Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa
File:                     3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          OYHFQdJ6Gy5T9nJb23ifAbGZIs5yGq7GPjcm7NUjvJU=
Subject key identifier:   47:15:5D:0F:77:F9:C3:74:85:84:B1:F2:10:90:5F:E0:5F:18:B1:ED
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       5202F81976A68F700FBA5EB3227412F2E3D73BF7
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 31 Jul 2023 00:05:39 +0000
ROA not before:           Mon 31 Jul 2023 00:00:39 +0000
ROA not after:            Mon 29 Jul 2024 00:05:39 +0000
asID:                     131775
IP address blocks:        103.16.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 05:49:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:02:f8:19:76:a6:8f:70:0f:ba:5e:b3:22:74:12:f2:e3:d7:3b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul 31 00:00:39 2023 GMT
            Not After : Jul 29 00:05:39 2024 GMT
        Subject: CN=47155D0F77F9C3748584B1F210905FE05F18B1ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:46:53:16:6f:05:ef:52:f8:82:7f:3e:69:a9:
                    b2:cb:ee:83:84:cf:c5:a7:3f:39:1c:e3:15:df:84:
                    30:17:01:c8:70:d2:8c:98:0a:1d:f0:e7:15:c4:b2:
                    ff:8c:05:d3:91:a1:a6:1f:92:6b:ae:1c:e4:73:2c:
                    e2:f6:95:74:48:c4:9e:ff:ae:10:1b:ea:3d:cf:df:
                    a5:64:df:a7:43:89:af:13:50:66:82:bc:52:6d:30:
                    84:fa:0d:36:87:d5:8c:46:cb:a5:a9:51:a9:20:1c:
                    78:54:83:b7:3b:7e:5c:76:c5:b5:25:8f:2f:81:50:
                    ac:aa:8e:42:52:a1:9f:45:00:3f:19:98:e6:59:42:
                    58:ad:73:8c:90:44:21:2c:5e:16:5c:29:25:06:4f:
                    0b:cf:db:c6:69:a5:10:09:f7:2b:5e:3b:77:54:28:
                    88:ba:7c:64:32:3e:78:f3:df:7b:2d:db:82:eb:f8:
                    56:a6:b5:3b:2e:31:fd:bb:56:e4:9d:92:2e:b6:cb:
                    7b:b9:aa:21:74:f4:e6:d8:53:a4:f5:03:67:63:db:
                    c6:d4:43:b4:0f:51:76:a5:3b:5b:33:56:f3:f1:27:
                    48:c7:28:74:8f:81:13:6d:a6:b2:c4:07:60:e7:2b:
                    a8:89:d1:c1:e6:df:2c:76:4b:59:b7:9c:bc:6e:53:
                    ad:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:15:5D:0F:77:F9:C3:74:85:84:B1:F2:10:90:5F:E0:5F:18:B1:ED
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139392e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:8d:82:07:de:eb:99:4b:ce:d3:c5:82:34:70:68:7a:60:8e:
         d3:90:5c:ed:44:b3:fa:7c:6c:14:f9:a3:d7:eb:ec:bf:31:f1:
         d9:0d:e3:05:d1:ea:f5:1b:c0:2d:20:9a:0b:13:7f:ac:65:e6:
         7b:2d:14:f1:ca:3e:3d:b8:4c:bb:3f:2a:ae:1d:f1:a2:3e:10:
         8f:d2:32:aa:9e:86:ba:3b:be:dd:a9:e9:3e:2a:e5:0e:c6:48:
         8c:3a:ce:fc:ed:2c:68:45:a8:5a:f1:39:f0:fe:80:c4:50:bb:
         cc:b2:7e:86:cf:8b:0a:c0:50:b0:a2:10:ab:a0:62:58:c7:dc:
         6b:93:b9:f9:d1:0b:7d:ac:6b:2d:5e:47:e7:ee:a1:b5:7e:e5:
         78:21:65:87:dc:cc:d5:60:de:b9:eb:82:84:89:d4:d5:72:09:
         af:5c:53:75:87:81:0b:18:92:7e:3c:8b:67:06:a4:58:06:f5:
         04:80:a0:ba:f8:c7:3e:ed:e0:53:8e:ae:e4:1e:6e:a3:25:1a:
         82:f6:8b:a4:71:9f:b5:94:c5:2c:ee:87:db:d9:f0:ca:6d:01:
         22:5e:26:0a:29:93:ca:fe:0f:9a:c3:91:d2:63:e1:41:26:b3:
         57:2e:07:a4:37:98:07:2e:5d:74:51:68:be:e2:54:c0:88:bd:
         36:2c:5f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 05:56:56 2024 by rpki-client on console-fra.rpki-client.org