Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa
File:                     3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          DhdMnK8ZPIGh8gCBNwWNUMjsW619bjysZbnIeJpaORM=
Subject key identifier:   46:1E:DD:A5:0B:60:5A:2C:7F:52:59:04:24:E5:1E:3A:3E:21:29:23
Certificate issuer:       /CN=58D7A2E054D4F6B835578031386896062B0B0CED
Certificate serial:       3A7E8AD68ECF9BAD2FFD435E949293BCAA7D7B75
Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 Sep 2023 09:01:47 +0000
ROA not before:           Sun 03 Sep 2023 08:56:47 +0000
ROA not after:            Sun 01 Sep 2024 09:01:47 +0000
asID:                     135636
IP address blocks:        103.103.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl
                          rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:7e:8a:d6:8e:cf:9b:ad:2f:fd:43:5e:94:92:93:bc:aa:7d:7b:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED
        Validity
            Not Before: Sep  3 08:56:47 2023 GMT
            Not After : Sep  1 09:01:47 2024 GMT
        Subject: CN=461EDDA50B605A2C7F52590424E51E3A3E212923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:d9:01:03:c8:ac:78:58:f1:bb:10:74:56:06:
                    9b:7f:93:70:35:f4:56:68:23:72:e7:e3:3b:aa:b0:
                    69:95:ea:46:6b:71:4b:56:9f:13:3b:bf:62:85:1d:
                    17:7e:11:14:8e:1d:ba:4b:4d:df:31:ea:c1:1b:18:
                    b5:52:75:93:6a:a1:d7:c9:b7:c2:60:60:ef:93:c0:
                    5d:3b:03:51:d9:56:8c:7c:ca:b7:f6:90:39:2e:11:
                    93:4d:8e:ed:9c:4e:d4:9f:73:8b:48:77:a5:63:cb:
                    94:ff:a1:fb:10:3b:5b:cb:37:4c:f3:4a:58:a1:8f:
                    e0:c2:53:a7:4a:5c:46:47:3a:17:57:0b:4f:fd:0d:
                    96:60:e7:d5:6b:f2:0b:10:5c:12:cb:f4:6a:ad:56:
                    5a:52:0d:5f:1c:76:71:a6:32:47:4f:99:33:27:82:
                    13:c2:a1:da:3f:80:94:b1:da:ba:24:f1:8c:d8:64:
                    42:12:61:c7:1e:f3:01:f6:c5:bf:72:80:3a:4c:a2:
                    0d:d1:a5:9b:b0:b8:5b:ed:2d:24:7d:70:cf:b5:5e:
                    db:bb:99:18:b0:07:56:e9:d3:ef:fa:56:8d:03:22:
                    38:94:2e:8e:f1:4a:f6:b9:00:96:c8:e6:fa:89:01:
                    7c:01:2d:b1:4c:d8:da:ef:ad:c4:bc:0b:d4:08:e5:
                    90:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:DD:A5:0B:60:5A:2C:7F:52:59:04:24:E5:1E:3A:3E:21:29:23
            X509v3 Authority Key Identifier:
                keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e3130332e3139332e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b7:8c:0a:32:e9:46:a8:48:e0:4e:79:d3:e9:31:67:b7:8c:1e:
         b6:a2:fc:b3:22:f5:21:b7:3f:57:40:d9:80:ae:64:71:36:90:
         86:97:f7:fd:41:31:e2:02:17:56:59:fc:24:a7:7c:bd:bc:fb:
         81:21:03:35:1d:33:22:2b:27:59:fd:df:aa:08:83:86:19:26:
         f0:75:f2:c3:40:57:d5:b7:97:16:20:b1:1b:7b:22:07:b4:8a:
         94:54:fc:88:4c:87:ec:b0:bf:9c:4f:68:4b:31:f6:03:1e:1b:
         08:4e:bc:42:3a:82:ec:6b:f6:01:f3:07:09:a9:0b:bc:b9:94:
         cc:bf:76:db:37:f3:93:78:6e:34:7d:4c:c9:1d:ed:59:8e:6e:
         24:31:c1:53:d8:7a:07:b2:04:5c:ed:d4:8d:0f:77:68:b8:89:
         62:b8:3c:0d:e8:5c:e3:6e:c1:ca:49:a7:56:4f:68:ea:13:3b:
         b5:29:7c:60:89:37:21:a8:5b:2a:3a:50:e6:bc:3f:73:ff:67:
         74:f2:ab:60:18:d1:cf:27:f5:0f:35:44:ad:2f:ea:ee:4a:4c:
         cf:29:06:d0:3b:46:03:71:a3:23:50:95:e0:ad:21:a7:f2:53:
         00:08:54:df:c6:38:1e:0b:70:02:52:b0:dc:52:54:67:57:fc:
         d9:79:a8:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:28 2024 by rpki-client on console-fra.rpki-client.org