Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa
File:                     3130332e3135382e35382e302f32332d3233203d3e203137393935.roa (raw, json)
Hash identifier:          NY7ZKpTS8x6iG7pDiKwo2lthlZvBEnvtv5ofUcq2cR4=
Subject key identifier:   9E:18:8B:95:F1:BC:09:66:54:4F:69:99:75:45:FC:8B:ED:B1:97:F3
Certificate issuer:       /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial:       4B4C1A16F40473D1893E7C5E438B7330785AB309
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa
Signing time:             Thu 09 May 2024 07:00:00 +0000
ROA not before:           Thu 09 May 2024 06:55:00 +0000
ROA not after:            Thu 08 May 2025 07:00:00 +0000
asID:                     17995
IP address blocks:        103.158.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
                          rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:4c:1a:16:f4:04:73:d1:89:3e:7c:5e:43:8b:73:30:78:5a:b3:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
        Validity
            Not Before: May  9 06:55:00 2024 GMT
            Not After : May  8 07:00:00 2025 GMT
        Subject: CN=9E188B95F1BC0966544F69997545FC8BEDB197F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:54:c6:bd:dd:60:14:56:56:ba:cd:ed:8d:9a:
                    e5:e3:2a:54:10:da:94:06:7c:15:1b:81:3e:a8:c8:
                    7a:3d:87:9f:b5:0a:01:92:e6:10:75:45:b6:b0:16:
                    c0:0a:d9:19:29:c3:79:49:0c:17:67:c0:48:75:34:
                    f8:a9:2c:39:a0:e7:0f:82:dc:5b:a0:a5:32:f9:8f:
                    b8:17:aa:64:19:6c:08:41:bb:9d:ad:dc:a3:18:21:
                    87:19:9b:6e:b3:7d:76:03:5f:04:fc:25:14:97:b6:
                    d8:48:c3:45:58:e8:49:8f:80:ee:f8:13:19:fe:3a:
                    68:6b:c0:94:d1:ee:2e:92:ec:38:3e:0b:4b:a1:5a:
                    05:0b:15:15:95:34:71:fb:ed:7e:05:59:56:4d:30:
                    1e:e6:11:cb:df:e9:86:51:9c:83:fe:24:f5:90:ce:
                    a2:0f:d0:36:94:da:23:cd:0d:33:b5:92:9d:6f:22:
                    ad:da:a0:08:89:31:57:76:25:88:16:67:78:7a:a6:
                    d8:d9:59:c4:de:4f:02:c6:aa:78:eb:65:0e:82:ff:
                    07:c4:2c:11:7a:38:c5:a4:18:56:4d:83:d9:74:a0:
                    61:23:f9:92:31:bb:03:d1:6f:35:be:f6:a1:c4:e8:
                    e0:e4:74:a9:85:0b:0e:d5:b3:2e:ca:0a:38:57:3e:
                    91:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:18:8B:95:F1:BC:09:66:54:4F:69:99:75:45:FC:8B:ED:B1:97:F3
            X509v3 Authority Key Identifier:
                keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35382e302f32332d3233203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:5f:79:c1:d4:2d:e4:70:dc:ff:3e:be:39:ba:5c:17:25:c1:
         f5:6c:e4:9d:fd:37:f3:e0:78:36:82:35:cc:50:dd:ab:05:0e:
         cc:43:85:b3:a9:30:2a:b0:7d:ce:c6:d0:39:b2:0a:af:ad:5b:
         c6:6f:f2:e9:d6:84:e8:64:b9:c0:43:f1:fc:47:fe:87:de:51:
         1e:02:50:08:f8:b7:39:c0:cd:12:43:9c:53:39:54:88:53:9f:
         99:07:79:d0:0e:d2:5e:77:6b:53:ae:35:5b:e1:0e:45:1b:ae:
         b1:bc:d3:6b:f9:4a:47:a1:88:74:b6:a0:d5:3e:6c:cb:cd:1b:
         93:82:c2:14:31:72:29:46:c0:3e:5b:16:c1:c6:23:57:8f:ce:
         cf:13:81:21:78:9d:90:b7:b8:c2:9e:a0:2f:0d:ab:cc:34:ae:
         a2:36:65:5c:bc:ce:f4:17:c6:f8:18:14:99:2f:ac:d5:dd:f8:
         de:fe:61:db:53:7e:7c:b4:0c:b6:cb:73:99:d6:92:70:eb:f8:
         75:b7:6a:03:c8:22:33:60:59:84:76:4d:f3:17:4a:bf:b7:3c:
         b3:87:eb:9d:3d:84:a0:6a:eb:f5:bb:fe:63:35:71:bf:5f:78:
         6a:42:26:65:4c:15:c8:ce:d4:4d:59:ed:2b:26:3d:a2:02:32:
         c7:af:42:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:28 2024 by rpki-client on console-ams.rpki-client.org