Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa
File:                     3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa (raw, json)
Hash identifier:          eOEer/2EILqe+CeV9fn8fCkTmQlvUdRdmkanObFI4kY=
Subject key identifier:   3E:95:15:EE:1D:1D:71:22:3D:4F:DF:F5:5E:A0:94:65:1A:7A:56:8A
Certificate issuer:       /CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
Certificate serial:       58BD0A14985BFE98A2E4F3C796A79658530862EA
Authority key identifier: B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa
Signing time:             Fri 26 Apr 2024 10:02:06 +0000
ROA not before:           Fri 26 Apr 2024 09:57:06 +0000
ROA not after:            Fri 25 Apr 2025 10:02:06 +0000
asID:                     141903
IP address blocks:        103.164.56.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl
                          rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:23:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bd:0a:14:98:5b:fe:98:a2:e4:f3:c7:96:a7:96:58:53:08:62:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0B4D0A5FD4E58D80534977B027C8BC68222070F
        Validity
            Not Before: Apr 26 09:57:06 2024 GMT
            Not After : Apr 25 10:02:06 2025 GMT
        Subject: CN=3E9515EE1D1D71223D4FDFF55EA094651A7A568A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c7:ad:ed:53:97:70:07:21:42:72:ff:0f:ef:
                    dc:04:06:31:77:2e:fb:ed:90:b6:b1:36:1e:a7:ff:
                    12:0c:56:9b:ca:cc:50:6d:e3:0b:07:f5:6c:97:e1:
                    52:c7:0a:19:ed:f2:a5:41:56:37:1f:45:47:0c:36:
                    d5:8f:c7:2a:4c:da:26:d4:70:b5:cd:be:87:34:80:
                    ee:d0:4d:67:02:2d:70:45:7c:ed:fe:d9:7f:f3:ba:
                    66:d1:f3:58:bf:60:c2:f0:8a:e7:eb:c5:cb:0c:93:
                    68:43:a5:71:95:37:ae:6a:ce:04:f4:af:34:5f:c0:
                    41:d4:f1:9a:43:8f:f3:52:ed:f4:63:fc:ce:5c:d9:
                    43:f0:02:ea:cc:4c:6e:2c:17:79:ab:9c:8d:02:56:
                    e7:19:1c:37:4f:3d:fa:0b:25:68:c7:da:25:13:3b:
                    c1:51:94:63:b6:4a:b3:07:90:ce:7b:e4:69:42:37:
                    26:6e:21:32:31:c2:0b:65:8b:84:bc:e1:bf:52:ab:
                    fc:93:d3:73:cf:63:ef:e6:da:e9:23:5f:2c:d6:35:
                    f8:21:e9:c9:b5:57:eb:d8:1e:9f:cb:6a:f7:ed:44:
                    c7:52:d6:94:27:5d:42:d7:6c:42:c3:d0:0b:1a:16:
                    7b:e2:6d:6f:0b:25:08:ca:df:45:9b:ed:bc:b3:92:
                    8e:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:95:15:EE:1D:1D:71:22:3D:4F:DF:F5:5E:A0:94:65:1A:7A:56:8A
            X509v3 Authority Key Identifier:
                keyid:B0:B4:D0:A5:FD:4E:58:D8:05:34:97:7B:02:7C:8B:C6:82:22:07:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/B0B4D0A5FD4E58D80534977B027C8BC68222070F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0B4D0A5FD4E58D80534977B027C8BC68222070F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57cd511f-afff-4fec-8724-d4119f891df2/0/3130332e3136342e35362e302f32332d3233203d3e20313431393033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:85:58:5b:06:28:63:79:00:a2:c8:ab:0c:5b:2d:33:9c:c9:
         b0:2b:a3:56:d2:35:d8:d6:b4:98:b0:3c:75:ac:74:b3:8d:f8:
         c0:3f:bb:5b:67:8b:03:6a:c7:62:c2:a7:88:69:5e:e7:12:27:
         3d:cd:37:d0:7e:21:c3:0e:c8:1a:be:a3:e3:c7:6c:d5:77:56:
         4a:3b:f4:98:d9:be:c0:d6:c2:13:05:27:63:be:af:fd:c3:23:
         74:78:24:6d:2d:d6:08:4f:ab:e2:b8:dd:16:74:73:f2:85:ad:
         1d:96:aa:74:0c:6b:83:75:e2:e8:43:c1:99:5f:59:76:b5:f2:
         1a:d9:76:f6:69:eb:a4:fc:7d:54:fb:b7:a0:61:7a:4f:20:98:
         f1:45:07:5d:a0:47:48:5b:18:18:9f:e8:52:3b:e5:c5:cf:3b:
         e9:bc:61:2b:d6:e6:01:6f:db:0b:36:38:91:a3:54:f8:50:e4:
         67:19:01:71:82:9c:ad:19:5f:c8:b2:62:94:1d:a3:c5:36:88:
         6f:f4:51:dd:a0:53:b7:60:84:2c:5f:4c:92:dc:6d:50:bf:ac:
         e2:11:ce:26:f4:6f:6b:e6:43:51:d0:76:9e:8e:46:00:5e:39:
         e8:c3:fe:a1:78:a7:91:c3:f8:ca:93:20:26:11:32:8d:e2:69:
         e4:82:90:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org