3e:e9:3d:d4:f2:4d:
                    ba:e7:0b:8d:ca:0d:16:ed:03:42:46:bd:15:4d:55:
                    b2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:87:55:CD:43:CB:F0:37:8E:35:23:1B:0C:5C:ED:F4:94:BD:70:95
            X509v3 Authority Key Identifier:
                keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:b4:2e:88:ea:21:0a:c3:37:f2:6a:cb:e9:e7:d8:25:fb:7d:
         db:91:a8:15:e5:8e:a8:1f:c0:d0:46:da:4e:9f:3c:f1:4a:77:
         bb:3f:dd:4f:82:66:19:b2:65:9d:03:b7:bb:a7:26:bc:32:fa:
         7f:f1:9d:6d:2b:21:49:9c:41:78:70:d6:37:74:f0:82:0a:c8:
         97:77:a7:3d:64:93:c0:6c:2d:c6:7a:6f:72:f8:26:7d:f6:b2:
         96:f3:9a:c8:79:f4:13:50:99:74:e4:eb:d9:b0:ec:f2:32:d5:
         ee:b0:51:28:fb:c1:26:25:82:ee:68:ba:93:c4:82:c9:27:ac:
         c0:a2:11:b5:61:78:c6:2b:3b:a4:8e:3c:ca:59:5d:5a:27:c7:
         86:38:d7:8c:2b:d4:cf:45:2a:4f:e1:17:19:91:05:45:59:bf:
         4e:c2:59:9c:bd:56:f9:6d:36:ab:07:32:1b:4d:eb:bf:aa:13:
         54:34:99:27:eb:2c:99:03:24:44:08:00:1f:e9:5d:9f:c0:9f:
         ed:59:ad:3e:c9:68:cd:2a:42:ca:82:70:f6:82:94:90:77:a5:
         f7:95:c6:c5:55:0d:42:97:6a:53:44:97:55:be:e8:76:e2:50:
         c6:80:89:dc:e6:7c:92:6f:ec:f9:c8:b1:4a:9d:4d:89:77:52:
         47:55:ce:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 04:28:43 2024 by rpki-client on console-fra.rpki-client.org