Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa
File:                     3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa (raw, json)
Hash identifier:          GywBRwsAyG5sIR2Rb5e5puua5XqpZlM9HNydCiJ79z4=
Subject key identifier:   28:5B:53:03:DB:39:01:53:DB:4A:A7:A5:2C:98:8F:63:84:50:43:3C
Certificate issuer:       /CN=58D7A2E054D4F6B835578031386896062B0B0CED
Certificate serial:       3E7BB25FD667CACC9FECACBBDE46066B26887B36
Authority key identifier: 58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa
Signing time:             Sun 03 Sep 2023 09:01:47 +0000
ROA not before:           Sun 03 Sep 2023 08:56:47 +0000
ROA not after:            Sun 01 Sep 2024 09:01:47 +0000
asID:                     135636
IP address blocks:        103.98.121.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl
                          rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 03:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:7b:b2:5f:d6:67:ca:cc:9f:ec:ac:bb:de:46:06:6b:26:88:7b:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58D7A2E054D4F6B835578031386896062B0B0CED
        Validity
            Not Before: Sep  3 08:56:47 2023 GMT
            Not After : Sep  1 09:01:47 2024 GMT
        Subject: CN=285B5303DB390153DB4AA7A52C988F638450433C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:7e:70:3a:9f:a0:1a:1e:ac:d9:cb:93:52:20:
                    54:24:d9:31:c5:2e:62:27:b6:8c:e3:94:49:a8:a6:
                    c6:f6:98:1e:1c:4d:56:c5:cd:e6:bb:c5:62:37:75:
                    b6:2b:27:05:fe:f4:80:1a:08:d7:26:5f:97:54:09:
                    36:2a:b4:93:d2:63:07:df:63:55:4e:2a:83:ce:7c:
                    c3:8a:69:d0:dd:ee:b5:d8:ce:7a:72:20:44:51:d5:
                    5b:09:82:92:d6:aa:8c:2c:1e:5d:01:e0:c8:9a:09:
                    d8:96:0b:a7:79:e5:dc:c4:d6:3b:00:19:c7:12:cd:
                    ef:c3:c5:72:2b:be:8b:9c:b9:0e:5f:88:02:24:2f:
                    96:f1:bd:f8:e2:65:39:b5:af:e3:ea:44:4b:33:11:
                    98:8c:ff:34:6c:31:71:d0:59:11:22:b0:06:c2:7e:
                    96:52:49:13:36:a2:0f:25:cc:8f:62:51:ba:76:55:
                    70:eb:46:78:9c:ca:95:e2:0c:8a:97:91:ef:8d:ad:
                    23:d7:8c:d5:2c:fc:8a:c5:e1:f9:47:25:07:af:77:
                    c6:9c:80:e1:ea:cb:62:7e:20:8e:bb:e1:a5:b7:08:
                    62:d5:ac:01:ce:f0:57:f1:28:9a:fd:08:f9:04:6c:
                    16:72:dd:10:c9:c5:46:0c:f6:60:38:63:87:0f:81:
                    cc:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:5B:53:03:DB:39:01:53:DB:4A:A7:A5:2C:98:8F:63:84:50:43:3C
            X509v3 Authority Key Identifier:
                keyid:58:D7:A2:E0:54:D4:F6:B8:35:57:80:31:38:68:96:06:2B:0B:0C:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/58D7A2E054D4F6B835578031386896062B0B0CED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/58D7A2E054D4F6B835578031386896062B0B0CED.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ebbadb3-9ac8-46df-ab91-bf39dfee1bd0/0/3130332e39382e3132312e302f32342d3234203d3e20313335363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.98.121.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:b2:a7:dc:4c:3e:8f:45:48:23:b2:b8:43:4f:de:de:7c:6b:
         dc:f3:fb:c8:f6:c6:99:d8:b5:b3:a8:a4:5d:b2:fd:a4:db:b8:
         10:4c:47:f8:50:0a:e3:36:76:61:c1:e0:1a:9d:f2:88:d4:49:
         d9:d0:bf:a8:af:bb:7d:92:9d:67:52:8e:f1:e7:19:2e:b7:20:
         70:f9:2a:49:27:e1:34:f1:98:0d:13:ac:74:a4:7f:ba:ba:b2:
         d8:0c:ce:c8:fb:c6:cb:c0:f3:45:5c:13:0d:2c:eb:ac:83:be:
         9b:df:48:93:ff:9e:e0:98:ce:ed:e3:ed:4a:49:a8:b8:97:7c:
         4e:3d:84:9b:87:a8:66:bd:ca:9f:bc:9d:bc:52:20:69:e6:73:
         22:6e:d6:b1:7f:ea:ba:2c:1b:3c:2c:ef:ae:46:27:a2:09:54:
         0a:af:a8:dd:f8:02:eb:00:f1:f2:45:36:ae:d7:4a:4e:d0:af:
         f2:ef:c8:db:7d:e2:4a:e6:ad:b1:99:48:92:72:a8:3e:ad:90:
         31:26:2e:ff:4e:fe:21:46:1f:40:b7:0c:a1:5e:8d:94:f6:96:
         e4:80:54:58:15:65:a4:a8:fe:9a:d4:af:eb:70:f1:cf:70:7d:
         ad:f6:e7:21:4b:c4:4b:6b:c1:4c:28:62:82:07:6a:cd:f9:0c:
         81:fd:be:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:06:51 2024 by rpki-client on console-ams.rpki-client.org