Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          wLIIiQKFAS5fAF42/WixxqeCdSYCSpkWI0VfcKSxIc8=
Subject key identifier:   D3:56:C8:0D:F8:BF:8F:50:6A:F0:07:FC:DB:DE:EA:46:15:6E:E2:6C
Certificate issuer:       /CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
Certificate serial:       058DC7EF2F32984B318F14DF4901910EAC360A20
Authority key identifier: 4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa
Signing time:             Thu 03 Aug 2023 04:00:25 +0000
ROA not before:           Thu 03 Aug 2023 03:55:25 +0000
ROA not after:            Thu 01 Aug 2024 04:00:25 +0000
asID:                     141126
IP address blocks:        103.158.155.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl
                          rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:8d:c7:ef:2f:32:98:4b:31:8f:14:df:49:01:91:0e:ac:36:0a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EB8521D8427720F50A3F65249F2D26C6CD22F13
        Validity
            Not Before: Aug  3 03:55:25 2023 GMT
            Not After : Aug  1 04:00:25 2024 GMT
        Subject: CN=D356C80DF8BF8F506AF007FCDBDEEA46156EE26C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b4:3a:41:a2:e0:e9:97:18:16:74:0d:4a:ed:
                    67:45:53:91:4d:1e:19:09:41:41:06:ad:50:20:fb:
                    dc:bd:fb:96:7e:b9:b7:b7:d7:ef:5a:3d:38:fd:a1:
                    0f:22:29:72:7f:c0:b1:29:de:a6:a5:7f:4a:f7:8f:
                    81:a6:4d:14:59:f7:3f:3e:11:45:b2:2a:c9:aa:ee:
                    00:50:c5:2c:1d:0f:23:20:62:04:26:da:f5:38:25:
                    42:16:75:2b:cb:7f:9e:48:7c:22:94:22:01:bb:4c:
                    6d:5e:aa:90:86:64:0b:27:7e:09:1f:5c:45:88:bc:
                    a7:b7:d9:1d:9a:05:bd:0a:72:98:03:79:ad:8d:b6:
                    ce:4a:c6:d3:6d:3a:1e:65:c6:9c:56:fe:88:b9:b7:
                    61:09:d5:c2:95:c2:24:d9:7f:9c:70:01:9a:61:f1:
                    6e:d3:70:5b:b6:82:5c:4e:9f:74:24:34:f5:fe:ae:
                    a8:be:19:f4:e6:9a:b7:8e:9d:0b:39:ae:6c:6c:32:
                    d9:44:13:1d:7d:25:bc:01:cc:0b:10:fd:59:f3:d3:
                    0a:a9:d0:35:9c:3a:57:d2:74:c4:95:24:92:fb:33:
                    26:ed:4f:41:41:b4:7c:cf:21:87:ee:02:ef:82:57:
                    66:7b:26:01:8e:b4:4a:71:b3:4e:0d:5f:4d:ac:b1:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:56:C8:0D:F8:BF:8F:50:6A:F0:07:FC:DB:DE:EA:46:15:6E:E2:6C
            X509v3 Authority Key Identifier:
                keyid:4E:B8:52:1D:84:27:72:0F:50:A3:F6:52:49:F2:D2:6C:6C:D2:2F:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/4EB8521D8427720F50A3F65249F2D26C6CD22F13.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4EB8521D8427720F50A3F65249F2D26C6CD22F13.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/533f60e6-afdd-4e10-83b4-e8cbd641c52f/0/3130332e3135382e3135352e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:c3:f2:3f:a4:86:8d:46:7d:4e:80:b7:8e:93:24:fa:00:28:
         e8:18:83:ee:b0:a9:03:4c:d5:4e:0a:64:f2:c3:c1:f3:20:ca:
         e3:e8:2f:8b:f1:ea:13:ce:2b:7a:e5:19:6b:9c:df:28:a6:22:
         06:28:7e:c7:5f:b0:96:38:3b:f2:a0:94:65:f0:c5:1f:15:cb:
         ba:f0:21:ab:24:af:b4:12:8f:81:5a:4c:74:d9:09:c7:d1:59:
         79:15:bd:05:b8:29:ec:a9:82:1b:18:98:92:6b:ca:7b:26:70:
         dd:09:d8:7c:ae:fe:8e:2a:f8:14:cd:d7:8d:10:d3:c5:db:4b:
         c3:dc:82:10:a6:99:85:d8:eb:09:ef:dd:9a:2d:3e:7f:32:27:
         98:15:76:5e:11:00:85:0b:a0:99:a4:d8:c0:e5:83:cf:3c:6a:
         e8:c6:74:30:65:cc:68:dc:02:d2:0a:e9:a5:82:39:55:84:98:
         6f:2a:07:cb:a4:d2:7b:fd:a7:be:f5:b5:7c:5d:ea:d6:51:bd:
         80:2f:95:9b:f4:af:0e:5e:a3:68:11:cc:68:63:af:d6:7f:33:
         63:29:43:dc:0b:7f:72:8b:2b:50:e9:5d:ec:2b:47:4b:78:44:
         61:c3:2c:df:0a:25:cf:94:c0:53:f3:47:7a:78:16:03:4d:61:
         bd:61:e2:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:23:56 2024 by rpki-client on console-ams.rpki-client.org