Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32342d3234203d3e203538383136.roa
File:                     3130332e3234382e35382e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier:          Ed2Sv/dYuW9ofsPZWsop6QIvsVjruGEIOHOEm+g8zvM=
Subject key identifier:   98:8E:4C:C6:D9:7F:11:8C:A3:6F:4E:8C:5F:2F:81:25:8D:54:CC:8C
Certificate issuer:       /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial:       6AD7F568321C659BD85E5DB5EF338D3338B53B5F
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32342d3234203d3e203538383136.roa
Signing time:             Thu 04 Apr 2024 08:00:00 +0000
ROA not before:           Thu 04 Apr 2024 07:55:00 +0000
ROA not after:            Thu 03 Apr 2025 08:00:00 +0000
asID:                     58816
IP address blocks:        103.248.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
                          rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d7:f5:68:32:1c:65:9b:d8:5e:5d:b5:ef:33:8d:33:38:b5:3b:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
        Validity
            Not Before: Apr  4 07:55:00 2024 GMT
            Not After : Apr  3 08:00:00 2025 GMT
        Subject: CN=988E4CC6D97F118CA36F4E8C5F2F81258D54CC8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:17:39:2c:d2:8a:f7:68:5e:74:5f:c0:3a:1e:
                    91:e7:e1:7a:87:bc:a6:53:dc:87:1e:3d:4e:89:59:
                    84:f6:74:e2:f5:0e:11:a3:8b:7b:2f:ad:09:1c:83:
                    bf:24:ad:87:1f:3e:1e:c9:fc:99:93:30:b2:27:78:
                    97:48:9a:ca:93:45:3c:61:75:f3:24:f2:1b:07:20:
                    a0:ce:5d:04:0f:6f:0f:1f:7d:66:ad:ea:7f:d4:1b:
                    95:9f:14:dd:e5:99:46:aa:c5:e2:0f:8e:88:c5:4f:
                    34:9d:ae:81:9d:8f:dd:f6:e3:cf:b8:30:71:5c:4b:
                    3b:97:60:4a:b4:b8:34:3c:87:6b:f3:32:0d:4f:6c:
                    b8:e8:af:7a:e9:12:f5:68:34:58:7c:8c:29:57:45:
                    e8:b5:b4:a6:16:e9:4b:fe:c7:ed:d6:43:23:3a:ef:
                    29:97:4a:ff:60:76:55:80:a8:a6:c9:49:e1:91:66:
                    f8:cd:be:b9:c2:07:67:5f:66:92:bf:9e:76:cb:dd:
                    20:74:38:8a:0d:bd:be:96:5d:69:e2:78:c8:36:70:
                    2c:61:08:35:2b:99:22:b6:19:57:94:fb:f8:95:8b:
                    cc:f8:c8:5f:84:0a:71:82:db:33:e2:61:71:44:1b:
                    b5:79:92:b7:4e:df:07:cd:94:4c:18:ec:88:55:7a:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8E:4C:C6:D9:7F:11:8C:A3:6F:4E:8C:5F:2F:81:25:8D:54:CC:8C
            X509v3 Authority Key Identifier:
                keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3130332e3234382e35382e302f32342d3234203d3e203538383136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.248.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:bf:dc:c5:bc:66:09:55:67:4c:07:d4:1c:14:19:95:bd:68:
         4a:3a:8d:41:88:9a:52:4c:46:e9:ae:01:9d:32:46:05:e1:2b:
         59:26:4d:43:30:5f:1a:5a:ba:19:2b:e8:6c:82:bc:0c:e1:89:
         cc:5e:91:3a:6e:8c:d9:62:d3:23:34:3a:0e:bb:f7:19:9d:88:
         86:e5:02:a5:c7:fe:64:87:f2:65:42:16:36:83:d7:ee:b4:4b:
         ac:dc:e8:e3:c3:f9:6d:75:0e:70:36:24:e2:a5:6b:30:25:88:
         af:e9:43:d1:15:09:0e:1a:7c:d5:f2:ee:a9:78:43:a0:c2:84:
         09:bd:22:0f:d2:f1:21:fc:6e:60:63:b0:ab:cc:ac:15:b9:2f:
         bc:ce:73:e0:09:e1:f8:06:ec:10:97:f7:5a:62:e9:7b:a4:22:
         bc:a5:e9:ee:92:76:61:74:9c:f4:66:bc:f1:e9:f1:d5:3f:72:
         26:8a:82:af:20:94:65:70:1b:41:a8:b6:77:19:cd:0e:aa:4c:
         21:cb:5d:90:26:9f:84:33:a3:80:61:25:56:c8:b4:12:e7:38:
         ed:11:c8:6d:dc:b6:fa:f5:b4:77:62:e5:85:3c:4c:80:fd:ed:
         1a:34:fb:f7:19:49:25:f1:34:e3:04:52:ea:e5:65:4a:97:bf:
         e1:2d:4e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org