Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
File:                     3130332e342e3136342e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          OrrntldpUkVh61WZfI3KlADIKqmn/PljfA9kxYlGv28=
Subject key identifier:   27:34:27:09:64:46:59:F5:2E:FA:6E:AF:8A:DE:2E:B9:4F:B3:AE:7B
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       34E0E05BA21B4E87DB74442AE7F46CE10F64EB9B
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:31 +0000
ROA not before:           Mon 01 Jul 2024 00:59:31 +0000
ROA not after:            Mon 30 Jun 2025 01:04:31 +0000
asID:                     58369
IP address blocks:        103.4.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:e0:e0:5b:a2:1b:4e:87:db:74:44:2a:e7:f4:6c:e1:0f:64:eb:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:31 2024 GMT
            Not After : Jun 30 01:04:31 2025 GMT
        Subject: CN=27342709644659F52EFA6EAF8ADE2EB94FB3AE7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6b:6b:d4:40:ff:af:09:3b:8d:aa:e6:0e:8f:
                    04:c4:c7:ef:99:cf:41:f9:10:e5:38:ef:ed:4a:c1:
                    0b:0a:3a:3b:f8:35:e9:f6:81:30:6e:80:82:15:71:
                    6d:67:fa:88:91:aa:cd:aa:49:ef:8e:dc:6a:8e:c1:
                    20:38:e0:ad:82:8a:7a:22:0a:8c:17:0b:94:d4:a1:
                    f9:b3:9e:17:54:5d:5d:7a:66:63:06:ef:f2:ad:97:
                    7a:21:94:00:f1:3f:c2:3d:0e:fe:de:65:7c:0c:c8:
                    c2:37:46:7b:cb:4b:22:26:8d:71:b3:2d:b9:39:e3:
                    70:0b:bb:49:18:98:d3:ff:43:8f:b6:6c:f4:a7:2f:
                    af:82:ac:3d:ff:a7:d1:c8:54:f3:30:db:0b:8a:55:
                    8a:2a:44:02:83:14:18:1d:89:10:4f:bf:96:81:87:
                    2b:8f:66:66:b5:e8:71:93:bc:41:7d:16:c6:1e:f5:
                    13:de:53:ab:59:1d:ea:32:fd:ed:0a:5b:57:2c:fd:
                    43:11:c0:cf:e1:9d:2b:36:c3:ba:18:51:5f:57:e0:
                    33:b8:ee:fb:3b:4e:44:bb:52:d5:97:80:ee:a5:37:
                    eb:8e:e8:c1:5e:bc:d6:3d:50:8e:73:f7:38:06:2b:
                    5a:fa:63:69:90:21:c3:55:f5:fa:7d:8d:56:b6:dd:
                    20:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:34:27:09:64:46:59:F5:2E:FA:6E:AF:8A:DE:2E:B9:4F:B3:AE:7B
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136342e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:45:6f:d2:65:cf:6d:a2:97:9c:10:61:9a:62:3b:17:6a:29:
         ec:11:ca:43:49:c4:71:37:3f:7e:b3:7c:83:37:ad:11:65:6f:
         83:b9:08:01:d6:9b:df:25:a7:c4:cf:16:df:51:1f:cb:9d:7e:
         5a:89:4d:20:b1:0c:6c:01:1b:ba:14:0b:eb:08:36:0a:db:ce:
         d3:6a:c3:b0:7e:23:3f:9a:6a:4d:52:e8:44:00:5f:f1:68:0c:
         d1:75:51:c4:cf:fc:96:0f:7f:4b:80:92:dd:ca:db:0d:19:17:
         79:84:5f:ac:03:9a:ac:98:00:82:e2:7c:a7:e2:79:5e:3b:4e:
         d4:d4:58:b2:24:85:9f:49:3c:f8:39:d3:ec:5d:19:4f:99:74:
         62:ed:96:df:d7:68:ce:66:f4:b4:56:ef:af:ed:50:11:d4:92:
         a1:d6:67:cf:3e:d0:0c:72:0b:12:22:92:29:6f:68:e9:0a:8b:
         b7:e0:5e:4f:5c:35:38:94:57:02:5e:d6:bb:78:0e:2b:0b:8f:
         0c:32:9c:3d:e2:55:f5:9d:b0:05:50:4b:a2:22:3c:59:84:f8:
         19:bd:75:7f:a5:1b:bf:d6:41:30:23:a0:16:1a:a1:95:70:b5:
         51:66:c6:a6:9b:71:09:c9:c2:e1:f9:14:96:f9:96:86:19:a3:
         45:2b:2e:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:19 2024 by rpki-client on console-fra.rpki-client.org