Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
File:                     3130332e31362e34382e302f32332d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          P+YFIlA5HQxOZarwfNVZcytsk2bEQds3utjug9joblM=
Subject key identifier:   09:75:B4:24:10:86:58:C7:C2:89:E1:08:5A:0B:87:EC:2B:13:58:C9
Certificate issuer:       /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Certificate serial:       06DAEB653CB773902308EB58FBF54B17F6B77449
Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa
Signing time:             Sat 13 Jan 2024 04:00:02 +0000
ROA not before:           Sat 13 Jan 2024 03:55:02 +0000
ROA not after:            Sat 11 Jan 2025 04:00:02 +0000
asID:                     132634
IP address blocks:        103.16.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl
                          rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:da:eb:65:3c:b7:73:90:23:08:eb:58:fb:f5:4b:17:f6:b7:74:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
        Validity
            Not Before: Jan 13 03:55:02 2024 GMT
            Not After : Jan 11 04:00:02 2025 GMT
        Subject: CN=0975B424108658C7C289E1085A0B87EC2B1358C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5c:d1:a3:a6:75:11:fb:ba:c1:60:4d:07:e9:
                    49:e6:99:74:51:2d:ae:94:f2:2b:7d:92:5d:33:cd:
                    9e:75:ea:14:11:f7:62:9d:93:a5:5a:ef:cf:7a:fc:
                    47:4e:16:2a:bb:6f:f6:23:14:a1:44:ca:2e:5b:b3:
                    f0:7c:58:a8:d8:39:de:cb:59:bc:cc:c6:a3:ed:14:
                    61:0e:d3:ad:e5:c6:4a:4c:6c:c2:a1:d7:4d:c3:d7:
                    5d:86:1e:7e:9d:dc:be:ea:cc:ba:f0:bb:dd:7f:49:
                    0a:4b:af:88:cd:81:24:e1:97:16:b0:a1:dd:3d:11:
                    76:2d:d3:50:f7:3b:fc:32:e7:78:0d:b8:77:4a:26:
                    4d:f8:ef:d2:63:01:70:01:78:af:73:43:1b:d9:96:
                    d1:eb:93:99:3e:9b:fa:7f:1e:ae:63:ec:c4:82:a0:
                    e9:cd:36:a5:50:26:9e:ae:86:22:d6:34:06:b9:ff:
                    3c:a5:32:9b:18:05:be:05:ab:17:a6:38:dd:2f:f2:
                    d7:3c:c2:69:78:bc:03:36:46:bb:72:3c:87:5e:a5:
                    49:fa:fa:95:a4:bb:a7:2c:23:bc:76:0e:0c:2a:ae:
                    dc:76:17:e1:4e:5e:cb:9c:a3:79:c5:92:94:9f:24:
                    4a:4b:5d:b2:35:d5:ad:4d:1f:2c:b6:de:62:c9:35:
                    16:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:75:B4:24:10:86:58:C7:C2:89:E1:08:5A:0B:87:EC:2B:13:58:C9
            X509v3 Authority Key Identifier:
                keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e31362e34382e302f32332d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:d0:c6:50:e3:87:f1:b6:5e:78:b7:b6:b8:cf:74:ad:ae:ea:
         0a:00:05:08:3d:e6:a0:b8:45:6a:27:8e:98:ef:66:ab:33:19:
         a9:84:6b:7f:7e:73:5c:26:da:26:8a:9d:db:4c:da:b9:81:62:
         92:ba:f3:a5:83:92:7b:54:c8:5b:9b:d1:a9:b2:76:e5:c9:cd:
         50:2c:61:3e:8b:33:a1:2f:48:13:f9:ba:ce:88:e5:f9:0c:f7:
         d7:4b:7d:61:f6:7d:20:87:21:59:0d:82:af:ac:f5:5f:f0:6d:
         60:d7:b9:3c:8c:8b:d6:38:1f:9a:8c:2e:01:2e:60:c0:d2:29:
         d6:63:59:df:19:32:bd:d4:4d:01:eb:ab:3a:b7:78:97:cf:a1:
         26:18:97:49:95:40:52:57:d9:ae:2f:a7:a2:19:df:8e:47:b0:
         72:ab:35:8a:2c:a8:eb:57:ae:18:d7:ca:cd:eb:d1:29:3d:d2:
         ea:8f:19:ff:09:19:80:fa:bc:1f:89:57:71:96:9e:9f:ac:82:
         77:98:c5:e0:61:bf:b6:d5:6c:e1:77:5a:19:02:b0:a7:29:f4:
         c2:d9:72:99:9b:33:c6:17:fe:a8:37:d7:e3:f8:c2:ce:34:9f:
         42:b1:db:40:6b:1d:0b:12:8a:15:97:20:24:a2:49:81:cd:4e:
         80:dc:b4:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 18:47:40 2024 by rpki-client on console-fra.rpki-client.org