Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa
File:                     3130332e38352e3131362e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          WcGj0ObkgxCU53BdpWZzmm4KE9p2EiLdO7o1CB3m7Vc=
Subject key identifier:   29:D8:23:D4:0E:16:BF:D8:DD:78:E2:3D:66:15:2B:D8:C6:B4:ED:8C
Certificate issuer:       /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
Certificate serial:       4E179FFA0FCBA990AF2EB26A810B9BC15A22FE29
Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa
Signing time:             Thu 31 Aug 2023 05:00:00 +0000
ROA not before:           Thu 31 Aug 2023 04:55:00 +0000
ROA not after:            Thu 29 Aug 2024 05:00:00 +0000
asID:                     63874
IP address blocks:        103.85.116.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl
                          rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:17:9f:fa:0f:cb:a9:90:af:2e:b2:6a:81:0b:9b:c1:5a:22:fe:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
        Validity
            Not Before: Aug 31 04:55:00 2023 GMT
            Not After : Aug 29 05:00:00 2024 GMT
        Subject: CN=29D823D40E16BFD8DD78E23D66152BD8C6B4ED8C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f5:8f:6c:b7:cd:17:27:eb:16:56:9e:bb:17:
                    19:c7:94:d4:da:a9:a2:72:57:09:f0:50:00:e7:39:
                    67:97:18:01:b4:ae:15:96:d1:a2:85:90:3f:e8:e4:
                    7f:ea:56:4d:27:ab:a8:3f:78:a2:31:00:af:ef:a0:
                    13:0f:29:c8:e7:6e:38:4c:01:79:d3:f0:ac:0d:b4:
                    e8:cd:54:5f:22:7c:60:62:cf:f2:7b:83:22:22:9a:
                    93:bc:8f:d7:5b:01:21:ff:a2:41:fa:02:ee:11:a2:
                    28:a8:f3:a8:36:c2:82:a8:fd:81:d6:7d:16:7d:8b:
                    4a:6c:98:c4:9a:1e:85:bc:5d:f8:29:3b:ae:48:c5:
                    9d:b8:e3:41:98:fd:e2:63:3f:68:aa:31:7d:d3:e6:
                    84:64:44:75:90:8c:bb:ec:9a:bf:10:19:01:eb:c6:
                    b1:1f:a7:04:bc:b1:83:14:0b:8f:bf:12:b6:d7:bd:
                    cc:e5:7d:eb:d4:6b:2c:3d:cc:82:e4:ed:c1:87:26:
                    32:1c:05:05:da:ac:e4:cb:f8:f3:c4:4f:12:57:b5:
                    63:68:51:86:59:de:23:71:a6:82:1c:92:27:f5:b4:
                    41:5d:69:ab:6c:4a:10:e5:91:9c:7f:e1:5e:b6:43:
                    57:88:b4:3a:c3:d7:02:fe:f4:59:85:ab:67:35:11:
                    a8:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:D8:23:D4:0E:16:BF:D8:DD:78:E2:3D:66:15:2B:D8:C6:B4:ED:8C
            X509v3 Authority Key Identifier:
                keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e38352e3131362e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:53:8b:11:64:8e:f0:96:4a:05:3a:df:22:9b:70:c5:e0:1c:
         fe:97:7f:68:1b:04:fc:7a:a8:08:47:e9:67:aa:c1:c4:5c:1f:
         dd:60:44:83:7a:24:49:20:53:5b:82:8c:0a:e5:b7:47:1f:7a:
         30:7e:b7:85:e3:0e:c0:92:b5:a6:26:46:6d:5a:3c:47:79:a7:
         91:73:d6:fa:fe:5c:9e:7c:1d:cb:3e:62:cb:a6:56:ea:80:9c:
         7c:34:b0:30:c5:30:a0:5e:33:c1:9a:18:42:54:69:73:8d:df:
         91:0a:59:d1:1c:43:30:9e:d1:fd:cf:4d:8c:6f:dd:e5:a5:50:
         d3:d5:d4:d3:29:cc:b6:f6:a6:1b:3a:45:07:4c:3d:89:f6:3d:
         4d:d6:96:d9:3e:b8:44:f6:3d:93:9c:77:fb:ca:29:1a:0f:2b:
         f6:5d:52:32:03:45:0c:a3:2b:14:38:b8:10:39:66:e0:43:0a:
         89:9b:f1:36:80:c4:52:d4:c3:b4:47:1d:66:9e:4b:54:a3:74:
         22:00:c9:47:e1:65:29:3d:c4:08:d4:84:bb:84:f6:00:78:21:
         14:00:cd:44:33:b7:32:92:1a:9f:17:c2:7e:75:09:a4:07:96:
         85:27:8f:9c:c7:1a:f5:24:c6:ff:e8:ce:83:3d:c6:29:54:4b:
         ac:ef:a2:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:22 2024 by rpki-client on console-ams.rpki-client.org