Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa
File:                     3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa (raw, json)
Hash identifier:          qDk1BoDy5dd0XFe5dQa48RlhJE7gApAHEa+WgGksrEs=
Subject key identifier:   2A:29:C6:DE:AE:8E:29:39:83:38:31:2F:1A:29:3A:E7:8D:FC:98:D0
Certificate issuer:       /CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
Certificate serial:       48ECBA89A9DA234A777214620CE47CCCB1BD8763
Authority key identifier: A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa
Signing time:             Wed 13 Dec 2023 08:11:34 +0000
ROA not before:           Wed 13 Dec 2023 08:06:34 +0000
ROA not after:            Wed 11 Dec 2024 08:11:34 +0000
asID:                     136058
IP address blocks:        103.82.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl
                          rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:13:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:ec:ba:89:a9:da:23:4a:77:72:14:62:0c:e4:7c:cc:b1:bd:87:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5BFDB1F243635EED1E25191C68CEBB2E325072F
        Validity
            Not Before: Dec 13 08:06:34 2023 GMT
            Not After : Dec 11 08:11:34 2024 GMT
        Subject: CN=2A29C6DEAE8E29398338312F1A293AE78DFC98D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:3d:a4:a4:0d:54:1c:6c:ee:7f:be:c7:26:05:
                    77:ca:e6:13:2a:66:26:a0:31:eb:30:9f:1f:d8:6d:
                    b1:8c:78:cf:16:4c:10:f2:71:5d:99:4b:47:f7:94:
                    16:a4:b0:74:cf:38:03:e2:20:cc:90:f5:7d:72:51:
                    be:9e:1e:1e:1b:1d:40:dc:e8:f2:61:8c:2d:09:c3:
                    4d:31:cd:bf:79:f1:77:84:10:ad:ef:f4:52:9c:8e:
                    22:9d:0d:10:f8:b7:b1:01:eb:18:1e:8b:ff:2a:bc:
                    41:80:c3:78:09:39:74:32:33:48:d2:1c:f7:fb:c9:
                    09:18:be:a0:2b:32:2c:8f:98:cb:44:c0:dd:32:15:
                    f2:58:db:0b:bf:8f:1b:d2:3d:a9:8e:5c:1f:64:b2:
                    2a:62:06:59:6a:e5:e2:8c:64:cd:95:52:7f:20:f5:
                    3f:03:50:48:d3:18:e3:d9:6c:58:09:6c:77:65:17:
                    29:49:c0:90:91:8a:f7:ef:ba:27:87:f3:21:0f:6b:
                    65:b8:9f:f0:ee:e9:b7:41:9d:59:45:62:fc:42:bf:
                    7a:3c:94:f5:4d:b3:35:8d:23:e3:fe:a9:23:76:41:
                    8f:fa:f6:11:a0:80:31:d9:19:67:8c:43:5e:69:e9:
                    62:b4:c1:c7:8c:99:c4:74:e1:a6:f3:b3:e6:4e:32:
                    4b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:29:C6:DE:AE:8E:29:39:83:38:31:2F:1A:29:3A:E7:8D:FC:98:D0
            X509v3 Authority Key Identifier:
                keyid:A5:BF:DB:1F:24:36:35:EE:D1:E2:51:91:C6:8C:EB:B2:E3:25:07:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/A5BFDB1F243635EED1E25191C68CEBB2E325072F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5BFDB1F243635EED1E25191C68CEBB2E325072F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a4356375-8e29-4477-b013-c44150a25a31/0/3130332e38322e3136342e302f32342d3234203d3e20313336303538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:f2:e2:0f:dd:2c:be:6f:c3:f2:b8:4a:be:7d:fa:d5:e1:
         79:1d:be:52:11:8f:5c:fb:45:01:a1:c0:e8:ba:34:a7:bf:06:
         28:e7:50:9b:fa:30:78:f1:c6:b1:26:67:c3:99:3e:45:f2:71:
         35:22:ef:07:5d:e3:01:fb:a9:5f:15:84:d9:6b:5b:ab:93:41:
         5c:5d:d0:1d:c5:fc:79:3a:25:f7:04:05:79:ce:dd:6f:8b:d8:
         de:57:3d:79:02:b3:bf:94:15:f3:3f:df:78:60:6b:7e:0b:9d:
         d0:f1:60:ba:e0:04:45:2b:07:c8:fc:33:24:94:65:db:0a:e8:
         c6:9e:4f:be:83:80:06:98:bb:ef:1d:cc:da:92:f3:aa:13:ac:
         72:cd:76:e8:0a:c1:d5:1b:6e:cc:ea:16:aa:1a:86:1e:e1:59:
         a5:60:8a:db:b1:d9:40:4d:df:10:7a:c0:61:a0:66:a7:df:37:
         b0:b8:88:46:bb:6f:28:7a:9b:98:f0:f9:af:50:92:91:a2:dc:
         55:01:d4:3f:0e:d8:48:9f:10:d2:f4:eb:d8:73:73:bf:e5:8f:
         40:9c:52:02:7a:c8:d1:9c:40:9f:11:ad:6e:59:20:6e:6c:ab:
         35:e4:5b:87:c7:84:74:9b:13:23:e2:7d:76:2d:52:5a:43:89:
         1d:79:33:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 00:12:04 2024 by rpki-client on console-ams.rpki-client.org