Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
File:                     3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa (raw, json)
Hash identifier:          lo1dtYGfn88ZOwtb3+WVZpilvx3CxYo5GUn0msJ61j8=
Subject key identifier:   2F:22:05:F3:9A:66:01:A7:68:C1:61:37:FB:AC:5F:F0:6A:88:AD:E1
Certificate issuer:       /CN=C58E232004125E8B46AB63B600900D92EB71A3B1
Certificate serial:       28B0B01E3F832A9E4E112DB4B358177769D922DB
Authority key identifier: C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa
Signing time:             Wed 06 Mar 2024 16:00:02 +0000
ROA not before:           Wed 06 Mar 2024 15:55:02 +0000
ROA not after:            Wed 05 Mar 2025 16:00:02 +0000
asID:                     150959
IP address blocks:        103.116.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl
                          rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:b0:b0:1e:3f:83:2a:9e:4e:11:2d:b4:b3:58:17:77:69:d9:22:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C58E232004125E8B46AB63B600900D92EB71A3B1
        Validity
            Not Before: Mar  6 15:55:02 2024 GMT
            Not After : Mar  5 16:00:02 2025 GMT
        Subject: CN=2F2205F39A6601A768C16137FBAC5FF06A88ADE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c2:17:48:58:13:2d:28:0a:eb:3f:c8:a6:06:
                    da:4e:36:f9:b7:df:18:5d:67:0f:ed:40:15:55:9b:
                    24:7d:1f:3f:52:da:ec:60:81:3a:a2:7f:2f:cc:59:
                    d7:7c:c2:0c:24:c2:b9:dc:5f:ee:e8:19:7f:ef:52:
                    4f:1a:ac:77:a0:94:80:90:af:02:df:cf:42:37:6c:
                    cb:0c:90:19:a8:88:b1:20:89:fb:30:6f:85:19:94:
                    a9:d1:65:f0:53:c2:53:70:1e:29:bb:07:15:15:ca:
                    e3:d9:e2:83:88:d0:ea:7b:31:db:47:8c:a8:5d:5a:
                    12:26:c8:2a:83:a9:60:8d:ac:88:d6:5d:77:b1:55:
                    49:27:84:e1:be:3c:00:4d:f9:f4:c4:55:0c:5a:5e:
                    10:d0:3c:b2:8b:0c:d9:c9:1f:bb:6b:41:79:11:8f:
                    06:1b:2e:8d:6f:df:df:99:95:ac:bd:49:b8:6f:2a:
                    7c:99:1a:86:91:b6:88:8f:26:83:9e:2f:30:03:ea:
                    c6:30:aa:cd:d6:cd:72:fa:07:29:0b:5e:48:0c:e0:
                    5e:8b:8b:52:40:76:33:8b:41:36:ec:83:20:da:59:
                    93:6b:7f:4a:21:d3:41:4e:d3:b8:45:74:62:a9:0e:
                    55:a5:4a:08:5a:eb:16:35:27:7a:45:e9:b2:bd:6b:
                    94:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:22:05:F3:9A:66:01:A7:68:C1:61:37:FB:AC:5F:F0:6A:88:AD:E1
            X509v3 Authority Key Identifier:
                keyid:C5:8E:23:20:04:12:5E:8B:46:AB:63:B6:00:90:0D:92:EB:71:A3:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/C58E232004125E8B46AB63B600900D92EB71A3B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C58E232004125E8B46AB63B600900D92EB71A3B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae92243a-763d-44b8-987d-08bd0da9ee3d/0/3130332e3131362e38322e302f32342d3234203d3e20313530393539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:6d:b2:9f:88:bb:8e:6d:9c:ac:23:0d:f1:f2:02:86:42:a7:
         b9:fe:ca:31:5e:bb:2b:55:1d:59:16:18:2b:53:59:63:3b:9f:
         22:99:70:7c:65:fe:c9:29:c8:9e:f1:49:3d:dc:6c:3a:c5:7c:
         c9:50:a3:9e:48:c0:9b:d2:ad:03:09:26:96:71:a1:fd:0d:76:
         73:ae:6f:6f:c2:b5:6d:77:78:44:ce:0e:17:6c:fc:6c:2c:f2:
         8a:97:34:49:18:5f:d7:f6:e6:9a:3c:25:52:b8:32:1a:b2:e4:
         ad:42:ce:99:a6:dc:25:6b:6b:75:55:83:d8:81:4c:78:76:cb:
         d9:e4:2e:8c:1f:ee:bb:e7:ba:e7:77:3a:7f:08:c1:b8:b5:40:
         d9:e0:63:9c:34:da:14:78:aa:00:68:ed:c2:27:3a:fc:20:65:
         0a:97:9b:31:a1:9e:76:0d:db:08:81:94:61:54:a4:8e:dc:52:
         d3:a8:65:4d:3d:3e:bc:86:38:23:8a:78:5c:b0:0d:7f:7e:ce:
         c2:e4:b1:07:02:09:fd:46:e3:73:71:ac:79:a0:29:6c:0a:52:
         ca:8d:57:bc:3b:20:5b:56:ef:69:e2:6c:d4:31:2e:d4:f9:61:
         62:1e:37:46:90:66:dd:64:d1:a7:aa:56:7e:22:d1:8b:06:60:
         de:44:69:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 29 13:26:23 2024 by rpki-client on console-ams.rpki-client.org