Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
File:                     3130332e31362e3131362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          tcjkZKrAqQ9yYmgw2ICh6qsTS+FTZ8ZlcH4lGdwpZyQ=
Subject key identifier:   C7:17:D7:A4:B0:84:11:D3:BA:89:4D:A7:B9:CE:87:E7:F9:36:60:64
Certificate issuer:       /CN=19960F4C3FEEC60D5A59281148061FB21094449A
Certificate serial:       57B835ABAF3E5AE186A85CAE10030013807F989E
Authority key identifier: 19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa
Signing time:             Fri 09 Aug 2024 05:00:46 +0000
ROA not before:           Fri 09 Aug 2024 04:55:46 +0000
ROA not after:            Fri 08 Aug 2025 05:00:46 +0000
asID:                     55688
IP address blocks:        103.16.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl
                          rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:11:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b8:35:ab:af:3e:5a:e1:86:a8:5c:ae:10:03:00:13:80:7f:98:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19960F4C3FEEC60D5A59281148061FB21094449A
        Validity
            Not Before: Aug  9 04:55:46 2024 GMT
            Not After : Aug  8 05:00:46 2025 GMT
        Subject: CN=C717D7A4B08411D3BA894DA7B9CE87E7F9366064
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:fb:91:e3:64:6f:d2:60:6a:41:e6:ae:c1:75:
                    db:7d:b9:92:a2:ec:4c:15:62:85:5e:25:2e:81:4d:
                    fc:fd:13:4f:10:41:75:8d:b2:89:54:e6:b4:30:39:
                    28:ce:8f:1b:09:f7:53:9e:f3:25:1d:19:0c:70:2e:
                    4b:b8:82:77:7a:26:dc:d4:52:a7:36:5e:1d:88:68:
                    a0:e5:c9:83:f3:00:93:8f:2e:a4:d6:3f:74:bb:c3:
                    68:02:e8:ff:d2:8f:eb:09:c2:c2:56:56:b3:35:df:
                    40:2a:ff:f8:19:4e:70:0f:4f:85:c7:78:e3:5e:f5:
                    be:d5:fa:f4:68:c9:b8:a6:d9:ed:21:74:a2:d6:71:
                    a0:ec:e1:ff:b7:b0:33:2c:32:9f:9f:b0:a4:db:32:
                    1c:27:37:49:cb:55:24:0c:d2:31:17:52:32:64:b1:
                    3e:fd:46:c4:6c:e1:93:19:d1:7e:db:8e:f1:f3:3e:
                    e9:3b:dd:31:5f:cf:6a:83:80:65:d0:e3:59:a4:1a:
                    fc:f9:0f:60:6d:f4:dc:6a:fd:7d:2a:19:da:8b:97:
                    62:91:66:1e:71:e9:2f:28:04:b6:f0:a0:98:90:37:
                    a9:18:da:36:c7:92:7a:7b:8e:4d:59:11:bd:98:e3:
                    53:92:58:4f:9e:4d:81:57:c2:d6:3c:66:5f:c5:34:
                    91:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:17:D7:A4:B0:84:11:D3:BA:89:4D:A7:B9:CE:87:E7:F9:36:60:64
            X509v3 Authority Key Identifier:
                keyid:19:96:0F:4C:3F:EE:C6:0D:5A:59:28:11:48:06:1F:B2:10:94:44:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/19960F4C3FEEC60D5A59281148061FB21094449A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19960F4C3FEEC60D5A59281148061FB21094449A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fae8bcc9-43a1-4bab-b6d8-1a97d0d3c21d/0/3130332e31362e3131362e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:98:45:c4:b6:57:c2:13:de:96:ac:7d:c9:85:c7:1f:cd:9c:
         5f:2e:f8:d5:f8:e9:93:3b:8d:39:b4:a6:70:1c:94:fa:d2:a6:
         45:34:7d:84:08:4f:9a:e6:89:fe:2e:34:27:c7:0d:52:5f:a5:
         31:fc:29:89:98:3e:37:2d:24:ae:04:88:34:85:d1:fd:59:eb:
         4f:4c:77:f6:4b:a7:ad:c6:58:b3:30:eb:09:a9:a6:e6:d3:bd:
         93:36:b1:c2:df:3c:1b:a9:3e:27:04:ef:da:d2:b3:a9:e8:02:
         04:88:47:db:4d:76:cb:0a:2e:15:f7:8c:40:56:a3:7e:74:a0:
         98:c7:8c:5f:0e:38:06:81:5a:6a:59:10:95:cc:67:50:6f:6c:
         2d:c2:d3:d9:d4:1c:e3:01:8d:08:73:04:ba:0e:cb:11:fb:8e:
         7c:84:22:f1:ae:f8:dd:32:41:fb:79:81:10:8e:57:ee:0f:42:
         9e:b9:1e:3b:5e:d2:20:6e:06:cd:61:63:e8:b9:60:f3:70:dc:
         9a:2c:50:d6:7c:20:c2:8b:eb:a4:3f:4b:3c:22:44:bb:81:59:
         bf:f9:ba:62:61:bb:0a:52:26:df:c7:28:1a:21:36:64:06:31:
         42:25:31:58:3d:d4:8f:4f:f4:cb:f7:9a:87:ae:42:dd:ff:c8:
         4c:f0:33:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org