Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          rhsf+OzVE/KB98ER6/4XRBeX3Tu09hI0tj87TnGoZKk=
Subject key identifier:   69:35:2D:84:01:D3:E4:75:40:55:AA:AE:84:2E:9D:C5:11:38:A6:50
Certificate issuer:       /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial:       58276E8E6466CB7668E59C0F1DFD4A3DB5BFBBEC
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 18 Feb 2024 16:00:00 +0000
ROA not before:           Sun 18 Feb 2024 15:55:00 +0000
ROA not after:            Sun 16 Feb 2025 16:00:00 +0000
asID:                     139952
IP address blocks:        103.162.221.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
                          rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:27:6e:8e:64:66:cb:76:68:e5:9c:0f:1d:fd:4a:3d:b5:bf:bb:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
        Validity
            Not Before: Feb 18 15:55:00 2024 GMT
            Not After : Feb 16 16:00:00 2025 GMT
        Subject: CN=69352D8401D3E4754055AAAE842E9DC51138A650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:f4:2d:42:e7:0d:6f:e4:47:5f:1d:62:2a:25:
                    b6:28:cd:41:8c:60:04:fa:64:2d:89:aa:1c:e0:b9:
                    30:ad:48:03:a7:15:59:ff:c9:d6:41:79:af:ae:e3:
                    2a:77:62:43:07:ed:40:f9:e1:e3:ca:b3:f2:9c:e4:
                    f3:2e:18:1d:e4:4b:5f:88:7a:51:b2:9a:7c:12:42:
                    b7:a6:b9:e3:5b:c5:38:e2:93:b7:77:3a:c7:22:c9:
                    f1:c2:b0:00:49:d7:3c:48:6a:45:f0:b4:31:1f:06:
                    88:67:58:3c:8a:1d:ed:fb:bf:6c:c3:af:45:8f:f2:
                    3d:48:f8:90:08:21:5f:62:7f:0c:3d:d4:8f:53:7c:
                    0c:21:47:65:7c:fb:a9:56:5a:5d:b0:f2:6a:2f:69:
                    5b:bc:dc:07:41:d5:0d:30:fb:f6:cc:16:76:fe:25:
                    2e:b5:f1:fa:e7:04:8a:3c:6f:13:b7:36:b6:c4:9a:
                    7e:1f:c2:62:79:6b:e9:d9:b1:38:1d:3f:42:cc:6c:
                    f9:bc:17:30:e7:8e:52:0b:c9:fe:87:f9:3e:52:c3:
                    27:e7:fb:5f:ff:2d:c6:c1:c9:8a:80:3d:a1:fd:da:
                    3f:3a:b1:43:96:0c:41:a1:02:75:db:cd:eb:d7:30:
                    90:4e:4d:f3:ce:14:c9:79:2d:2a:d1:9d:cb:24:fe:
                    ac:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:35:2D:84:01:D3:E4:75:40:55:AA:AE:84:2E:9D:C5:11:38:A6:50
            X509v3 Authority Key Identifier:
                keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232312e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:4c:e0:72:52:43:fa:91:41:cb:54:38:0d:a4:83:35:a6:f7:
         a9:ac:ac:18:61:85:90:80:4c:bc:6c:e8:b7:cc:e4:b1:1b:5e:
         08:e7:29:9b:02:85:3f:13:e3:1f:61:09:0c:9d:bf:c0:66:78:
         97:82:2e:ce:97:7c:b3:77:1d:5a:6e:4a:9a:1d:7f:09:4b:2d:
         26:a9:76:29:fa:bb:de:d5:1a:25:a7:f7:45:be:d9:91:88:69:
         3b:b0:99:53:81:7a:f7:62:e9:6a:4d:60:4f:a2:aa:51:b2:ac:
         9b:ca:6d:10:73:df:33:b8:9d:22:d6:88:c5:cd:c6:b1:3e:9f:
         85:42:c1:71:73:a0:bb:5e:a6:22:9c:8a:af:92:6d:17:6b:66:
         1c:2d:06:fa:b8:39:60:00:c8:f4:73:1a:63:0a:50:d8:33:03:
         f9:68:e1:cd:05:08:b8:7a:79:01:0e:05:48:cb:17:9c:ac:69:
         f2:9e:74:fd:d1:e6:d0:a1:8e:8b:b1:ff:83:b4:24:2a:69:33:
         43:15:b3:90:22:b4:78:61:5d:c3:c2:ef:81:c9:af:9f:60:69:
         2f:3d:15:7e:47:0d:fd:d2:fa:17:e3:78:e1:2d:32:4b:eb:79:
         6f:1d:4e:8f:27:76:4c:bf:d7:59:38:6f:44:7b:78:5f:91:37:
         fc:be:e5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org