Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          TodR+xvqeDeBW/M7X2TI4X2NJNQXcUj3U2bXbOOj+L4=
Subject key identifier:   98:E6:77:B7:3A:CE:F0:76:CF:E4:94:7D:3E:0B:EF:D0:A5:95:AF:49
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       10309C68718B3AEB7E8363F8CCFAB385BD46D492
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa
Signing time:             Mon 31 Jul 2023 00:07:14 +0000
ROA not before:           Mon 31 Jul 2023 00:02:14 +0000
ROA not after:            Mon 29 Jul 2024 00:07:14 +0000
asID:                     137366
IP address blocks:        103.116.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 07:46:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:30:9c:68:71:8b:3a:eb:7e:83:63:f8:cc:fa:b3:85:bd:46:d4:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Jul 31 00:02:14 2023 GMT
            Not After : Jul 29 00:07:14 2024 GMT
        Subject: CN=98E677B73ACEF076CFE4947D3E0BEFD0A595AF49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:b9:93:18:82:5c:27:e2:ee:4b:64:7c:6d:e0:
                    c2:eb:e2:1c:e1:03:82:65:28:09:2b:69:07:ac:56:
                    83:00:fb:b8:98:c1:2b:a9:1c:16:73:d3:20:83:d4:
                    53:7a:fc:6a:4c:35:d1:d6:40:7c:c0:ff:a4:d4:8d:
                    84:83:af:0f:8c:6a:14:e2:ab:99:73:96:d3:5a:83:
                    96:43:ef:a6:53:2f:ba:06:77:5d:5d:9a:9c:8a:c4:
                    76:69:da:0a:b7:09:85:6d:b6:07:87:3c:c1:99:50:
                    23:17:fc:91:e6:a6:3c:98:aa:2d:ab:5c:89:08:48:
                    12:4c:5f:1f:75:60:81:12:f5:f4:cd:80:e0:38:b2:
                    2a:49:74:66:91:33:7c:fb:e8:34:84:60:85:7d:fc:
                    ad:97:3b:e6:19:8c:99:c8:10:23:55:5f:e7:5b:87:
                    4f:f6:35:50:53:4e:5c:68:67:04:f6:15:ea:7d:03:
                    66:53:1d:0c:d1:cf:97:33:41:92:08:bd:57:a2:8f:
                    36:30:49:90:58:1a:c8:30:50:73:bf:37:bc:43:39:
                    75:a6:96:1f:e2:ed:ff:bd:b3:11:49:42:d8:fb:2d:
                    09:32:14:91:49:21:17:bd:42:4e:1d:fd:87:98:42:
                    41:8c:a4:eb:fc:b5:86:17:1b:b0:eb:b0:a2:62:25:
                    40:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:E6:77:B7:3A:CE:F0:76:CF:E4:94:7D:3E:0B:EF:D0:A5:95:AF:49
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:e8:91:00:4a:de:bf:be:15:39:bb:ae:1a:b1:01:7b:bb:c6:
         94:62:8d:eb:1d:eb:3d:df:ef:b0:73:e5:37:de:d5:e5:d2:00:
         d6:c8:26:49:30:c1:53:9a:fc:ec:6f:e2:ac:ad:4b:26:3e:87:
         c9:92:a9:8f:ef:54:81:86:80:3a:69:a9:98:c2:da:b8:27:10:
         6c:d5:23:f2:4e:3d:6c:62:78:83:cd:6a:ea:cd:01:44:7a:51:
         e6:a3:26:97:77:d3:f5:fe:37:90:6d:0f:fb:a0:04:51:d5:24:
         8a:3a:75:7f:24:b6:98:69:b7:2f:c1:aa:9c:3b:b1:da:e5:73:
         01:41:2f:84:ce:05:07:5f:13:a0:3d:52:13:cd:bc:a8:2d:cc:
         70:89:da:55:a1:3b:f3:de:8d:7e:a9:97:bd:46:d7:6e:f6:3e:
         ae:5b:b9:39:e2:ce:d7:5e:3b:95:51:cb:96:c3:a7:99:71:7f:
         df:6a:5b:7e:d3:ff:25:bc:69:cc:aa:a5:27:54:3c:da:f3:0b:
         b0:e3:d4:be:6e:2d:5a:c0:ba:01:c6:30:b2:22:11:5d:2a:a9:
         99:bf:80:1f:c4:e6:66:fe:57:66:04:31:f4:14:5c:93:e1:51:
         32:29:b0:7b:79:2e:64:4d:1e:12:aa:67:ec:1a:b8:02:98:e7:
         32:e6:8f:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:41:16 2024 by rpki-client on console-fra.rpki-client.org