Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa
File:                     3130332e342e3136362e302f32332d3233203d3e203538333639.roa (raw, json)
Hash identifier:          CeEAGt4S+wqjd9z9Ty0ViZK/86Ybx8ZDPh89EMiIbgk=
Subject key identifier:   7D:9B:1C:33:72:D1:39:45:82:A7:CA:78:54:51:8E:2B:EA:50:DD:D3
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       5B473CB51BADB34C0F72D8D3EA307510A907E6FC
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        103.4.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:47:3c:b5:1b:ad:b3:4c:0f:72:d8:d3:ea:30:75:10:a9:07:e6:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=7D9B1C3372D1394582A7CA7854518E2BEA50DDD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c1:5d:ee:00:90:72:79:53:31:5a:23:e1:f3:
                    3d:c2:e9:82:66:76:84:6d:1e:25:5b:02:ef:17:0c:
                    66:7d:ac:d4:03:65:00:36:a0:30:0b:7a:e8:52:89:
                    17:65:d5:7d:3e:43:ba:4b:54:be:74:b0:0d:d8:a9:
                    5f:c7:cb:f6:64:c9:37:59:75:76:68:e7:44:fd:5e:
                    51:c6:bf:50:0b:81:e9:9d:18:14:06:13:ca:71:33:
                    f0:12:c8:ea:a3:a8:71:c6:0a:51:55:86:82:7d:bf:
                    6a:58:90:b6:e2:0f:35:f0:65:2c:d1:72:22:9f:81:
                    80:5b:90:94:17:e5:dd:f7:f6:c4:e4:27:30:c5:6b:
                    a9:4c:fa:57:89:bd:60:86:b4:13:8c:26:7f:dd:1b:
                    6b:74:d3:1b:c3:29:19:30:5a:2f:82:f4:ee:fe:33:
                    7d:76:1c:89:5f:c5:4f:19:49:6e:39:c5:aa:1f:52:
                    34:41:1d:f8:c8:76:9b:00:c9:6f:d7:b7:2f:a0:de:
                    c4:e2:c7:4b:06:4c:35:b5:1b:5c:6a:22:be:a9:27:
                    04:e0:6a:aa:44:71:10:de:ff:fb:fb:23:27:0a:2c:
                    9f:3e:8f:70:eb:c3:c2:43:c9:54:e9:c6:12:4f:5c:
                    30:a5:66:b7:9c:09:33:42:b8:dd:e5:6d:c6:4a:db:
                    6c:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:9B:1C:33:72:D1:39:45:82:A7:CA:78:54:51:8E:2B:EA:50:DD:D3
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32332d3233203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:8e:c3:8d:a0:75:64:2a:7a:5b:73:f3:ff:46:2e:67:ca:40:
         dc:1f:d3:7d:02:48:3a:ae:65:7c:9f:99:f3:93:5f:1c:ec:cd:
         5c:a0:f8:54:81:92:5c:a0:ad:fa:9e:c9:4f:ab:aa:56:87:66:
         e2:dc:b2:68:1e:64:30:fd:01:2e:e3:e6:16:a0:91:26:0e:e1:
         80:43:74:98:26:b3:da:a9:1b:c2:28:e3:2b:40:54:a9:ef:e2:
         af:a8:cb:a7:dd:53:c8:7e:30:61:33:cc:b7:eb:d9:b8:5e:43:
         8c:87:cf:6c:36:b1:72:d8:76:0e:15:a6:b8:9d:23:e9:06:47:
         a2:3e:e7:19:aa:1d:2f:02:18:3c:dc:8d:fe:00:d6:0a:55:27:
         d1:d7:14:ce:65:f9:40:a7:47:3e:71:be:1b:c0:db:b0:75:d4:
         6f:54:9c:85:7f:cb:49:72:fe:8b:b7:59:0d:46:45:1c:16:88:
         a8:d4:3e:55:e1:40:4e:67:90:ea:a2:7b:d5:61:53:c3:e5:25:
         34:fe:6f:c1:9e:e2:8f:7e:ab:7c:84:ec:18:a4:f9:58:d7:9e:
         69:ca:04:58:81:7d:6b:94:2a:d2:12:4e:e7:2b:74:b3:e1:97:
         68:cb:d4:66:2a:77:a6:f2:89:fd:75:7c:45:62:2d:22:e0:1f:
         b0:20:e7:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org