Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
File:                     3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          EWyd3HvoKv4VkM5FrxkvM0SiPq0aQGDxcLZJrEfXwWU=
Subject key identifier:   16:F8:F9:93:0D:5A:07:2D:AF:98:FD:E6:13:F1:D4:2F:39:AD:6E:02
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       6D2344921C6F3EDB0D52219A6AFD22BBBF18CA77
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 31 Jul 2023 00:06:18 +0000
ROA not before:           Mon 31 Jul 2023 00:01:18 +0000
ROA not after:            Mon 29 Jul 2024 00:06:18 +0000
asID:                     55699
IP address blocks:        103.193.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 05:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:23:44:92:1c:6f:3e:db:0d:52:21:9a:6a:fd:22:bb:bf:18:ca:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul 31 00:01:18 2023 GMT
            Not After : Jul 29 00:06:18 2024 GMT
        Subject: CN=16F8F9930D5A072DAF98FDE613F1D42F39AD6E02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f4:d8:c2:73:0a:84:60:21:a6:4c:c8:4b:04:
                    bd:95:48:bd:5b:46:fa:1b:a7:d2:c3:30:10:16:de:
                    03:a2:2b:d5:db:89:ef:7c:81:70:af:7c:99:9c:73:
                    e9:16:78:02:af:53:07:48:fc:82:e7:3f:04:4a:53:
                    db:2a:04:57:36:51:61:73:b5:fa:30:09:2b:6b:a6:
                    9a:72:71:c8:24:92:b1:13:16:61:f5:3a:9c:41:18:
                    03:1e:75:b5:10:e0:54:67:b0:c9:08:f9:7b:7a:49:
                    50:a3:b7:df:0b:10:aa:e2:24:3a:e6:78:3b:53:45:
                    b5:a3:61:93:d0:c5:02:40:ea:12:d8:b6:e6:fb:e5:
                    65:ce:02:9f:a1:28:cc:7c:12:37:73:a2:00:66:d6:
                    ee:1f:55:ab:76:30:52:a2:bc:00:76:f9:b5:ee:d2:
                    65:84:e2:d8:26:92:b2:ce:fc:ff:e8:36:c8:a7:79:
                    ef:74:d4:71:92:4a:15:46:b3:6f:2d:4d:9f:41:64:
                    20:f7:a9:34:12:74:30:fe:c4:78:47:93:58:0e:4e:
                    18:bb:59:6f:b6:bd:94:c3:4e:50:05:e4:e9:68:a5:
                    fc:75:42:52:df:2e:06:13:e8:95:50:7a:5f:33:0e:
                    bc:1c:69:14:b7:1f:2a:c0:3c:88:fc:72:aa:b6:99:
                    25:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:F8:F9:93:0D:5A:07:2D:AF:98:FD:E6:13:F1:D4:2F:39:AD:6E:02
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         61:70:4b:f8:c2:a2:f1:51:cc:dd:7a:73:0d:8a:87:8c:2b:ec:
         d0:92:60:ce:df:79:80:41:56:68:0b:92:63:90:9d:9d:cb:1b:
         b4:f8:a2:0b:31:cd:d9:14:1f:b2:3a:58:39:59:a2:e1:7a:22:
         bb:3e:bb:22:73:dc:88:56:b7:6b:64:80:1e:c7:ec:9d:1a:16:
         0d:9a:67:c3:be:0a:58:4d:79:99:db:d3:a8:40:10:99:90:ac:
         a6:98:39:5e:98:e0:dc:55:27:8e:83:6d:6e:9e:ea:81:1b:7b:
         c6:72:44:53:7f:1b:de:27:39:41:3c:fc:be:4a:ab:12:2a:48:
         8b:7b:6a:c5:32:c9:99:f8:fc:32:01:d1:c6:4e:5e:0a:20:83:
         d7:78:40:79:99:c6:dc:59:8e:8f:18:fc:14:ce:1e:06:e3:f5:
         d3:e5:84:46:f2:8f:e1:db:82:c1:b0:bf:78:83:b6:27:19:93:
         a1:6b:64:9c:45:22:bc:6f:f4:ac:d6:06:bc:cd:60:b5:b3:38:
         a4:af:d4:a1:c8:29:2a:af:60:91:fa:5b:32:6a:95:3b:7a:a8:
         37:27:06:76:4e:c5:38:59:56:46:e6:05:a0:c2:92:43:ee:c9:
         ad:de:ae:be:f0:67:85:e0:2d:e7:39:3f:60:3d:b7:00:84:6f:
         97:9a:47:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 02:43:48 2024 by rpki-client on console-fra.rpki-client.org