Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa
File:                     3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa (raw, json)
Hash identifier:          mTKfnsXDpQ3lDb7R9UvQa0w7vYUu7HvsYj73+4NjOmA=
Subject key identifier:   8F:50:86:38:BE:EB:7F:42:9E:02:64:F7:11:25:A9:47:D8:2D:ED:33
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       2637E9C20991BA284700DE43BABF8A2A6BF2A413
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa
Signing time:             Thu 14 Dec 2023 07:00:29 +0000
ROA not before:           Thu 14 Dec 2023 06:55:29 +0000
ROA not after:            Thu 12 Dec 2024 07:00:29 +0000
asID:                     141630
IP address blocks:        203.161.22.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 14 May 2024 19:06:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:37:e9:c2:09:91:ba:28:47:00:de:43:ba:bf:8a:2a:6b:f2:a4:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Dec 14 06:55:29 2023 GMT
            Not After : Dec 12 07:00:29 2024 GMT
        Subject: CN=8F508638BEEB7F429E0264F71125A947D82DED33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:bb:30:38:92:d1:b9:64:69:71:89:46:ea:04:
                    3f:9c:f5:13:1f:f3:91:d1:91:15:5c:b9:0c:ac:5c:
                    b0:c7:99:61:85:74:2e:5d:9a:2c:e1:b0:28:24:8f:
                    a8:a6:f5:20:ff:58:ca:5e:b5:a7:0f:4b:eb:c5:65:
                    99:7e:16:35:65:3d:1e:f3:b7:a9:9f:02:3f:d9:38:
                    55:ba:b7:21:a0:ed:27:e8:84:2c:30:f8:10:bd:06:
                    5d:06:1a:13:4d:54:e9:a4:fd:45:a6:f7:bc:bf:c3:
                    12:a4:44:2f:f0:c4:c4:df:42:e1:19:32:3e:d6:cc:
                    34:97:2a:a1:0c:20:3c:4c:09:6c:94:26:2b:34:fc:
                    36:10:1a:d1:a6:60:a5:ae:1d:49:f5:a5:21:31:37:
                    1a:4c:a9:b8:fe:92:78:99:8e:be:bf:3c:7f:e3:aa:
                    3b:c9:bd:d6:27:8f:cf:c7:2e:37:35:58:74:30:99:
                    e0:b5:ea:d8:09:27:ed:00:a7:53:35:64:07:15:a0:
                    1a:18:6e:d0:b1:54:52:d5:c1:ce:5b:2a:0c:7a:b6:
                    03:55:af:8f:61:8b:9d:1d:67:d6:6f:45:28:8a:de:
                    3f:b5:10:1e:cc:20:12:67:84:a0:f0:6c:de:7e:0d:
                    19:81:1f:75:c8:a5:ee:57:40:7e:94:ed:8e:16:ed:
                    ab:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:50:86:38:BE:EB:7F:42:9E:02:64:F7:11:25:A9:47:D8:2D:ED:33
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3230332e3136312e32322e302f32342d3234203d3e20313431363330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.161.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:93:c6:77:70:c6:20:ce:c3:e6:4b:7e:34:2d:b5:d2:70:1f:
         c1:38:3e:d6:43:cf:6e:ee:fb:de:61:80:16:87:fb:51:e9:be:
         84:ce:d6:b8:e6:5e:19:e2:f1:5a:52:0e:5a:53:6c:b1:47:f0:
         e9:8a:84:f1:2a:18:e9:d1:b2:8d:12:21:5d:d2:de:d9:c7:7b:
         e4:dd:ed:4e:10:f2:31:6f:97:ab:ab:e4:2e:b4:c0:06:9e:ed:
         cc:97:0c:52:47:c1:82:a5:f4:31:da:c7:9a:35:ec:ad:49:6a:
         4f:a1:6f:c9:e4:24:be:f0:d6:ee:28:80:af:58:c6:c1:1b:ea:
         ff:f9:a5:6e:11:83:07:ad:2c:47:a6:e3:0a:0d:9b:b7:21:a9:
         26:76:9e:cc:b5:3c:70:14:cc:1d:a2:08:38:17:23:0d:67:4b:
         bc:89:45:70:0e:17:eb:19:52:bc:09:a6:0a:e3:52:6c:2d:24:
         52:2e:d9:cc:a2:73:84:72:05:1b:c3:3a:82:78:c0:04:30:02:
         ae:f3:87:77:e6:ab:e3:8d:75:82:b2:2d:d4:1c:e2:49:e8:5f:
         cc:a6:19:54:0d:18:03:4e:fa:20:29:90:5b:f3:ce:fa:27:a4:
         0a:c6:98:c7:f8:a3:1e:bb:2c:36:25:23:df:94:f8:f8:63:90:
         69:9b:a3:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 12 05:44:04 2024 by rpki-client on console-ams.rpki-client.org