Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa
File:                     3130332e3234372e31362e302f32332d3234203d3e203338313635.roa (raw, json)
Hash identifier:          HztgWJZafSKDPuefoDY3VfgXDzeyuTs9KqC3OvMdTtk=
Subject key identifier:   95:C0:CD:00:01:BD:FF:37:44:2E:D1:C1:71:C0:27:5D:53:B2:AB:CE
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       174B6A432FA2FC29A3164AFA6EA6F631D84D605A
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 02:00:13 +0000
ROA not before:           Mon 26 Feb 2024 01:55:13 +0000
ROA not after:            Mon 24 Feb 2025 02:00:13 +0000
asID:                     38165
IP address blocks:        103.247.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:4b:6a:43:2f:a2:fc:29:a3:16:4a:fa:6e:a6:f6:31:d8:4d:60:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 01:55:13 2024 GMT
            Not After : Feb 24 02:00:13 2025 GMT
        Subject: CN=95C0CD0001BDFF37442ED1C171C0275D53B2ABCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:70:86:ee:80:46:00:27:7e:94:ce:1d:75:3f:
                    8e:3d:3b:55:50:82:45:37:74:13:71:d0:c4:55:0e:
                    88:e6:2d:37:6f:4a:a4:0b:e3:4e:24:e5:0d:e7:c3:
                    9b:65:85:74:2a:8e:0b:bf:98:c0:fe:0a:15:20:1a:
                    ef:d4:16:a0:11:68:1e:5a:ca:6d:5a:67:23:84:39:
                    b4:d9:d9:c5:0c:e4:e7:21:ea:e2:3e:a1:ed:0b:45:
                    34:ac:3c:e9:c1:38:12:7b:18:6b:d7:36:09:ec:b7:
                    0b:bc:85:e4:05:b1:9f:01:f8:7c:5c:f6:92:fe:70:
                    2a:fe:e3:ed:2b:3f:6f:63:d1:53:f7:1f:4a:9a:5e:
                    93:36:df:67:e0:41:a2:d9:ee:06:09:16:ff:6b:6c:
                    d7:97:03:de:ee:93:66:81:f0:75:70:76:b0:3d:05:
                    bb:e1:da:aa:dc:70:74:27:79:ab:62:b9:68:30:a2:
                    67:11:68:e5:d1:ac:e2:62:9f:88:eb:1f:0f:ee:b3:
                    2e:a1:f4:4c:b9:61:63:0f:bf:57:5c:5d:23:98:dc:
                    ba:21:da:26:a5:55:d3:d3:ce:3a:67:24:bb:1b:ed:
                    27:07:7f:93:b6:10:14:46:d9:b1:18:45:3e:ee:85:
                    62:7a:a4:99:d0:f0:01:a3:46:8e:7b:db:bc:65:81:
                    e4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:C0:CD:00:01:BD:FF:37:44:2E:D1:C1:71:C0:27:5D:53:B2:AB:CE
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31362e302f32332d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:dc:5e:55:f5:1e:d9:30:e9:3b:4f:6c:57:d1:1b:85:7f:3e:
         96:94:fc:7d:65:ce:e8:61:86:02:68:94:77:b1:d7:c9:d8:24:
         6f:0b:9f:9b:12:23:db:b6:d5:37:08:b4:f8:a7:c6:ad:80:80:
         36:df:f5:2a:94:d4:54:67:97:9e:c3:b2:8a:b8:00:c1:18:1c:
         8a:20:88:1e:a4:69:c6:18:93:4b:fe:ae:68:64:ff:23:ad:46:
         82:02:65:10:f3:45:3f:f5:b2:88:95:45:92:5c:f8:58:c6:a5:
         52:01:14:a4:83:d9:75:ba:87:6f:c0:cb:cb:21:af:1e:5b:3c:
         e2:ac:68:50:66:13:d2:7d:69:20:f5:b3:ec:ec:65:b8:4e:53:
         13:6f:ba:72:ed:1b:5d:c1:67:55:23:e0:c9:58:01:2f:22:05:
         86:4b:f0:4c:d7:6c:4e:64:5f:ad:22:b9:50:d3:e4:cd:ed:90:
         38:6a:79:ee:8c:f2:34:df:73:9f:98:33:f0:7c:1e:91:f9:54:
         56:4c:b7:f0:3f:0b:ba:c8:ab:25:3f:51:e7:44:fe:40:ba:ef:
         3d:fd:7c:d0:be:4d:30:83:48:3c:5b:a3:80:05:3b:be:55:d4:
         cb:e5:31:ee:6b:0d:02:b9:86:f3:dc:5e:0b:08:d1:97:28:ed:
         df:b2:46:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org