Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa
File:                     3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          XGzaH0iWdCy5zsUnP4rW+qurcQNiJokFY8tcDg0B9Wg=
Subject key identifier:   6A:6F:F7:2B:A6:77:A8:09:27:EF:09:AF:BB:34:63:A5:38:87:F9:F1
Certificate issuer:       /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Certificate serial:       18B9245C5B7B3CB28C3D3295F0FB17E2528F20DE
Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa
Signing time:             Sat 05 Oct 2024 08:00:02 +0000
ROA not before:           Sat 05 Oct 2024 07:55:02 +0000
ROA not after:            Sat 04 Oct 2025 08:00:02 +0000
asID:                     58369
IP address blocks:        103.156.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
                          rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:b9:24:5c:5b:7b:3c:b2:8c:3d:32:95:f0:fb:17:e2:52:8f:20:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
        Validity
            Not Before: Oct  5 07:55:02 2024 GMT
            Not After : Oct  4 08:00:02 2025 GMT
        Subject: CN=6A6FF72BA677A80927EF09AFBB3463A53887F9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:dc:b0:9a:be:d8:cc:1c:eb:b3:83:ee:be:c6:
                    c2:4b:78:9d:c0:15:f3:3c:e7:33:b8:7c:87:f2:13:
                    e9:88:42:e9:79:2a:d6:06:fd:0b:56:b2:cb:ad:cd:
                    0a:d8:7e:1b:b6:3e:60:68:db:28:d6:07:e2:8f:5f:
                    75:cf:29:d7:94:7f:bb:fe:48:72:2c:b0:9f:00:36:
                    54:45:24:07:b1:3e:22:22:6f:b4:01:13:25:62:eb:
                    6c:e2:03:c6:a7:c2:9d:3d:c2:f2:75:46:4d:87:2b:
                    3e:f7:61:53:67:ae:5f:72:6c:18:ec:0b:06:60:b6:
                    16:6e:0d:b2:9f:0c:36:7f:00:2b:17:63:33:9b:53:
                    58:f8:0b:58:6c:6e:d7:97:9a:59:0e:2b:8d:35:2e:
                    63:91:be:87:57:7a:02:1c:b1:77:78:87:fb:97:74:
                    29:45:d1:8c:ce:1c:8a:f6:08:a9:53:fc:23:c4:ae:
                    05:28:09:8c:87:9c:07:56:b8:b6:28:c2:3b:3f:62:
                    95:41:e2:58:26:21:f7:aa:db:72:45:cf:64:65:4e:
                    34:cb:15:e2:46:fd:33:c6:e0:82:92:da:39:23:15:
                    b7:72:8c:de:54:ab:86:95:5e:02:18:ea:f5:fe:cb:
                    84:79:3d:e6:f8:40:d5:2d:95:98:a5:0f:48:56:f4:
                    ae:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:6F:F7:2B:A6:77:A8:09:27:EF:09:AF:BB:34:63:A5:38:87:F9:F1
            X509v3 Authority Key Identifier:
                keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:7c:28:67:7c:5c:a5:ea:8f:f0:7d:6a:0e:86:8d:58:35:56:
         2c:e7:6d:49:7d:66:5c:73:81:3f:f7:0b:a6:98:2a:d7:e3:d2:
         f1:a6:6d:11:f3:3b:c2:d5:35:fe:36:a8:a5:bc:78:0e:bc:35:
         5b:3e:f3:3d:9d:28:c4:c6:9c:a1:35:0d:66:67:4c:e6:00:8f:
         f7:53:41:d8:6b:80:df:8a:7b:3a:45:3c:8f:4f:a5:16:c9:44:
         84:3c:d9:f3:98:c3:90:fe:47:7a:92:45:72:87:33:f9:43:51:
         b3:e4:5b:17:a0:eb:69:37:f3:d8:7a:64:84:aa:4f:1a:74:c2:
         45:83:4b:5f:d9:ce:b6:84:b5:da:3a:98:7c:fc:80:4c:1f:f8:
         18:0e:33:c3:16:0c:84:6a:a6:0d:f9:d3:bb:79:55:99:67:81:
         99:bc:31:dc:13:00:81:eb:ef:be:64:59:d7:6c:70:ca:62:bc:
         fa:88:4e:f8:ac:e7:0d:ef:44:47:cc:d4:19:ba:26:f8:e4:24:
         91:3c:2f:20:1f:0c:fe:0a:c9:35:8d:0a:dd:e1:41:b5:ec:01:
         6c:f7:b3:03:f0:9c:2c:a8:7d:a3:29:c8:70:25:f4:f4:ed:5a:
         80:7a:a0:a2:23:ff:a3:09:f8:08:cd:f1:61:8b:97:2c:08:9f:
         82:fa:97:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org