Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          X0mxUA+Q2Qs64KTy2CR+s3MGTdc08IN6GN0gPg/seN0=
Subject key identifier:   16:E5:42:21:01:25:AE:50:96:53:51:04:C7:A8:57:13:30:5B:B0:4C
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       3CAA17190095B0380E4D18FDA66165CFDCDBD616
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 02 Aug 2023 19:00:00 +0000
ROA not before:           Wed 02 Aug 2023 18:55:00 +0000
ROA not after:            Wed 31 Jul 2024 19:00:00 +0000
asID:                     59273
IP address blocks:        103.226.48.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:aa:17:19:00:95:b0:38:0e:4d:18:fd:a6:61:65:cf:dc:db:d6:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Aug  2 18:55:00 2023 GMT
            Not After : Jul 31 19:00:00 2024 GMT
        Subject: CN=16E542210125AE5096535104C7A85713305BB04C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ec:d9:d3:77:49:2b:a4:ed:45:61:fb:45:38:
                    e9:0f:16:c2:cf:15:4d:37:86:7b:b7:ca:9e:ad:e2:
                    99:85:b6:f2:be:38:83:16:9b:00:9d:ee:17:bb:85:
                    a6:60:05:f8:e5:c2:b9:c9:2c:61:f7:21:cd:3d:12:
                    12:ae:84:fc:08:19:4a:d5:02:34:e4:d0:c6:98:e0:
                    af:80:62:dc:a9:60:79:08:e1:40:76:0d:c2:91:69:
                    5e:fb:24:19:1f:22:74:54:76:7b:c0:1c:0e:aa:19:
                    d7:6e:60:3a:83:8d:6b:91:8c:5d:f7:db:85:9d:06:
                    71:0e:6b:0c:c0:53:11:be:e2:d5:c0:e3:40:17:60:
                    24:97:98:7f:fc:60:1f:56:29:a6:f1:ef:5f:f9:53:
                    61:84:cd:df:46:a0:20:e5:8e:ff:1d:c9:af:da:04:
                    62:7d:cb:25:07:95:93:3e:43:04:e1:96:7c:4c:20:
                    42:30:a4:e1:f1:30:9b:89:06:a1:20:3a:39:12:13:
                    0b:b7:b3:a9:4b:86:39:6f:af:4f:9a:54:7a:0a:eb:
                    23:1c:ae:ea:13:78:a3:68:3b:b9:42:01:48:23:23:
                    ce:0e:54:72:3b:df:40:29:fe:06:23:1b:46:c7:22:
                    20:28:63:d0:31:1c:7a:c2:39:47:cd:62:cb:67:0e:
                    a6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:E5:42:21:01:25:AE:50:96:53:51:04:C7:A8:57:13:30:5B:B0:4C
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e34382e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.48.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:c9:0c:27:5f:f5:4d:e4:77:64:19:9d:05:a1:89:22:73:71:
         5e:2b:70:1d:6c:9a:f0:79:36:05:5d:c2:df:00:91:af:99:6a:
         f2:a3:a4:de:ee:4c:bc:c2:75:ee:7d:43:8b:5c:dd:45:f2:45:
         94:47:af:fa:44:03:25:00:68:67:ce:e4:15:76:75:11:e5:0d:
         f5:09:29:3c:24:f5:20:37:10:ab:03:a2:84:51:99:eb:48:07:
         bd:2a:b3:8c:86:5d:c2:2e:c1:b8:f6:9f:f1:5a:59:57:d6:cf:
         78:40:93:2f:b4:af:aa:88:62:39:34:2a:5b:2b:79:fc:70:46:
         3e:c0:ab:26:25:b8:6b:40:cd:de:97:22:b8:29:6b:f8:2b:72:
         02:11:58:8e:32:de:43:5a:ce:90:7c:63:29:78:9c:3c:bd:16:
         e0:1a:8d:aa:97:08:71:5b:80:c1:27:4d:0b:5f:6d:99:74:a7:
         a2:38:4a:8b:2c:53:03:16:1a:77:4e:fd:56:af:1d:d7:8f:e0:
         3f:dc:41:ab:14:a4:06:83:71:8f:f9:a3:e0:0a:90:51:c7:39:
         d7:57:56:7c:a0:28:30:b0:00:ec:7c:83:e6:0b:99:9a:42:da:
         46:c3:30:28:94:8d:b8:95:b0:b3:4c:49:b0:f8:a8:28:30:45:
         47:3b:d3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:53:44 2024 by rpki-client on console-fra.rpki-client.org