Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=
Subject key identifier:   58:57:ED:F5:79:9F:34:F3:1D:F1:EB:E1:F7:8F:BE:01:B3:01:EB:FC
Certificate issuer:       /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial:       7E1EC0CCBB3B38CA41F0B11DB6091DA2D75EEA
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
Signing time:             Fri 15 Nov 2024 05:00:02 +0000
ROA not before:           Fri 15 Nov 2024 04:55:02 +0000
ROA not after:            Fri 14 Nov 2025 05:00:02 +0000
asID:                     4800
IP address blocks:        103.169.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
                          rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:02:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1e:c0:cc:bb:3b:38:ca:41:f0:b1:1d:b6:09:1d:a2:d7:5e:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E28E396E82778793018513BD084854BE663886
        Validity
            Not Before: Nov 15 04:55:02 2024 GMT
            Not After : Nov 14 05:00:02 2025 GMT
        Subject: CN=5857EDF5799F34F31DF1EBE1F78FBE01B301EBFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:47:03:0e:98:5e:52:90:26:71:32:1e:b7:1e:
                    01:eb:f0:00:06:40:aa:ed:7f:a3:1f:4f:ec:ec:62:
                    cd:8b:2d:20:36:7a:94:aa:c7:45:f7:cd:d4:c5:c1:
                    85:cc:b0:31:8f:3c:ff:3c:fa:93:62:64:c7:ba:90:
                    c5:ce:02:40:7b:6c:b1:17:dd:8a:e8:81:c3:23:e7:
                    d8:4d:d1:6d:86:c0:2a:c1:57:bb:d2:16:c3:28:51:
                    e2:2c:4b:a0:24:e3:1d:c6:78:24:25:61:59:ad:a7:
                    91:06:91:52:43:cd:42:4c:9a:5f:01:48:e5:fb:f6:
                    12:43:57:f3:dc:cf:9d:dc:43:a7:58:dc:90:ff:d1:
                    5d:de:c5:18:8c:d9:90:08:37:d6:5c:a7:2e:1f:1b:
                    30:35:c1:fc:e3:f8:4b:00:55:0e:07:4c:84:b9:ab:
                    38:14:89:96:d5:58:c2:7a:d0:1c:f6:b6:52:7f:ea:
                    a0:12:26:fc:74:7d:ba:16:e8:31:76:68:ff:b4:39:
                    1e:a0:e0:9d:6e:2f:89:ad:14:7e:3a:d0:5c:68:d8:
                    39:3d:dc:a9:14:9d:bf:c1:1f:df:e8:ef:3a:6a:cb:
                    c1:b2:d2:d6:39:7c:1d:8d:82:79:48:d8:7d:64:93:
                    f5:1c:3b:9b:2d:c8:6f:a9:56:0e:f9:87:86:a9:e9:
                    df:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:57:ED:F5:79:9F:34:F3:1D:F1:EB:E1:F7:8F:BE:01:B3:01:EB:FC
            X509v3 Authority Key Identifier:
                keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:74:b1:f8:03:7d:cd:b6:92:b3:d7:f2:1b:68:80:76:40:ea:
         d5:d9:a3:61:79:8d:b5:38:da:0d:1f:4c:b9:a1:46:2f:ef:9e:
         80:79:ec:74:f4:7c:e7:d3:cb:16:a3:d8:4c:b1:6e:ea:6b:58:
         29:8d:1f:d0:da:69:b8:6c:30:f2:50:56:2a:f4:86:4f:b8:ca:
         01:7a:41:20:de:eb:18:ce:5b:74:5d:85:70:68:63:eb:f6:f8:
         4f:db:6f:9f:ab:c2:4d:86:dd:1a:03:a3:42:04:4a:d6:3b:82:
         22:65:03:b7:aa:7d:cd:f0:a4:76:7e:98:d3:4d:9a:22:ec:87:
         7c:9a:27:b0:00:68:b9:62:d6:46:2f:6e:fd:1e:d7:16:54:73:
         b4:b1:4a:ea:b8:66:4e:99:9d:e7:1c:f6:0f:89:17:9f:4f:c1:
         73:ab:a9:63:04:fe:6e:50:f6:3c:67:7f:96:37:03:97:d9:09:
         5e:46:34:a6:5c:38:0e:5f:b1:94:75:71:31:de:58:78:5c:19:
         f6:c5:6e:5f:5c:d3:e3:54:53:1c:5b:25:a3:b9:b5:51:6a:f8:
         e3:9a:0c:e7:e8:46:53:d4:d5:94:ad:b5:00:9d:7f:17:8f:92:
         58:9b:93:a2:ec:17:4c:5e:c1:b3:9b:4a:1c:c0:df:34:d8:46:
         7d:ea:13:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:38:56 2024 by rpki-client on console-ams.rpki-client.org