Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
File:                     3130332e362e33342e302f32342d3234203d3e20313332363334.roa (raw, json)
Hash identifier:          dJybva3DyBfw0oVXQRRuEZV6Qk6dg0iDH+GIP6YtJ2E=
Subject key identifier:   35:7F:C9:05:B5:B4:B2:56:60:19:3F:3D:1C:F8:73:36:70:B9:56:09
Certificate issuer:       /CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
Certificate serial:       06E0023B030661CD10FDA40249413C4B392B8CA2
Authority key identifier: 0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa
Signing time:             Sat 13 Jan 2024 04:00:01 +0000
ROA not before:           Sat 13 Jan 2024 03:55:01 +0000
ROA not after:            Sat 11 Jan 2025 04:00:01 +0000
asID:                     132634
IP address blocks:        103.6.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl
                          rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:e0:02:3b:03:06:61:cd:10:fd:a4:02:49:41:3c:4b:39:2b:8c:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B47BFC94FDCEC084CD7B35536C8510E41F55130
        Validity
            Not Before: Jan 13 03:55:01 2024 GMT
            Not After : Jan 11 04:00:01 2025 GMT
        Subject: CN=357FC905B5B4B25660193F3D1CF8733670B95609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:b2:cb:77:74:ac:a8:ac:9d:d8:5d:c5:03:20:
                    ff:1a:88:aa:e6:51:f5:7f:e9:c3:76:3a:5e:ca:e3:
                    cc:d0:70:63:52:ec:5b:14:cf:ac:f9:d2:31:d6:f0:
                    56:2d:bb:49:e5:33:26:f9:a2:0c:1e:c1:99:c5:cb:
                    56:51:42:66:32:a8:27:2a:9e:ee:e4:f0:cf:d0:e9:
                    b7:af:a4:3b:e5:a7:b3:44:91:2c:52:26:cc:60:6d:
                    e3:ad:12:0b:1d:58:a3:06:0b:af:28:23:ef:fa:f1:
                    b1:4f:4f:04:e9:5f:31:8a:59:94:ad:19:67:71:10:
                    84:ec:29:44:4f:8e:2c:b2:10:52:b6:f4:47:44:57:
                    3f:46:e6:bb:55:e7:16:ae:7c:7c:3f:58:89:5e:17:
                    f7:7e:98:1a:09:27:a3:50:93:83:9a:a0:88:9c:7c:
                    a8:b4:58:ff:aa:6e:82:8e:dd:e7:b8:af:03:e7:4f:
                    7f:92:4a:e8:8b:12:3c:46:79:e5:f3:ce:4b:36:9a:
                    64:58:1f:bc:37:7c:6d:1a:f0:a3:64:f7:e4:27:ec:
                    c1:24:ad:48:91:8d:ee:a9:96:33:a9:f9:b8:4d:92:
                    70:20:a8:87:6b:a8:be:d9:64:c1:ad:ae:6c:1e:2d:
                    58:df:5d:07:9c:93:f1:b2:cd:fd:22:97:c9:7a:3f:
                    54:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:7F:C9:05:B5:B4:B2:56:60:19:3F:3D:1C:F8:73:36:70:B9:56:09
            X509v3 Authority Key Identifier:
                keyid:0B:47:BF:C9:4F:DC:EC:08:4C:D7:B3:55:36:C8:51:0E:41:F5:51:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/0B47BFC94FDCEC084CD7B35536C8510E41F55130.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B47BFC94FDCEC084CD7B35536C8510E41F55130.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20f7be06-9672-4641-97bd-9bfdf955de17/0/3130332e362e33342e302f32342d3234203d3e20313332363334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.6.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:e2:13:ec:3b:4e:70:fb:15:f3:f8:12:f7:e8:1b:e5:ae:e4:
         3d:0f:6d:e9:d8:6a:e3:0b:5e:aa:c2:71:ff:c6:28:85:1f:dc:
         b3:fb:2e:fe:44:87:a4:93:6d:bf:b5:13:dc:64:d4:63:f4:30:
         dc:8b:9e:23:02:48:ea:b7:2c:60:72:5e:e1:9b:e4:62:ff:8b:
         6b:5f:54:73:e2:aa:08:9f:63:fd:35:9e:15:e1:10:61:a1:04:
         cc:0d:a6:d6:66:e5:84:34:24:b4:db:e7:ef:81:1b:86:a6:bb:
         62:45:19:b1:33:68:ee:b2:e2:87:98:28:ce:f3:94:6b:c2:15:
         06:9f:9f:25:14:5c:56:9b:3d:a3:38:c9:ef:a0:51:35:6e:f4:
         a1:82:b5:08:2f:8c:96:26:14:aa:31:25:1b:12:eb:3a:aa:2b:
         6a:7f:e9:6b:5d:e5:1b:2c:6c:c4:1f:39:60:25:dd:46:9c:d7:
         fb:fa:cc:9b:ba:8e:47:c8:3b:03:94:57:a2:c2:2d:1b:0e:fd:
         58:e2:82:89:36:8a:06:9c:fa:d6:13:26:05:7a:14:0b:7b:d6:
         3f:a1:e6:d9:b0:3e:a5:25:2f:df:5b:4d:7f:78:9e:ac:26:35:
         4d:a6:b8:f9:26:ad:9c:92:9e:58:d9:27:99:31:45:92:69:1f:
         65:53:a4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org