Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
File:                     3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          dAMFWT15o0tNxP5QGOA+h6lsQLpUYmuI9Zamz3xUQnQ=
Subject key identifier:   50:0F:FD:28:87:F3:E1:5D:33:C8:29:7B:B3:55:28:7B:D0:F2:E1:C4
Certificate issuer:       /CN=19960F4C3FEEC60D5A59281148061FB21094449A
Certificate serial:       3621B8F61FF56E7D21C674FDD52B0B1FB84D0283
Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
Signing time:             Fri 08 Sep 2023 05:00:01 +0000
ROA not before:           Fri 08 Sep 2023 04:55:01 +0000
ROA not after:            Fri 06 Sep 2024 05:00:01 +0000
asID:                     55688
IP address blocks:        103.16.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl
                          rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:21:b8:f6:1f:f5:6e:7d:21:c6:74:fd:d5:2b:0b:1f:b8:4d:02:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A
        Validity
            Not Before: Sep  8 04:55:01 2023 GMT
            Not After : Sep  6 05:00:01 2024 GMT
        Subject: CN=500FFD2887F3E15D33C8297BB355287BD0F2E1C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:cf:53:16:1c:30:f9:ec:17:a9:2d:5e:a9:8f:
                    9a:d3:8f:9c:03:1f:05:c6:af:17:85:87:47:fc:aa:
                    a1:18:3f:74:c4:2b:08:ff:69:13:76:26:e3:3d:72:
                    f5:2c:73:b5:45:23:47:03:5d:62:4b:bb:47:e8:56:
                    b0:27:27:3f:24:e6:ac:81:c5:7b:9c:3b:4a:94:0b:
                    b4:99:d8:5d:74:39:66:7e:e3:5f:20:5c:52:80:da:
                    ea:c8:ef:8e:85:18:1a:36:54:77:26:f9:a4:0b:84:
                    6c:84:4b:ab:e1:ef:7e:56:d7:99:5b:f1:9b:04:ff:
                    4c:5a:ed:7e:78:3f:1f:df:cd:c6:df:a7:1c:21:38:
                    9f:4d:02:95:7b:3e:e0:7b:e1:02:d1:38:5c:ac:3c:
                    9a:42:ad:dc:7d:e9:aa:16:f4:5e:17:e0:ab:94:a5:
                    d7:97:ca:65:e4:9a:45:c8:e4:45:76:25:78:66:58:
                    9d:6e:eb:7a:ee:5a:f3:51:88:8f:18:ec:8d:b5:e7:
                    d5:68:6d:3d:e8:38:51:18:8d:de:fb:80:f1:64:44:
                    4b:f9:6c:c5:ed:70:7d:39:a4:0f:d7:51:14:4a:e0:
                    22:34:6a:82:62:57:da:e0:64:3b:33:00:73:9a:29:
                    03:dd:f0:d4:d7:dd:44:6f:d1:bc:15:a1:f0:b6:da:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:FD:28:87:F3:E1:5D:33:C8:29:7B:B3:55:28:7B:D0:F2:E1:C4
            X509v3 Authority Key Identifier:
                keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         27:be:e0:c7:e4:e5:78:13:a4:b2:e8:7e:57:1c:4b:8d:7c:e0:
         3e:e0:1e:3c:3a:01:46:37:58:e7:a4:9a:b9:0a:6e:f8:f5:0c:
         fe:f7:72:77:1d:4e:0a:6f:c6:3d:2f:08:c9:7b:ef:eb:df:95:
         dc:a3:db:c9:f7:a6:f4:05:1f:da:e7:77:fc:c3:00:75:83:f8:
         48:74:29:9e:a3:ab:ad:ed:95:7c:ef:3a:68:b1:34:21:1c:f7:
         64:c1:f8:16:c2:2a:48:7b:30:b2:d7:9f:ad:5f:9c:87:d7:ec:
         78:75:fb:23:b7:68:6c:48:4a:78:27:49:86:ea:76:de:ea:a8:
         47:49:3d:2a:01:c0:2d:bb:6d:b2:28:8e:13:42:70:28:b4:b6:
         80:af:a1:af:01:52:ef:a9:15:e7:eb:be:2d:86:06:8e:c4:7f:
         e1:89:15:92:52:d6:b7:63:5c:af:0e:06:e5:c9:d4:cc:62:d2:
         82:70:f2:93:77:9b:90:72:b6:f2:e5:8c:86:4a:94:3d:a7:04:
         a5:a1:e7:fa:66:33:5e:cd:f5:01:e0:24:a3:24:f5:b7:46:3b:
         f7:b9:c0:a1:26:c7:24:be:e7:b4:a2:25:1f:a6:f8:0f:c4:48:
         ff:ce:9c:e5:fa:cf:c5:d0:a3:d6:34:95:9a:ca:8f:f4:f5:28:
         88:c9:19:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 05:43:41 2024 by rpki-client on console-fra.rpki-client.org