Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
File:                     3130332e342e37362e302f32332d3234203d3e20313530323136.roa (raw, json)
Hash identifier:          rm08D0NMv1yWU3n7Y2iTe7wwKtWOGymMN4hLCqSwd2g=
Subject key identifier:   16:14:11:F9:E2:EA:9C:3F:DD:A0:B2:B9:F9:62:A5:8B:4D:79:69:80
Certificate issuer:       /CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
Certificate serial:       25C21194031120C674CA1E383A756BD0BC31A761
Authority key identifier: 3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa
Signing time:             Sat 18 Nov 2023 10:00:01 +0000
ROA not before:           Sat 18 Nov 2023 09:55:01 +0000
ROA not after:            Sat 16 Nov 2024 10:00:01 +0000
asID:                     150216
IP address blocks:        103.4.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl
                          rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 19:25:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:c2:11:94:03:11:20:c6:74:ca:1e:38:3a:75:6b:d0:bc:31:a7:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FBFE92D5B220E9B36B37BCD3091D754EA8156D3
        Validity
            Not Before: Nov 18 09:55:01 2023 GMT
            Not After : Nov 16 10:00:01 2024 GMT
        Subject: CN=161411F9E2EA9C3FDDA0B2B9F962A58B4D796980
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c4:a6:17:7b:13:94:b0:bd:92:61:cb:bf:9d:
                    6f:d3:5f:68:e5:c7:60:75:19:6d:0e:cc:17:f4:7c:
                    54:a3:61:ad:79:93:b4:e1:b0:be:fc:8c:8e:f1:41:
                    06:7e:dc:e8:b4:4d:b4:33:5c:06:c1:e7:83:27:7b:
                    4f:b4:13:b4:7a:88:cb:4e:b0:1d:52:48:64:9d:cf:
                    71:20:99:10:58:52:f8:60:8b:8b:50:5d:e1:de:2c:
                    59:d7:4a:39:d2:6b:4d:c0:a1:a4:99:a3:f0:3e:ea:
                    cb:67:c7:ad:46:17:9b:c7:bf:48:d9:cc:53:bb:de:
                    1b:39:d9:2b:f4:e8:57:ab:9d:6d:77:a5:e2:0e:f5:
                    8c:9f:f2:82:1a:6e:89:a4:76:ca:96:65:16:a3:68:
                    b4:6e:23:ec:55:fb:15:59:ba:05:fe:f5:5f:79:d8:
                    b6:21:6b:ee:63:9a:3d:23:4b:01:17:03:0a:a3:fe:
                    80:ae:28:79:35:34:60:9e:21:91:4c:dd:54:ce:ea:
                    73:95:bd:8b:84:b4:d5:e6:d0:82:67:4e:e9:46:cb:
                    ed:bb:55:e2:65:75:e8:06:26:3c:62:58:a6:e0:75:
                    f3:44:19:3b:4a:5b:43:0c:8a:7c:3c:71:41:12:94:
                    c3:63:fd:df:db:84:7f:ea:eb:e1:82:ec:c9:0b:d8:
                    91:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:14:11:F9:E2:EA:9C:3F:DD:A0:B2:B9:F9:62:A5:8B:4D:79:69:80
            X509v3 Authority Key Identifier:
                keyid:3F:BF:E9:2D:5B:22:0E:9B:36:B3:7B:CD:30:91:D7:54:EA:81:56:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FBFE92D5B220E9B36B37BCD3091D754EA8156D3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/729401d0-26a7-4787-b68a-182b152a9513/0/3130332e342e37362e302f32332d3234203d3e20313530323136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1c:14:43:f5:90:df:6b:bb:81:cf:b4:98:a1:28:f7:2a:3b:0f:
         c6:05:81:ec:b2:46:f3:31:5a:6c:04:87:ad:4e:57:d9:53:41:
         69:6a:3b:bf:e3:e5:7b:04:15:d6:0b:df:04:90:09:2c:10:c0:
         29:89:b4:b8:db:0c:c0:fa:06:9b:23:e9:fd:0b:ee:1b:45:96:
         52:ec:14:a6:8e:6d:da:ce:54:ea:20:08:43:5e:14:bb:df:3b:
         aa:c1:74:57:92:14:1a:a9:b9:e3:d3:59:bd:b1:86:58:08:12:
         78:f5:9d:a2:78:fb:dd:99:37:9d:8e:bd:cc:d1:5b:de:f6:77:
         4f:4d:53:85:02:9e:ec:24:45:78:95:81:07:7d:9a:a6:9c:bc:
         09:34:97:08:df:03:79:ac:81:e7:7e:aa:ee:7f:f7:b3:6e:85:
         f5:17:98:73:92:fd:fb:b8:73:6b:55:84:6d:02:3d:cb:71:a9:
         d6:72:83:57:b2:e6:47:7e:82:5c:e4:e1:83:73:71:ee:66:fa:
         92:fc:e9:18:cb:b4:64:75:b1:75:81:17:02:10:f9:f2:e5:2d:
         61:30:66:0b:36:66:30:7b:87:f7:20:b8:6b:36:91:d4:ad:23:
         e2:c7:4e:cb:a6:71:2d:63:2d:aa:44:80:ea:dc:82:79:35:62:
         4f:7d:49:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 19:47:00 2024 by rpki-client on console-fra.rpki-client.org