Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
File:                     3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa (raw, json)
Hash identifier:          mnafG2ugxdfmSXSJrVu3g9/a4Qd2fPFuufCtYHEHFiQ=
Subject key identifier:   37:2E:6E:23:A5:EA:E5:B2:D5:05:75:6A:0E:4B:31:CC:71:1A:52:90
Certificate issuer:       /CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
Certificate serial:       3F3B977DE9A689B1BF5C532FAA215E7F0A05246B
Authority key identifier: 6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa
Signing time:             Mon 31 Jul 2023 00:06:12 +0000
ROA not before:           Mon 31 Jul 2023 00:01:12 +0000
ROA not after:            Mon 29 Jul 2024 00:06:12 +0000
asID:                     58495
IP address blocks:        103.247.216.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl
                          rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:3b:97:7d:e9:a6:89:b1:bf:5c:53:2f:aa:21:5e:7f:0a:05:24:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6
        Validity
            Not Before: Jul 31 00:01:12 2023 GMT
            Not After : Jul 29 00:06:12 2024 GMT
        Subject: CN=372E6E23A5EAE5B2D505756A0E4B31CC711A5290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:22:fb:23:51:f1:95:c0:f6:47:e4:37:45:ec:
                    af:b0:ed:b3:48:08:43:5e:89:27:c6:6a:a7:32:e4:
                    dc:53:15:a8:66:3e:89:e7:32:d8:e8:af:ba:e8:a9:
                    5c:4a:60:e8:42:90:a7:93:59:90:0c:16:c8:1e:3d:
                    59:bd:14:dd:8b:c9:0b:5c:41:1a:1a:de:1d:89:8b:
                    48:b4:60:ce:2e:10:a3:f2:a6:48:3d:8a:c5:4f:97:
                    7a:b1:ae:40:72:fc:e2:a1:14:dc:6d:e6:75:c5:15:
                    1b:b8:bf:31:a7:66:e6:63:6b:6c:9e:4c:0a:57:20:
                    28:12:d9:55:d1:b2:ac:8d:02:a2:3c:91:4a:c5:28:
                    ae:fe:2f:61:a5:c3:a5:76:88:bd:33:30:b1:f7:66:
                    05:a8:4c:dc:06:dd:e6:cc:22:30:33:42:98:7e:d5:
                    ea:3b:cf:36:7b:bb:e5:4c:8c:47:d2:c2:19:18:38:
                    d8:5b:bf:57:e8:f4:4d:df:a2:87:1d:72:d7:e1:76:
                    e3:32:26:04:1e:da:b5:03:81:ac:8d:fb:e9:9d:37:
                    9a:6f:8b:3e:7e:53:e1:c8:a5:53:f2:45:13:5a:54:
                    2e:94:74:ae:d2:af:89:02:6c:d1:88:bb:35:6c:c5:
                    93:7d:6b:b4:65:84:6f:06:20:c0:8a:b1:bf:2d:61:
                    fe:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:2E:6E:23:A5:EA:E5:B2:D5:05:75:6A:0E:4B:31:CC:71:1A:52:90
            X509v3 Authority Key Identifier:
                keyid:6E:55:34:AB:A6:EF:3C:98:C8:D0:CF:43:77:95:D2:5A:3A:9C:25:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E5534ABA6EF3C98C8D0CF437795D25A3A9C25C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d691777e-cdb4-4897-b287-e58e424c199d/0/3130332e3234372e3231362e302f32322d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.216.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7d:f0:1a:01:0a:17:28:39:f1:3f:51:1d:da:d5:1a:3c:9e:86:
         e1:bc:27:43:73:52:e9:3b:37:8b:d4:9f:b8:b0:da:00:44:16:
         7c:a0:95:a1:ba:39:d9:e3:26:bf:7f:14:e9:bc:cb:03:cd:a3:
         1f:1d:e5:18:42:8e:79:28:bd:63:6e:ec:0d:ce:8c:a3:01:0f:
         e6:1e:42:19:46:9e:89:4e:a5:60:9e:3b:e3:7d:36:da:82:59:
         af:f2:c9:71:3a:d8:29:1e:37:55:a4:f6:fb:12:91:c1:55:77:
         da:9a:65:52:06:d5:b7:e1:5c:f1:5c:7d:83:43:6c:21:64:00:
         df:6e:e7:68:a2:13:12:1c:82:d8:01:78:ea:91:d7:4e:72:1e:
         f4:fd:0c:5e:c8:f2:8a:e8:2d:41:42:74:d6:f6:e1:a3:79:a9:
         b2:57:1a:c3:d6:ef:96:93:7f:ac:df:4a:d0:96:aa:d0:55:47:
         0e:44:3a:4d:be:eb:71:9b:cd:3e:47:11:71:f4:96:e9:1b:99:
         23:fe:f5:8d:0d:cd:42:da:76:e3:1a:f2:c3:fa:03:e9:a5:8a:
         b5:bf:6d:cc:eb:01:a2:85:47:4d:66:0c:30:92:3b:10:4a:8b:
         ac:8e:bf:c1:f5:25:36:e5:2b:9d:45:cb:1e:48:93:0e:33:99:
         a5:3f:56:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:22 2024 by rpki-client on console-ams.rpki-client.org