Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa
File:                     3130332e32302e3139312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          I/Mp6Wl+WjD9qwDcZK9bfUpTzW8LhxpVuM3M42T62bo=
Subject key identifier:   FB:13:2E:C0:89:7C:C6:75:44:7E:9E:06:B1:9B:86:EA:60:5E:5A:BB
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       66BEC9B4B2D9A2123A5CE2882050DE67EE195B4A
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa
Signing time:             Mon 31 Jul 2023 00:13:04 +0000
ROA not before:           Mon 31 Jul 2023 00:08:04 +0000
ROA not after:            Mon 29 Jul 2024 00:13:04 +0000
asID:                     55685
IP address blocks:        103.20.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 12:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:be:c9:b4:b2:d9:a2:12:3a:5c:e2:88:20:50:de:67:ee:19:5b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul 31 00:08:04 2023 GMT
            Not After : Jul 29 00:13:04 2024 GMT
        Subject: CN=FB132EC0897CC675447E9E06B19B86EA605E5ABB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:84:a6:3f:36:56:be:f0:6d:e5:e6:3e:94:4c:
                    47:b6:8b:b0:a2:33:19:7c:fe:e3:9c:84:12:a4:2c:
                    31:d7:85:e4:c1:9f:aa:4b:17:51:9c:4e:79:db:ee:
                    06:c7:bc:56:e5:9e:5e:b7:6b:5f:1c:c7:41:a4:ca:
                    f8:74:dd:de:ef:03:30:7f:e3:40:be:5d:af:ce:81:
                    5c:f7:05:e1:fd:52:de:5a:0e:e1:25:0c:bd:c1:fb:
                    80:ce:82:a5:2a:05:88:de:f0:85:15:b8:4b:c6:03:
                    35:52:88:33:36:da:92:b6:95:17:d9:60:f4:8b:9e:
                    fd:ad:85:31:c5:9b:d7:d3:bd:93:5d:8e:ad:1e:bb:
                    36:56:f5:c7:a1:8d:c6:3a:11:21:1a:ec:2b:11:4f:
                    09:c3:dd:85:83:cb:9f:8f:5a:60:98:38:1d:9f:0b:
                    f1:59:55:40:a2:78:44:9a:6f:b2:a4:21:17:41:09:
                    27:75:74:3e:b9:2e:31:04:9b:66:fb:53:18:d3:cb:
                    8f:41:0a:3d:51:00:16:32:0e:b6:75:99:30:e6:67:
                    5b:6f:58:4c:e4:29:03:7d:7e:b1:83:ad:b9:ee:af:
                    48:49:cc:da:f8:6e:bf:74:f8:b0:80:44:28:49:a5:
                    53:85:c1:cc:11:98:c5:e6:99:6b:50:33:11:c5:31:
                    30:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:13:2E:C0:89:7C:C6:75:44:7E:9E:06:B1:9B:86:EA:60:5E:5A:BB
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139312e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:25:b0:4a:94:40:6f:68:51:f1:bb:5f:a4:fe:38:34:e2:b7:
         c7:fe:ae:43:27:ea:75:ac:da:c4:cf:99:76:3c:ba:6a:4e:a9:
         c1:72:c4:cc:e1:6a:e1:e6:7b:6f:b4:d6:6a:a6:c3:8c:32:ae:
         15:96:87:19:1f:0a:76:f8:c6:a3:f9:0f:55:7f:46:4f:34:f1:
         69:cb:73:ce:dc:4b:6a:b8:2b:9f:df:22:8a:f8:3e:b9:55:b7:
         45:c5:b4:5c:7b:1e:23:5a:b7:cf:e3:8c:8c:86:53:3a:b7:f4:
         55:ff:0d:b0:ab:37:0e:31:a8:25:b5:b7:78:30:9d:60:39:b5:
         8b:2e:36:36:01:f7:a2:cc:40:cf:46:fd:1a:03:02:58:01:dd:
         75:8d:8e:ac:af:a5:4d:53:89:27:a2:f4:b4:d4:81:59:ef:e6:
         31:df:ae:dd:b5:9d:aa:30:7b:85:0a:2d:a9:04:15:30:2d:15:
         a3:87:4e:28:2a:c9:53:60:39:2c:01:87:ca:f5:f7:3f:4d:d3:
         47:71:0e:89:af:de:28:38:b2:d9:c0:5e:86:0a:d4:ec:6d:4d:
         f9:eb:7d:8c:f4:ef:85:80:31:dd:c0:f5:bf:1e:87:fd:20:e0:
         08:74:c8:03:fd:ae:98:9d:f9:8f:5a:a5:d7:13:44:d1:98:1e:
         f8:42:40:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:27:45 2024 by rpki-client on console-fra.rpki-client.org