Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa
File:                     3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa (raw, json)
Hash identifier:          ERJv7QpA414Od+h1WQnAmYFMaBAat05ZL1NbYOhcEzI=
Subject key identifier:   92:F9:A8:08:DE:49:02:DE:71:40:47:71:A1:9E:B0:77:12:D5:83:AC
Certificate issuer:       /CN=B563D708A094B24FC361EDD11C91EE7979AB0471
Certificate serial:       5C38F857E0AFB868D2FCD426D782BFCD1289CC04
Authority key identifier: B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa
Signing time:             Thu 21 Dec 2023 09:24:39 +0000
ROA not before:           Thu 21 Dec 2023 09:19:39 +0000
ROA not after:            Thu 19 Dec 2024 09:24:39 +0000
asID:                     141898
IP address blocks:        103.158.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl
                          rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:38:f8:57:e0:af:b8:68:d2:fc:d4:26:d7:82:bf:cd:12:89:cc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B563D708A094B24FC361EDD11C91EE7979AB0471
        Validity
            Not Before: Dec 21 09:19:39 2023 GMT
            Not After : Dec 19 09:24:39 2024 GMT
        Subject: CN=92F9A808DE4902DE71404771A19EB07712D583AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:60:59:3c:db:7c:b2:c2:69:ec:17:51:b0:b4:
                    d5:ae:ea:c4:b6:fc:9a:56:09:9e:96:c5:2b:cc:14:
                    d4:c4:24:30:02:57:33:46:98:29:54:34:69:a3:8c:
                    4f:14:46:91:52:84:5a:24:2d:ec:2c:44:91:eb:5f:
                    ec:1d:be:35:f0:d8:2b:c6:11:a0:e9:4e:7f:d0:c5:
                    56:ec:43:5b:24:b9:12:7c:88:57:ee:de:c2:41:7b:
                    1c:89:a3:9c:02:e0:18:b1:d3:6b:c0:e3:ce:85:c3:
                    3a:48:66:46:8d:d8:a7:c2:75:a5:07:64:f7:e3:0c:
                    88:ae:69:e2:f6:ef:59:aa:05:75:50:20:1f:cf:18:
                    37:27:f4:78:9c:24:bf:20:5e:b0:17:8e:11:f5:08:
                    6a:81:f2:33:c1:1c:94:a7:ff:61:92:23:75:60:9f:
                    49:36:19:12:b9:ed:f2:65:82:7c:62:f8:f6:84:26:
                    70:ae:e5:ac:29:2e:cb:54:0f:c8:2d:f6:5e:42:c4:
                    36:95:7f:88:de:55:a9:1f:d5:f0:5e:d1:c8:0a:cb:
                    e3:6d:73:40:58:99:00:d6:ee:0f:4c:fd:2b:9f:21:
                    80:8e:d6:49:67:cd:88:42:5c:b8:c9:a7:a6:72:21:
                    13:d7:af:29:ea:15:50:4c:4c:ff:8f:7c:5f:06:58:
                    88:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:F9:A8:08:DE:49:02:DE:71:40:47:71:A1:9E:B0:77:12:D5:83:AC
            X509v3 Authority Key Identifier:
                keyid:B5:63:D7:08:A0:94:B2:4F:C3:61:ED:D1:1C:91:EE:79:79:AB:04:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/B563D708A094B24FC361EDD11C91EE7979AB0471.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B563D708A094B24FC361EDD11C91EE7979AB0471.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9036e07c-8283-43d3-9164-3e0e6cacf499/0/3130332e3135382e3233342e302f32342d3234203d3e20313431383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:c4:d5:f8:b6:3c:1c:a7:3b:9a:ff:be:0c:0d:94:75:b2:51:
         d8:b0:35:ab:c8:ea:ea:4b:23:40:56:e5:f8:8f:04:74:1d:cd:
         c0:bc:bc:78:bc:6b:10:9e:6b:1a:47:7b:ee:ec:02:2c:a4:10:
         94:c6:60:89:66:d8:7b:3d:a0:4c:b6:5d:9f:5e:39:a3:10:20:
         82:a6:af:38:8f:24:d5:b1:ab:8d:83:d7:85:96:51:da:b2:cb:
         c2:61:65:af:5b:cb:fc:48:eb:ef:3d:48:2e:57:47:8d:cf:c3:
         04:b0:54:65:c3:c2:86:6f:bb:aa:d2:2b:b8:43:5a:99:38:93:
         7f:19:45:28:66:96:66:85:52:c6:8b:59:80:b9:59:74:0f:3c:
         d3:58:62:e7:d4:23:fc:f2:83:ec:be:7f:5f:a8:5d:7c:2f:a9:
         c9:fd:6c:60:4c:d2:57:37:ed:75:c8:0f:6f:e2:ad:73:a8:aa:
         b4:4d:02:2a:61:40:bd:a4:a7:3b:47:e1:46:92:58:61:24:f5:
         44:b8:ec:25:b5:f9:0f:c6:d9:4e:3c:8f:b5:b1:2d:12:66:b0:
         49:7e:2d:af:2d:17:ae:c5:c1:b5:3d:b4:0e:96:1a:be:7f:9f:
         6e:b9:e3:56:3f:0f:7b:65:82:9f:27:15:c0:3c:cb:50:e0:85:
         08:3c:83:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 17:55:18 2024 by rpki-client on console-ams.rpki-client.org