Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
File:                     3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          YDbaOOS1e3bHhEmSpiBQYE/07b//Wfxp3iDpuyHBong=
Subject key identifier:   5F:73:BB:DD:DA:03:25:B9:40:8F:DB:A1:8C:5B:FA:C8:E7:D2:E9:4C
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       5417C968E723AAB2B6673416830BA096DFFDA469
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
Signing time:             Mon 01 Jul 2024 01:05:24 +0000
ROA not before:           Mon 01 Jul 2024 01:00:24 +0000
ROA not after:            Mon 30 Jun 2025 01:05:24 +0000
asID:                     135451
IP address blocks:        103.96.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:17:c9:68:e7:23:aa:b2:b6:67:34:16:83:0b:a0:96:df:fd:a4:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jul  1 01:00:24 2024 GMT
            Not After : Jun 30 01:05:24 2025 GMT
        Subject: CN=5F73BBDDDA0325B9408FDBA18C5BFAC8E7D2E94C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f4:1a:8c:9d:25:80:b0:4d:af:32:c8:ff:bf:
                    a3:d8:c0:21:b8:b3:86:41:11:77:c8:a2:98:43:77:
                    03:f5:97:83:e9:db:72:b4:e3:78:90:19:7a:62:6f:
                    f6:12:1e:16:f0:1c:7b:bc:93:07:1e:fd:a1:75:6c:
                    0b:46:36:d8:11:52:f9:a4:27:02:9f:f0:be:40:f5:
                    86:8c:cb:b8:c5:b2:d2:21:dd:93:a4:68:7d:8e:6e:
                    44:c7:37:8a:f7:5f:bb:7c:0c:66:cc:f4:df:38:db:
                    1a:de:5a:a7:a4:df:21:23:b6:2f:8c:90:28:e5:5e:
                    05:e8:92:a5:74:e9:57:ab:fc:1b:29:f6:fb:cf:60:
                    d8:d2:56:01:0c:61:10:94:7e:b2:05:c2:90:1c:55:
                    df:b6:a6:1b:2d:b2:0c:0f:09:7f:cf:a1:11:a7:3d:
                    60:ba:90:5e:e3:b8:a3:f8:27:90:e4:2c:44:ba:8a:
                    e8:b0:13:12:06:07:3f:5e:cf:21:52:f2:dc:ce:9b:
                    9a:f7:3a:82:a9:4d:a6:9e:ad:02:f8:b3:75:4e:d3:
                    87:65:36:b9:01:64:bf:29:1a:b7:44:6a:0e:e9:b0:
                    57:d2:9d:48:1d:58:81:ad:c7:69:1f:bf:41:a9:97:
                    32:f1:8f:2f:cd:5f:fd:72:ae:cd:2b:27:a3:25:62:
                    fa:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:73:BB:DD:DA:03:25:B9:40:8F:DB:A1:8C:5B:FA:C8:E7:D2:E9:4C
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:32:2a:e1:85:4f:30:ad:dd:8d:28:78:62:7a:71:1e:dc:e5:
         03:88:66:1c:98:d5:88:c0:b2:4e:74:a9:3a:a0:07:ae:b9:be:
         30:f9:80:19:c9:ce:bc:ad:c0:a9:c4:8f:56:24:05:d2:69:66:
         8a:06:98:b0:ef:63:f2:8e:8f:b3:23:8a:7c:75:40:34:cf:08:
         c6:00:44:7f:5b:cc:ef:f1:0e:72:2b:95:70:d0:c1:fd:4b:44:
         0f:27:c4:f6:76:e9:7d:74:d0:af:a5:a6:03:83:3b:60:22:48:
         f5:4a:35:16:a3:89:2c:13:c0:9a:9b:32:85:a6:4b:af:c7:81:
         ec:fc:a8:7d:ce:f4:55:86:05:62:9e:a0:02:56:4a:9d:bb:a0:
         7c:d8:83:37:0a:62:88:64:8a:4b:49:08:8a:d9:7f:79:17:16:
         5a:3d:35:4c:3c:51:96:a5:49:fc:4e:04:be:53:6a:20:21:44:
         7f:63:e7:38:98:b1:c6:c7:a4:7c:d5:f1:16:27:9f:b7:5e:40:
         53:0b:a7:80:57:07:ed:96:cd:63:6c:c6:ab:b1:2f:a9:4f:73:
         a2:17:31:67:77:9c:e3:64:d4:97:d3:fc:58:68:41:98:f5:c8:
         08:77:10:21:2d:66:27:a4:63:cb:83:57:e8:0e:f8:ed:6c:08:
         40:b2:e3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:25:08 2024 by rpki-client on console-ams.rpki-client.org