Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139332e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          ly8n481+Yx6O5KGuaN3HRYfsgFCFF9rGxBWRU5jAipc=
Subject key identifier:   23:E5:7D:77:ED:FF:1E:B9:F6:A9:93:D0:FE:4C:5D:76:82:71:76:BC
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       61EA2D5038CE83E19DE43F6492DB19AD8461A547
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 01 May 2024 17:00:02 +0000
ROA not before:           Wed 01 May 2024 16:55:02 +0000
ROA not after:            Wed 30 Apr 2025 17:00:02 +0000
asID:                     58381
IP address blocks:        163.53.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ea:2d:50:38:ce:83:e1:9d:e4:3f:64:92:db:19:ad:84:61:a5:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May  1 16:55:02 2024 GMT
            Not After : Apr 30 17:00:02 2025 GMT
        Subject: CN=23E57D77EDFF1EB9F6A993D0FE4C5D76827176BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:61:61:61:11:78:9f:d5:b0:3c:7f:f8:d4:4e:
                    e4:c1:21:a8:82:8a:18:b9:c6:56:ef:07:54:89:ea:
                    1e:e9:3f:fb:1a:21:d2:a9:76:c7:f4:64:fd:95:70:
                    d1:ed:95:bc:89:00:be:4d:92:49:38:3b:49:77:3c:
                    1c:29:e1:e9:ac:fa:38:66:99:13:5f:60:62:7a:54:
                    75:16:65:0c:1f:1e:94:57:e0:74:a2:79:5b:b4:95:
                    38:0d:91:fb:2c:e3:e4:f6:1a:ea:24:0b:48:88:e2:
                    1a:82:60:80:a3:a9:b2:2c:23:28:56:37:a5:58:4f:
                    82:6f:d1:be:5a:3f:c6:ce:7e:32:eb:65:c4:56:b1:
                    e2:13:74:06:79:cf:38:34:03:72:9b:85:70:cf:16:
                    65:8d:ca:77:a9:83:a8:13:6e:ba:f5:4a:10:57:32:
                    2b:a9:f6:d1:77:90:88:6e:ab:6c:9b:31:ae:5b:ee:
                    43:4d:ef:40:a2:48:78:f7:97:52:ce:e4:b5:14:fe:
                    e8:22:13:78:01:4d:e7:79:30:d1:b4:f4:f3:5a:16:
                    90:29:d9:fa:43:73:96:e2:ca:5e:fc:f9:3b:da:eb:
                    af:3c:7f:64:2a:27:ee:f7:d0:07:a6:6d:d4:67:35:
                    5c:3b:5c:e7:dd:19:ee:1c:56:2f:54:18:f1:df:b4:
                    ac:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E5:7D:77:ED:FF:1E:B9:F6:A9:93:D0:FE:4C:5D:76:82:71:76:BC
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139332e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:17:f6:55:bb:10:b5:ed:5e:d1:01:99:d7:2e:f2:67:b0:7c:
         84:52:a7:80:39:ad:5d:8c:d9:47:43:95:99:62:0b:17:6f:92:
         51:4c:50:2b:38:6d:87:43:7f:9a:5e:22:12:85:a8:4d:b7:02:
         03:b3:cf:29:da:f5:f5:0d:44:4c:0a:93:3a:68:1d:85:a0:24:
         87:01:15:c5:31:5d:e5:5f:5e:ea:7b:b6:46:fb:84:51:b3:d4:
         5a:e6:37:ca:01:4d:5f:c1:de:e9:85:d0:fe:5b:c0:9b:ab:a5:
         8b:0e:a3:74:7b:04:69:9a:9f:0f:cb:8b:b6:94:2c:f3:b0:a3:
         c4:db:bb:49:ba:d1:75:1d:7a:e2:a9:11:92:5d:5d:f3:7b:56:
         ab:10:15:e3:f2:48:92:81:9c:31:fa:61:cb:b1:d2:8c:16:22:
         ca:ac:59:af:ad:de:64:b3:47:a2:40:75:06:07:59:4a:c1:5d:
         d0:05:e3:70:81:12:04:b7:57:2a:f7:4a:40:02:19:78:06:21:
         d9:ce:0e:a7:fc:40:1d:8b:9e:a4:02:da:48:54:db:2b:03:a1:
         64:21:32:e0:bd:e9:e2:95:72:93:b3:f5:75:a2:c3:5f:5e:8e:
         3f:9d:3e:37:6d:0c:f7:04:0a:6b:ed:5e:86:b0:06:92:d6:af:
         a3:45:f4:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org