Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          /Wv/T5IbXWWeNdrn+YHxomzjbiuZYF99LyBQPdAYuBs=
Subject key identifier:   D1:7F:C1:57:04:04:F0:92:F3:41:79:70:3D:B6:F1:05:1B:60:07:78
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       72A4E1436AEE39542F28E9B11F628E5600FEE82C
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:34 +0000
ROA not before:           Mon 01 Jul 2024 00:59:34 +0000
ROA not after:            Mon 30 Jun 2025 01:04:34 +0000
asID:                     58369
IP address blocks:        103.4.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:a4:e1:43:6a:ee:39:54:2f:28:e9:b1:1f:62:8e:56:00:fe:e8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:34 2024 GMT
            Not After : Jun 30 01:04:34 2025 GMT
        Subject: CN=D17FC1570404F092F34179703DB6F1051B600778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:21:73:1d:b6:dd:ee:54:b4:0b:3e:7d:7f:06:
                    a2:20:77:ab:c1:a0:49:e2:74:08:59:44:bf:6a:bb:
                    77:a3:78:e6:bb:e1:df:90:00:14:4e:0d:7e:08:4b:
                    5e:23:a6:d8:86:ed:db:2d:8a:d7:06:71:cd:24:aa:
                    bd:97:83:5b:0c:4f:80:b8:9e:f2:b4:57:81:39:c0:
                    5b:63:db:3e:76:df:a8:fb:1d:09:e8:90:86:10:b9:
                    5f:12:b1:96:6d:84:77:d5:09:8f:31:f8:e2:2d:42:
                    2f:6c:c5:bb:e8:8d:9b:81:4f:f9:38:27:3d:60:50:
                    19:ee:b7:e1:bc:c4:07:53:d4:ad:73:9f:12:9e:78:
                    9a:2a:8e:78:95:de:80:b0:4b:af:24:73:d6:d5:3d:
                    f6:2a:ba:bc:c7:b8:ab:e1:8f:e3:0e:e6:a2:1f:fc:
                    b7:09:69:8d:fe:30:e2:c4:37:53:a3:2f:75:a2:97:
                    ee:8b:78:33:c6:ff:12:46:7d:f8:dc:a7:e8:03:50:
                    d3:a1:6e:00:fd:43:f5:5e:c1:18:da:b2:ed:b6:c5:
                    92:b6:85:6d:da:07:05:f6:14:3a:44:9c:2d:e7:91:
                    7b:f0:4f:ee:c4:65:15:43:e4:30:0a:c6:4c:77:52:
                    cc:7a:0a:6b:59:94:d9:cc:2b:22:c6:e7:9b:5c:82:
                    42:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:7F:C1:57:04:04:F0:92:F3:41:79:70:3D:B6:F1:05:1B:60:07:78
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:d7:bd:7e:38:a3:b1:46:1a:b6:98:f2:00:66:8e:e9:be:
         8b:d8:0c:8c:a8:c2:0d:b9:43:e3:19:4a:08:09:b9:8c:c8:d6:
         51:ab:e5:e6:54:32:4b:3d:6d:3d:1a:45:df:78:45:87:7c:58:
         f5:69:45:95:eb:38:f1:11:3b:66:a5:1b:f1:74:f9:f4:ed:36:
         85:c5:a1:66:7b:4d:77:e5:2c:eb:fd:88:09:9c:31:11:06:68:
         5d:0d:f7:6e:22:2a:e6:52:0c:8a:f1:da:b7:25:64:15:be:3f:
         d5:f6:a8:c9:b4:9c:fd:9e:ba:7e:31:43:72:17:72:fc:87:24:
         20:63:37:38:f8:e5:df:e4:67:f0:47:7a:d1:43:96:57:68:8e:
         38:1e:96:a0:15:fb:67:5a:ae:c2:6f:85:5d:00:30:56:3e:32:
         89:5f:87:34:31:5d:55:fc:f4:83:f4:4b:c3:a2:e9:18:d3:19:
         d3:e4:43:64:06:93:23:0c:89:39:84:3f:1d:72:74:4f:f4:a4:
         a4:9b:05:39:f7:a6:5b:79:f8:1b:28:7d:43:aa:f2:0f:20:ad:
         16:0d:40:02:99:30:72:16:71:ce:f2:e5:80:bb:65:84:26:23:
         8d:34:ae:2c:73:63:80:df:42:c4:29:66:6c:e5:44:41:b3:f4:
         3f:1a:16:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org