Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          V55U7OK1K2QuY3VVbSyrU+unRMpplldjBPASw8ADm0Y=
Subject key identifier:   2B:BA:ED:E5:DC:80:8A:08:90:24:F9:01:4E:70:63:31:04:B7:AA:D4
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       71D9ED82F2D2ED845A88C2B16CDEB8875E69D5A9
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa
Signing time:             Mon 01 Jul 2024 01:04:16 +0000
ROA not before:           Mon 01 Jul 2024 00:59:16 +0000
ROA not after:            Mon 30 Jun 2025 01:04:16 +0000
asID:                     137366
IP address blocks:        103.116.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d9:ed:82:f2:d2:ed:84:5a:88:c2:b1:6c:de:b8:87:5e:69:d5:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Jul  1 00:59:16 2024 GMT
            Not After : Jun 30 01:04:16 2025 GMT
        Subject: CN=2BBAEDE5DC808A089024F9014E70633104B7AAD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:72:eb:87:76:58:29:96:7e:da:a3:b1:87:ce:
                    5a:cc:b5:9c:0f:c9:ea:ef:a4:ab:c0:5e:f6:f7:95:
                    94:6c:44:25:f7:25:25:28:4b:9b:27:82:98:94:d2:
                    2f:c4:82:9e:b8:4a:21:9a:69:62:a0:ba:e6:ac:21:
                    92:87:02:a8:76:0a:82:1a:b1:8f:3f:1a:21:9e:68:
                    0c:2f:2b:ed:7e:cd:13:f4:fc:7e:e2:7e:d1:f5:7e:
                    cb:c7:5f:75:f7:94:91:cd:be:7c:5e:8f:e8:9b:f5:
                    5a:4a:a4:92:78:4e:1c:58:b5:9a:83:9d:7c:66:3d:
                    11:c3:3e:be:90:d4:ce:af:04:c3:ec:f1:fc:7a:1f:
                    60:e6:5d:6f:5d:90:28:3d:3c:5c:16:92:61:fb:65:
                    90:df:5a:32:88:88:8b:8f:38:8e:dd:af:85:e6:55:
                    11:8c:91:0e:80:3e:fe:58:b3:e0:e7:72:93:c8:4e:
                    b5:23:f5:09:14:6f:16:5a:b8:c8:ab:80:df:d3:c9:
                    b4:09:c2:d7:84:4f:4a:dc:b8:6a:3f:77:b0:69:0e:
                    c6:bd:9b:10:1f:d8:d4:a6:06:b1:45:c1:c1:e1:20:
                    16:bd:aa:1c:56:83:a5:57:f6:66:ec:14:43:31:76:
                    ad:07:c4:fa:82:79:d8:13:e4:1b:a2:d8:82:02:17:
                    a8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BA:ED:E5:DC:80:8A:08:90:24:F9:01:4E:70:63:31:04:B7:AA:D4
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:c4:37:bc:14:9c:77:81:c0:a4:6c:e2:ee:08:9e:5c:cb:67:
         63:03:54:6d:5e:e0:5c:c5:ca:06:fd:d7:21:93:36:d0:cb:20:
         78:60:6f:44:67:d2:05:27:05:df:36:d3:84:49:00:c0:66:90:
         db:e0:f4:3a:e8:9c:b8:ed:e3:3c:d9:7d:8b:96:13:6e:3f:34:
         19:8e:21:59:7e:2d:0b:8f:06:dc:68:10:49:bd:95:2c:a1:76:
         2c:15:9b:57:a0:21:54:eb:d7:1d:6f:b9:3d:72:11:d2:65:c1:
         68:7c:54:d9:d5:5e:31:a1:1f:f6:a0:b7:ee:13:95:94:f9:59:
         8c:54:62:dc:c0:4a:a1:d5:2f:d0:45:08:aa:d4:fc:a6:ca:6a:
         4a:18:09:3d:4b:3b:57:62:53:41:04:40:33:48:1b:75:3f:3a:
         69:a8:02:01:de:1c:30:43:8b:15:ae:7e:16:78:d8:3e:b8:d8:
         50:d5:1e:4d:32:21:59:42:3a:92:58:6a:e0:aa:d6:ff:fc:25:
         f5:4b:e0:87:9c:9d:07:c5:a8:4b:d3:12:af:8f:c0:4f:f8:1f:
         6c:2f:37:ae:66:b5:10:5e:da:58:d8:aa:b0:56:df:c2:2f:5c:
         18:c5:ee:1a:7d:54:45:1a:79:13:9f:17:d2:f2:0b:36:fe:dc:
         8b:7f:f2:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org