Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
File:                     3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (raw, json)
Hash identifier:          vjkRybTZyEq0act5WTkvvx3z10jCHDylNRjQJ9+NkHc=
Subject key identifier:   C6:84:89:18:F9:11:5E:96:BF:87:D8:F5:60:37:44:1B:46:51:5D:B8
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       200F8C140F88B1D4F0D2BD8F70CAF27090C03B89
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa
Signing time:             Sat 12 Aug 2023 12:10:07 +0000
ROA not before:           Sat 12 Aug 2023 12:05:07 +0000
ROA not after:            Sat 10 Aug 2024 12:10:07 +0000
asID:                     137366
IP address blocks:        103.116.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:0f:8c:14:0f:88:b1:d4:f0:d2:bd:8f:70:ca:f2:70:90:c0:3b:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Aug 12 12:05:07 2023 GMT
            Not After : Aug 10 12:10:07 2024 GMT
        Subject: CN=C6848918F9115E96BF87D8F56037441B46515DB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:77:1e:49:fc:e0:ca:1f:5e:c1:b9:51:be:81:
                    ff:e6:7a:fa:b9:6a:67:7a:3c:26:d3:8e:df:d8:c4:
                    5c:c4:6c:9b:68:88:95:f1:b3:18:1a:06:41:46:6d:
                    6a:10:e6:9d:e6:9c:71:fe:8a:8e:dd:d2:c2:de:86:
                    ae:15:b0:62:02:64:b9:0f:50:d0:1d:65:31:cc:70:
                    f7:a5:c5:25:e1:60:87:bd:66:e1:d5:21:20:73:7e:
                    5a:ec:c8:9a:92:89:72:f2:8a:03:24:01:68:90:4c:
                    b4:9a:00:99:56:bf:5c:2a:2e:d6:38:fc:8e:02:34:
                    bb:0b:ca:f7:5d:74:a3:cf:7d:4a:e1:40:24:f9:2d:
                    d8:df:4f:83:24:b6:18:10:24:99:60:77:db:dc:b2:
                    44:44:74:cf:cf:c5:90:32:80:34:47:1d:ff:70:0a:
                    c6:e5:37:7b:90:c2:11:ab:f8:3e:69:dc:da:64:52:
                    00:85:ac:ba:7a:4d:ee:b9:1e:20:b1:6f:2b:b9:3f:
                    f5:5f:8f:60:d5:03:19:1c:6f:71:fd:a1:52:c1:33:
                    1a:29:97:74:6f:8b:75:3a:09:e1:1a:c1:3e:78:22:
                    79:39:02:0f:41:71:70:d3:00:68:27:ed:3a:c5:0d:
                    68:82:06:15:0c:c0:80:14:fe:7d:2a:59:28:85:9f:
                    c3:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:84:89:18:F9:11:5E:96:BF:87:D8:F5:60:37:44:1B:46:51:5D:B8
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:38:df:0e:64:15:23:be:3d:27:42:22:09:42:c3:b6:bd:59:
         cc:3e:66:67:27:77:55:22:92:fe:6e:e3:a9:66:a0:98:68:e6:
         4f:4b:73:b9:c3:e8:12:03:a0:a0:69:43:74:83:74:20:0e:e3:
         23:7c:a0:f9:0f:15:2b:cd:31:5c:63:b6:da:b3:51:a9:c8:09:
         3a:34:3d:5d:9f:cf:e3:5b:20:39:eb:bf:22:85:5e:c1:93:e2:
         1c:a1:0f:03:81:e1:8c:a0:da:a0:16:ca:86:be:2e:4d:b5:65:
         58:7b:7c:1d:5c:33:78:d7:3e:2b:c5:ae:70:ed:90:88:56:96:
         2d:4f:8e:25:c9:7c:36:2a:0e:44:e0:82:79:f6:c2:7f:2d:ad:
         c3:11:ec:4c:c7:f7:80:16:4f:b7:bc:1d:9a:03:89:a4:cb:e4:
         18:91:d0:a7:f8:01:f2:0d:47:fe:f0:16:49:99:4a:9f:cd:62:
         09:15:b7:f2:17:fe:c6:24:f9:9a:a2:59:2c:e2:3a:ce:4c:c7:
         3a:1b:e1:80:f6:f0:f8:83:24:fd:8b:5e:77:9d:03:f2:09:9f:
         99:33:af:5c:3a:0d:6e:ed:f8:fa:58:24:8a:8c:ce:f6:c0:9a:
         e6:55:6b:81:27:5e:00:60:82:d4:fc:1a:17:3b:b5:14:62:d4:
         b2:0f:4a:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 06:27:17 2024 by rpki-client on console-fra.rpki-client.org