Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa
File:                     3130332e36382e332e302f32342d3234203d3e20313335343539.roa (raw, json)
Hash identifier:          Q4INmFgyHV2q/3eme/9wh097anFX2uLA1TkwYOMJUg4=
Subject key identifier:   B2:D6:6F:02:8A:32:6C:32:30:F9:7F:52:A3:8D:0A:3C:05:F9:FC:56
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       71CA86DA406549F68EFDF2C69B28E5BFB4A0C143
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa
Signing time:             Wed 20 Dec 2023 18:00:01 +0000
ROA not before:           Wed 20 Dec 2023 17:55:01 +0000
ROA not after:            Wed 18 Dec 2024 18:00:01 +0000
asID:                     135459
IP address blocks:        103.68.3.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 01:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ca:86:da:40:65:49:f6:8e:fd:f2:c6:9b:28:e5:bf:b4:a0:c1:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Dec 20 17:55:01 2023 GMT
            Not After : Dec 18 18:00:01 2024 GMT
        Subject: CN=B2D66F028A326C3230F97F52A38D0A3C05F9FC56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:27:16:e1:ad:47:d9:71:2e:24:01:75:d2:6b:
                    e9:c6:de:e8:21:6f:01:b6:62:28:73:77:94:4b:9d:
                    3e:fb:3b:76:f8:53:a7:7e:9b:c4:cb:8a:ff:26:62:
                    71:8a:d5:ef:b3:12:11:64:73:a0:02:85:7f:dd:75:
                    3a:37:6c:b4:b7:78:54:5c:4a:2f:98:35:5c:ec:46:
                    c4:c7:81:40:6e:b0:19:79:32:51:60:cf:3d:53:4b:
                    29:46:77:4d:0f:df:14:32:59:3f:c5:66:1d:57:54:
                    1f:f6:6b:4f:a8:78:2f:88:84:bf:a9:1e:9a:af:e1:
                    20:02:7a:ae:3b:05:81:b0:27:c1:3e:4e:5a:fd:38:
                    35:94:c6:06:ad:84:b8:12:4e:da:b5:33:66:16:de:
                    26:b0:85:bb:16:26:fe:91:20:76:64:87:fc:6c:cc:
                    e6:16:8e:ca:9e:72:dd:db:4e:d2:d3:08:ed:c8:d1:
                    4e:26:45:fd:88:c5:9c:f6:cf:8d:8c:02:57:61:6b:
                    44:90:db:2d:f1:fc:7d:c4:4e:7f:a0:8b:e8:41:11:
                    bc:8f:85:b0:c3:5a:6c:cb:b0:84:62:47:d3:81:bc:
                    95:ce:b3:3d:34:4b:b5:d4:72:a7:ff:93:f6:ae:83:
                    c2:66:93:f4:cb:f4:4e:64:68:b5:ec:31:b9:6c:14:
                    e8:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D6:6F:02:8A:32:6C:32:30:F9:7F:52:A3:8D:0A:3C:05:F9:FC:56
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e332e302f32342d3234203d3e20313335343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:01:76:f8:fb:d0:60:de:d1:3b:03:1a:08:b9:1f:4c:53:2f:
         e2:28:f2:32:cd:20:fa:6f:08:3e:a5:df:ef:07:74:eb:c5:41:
         bd:15:1c:a9:1e:0a:bc:e3:6c:50:bc:38:a5:03:f7:c5:d4:00:
         bd:b6:cd:c2:67:1f:f0:56:04:f0:5a:6f:1c:fa:9c:e4:04:0d:
         5b:e4:c6:42:19:d8:dd:30:6d:6c:88:f1:8c:8e:48:56:b2:f5:
         05:db:03:e6:96:b6:ae:46:d6:0e:74:af:4e:c9:12:30:75:41:
         4c:2b:71:79:36:7b:7c:21:73:94:cf:cc:45:8b:db:b3:2c:8d:
         69:a4:fb:2c:28:ba:95:49:03:55:3d:71:ae:6a:8f:77:66:35:
         4a:08:92:46:73:20:e6:c5:c0:38:5e:be:53:d7:8b:d8:31:92:
         ed:7d:65:52:b3:fc:f3:68:1f:c5:13:0b:45:35:01:98:16:58:
         6f:f9:9a:05:7f:57:61:33:69:e3:ee:79:23:de:9f:84:0f:cf:
         35:25:24:6b:01:7c:ef:d9:ca:77:4d:31:f6:12:ac:97:7e:a8:
         7a:5c:a8:c8:ad:a3:31:b1:fc:92:61:23:37:d3:b0:97:17:3e:
         b2:3d:a6:f2:d5:a0:39:74:84:48:6f:41:58:5a:1b:1e:23:3e:
         74:b7:c7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:05 2024 by rpki-client on console-ams.rpki-client.org