Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ELB+Zhj7TsY6b+X6ia5auiyB2NV0sUU02ZuN0pdO9jo=
Subject key identifier:   30:F1:BF:80:F4:4B:8A:17:0B:47:DB:61:32:E2:52:25:99:23:52:22
Certificate issuer:       /CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
Certificate serial:       16F570ED04647AC4F60DE15B1657DC75593958EB
Authority key identifier: 0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 08:01:20 +0000
ROA not before:           Fri 01 Sep 2023 07:56:20 +0000
ROA not after:            Fri 30 Aug 2024 08:01:20 +0000
asID:                     17995
IP address blocks:        103.162.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl
                          rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f5:70:ed:04:64:7a:c4:f6:0d:e1:5b:16:57:dc:75:59:39:58:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1659BDC311758463AD3CEA23A7EB5ED377FCC2
        Validity
            Not Before: Sep  1 07:56:20 2023 GMT
            Not After : Aug 30 08:01:20 2024 GMT
        Subject: CN=30F1BF80F44B8A170B47DB6132E2522599235222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:33:79:7c:55:f1:8e:2b:0f:77:87:95:89:4d:
                    46:53:90:c0:15:75:c9:92:b4:05:c0:5c:2d:41:43:
                    d8:c9:e4:b3:f6:48:3e:8f:62:b6:88:bd:65:0f:eb:
                    39:d4:8a:29:ad:c1:9a:c5:57:8b:29:94:a5:33:57:
                    20:02:2d:7a:d5:a1:53:ee:18:97:8b:b8:e4:fb:7c:
                    57:af:15:c7:cf:f8:31:66:62:4f:3f:ed:28:aa:51:
                    d4:9d:02:f5:a0:46:0d:7b:f2:dd:aa:3c:ea:30:3b:
                    f7:82:d8:32:53:2d:e4:77:4a:34:d9:88:88:ae:a4:
                    97:a9:58:41:26:7c:69:9a:9a:d5:9a:97:f5:46:a1:
                    f0:a0:db:42:66:85:9a:c1:74:50:97:18:a9:42:1c:
                    87:44:66:65:c7:c9:05:79:15:d2:29:f6:e5:b9:c0:
                    63:a4:d9:bd:da:68:20:51:ce:9d:4c:ad:e5:b4:95:
                    1d:1b:b3:97:39:ac:63:6d:82:4c:cd:0c:80:de:19:
                    d6:83:22:bf:a9:08:8e:12:06:52:5a:a9:a2:87:e3:
                    65:fc:d5:93:76:76:be:84:f9:02:6d:2f:3e:89:a9:
                    af:45:da:22:8e:0b:44:01:08:21:39:21:98:aa:54:
                    d8:af:f8:29:1f:c0:48:1c:d4:ec:d7:ca:f7:2a:19:
                    f2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:BF:80:F4:4B:8A:17:0B:47:DB:61:32:E2:52:25:99:23:52:22
            X509v3 Authority Key Identifier:
                keyid:0F:16:59:BD:C3:11:75:84:63:AD:3C:EA:23:A7:EB:5E:D3:77:FC:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0F1659BDC311758463AD3CEA23A7EB5ED377FCC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1b3fe45-b588-4bb7-ae90-91f57f593cb5/0/3130332e3136322e3132322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         41:7f:9b:09:83:c8:be:e5:c6:b5:e0:e0:e3:ec:66:fa:21:37:
         20:27:50:84:72:01:e4:b5:46:80:61:f3:15:94:ba:4c:4b:f1:
         2e:25:bd:19:cf:94:aa:b6:77:ee:76:98:60:6e:b2:77:de:b5:
         5e:61:dd:b7:9e:ec:c6:d9:44:e5:f3:b7:25:76:83:90:c3:76:
         5c:73:1d:63:4a:7c:db:b9:e3:ff:8b:ae:3c:d5:92:78:19:f0:
         20:5a:24:63:63:ec:d1:48:b6:93:57:cf:f8:ce:ef:10:71:e9:
         4a:e2:9c:b0:54:9b:1f:27:00:f0:74:30:91:f3:d0:8f:05:a2:
         25:29:5f:c9:de:b6:cf:1c:1d:1f:04:ee:a2:5a:f8:33:6b:85:
         32:fe:2e:09:7a:38:9d:62:2a:bc:f3:b9:61:a3:aa:a6:a3:d0:
         83:66:bf:14:92:55:7f:11:51:da:7c:6a:18:d4:43:fe:4c:53:
         4b:f2:92:d8:e9:5a:5c:6f:6b:33:87:80:d4:80:32:01:96:e1:
         61:11:bf:bf:50:84:80:f5:65:fc:dc:2e:75:4a:1f:9e:21:47:
         f8:85:88:ae:c9:9a:07:38:6c:16:58:1f:fa:17:6b:a8:63:58:
         cb:d9:91:d6:77:81:d1:87:54:52:2a:75:1a:8d:b6:5a:00:fb:
         ff:30:30:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:20 2024 by rpki-client on console-ams.rpki-client.org