Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa
File:                     3130332e36302e3138302e302f32322d3234203d3e203535363835.roa (raw, json)
Hash identifier:          be+hrtHr5V1tSQeaKLNVm4SZ+dTaEFPRXbaHn+csWAc=
Subject key identifier:   CB:80:D5:41:05:1F:08:8D:CF:21:5D:0A:28:5A:36:84:7E:46:9F:38
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       36081FC711D48BC27F33F2D439807AB00D5AC5A1
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa
Signing time:             Mon 31 Jul 2023 00:09:33 +0000
ROA not before:           Mon 31 Jul 2023 00:04:33 +0000
ROA not after:            Mon 29 Jul 2024 00:09:33 +0000
asID:                     55685
IP address blocks:        103.60.180.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 23:10:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:1f:c7:11:d4:8b:c2:7f:33:f2:d4:39:80:7a:b0:0d:5a:c5:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Jul 31 00:04:33 2023 GMT
            Not After : Jul 29 00:09:33 2024 GMT
        Subject: CN=CB80D541051F088DCF215D0A285A36847E469F38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a7:35:8f:9b:96:95:cf:1f:35:4d:b9:ac:3a:
                    3d:65:25:a2:74:70:56:e5:60:4a:80:b0:5d:4c:bb:
                    d3:8b:aa:42:ff:9c:d7:b2:a8:15:5f:b6:08:93:b9:
                    8a:3d:46:1e:14:50:e2:a3:12:77:6f:76:94:a5:28:
                    c6:d9:48:d2:21:fc:0b:d8:e7:48:c9:9f:3b:42:4e:
                    8b:04:5e:53:6c:27:71:4e:8b:d4:78:bc:68:f7:79:
                    de:8c:bf:73:69:6d:2f:87:89:3e:d8:f9:98:45:96:
                    25:cb:cb:93:23:84:e0:80:7d:fb:07:68:43:44:3a:
                    85:01:a5:9d:65:68:97:c6:52:ea:4b:e7:94:23:53:
                    c5:9e:51:9b:97:71:37:d7:ad:8b:da:a8:a9:61:91:
                    c5:1f:d4:fd:39:d1:51:f0:38:23:52:6e:f2:9c:b5:
                    a8:35:3b:87:35:6b:61:93:14:b3:a6:f8:aa:ba:9b:
                    be:b5:b4:61:72:01:19:32:ab:d8:8c:62:63:f6:23:
                    71:d1:98:dd:2f:21:31:fc:a8:96:0b:a5:73:3f:34:
                    b7:f5:00:d1:b0:67:a4:5f:9c:af:65:d5:e7:c0:d9:
                    f3:a9:f9:d7:c0:c7:55:86:53:94:ef:48:a3:d5:1c:
                    3e:4e:b1:fc:ac:be:a7:b3:a0:ab:ae:dd:f6:8c:1f:
                    15:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:80:D5:41:05:1F:08:8D:CF:21:5D:0A:28:5A:36:84:7E:46:9F:38
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e36302e3138302e302f32322d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:5a:e2:e7:5f:f9:77:8d:f6:f7:49:99:f6:e9:51:a2:8c:76:
         3f:ae:20:ca:07:b1:f9:64:81:f6:bb:ee:07:1a:e6:a3:58:41:
         78:b8:b1:1d:04:2b:63:0b:73:7c:61:00:ea:87:f5:19:47:6f:
         1a:94:51:64:7b:45:66:45:ef:77:ed:a0:9f:a4:1e:e8:a7:ed:
         3d:01:21:2f:da:e8:48:d9:44:f5:de:cb:cd:1a:52:dc:c1:ff:
         f6:3d:e2:67:18:8f:b5:3d:94:89:40:cb:44:05:3a:be:4c:ee:
         0e:a4:33:f5:1e:3b:3b:e7:e7:92:54:95:17:71:b9:7f:1e:71:
         99:47:05:90:f1:51:4a:a9:6c:c2:e6:53:3b:57:cd:14:ad:c3:
         9d:76:5a:e8:87:1a:8f:c4:76:c6:5d:85:1b:2a:10:d0:89:92:
         b3:b4:0b:42:63:99:ee:8f:43:2a:bd:ca:78:1a:04:18:b6:03:
         3c:ab:42:a8:56:03:0a:8e:44:22:4d:34:63:18:ae:da:f5:2b:
         b5:07:c1:82:4a:a3:3a:6d:20:cd:94:ca:12:5b:5b:e4:e1:69:
         49:fc:54:6d:0d:59:40:37:f6:63:1a:83:bf:09:45:8f:f5:1e:
         5a:58:03:0a:eb:eb:85:89:42:c7:e2:08:c2:5f:9a:6f:6b:8b:
         dc:ff:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:36:09 2024 by rpki-client on console-ams.rpki-client.org