Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          4g1J24BCSAkh4ndoh/4ONLu0PEXCWRpp218bl+J5rqM=
Subject key identifier:   7B:80:83:AD:33:EF:35:2A:9E:20:9C:7E:55:EB:6B:4B:89:3B:0E:CD
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       325270A545927FFA3E21BE347DA4C91F4D8C6362
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:33 +0000
ROA not before:           Mon 01 Jul 2024 00:59:33 +0000
ROA not after:            Mon 30 Jun 2025 01:04:33 +0000
asID:                     58369
IP address blocks:        103.4.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:52:70:a5:45:92:7f:fa:3e:21:be:34:7d:a4:c9:1f:4d:8c:63:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul  1 00:59:33 2024 GMT
            Not After : Jun 30 01:04:33 2025 GMT
        Subject: CN=7B8083AD33EF352A9E209C7E55EB6B4B893B0ECD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:9f:a5:3a:21:b9:3b:4b:8a:c8:c4:cc:00:ce:
                    4e:07:69:54:d2:37:d6:db:7f:ec:e8:ba:5b:5f:6e:
                    b8:fd:11:6a:54:77:4e:9d:ec:4e:92:ec:82:8e:91:
                    b5:75:9e:65:bb:b8:f5:53:2c:01:f0:a9:dc:1f:0e:
                    c0:a0:d3:47:94:1d:a7:ab:19:58:b1:e0:ef:69:e9:
                    23:c4:04:cd:84:72:ad:a6:d3:58:4a:03:72:f0:63:
                    ce:ed:de:25:d8:4e:1e:43:04:71:fa:eb:d7:65:0e:
                    79:34:a9:3f:85:a2:b6:96:ef:24:b9:26:d5:0f:e2:
                    18:ec:7d:86:41:fe:90:68:67:1e:71:f1:79:b9:5c:
                    aa:00:d3:fa:b9:d3:26:7c:84:90:b7:a5:ea:e5:90:
                    81:7d:22:4f:d8:86:3f:ca:fd:e2:67:6e:98:d9:cd:
                    ed:5a:20:1f:3a:19:4f:b6:38:e6:7a:5a:e1:c7:f1:
                    87:b9:2a:60:99:4b:6a:59:b3:df:70:f5:0e:3f:f1:
                    ab:04:16:40:b8:14:a2:c4:3e:98:6a:fb:2b:50:78:
                    b4:4d:22:25:34:e7:ab:1b:c4:6f:1d:7a:73:23:72:
                    8b:7d:dc:0a:ab:a7:2b:29:a7:88:78:c2:f7:bc:b9:
                    c5:df:3e:22:1d:15:91:80:c2:8d:c3:8e:a2:d3:30:
                    d4:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:80:83:AD:33:EF:35:2A:9E:20:9C:7E:55:EB:6B:4B:89:3B:0E:CD
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:1c:bf:81:2a:a6:1a:b4:16:7a:c0:21:64:2c:cb:c3:1a:55:
         21:7d:ee:a1:3f:a7:41:7a:24:fc:a9:e3:69:b7:c2:10:66:e3:
         50:9a:72:15:1d:5f:97:28:b9:3f:d6:1a:cd:fc:fa:cf:2f:8c:
         58:1c:ba:d3:f9:bb:f4:87:8d:4a:44:a2:9c:3e:33:a0:41:b6:
         5d:82:f8:01:0f:50:44:a2:e9:58:08:14:e3:7d:ed:37:43:55:
         b9:c5:02:b1:55:ce:e4:0d:81:4e:fa:00:77:9e:1f:ca:75:d8:
         57:e7:72:32:94:00:1d:99:ec:47:c6:3f:85:92:ca:6c:90:f0:
         36:85:47:42:7c:da:93:2e:39:3b:78:ee:5e:03:e3:63:63:34:
         2c:26:04:2e:a9:9d:ea:f7:a2:6a:6f:f9:46:13:72:15:7b:e3:
         c1:56:ea:fe:37:42:c9:20:58:f8:2f:66:21:ed:42:09:06:5a:
         39:ff:45:df:d3:fe:d3:17:19:b4:b3:69:88:ed:31:6e:d3:9c:
         b1:22:95:c5:36:1a:c2:a6:7c:03:08:0b:fe:f4:64:f8:fe:65:
         63:01:b8:de:0c:37:d2:7e:b7:5b:10:71:24:d7:6c:b3:b6:3f:
         9b:0d:bd:9c:00:64:10:15:17:01:2a:1f:9b:8a:25:80:3b:8e:
         d0:9b:97:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 06:31:35 2024 by rpki-client on console-fra.rpki-client.org