Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
File:                     3136332e35332e3139342e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          9H/O6RXGkUL1F2Gd6TXUsfG8JVvcw4hqIZRoFPabOsU=
Subject key identifier:   5B:81:79:F2:F8:42:69:A5:BD:E3:73:2A:A7:A6:77:E0:5D:8C:C8:B9
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       532CD27044E5D9D5061C16E5B9CC0B9ED31D34D9
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 01 May 2024 17:00:02 +0000
ROA not before:           Wed 01 May 2024 16:55:02 +0000
ROA not after:            Wed 30 Apr 2025 17:00:02 +0000
asID:                     58381
IP address blocks:        163.53.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2c:d2:70:44:e5:d9:d5:06:1c:16:e5:b9:cc:0b:9e:d3:1d:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May  1 16:55:02 2024 GMT
            Not After : Apr 30 17:00:02 2025 GMT
        Subject: CN=5B8179F2F84269A5BDE3732AA7A677E05D8CC8B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a9:88:56:19:04:07:53:77:8a:d7:62:e5:45:
                    cb:f9:55:5e:30:3f:1f:fe:5d:03:2e:eb:19:60:2d:
                    08:92:5d:43:80:00:a4:82:7e:e3:f3:ad:1f:fd:dc:
                    67:77:c4:83:75:32:10:fb:df:2a:be:23:db:92:2d:
                    85:5f:f2:0b:00:06:40:fe:40:e7:88:38:24:f8:97:
                    c3:92:c4:a8:f3:91:b4:c0:f7:b9:be:33:d7:1d:74:
                    ea:df:87:b7:46:5c:62:16:9f:03:da:bf:5f:58:ac:
                    8f:5a:5b:48:e6:aa:b4:30:be:d8:53:a9:71:87:d2:
                    d4:98:c3:c6:89:f7:fc:f4:d8:5b:13:81:01:15:f3:
                    59:ee:12:45:c5:3a:d2:c9:05:2a:df:11:e4:69:18:
                    2b:56:bb:09:da:92:47:bc:12:fc:48:21:6a:b7:72:
                    75:b7:0f:cb:a2:4f:e2:11:fb:24:07:d3:77:cd:d3:
                    4f:27:43:07:2e:a6:df:2f:bd:e7:27:c7:dc:5b:f9:
                    1b:f0:03:a6:e8:d7:39:e6:32:fc:9e:38:c7:da:90:
                    89:99:c4:4f:41:43:38:91:d9:10:7b:36:70:ec:88:
                    51:8d:b5:e6:c7:cf:fc:66:22:27:2c:cb:db:e8:e4:
                    7f:7c:fe:69:e7:ce:01:22:66:88:cc:df:67:8d:74:
                    55:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:81:79:F2:F8:42:69:A5:BD:E3:73:2A:A7:A6:77:E0:5D:8C:C8:B9
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3136332e35332e3139342e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.53.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:64:91:dd:75:4e:d4:5c:17:d3:30:39:73:33:08:71:91:
         35:85:df:bb:c7:b5:79:22:95:90:82:3a:b5:c1:25:05:ad:61:
         92:2f:b6:e1:8d:91:ad:7f:5a:3b:5c:fa:94:f4:9d:a8:95:67:
         c3:1f:d6:9b:3d:aa:37:30:16:5d:90:f0:de:0b:a9:0f:54:e1:
         b2:3e:f4:9b:4f:74:45:ab:63:22:95:55:99:a8:4c:fa:21:6d:
         5d:53:a5:ed:8c:b9:da:11:fa:1f:21:2c:21:74:28:8a:1a:d1:
         9d:34:2d:f1:56:80:65:ff:e0:8e:8f:91:c6:7d:2f:c1:04:33:
         d1:37:92:dd:4b:3f:0c:38:f7:32:67:d8:fd:7f:bf:00:72:f6:
         8a:00:51:fc:31:5d:c7:7a:81:bf:4c:17:cc:88:bc:f6:a1:77:
         b7:de:94:d4:48:34:68:39:a0:1c:0b:83:31:b0:18:fc:45:59:
         ee:77:01:62:a9:28:45:f2:c0:61:99:1f:b4:25:2c:6f:1e:ea:
         3e:ee:55:90:f6:c2:d1:fc:df:32:7a:94:d0:cc:52:6b:44:44:
         69:01:08:72:2e:74:d0:6c:5f:63:dc:77:6c:a2:be:fd:95:8b:
         d4:01:2b:7e:99:3f:0c:88:14:ab:11:bb:53:c6:9b:a8:2f:86:
         e8:ea:37:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org