Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
File:                     3130332e38302e39342e302f32332d3233203d3e20313439393138.roa (raw, json)
Hash identifier:          3v1uWRjHFptpMM4huD8BUEZcTeNYOlsq7x0nDfZhmu0=
Subject key identifier:   39:C8:26:F2:21:6D:B0:8E:07:CC:C7:8E:70:12:FA:60:E4:06:03:FA
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       63A4BAC2F93368D823EAD0DCE4AAB948D555A203
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa
Signing time:             Wed 19 Jun 2024 04:00:00 +0000
ROA not before:           Wed 19 Jun 2024 03:55:00 +0000
ROA not after:            Wed 18 Jun 2025 04:00:00 +0000
asID:                     149918
IP address blocks:        103.80.94.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl
                          rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:a4:ba:c2:f9:33:68:d8:23:ea:d0:dc:e4:aa:b9:48:d5:55:a2:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Jun 19 03:55:00 2024 GMT
            Not After : Jun 18 04:00:00 2025 GMT
        Subject: CN=39C826F2216DB08E07CCC78E7012FA60E40603FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:19:7a:b6:83:25:aa:62:6a:98:0d:c9:c6:97:
                    7d:00:1c:03:73:e9:b5:26:01:90:f0:a5:60:30:94:
                    55:90:c0:14:16:6a:14:1d:f5:22:f8:1c:8a:8b:4e:
                    be:bc:43:a5:72:49:8a:48:44:ae:a3:40:75:90:e5:
                    94:6a:08:e7:67:37:d2:9c:57:3d:74:3b:c5:41:8e:
                    62:48:ee:c1:b5:c6:c8:13:c2:4f:17:48:ea:a2:38:
                    9e:83:f4:99:9d:3e:d5:7f:7a:61:7b:2d:83:1d:3a:
                    a1:a5:ed:8c:09:fa:ad:88:ef:22:03:04:f0:78:6e:
                    45:90:28:01:6b:42:d0:e4:c0:ff:23:3d:18:c9:38:
                    dd:99:68:49:1f:f9:c7:49:82:75:5e:bf:d3:6f:07:
                    b6:45:5a:ce:0f:28:4c:e9:d6:2b:dc:b5:6e:99:f6:
                    11:33:31:4e:ed:af:5b:b5:aa:6c:ab:9b:bc:69:22:
                    48:b3:29:c8:df:87:18:e2:42:9d:0a:02:9a:1e:e0:
                    43:d2:66:b4:7f:76:7b:e2:ca:b1:2e:72:53:fd:a6:
                    6b:ba:40:e7:8a:8d:59:e4:85:27:bf:c9:26:7e:82:
                    10:b3:e2:05:6a:96:97:b8:d5:65:2c:f3:50:39:4f:
                    b5:d2:f2:a7:c1:23:88:39:71:d9:9d:d4:6a:b8:14:
                    dd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:C8:26:F2:21:6D:B0:8E:07:CC:C7:8E:70:12:FA:60:E4:06:03:FA
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:e2:51:47:f6:6b:3c:15:db:55:17:8d:e6:e8:91:fd:d3:98:
         01:35:ce:a6:eb:d7:b1:75:ec:22:ee:88:c1:45:15:ea:32:a7:
         5f:f3:ec:d2:14:7d:2b:02:58:46:aa:db:30:1e:41:94:ff:c0:
         40:b3:10:62:d7:1e:5a:2d:f5:62:db:ed:a6:d6:0a:02:3b:69:
         de:4b:84:7f:5c:42:1d:33:87:0b:ce:99:5b:8e:ab:ed:3f:0a:
         2c:da:10:0f:dc:a4:74:84:c2:2e:12:6c:9d:b5:d7:62:6b:b9:
         d6:e8:15:fe:69:4f:c3:61:21:41:7d:42:60:e3:a4:da:ed:03:
         1e:1e:5b:da:51:34:cd:c5:e9:1d:cb:53:9f:25:56:e2:55:e7:
         11:3c:94:4b:8e:2d:50:98:d3:4c:5e:6d:1d:95:aa:c2:33:4f:
         e9:a7:e8:65:6c:d0:40:20:90:f8:46:e3:69:30:fd:97:7e:4a:
         d6:5e:15:3a:6e:a3:b8:b3:3a:1f:bd:1e:3c:d6:46:d1:86:af:
         45:58:c9:8a:51:8f:97:83:bb:22:a7:dc:4f:60:a0:d2:8f:ee:
         28:d9:80:54:e0:fb:a9:26:18:8c:4d:cb:e6:0c:68:33:79:1c:
         b2:be:72:81:c0:4a:3c:f4:ef:6e:bb:a0:db:f0:41:7b:7e:08:
         97:e4:00:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 17:55:28 2024 by rpki-client on console-fra.rpki-client.org