Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
File:                     3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa (raw, json)
Hash identifier:          VyhY07ev3HZs4lJdDII/xjr5IV8edk9Khb+3ZQ71QT4=
Subject key identifier:   A3:63:D1:BD:E0:39:C0:F2:F0:F5:10:08:3C:0D:D9:84:F2:CD:08:36
Certificate issuer:       /CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
Certificate serial:       48AFF586411965EE2B1389AE06759DD6534AE6E1
Authority key identifier: 0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa
Signing time:             Fri 02 Aug 2024 11:02:27 +0000
ROA not before:           Fri 02 Aug 2024 10:57:27 +0000
ROA not after:            Fri 01 Aug 2025 11:02:27 +0000
asID:                     141107
IP address blocks:        103.216.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl
                          rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:37:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:af:f5:86:41:19:65:ee:2b:13:89:ae:06:75:9d:d6:53:4a:e6:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FA41B65D1881666013C9683E40575E68E5DC0A5
        Validity
            Not Before: Aug  2 10:57:27 2024 GMT
            Not After : Aug  1 11:02:27 2025 GMT
        Subject: CN=A363D1BDE039C0F2F0F510083C0DD984F2CD0836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:fc:3d:e3:47:09:61:c4:e3:c5:26:35:46:75:
                    ad:38:2d:7c:50:7e:f6:01:d5:aa:3e:1f:54:7f:53:
                    d9:93:41:af:be:c6:65:40:66:79:92:bc:b2:53:4b:
                    b2:a8:da:02:67:c1:84:8d:ba:e3:d1:16:bc:40:85:
                    39:53:f8:c4:5e:89:2f:71:94:20:c1:e5:53:0b:0e:
                    99:88:10:d5:b4:99:1d:d8:38:fc:85:0b:e3:eb:ad:
                    15:98:3b:eb:85:fd:80:37:4e:94:2e:f8:9e:9f:32:
                    58:f7:d7:53:61:53:3b:dd:2f:77:bb:8e:b2:05:db:
                    5e:ae:04:66:10:fe:00:01:e1:24:9e:57:66:40:2b:
                    1a:bc:59:e1:de:ec:f0:37:a5:8a:d3:9d:fc:32:74:
                    c6:d9:41:14:b2:53:86:57:90:ec:ec:3d:f8:ac:7c:
                    68:a8:7f:51:a3:ac:28:9f:34:e4:bc:d5:19:32:9a:
                    ac:17:d3:f9:a7:61:75:3d:16:80:d8:02:35:21:2c:
                    48:0d:9d:56:a9:73:0a:f0:8d:d8:13:ab:a0:f8:57:
                    d5:fe:bd:00:9c:47:a4:8e:d6:65:6f:62:2e:a6:b7:
                    3f:5b:e0:63:bd:10:e4:6e:f8:e7:fd:5e:f6:0d:ca:
                    1c:2c:41:f9:c3:05:75:87:ec:3c:c5:fa:72:96:fe:
                    90:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:D1:BD:E0:39:C0:F2:F0:F5:10:08:3C:0D:D9:84:F2:CD:08:36
            X509v3 Authority Key Identifier:
                keyid:0F:A4:1B:65:D1:88:16:66:01:3C:96:83:E4:05:75:E6:8E:5D:C0:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/0FA41B65D1881666013C9683E40575E68E5DC0A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FA41B65D1881666013C9683E40575E68E5DC0A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7994d375-fc7d-4dc7-a1f1-e0b3a59fdf78/0/3130332e3231362e3138382e302f32342d3234203d3e20313431313037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.216.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:fa:b5:5e:78:e4:d8:4d:b1:f1:19:8b:34:6d:79:f5:2a:
         18:bb:4d:ee:fc:4a:9b:e5:4c:3d:bf:b4:35:b9:51:ef:df:bd:
         b3:d1:24:26:16:a4:8f:5e:5c:ae:38:4d:12:b5:77:df:aa:af:
         82:34:39:8e:67:9f:1d:56:a1:22:0d:c0:70:5a:e0:f4:09:cc:
         63:31:f5:b3:95:9a:f2:f9:f9:e3:c4:cf:9b:89:c7:04:a9:ea:
         67:65:36:dc:32:be:62:54:e5:51:a0:42:c6:58:d2:f7:3c:da:
         f1:d4:07:10:0c:77:fc:a7:07:6b:e0:95:86:8d:ef:06:f5:b2:
         12:7e:36:ab:a8:24:a1:06:d0:df:4f:18:cd:05:93:43:9e:6a:
         7d:66:29:f7:24:ab:53:8a:81:18:62:3d:8e:01:51:4c:95:4e:
         39:3c:b2:9b:b2:f9:1e:fd:bd:bf:b7:f6:03:dc:f8:16:ee:b1:
         60:b7:2f:f3:b0:76:8d:06:1e:e5:07:ba:88:f2:2e:37:ea:77:
         f9:2d:e4:4c:b1:e9:22:22:0c:11:af:32:c3:1f:ac:20:55:7f:
         47:cc:27:41:f5:86:b3:30:1d:3c:df:dc:e7:af:fc:37:12:c8:
         a6:95:6d:40:eb:b0:9b:50:2b:2b:27:6a:85:d8:9c:bf:2b:2f:
         e4:17:81:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org