Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa
File:                     3130332e36382e3133362e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          ROpvS3RnkfTnhxjuQ32b+fwz7IB+o1xhpNOdiN2KnhA=
Subject key identifier:   6D:B3:B7:66:72:FA:C2:FE:F6:DD:8F:34:7C:91:2D:11:E8:AF:8F:DB
Certificate issuer:       /CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
Certificate serial:       1B025BA9D315D2B941747AB9CC9E0A7E56828E2F
Authority key identifier: B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa
Signing time:             Mon 20 Nov 2023 14:00:01 +0000
ROA not before:           Mon 20 Nov 2023 13:55:01 +0000
ROA not after:            Mon 18 Nov 2024 14:00:01 +0000
asID:                     38511
IP address blocks:        103.68.136.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl
                          rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 14:26:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:02:5b:a9:d3:15:d2:b9:41:74:7a:b9:cc:9e:0a:7e:56:82:8e:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416
        Validity
            Not Before: Nov 20 13:55:01 2023 GMT
            Not After : Nov 18 14:00:01 2024 GMT
        Subject: CN=6DB3B76672FAC2FEF6DD8F347C912D11E8AF8FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:8c:3e:0b:d0:c2:a3:da:12:24:38:f3:8e:25:
                    1d:4a:37:51:cc:05:37:e0:6d:2d:23:ca:7d:7d:48:
                    bd:98:79:1c:87:bc:cf:4b:34:8a:9a:89:38:c1:0c:
                    3a:e4:48:d5:ec:b3:17:97:a8:da:02:f5:2a:7c:4e:
                    93:2e:ab:44:61:e8:fd:c3:33:dc:bd:2e:33:73:2c:
                    7f:98:84:11:1d:97:44:2b:b1:c8:9f:d5:3f:6b:ed:
                    3b:0a:66:c7:66:8c:78:c0:00:e5:22:ca:3a:39:f7:
                    31:95:5c:04:66:13:55:e6:01:0e:d4:02:d4:2e:30:
                    73:95:83:a2:b2:f3:b7:52:86:f5:75:61:79:17:31:
                    21:c1:fa:45:27:4e:a6:5d:23:7a:5e:03:97:48:b2:
                    b0:0a:1e:37:e2:8c:04:b1:eb:44:06:69:68:bf:d4:
                    4e:ae:73:a8:fc:9d:bf:3a:bc:b4:be:73:14:3b:2e:
                    6d:a5:da:89:0d:10:d4:15:ca:87:54:85:9b:c3:a8:
                    5b:89:f3:3b:67:5d:44:4a:1e:c9:6b:c9:fb:aa:f7:
                    72:1b:f3:be:9d:07:7e:e6:71:93:40:6f:78:f2:c6:
                    0d:96:74:a4:16:47:25:22:0e:d7:9a:17:73:fe:8b:
                    01:7a:3b:88:21:01:2a:91:bf:62:55:92:93:89:15:
                    43:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:B3:B7:66:72:FA:C2:FE:F6:DD:8F:34:7C:91:2D:11:E8:AF:8F:DB
            X509v3 Authority Key Identifier:
                keyid:B2:C1:8E:11:C8:53:0B:DF:4E:E3:33:F5:DE:BD:0B:05:5F:9D:A4:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B2C18E11C8530BDF4EE333F5DEBD0B055F9DA416.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93dc1b05-2a69-45b0-8c44-626772276bd9/0/3130332e36382e3133362e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:00:01:0b:c4:ad:c7:7f:32:63:e3:5e:78:ae:dc:10:25:
         05:29:3b:6e:07:24:e4:90:03:a3:ad:e0:b3:3e:ba:00:5d:d9:
         3c:e3:77:31:51:15:98:2b:5e:a7:a9:7d:96:25:4b:a1:72:80:
         ab:0a:05:8e:e5:ca:66:e9:2f:33:86:b6:e4:89:d3:60:69:84:
         de:5f:17:81:1c:ec:35:f1:59:45:d1:76:44:17:e6:1d:dd:2c:
         2a:55:a6:65:19:1d:40:20:4d:fe:c2:db:7e:c9:3b:a4:26:92:
         f8:48:fb:9c:0e:16:c0:94:a0:1b:89:78:36:0a:48:a6:68:8c:
         5e:aa:eb:75:ba:08:ea:aa:58:48:12:3a:87:13:40:ee:bc:94:
         3e:24:07:1a:57:a0:80:eb:2f:d2:6e:96:43:c6:31:93:c2:1b:
         36:3f:c6:03:aa:00:61:f9:e8:40:92:16:b3:a9:19:5e:f4:a1:
         df:2c:15:e4:05:0d:0e:5d:a3:47:ff:e4:ed:bd:f9:72:19:e6:
         36:ed:01:be:0a:ce:53:e3:91:02:2f:e6:94:ed:f3:0f:c8:25:
         84:7e:8f:7b:a1:fe:11:15:2f:97:d1:ca:58:20:b0:4c:40:e8:
         09:c1:63:96:ec:69:3b:97:d5:f2:ae:9d:a8:0f:95:fe:00:63:
         4c:94:32:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 16:08:23 2024 by rpki-client on console-fra.rpki-client.org