Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
File:                     3130332e32382e35392e302f32342d3234203d3e203538343734.roa (raw, json)
Hash identifier:          RxoBR7IgqwvZQhHoUeS2THnUjeeOMC/Li/OZd4zalVk=
Subject key identifier:   E4:A8:70:30:4B:78:5F:31:54:6B:88:ED:22:8F:40:BB:33:2F:28:38
Certificate issuer:       /CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
Certificate serial:       1BB14C56E1652E06DFFFE32F714756270BF4290F
Authority key identifier: 95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa
Signing time:             Sun 25 Aug 2024 06:00:02 +0000
ROA not before:           Sun 25 Aug 2024 05:55:02 +0000
ROA not after:            Sun 24 Aug 2025 06:00:02 +0000
asID:                     58474
IP address blocks:        103.28.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl
                          rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:b1:4c:56:e1:65:2e:06:df:ff:e3:2f:71:47:56:27:0b:f4:29:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95FC6072A4A690A61A0B5F14B36882B43DA2F098
        Validity
            Not Before: Aug 25 05:55:02 2024 GMT
            Not After : Aug 24 06:00:02 2025 GMT
        Subject: CN=E4A870304B785F31546B88ED228F40BB332F2838
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:10:86:0c:05:e0:ac:be:3e:b4:11:84:9d:7e:
                    6f:55:40:81:ff:d1:50:f6:d0:95:b5:eb:9e:bc:83:
                    a5:79:a2:56:56:0f:ff:ed:af:8d:8f:3f:1e:17:21:
                    38:df:44:68:e1:6f:e7:e6:4d:ca:87:57:63:10:f1:
                    7e:e8:b7:08:bb:01:0d:72:66:77:15:65:aa:55:10:
                    64:dd:bb:65:cb:18:cd:dc:e3:ec:24:36:bb:b8:06:
                    30:0c:0e:31:a6:83:42:e3:22:1a:37:64:7a:0d:f6:
                    a6:d1:4d:d3:6e:91:b1:ce:3d:8b:7c:ab:50:7d:3e:
                    78:8e:30:64:d8:c0:6d:43:a5:bf:da:e4:9c:d7:ce:
                    62:17:9b:76:8c:a1:34:80:e6:9e:5d:75:fe:ac:ce:
                    cb:f5:c1:39:13:15:cb:d7:39:f2:c6:dc:a3:c1:e6:
                    10:40:62:14:8b:c9:43:2e:2a:26:c7:03:6e:84:3c:
                    47:b5:8c:49:29:6a:7c:1a:79:3d:1f:98:12:66:66:
                    3d:bd:67:13:58:36:cd:22:45:88:6a:55:e9:c2:91:
                    93:d1:86:85:3c:86:9f:3d:08:ce:7e:d2:98:c5:37:
                    e0:c8:77:78:04:0e:bc:55:ea:e1:e1:33:3d:40:68:
                    af:a2:a4:e0:23:e6:92:a4:ba:af:d7:b6:a0:0f:56:
                    d9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A8:70:30:4B:78:5F:31:54:6B:88:ED:22:8F:40:BB:33:2F:28:38
            X509v3 Authority Key Identifier:
                keyid:95:FC:60:72:A4:A6:90:A6:1A:0B:5F:14:B3:68:82:B4:3D:A2:F0:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/95FC6072A4A690A61A0B5F14B36882B43DA2F098.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95FC6072A4A690A61A0B5F14B36882B43DA2F098.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3305177a-a500-4996-b3ff-70c144edfece/0/3130332e32382e35392e302f32342d3234203d3e203538343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.28.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:24:f2:b5:9a:4b:8e:d6:7b:ae:b3:15:02:69:8b:10:44:39:
         40:09:6a:99:24:c2:8c:db:aa:43:57:07:06:db:7a:2b:cf:1d:
         5d:4e:45:21:49:3a:4b:a2:b1:51:6a:89:dc:9c:9c:f5:2d:12:
         29:c5:a4:f4:c4:24:59:7c:2f:2d:86:57:50:24:79:72:38:eb:
         e3:a3:b6:1e:d1:04:09:6c:19:56:1e:62:b5:38:76:ff:fb:4f:
         ae:7d:4f:fd:51:9a:79:7a:13:54:a1:c5:92:5a:6e:33:14:bd:
         7c:79:f6:59:eb:d4:c5:80:52:69:9b:41:c8:ee:ad:51:fd:a7:
         56:68:0b:b2:49:de:c6:e6:41:8b:a7:1a:33:ea:f1:46:d6:81:
         31:e8:20:d8:39:75:5b:aa:63:c3:53:47:71:90:73:67:6a:ac:
         e1:bc:80:42:12:11:79:64:84:5b:b6:c6:91:48:15:74:ee:f9:
         b9:20:ee:d5:1d:e4:50:da:96:27:63:13:88:5b:fa:34:6d:13:
         2c:b6:d3:c7:00:57:e0:97:b2:32:37:58:54:9f:8d:d2:01:72:
         af:34:9b:9e:48:62:0d:6e:70:52:cc:61:7d:48:f1:5f:18:e0:
         fd:85:6d:af:bc:48:30:8b:1f:c6:a0:81:3f:01:e3:a6:ba:8b:
         d0:73:df:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org