Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
File:                     3130332e36382e302e302f32322d3232203d3e20313335343539.roa (raw, json)
Hash identifier:          oFZC2kRBkSHJSAAhUHwtuUOn8BkeHg/lZamkhCDyHAg=
Subject key identifier:   FE:F1:F8:19:ED:23:74:C2:45:D7:9E:A4:8B:34:CA:09:2C:7E:76:DA
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       0E6D86C49DEA9C64BFF4A9F20D3CC1B4ED80ABD2
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa
Signing time:             Wed 15 May 2024 09:00:53 +0000
ROA not before:           Wed 15 May 2024 08:55:53 +0000
ROA not after:            Wed 14 May 2025 09:00:53 +0000
asID:                     135459
IP address blocks:        103.68.0.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6d:86:c4:9d:ea:9c:64:bf:f4:a9:f2:0d:3c:c1:b4:ed:80:ab:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: May 15 08:55:53 2024 GMT
            Not After : May 14 09:00:53 2025 GMT
        Subject: CN=FEF1F819ED2374C245D79EA48B34CA092C7E76DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:01:0d:cf:9d:e5:32:28:f3:aa:40:7d:24:3c:
                    a1:1f:d4:1f:10:5b:c4:7c:95:24:b6:c9:e6:fb:ac:
                    b0:35:dc:7c:e3:d6:13:70:e1:8e:79:a3:1c:51:ca:
                    2d:27:6f:8d:e3:d9:5d:83:0f:0f:d6:84:e6:a5:10:
                    e6:fd:a1:32:48:8e:a9:83:30:93:82:26:91:21:fb:
                    ec:55:b4:a2:84:71:fa:3c:d5:a2:14:cd:25:fd:70:
                    2e:b2:00:39:c2:18:b4:1a:69:f6:9e:f2:47:27:2e:
                    3d:65:6f:96:7b:71:6c:e9:47:88:ae:d6:1e:19:8c:
                    57:47:da:5b:f9:7d:9d:f3:24:da:07:87:c6:e0:a5:
                    3b:89:4f:67:2e:bb:ac:b9:0b:50:49:d3:bb:67:43:
                    cf:93:58:af:6d:2c:32:9e:61:c2:b5:3c:de:c9:7e:
                    ff:06:4d:e5:00:a1:5d:9b:85:07:12:ab:3e:ea:1a:
                    73:e1:84:ce:82:05:be:29:be:f9:84:55:85:94:8f:
                    65:6d:7d:db:78:54:d9:45:03:29:4f:55:21:e7:eb:
                    9a:4c:db:54:78:87:0e:5b:4b:a5:ee:ad:ba:47:76:
                    b8:a5:8b:73:2b:9d:e2:52:14:ad:82:31:18:25:b0:
                    d8:24:ac:87:1a:24:cd:4c:17:c0:03:9e:9d:06:d2:
                    c8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F1:F8:19:ED:23:74:C2:45:D7:9E:A4:8B:34:CA:09:2C:7E:76:DA
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e302e302f32322d3232203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:99:04:8f:86:44:81:e4:0f:cf:bc:af:63:55:1e:8f:f9:43:
         e3:6e:78:56:e8:98:91:64:1b:e0:40:c5:ef:cc:31:b4:0c:e5:
         a1:19:74:fc:51:07:87:ee:d2:81:d4:28:81:99:30:76:01:d9:
         99:c3:8e:8e:d6:c9:9f:88:d3:f2:b2:c0:1e:25:ae:f3:e0:37:
         c7:72:9e:38:65:6b:ca:de:7c:60:c0:85:10:d3:a3:35:ed:10:
         ad:8f:2a:4c:32:d1:af:98:b4:57:9e:b4:f4:39:35:1a:72:51:
         2a:4a:c3:b7:a7:b9:51:ff:7b:59:cc:af:30:7e:09:d3:6b:68:
         0c:0c:88:eb:18:bf:b7:ed:1c:69:3a:1e:8d:f7:e2:11:16:c9:
         8f:95:60:ad:9b:08:c5:89:24:bb:75:68:68:13:cb:34:dd:77:
         1a:9c:2d:6a:27:0f:58:1e:71:27:ca:8a:92:82:60:6a:08:48:
         85:d7:6d:ee:ec:66:2f:ac:8e:6f:07:2c:94:60:7a:48:f0:16:
         09:51:b6:4e:bd:ac:90:be:fb:03:d7:3f:fa:1c:21:f1:eb:30:
         88:2e:91:45:c5:e7:60:45:d1:49:09:88:f0:48:00:f9:cd:e3:
         58:51:51:e0:b6:b9:3a:d7:e9:c0:b3:44:a6:3f:57:9d:af:5a:
         ed:5d:94:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org