Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
File:                     3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa (raw, json)
Hash identifier:          0MVDItb8C3FhhIC7rIXn6NwP5T0CtYBqh4iPu/lAKuA=
Subject key identifier:   22:55:1B:60:AF:87:1F:CD:D7:67:9C:7B:92:B4:2D:92:88:76:90:67
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       40223945789B89352CF26B4D09EBA006F4F07847
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa
Signing time:             Fri 07 Jun 2024 15:47:25 +0000
ROA not before:           Fri 07 Jun 2024 15:42:25 +0000
ROA not after:            Fri 06 Jun 2025 15:47:25 +0000
asID:                     152366
IP address blocks:        103.13.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Nov 2024 14:46:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:22:39:45:78:9b:89:35:2c:f2:6b:4d:09:eb:a0:06:f4:f0:78:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jun  7 15:42:25 2024 GMT
            Not After : Jun  6 15:47:25 2025 GMT
        Subject: CN=22551B60AF871FCDD7679C7B92B42D9288769067
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0f:e4:2b:c5:38:4f:fd:96:7a:e4:88:23:e9:
                    ec:ea:46:64:3b:6c:dd:d8:79:06:b2:08:46:58:80:
                    07:d9:56:0e:5d:2b:52:05:b4:42:05:6d:ff:0b:09:
                    cd:5b:6a:11:93:22:98:c9:3a:ed:46:08:87:20:04:
                    f1:10:b5:66:2e:72:18:44:4b:fe:61:1a:9c:30:e7:
                    11:3b:81:db:7f:dc:86:dc:49:b7:10:61:97:e6:76:
                    20:78:a9:32:86:8a:92:41:31:1a:9d:d2:ba:c5:6f:
                    97:81:98:1e:80:d8:aa:6c:96:60:b3:63:ef:72:15:
                    99:27:a4:4c:99:32:09:6c:ec:d4:1e:e0:ac:69:2a:
                    86:97:46:ea:1a:81:f3:72:9e:d4:c5:09:2f:fa:61:
                    99:a9:34:aa:07:c9:67:ea:84:b6:2f:4b:6e:dd:e3:
                    cc:93:81:e6:b9:58:e3:2e:bf:09:01:e5:d4:fa:c4:
                    87:9e:44:4d:b8:84:c4:d3:ad:96:ad:37:eb:88:b4:
                    21:39:80:e4:d1:96:75:a1:55:2c:05:03:19:d4:72:
                    7f:81:b2:f3:38:ea:96:95:c2:6b:32:c1:b1:40:04:
                    b5:57:90:de:cf:09:48:05:ab:d6:e0:89:28:b1:54:
                    17:6a:af:06:b1:0b:45:3b:11:25:4c:0e:4a:40:bc:
                    13:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:55:1B:60:AF:87:1F:CD:D7:67:9C:7B:92:B4:2D:92:88:76:90:67
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230352e302f32342d3234203d3e20313532333636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:72:48:f7:01:90:90:0e:ba:73:81:4b:40:a9:f8:44:c7:b0:
         6d:10:b9:00:24:01:27:a2:07:0e:ae:ac:c6:86:28:33:d5:bb:
         e1:be:b4:ba:34:af:f9:67:20:67:3c:90:e7:7a:ec:91:c5:40:
         d3:61:98:13:8f:e6:ac:ee:32:75:58:05:2d:56:56:a7:21:96:
         f7:90:79:ff:8f:75:66:b3:96:b9:7a:2e:08:89:92:70:3e:28:
         34:81:3c:2a:2f:b4:26:d0:d2:e6:c2:e6:fc:6e:40:ff:57:c1:
         00:c0:57:ff:d7:50:6f:2d:50:b0:44:25:4c:68:96:f9:10:77:
         a3:89:61:20:7f:1e:96:87:cd:5f:6c:06:24:4d:9a:13:57:5b:
         a7:b4:df:98:3c:07:1d:3a:6a:28:6e:c0:72:22:e2:75:91:c5:
         47:6a:71:f6:4d:7f:7f:44:35:b0:09:a8:38:3c:08:c6:63:9a:
         93:cf:14:5e:6b:b1:0f:e5:23:b9:ca:9d:b7:8f:1d:e9:64:c9:
         db:19:b9:9c:7c:59:5c:38:b6:84:0a:ff:b2:e7:8a:b2:51:19:
         54:1e:65:a7:a6:94:b7:e0:94:0f:a6:7e:a3:2d:52:40:12:b0:
         78:a9:0f:90:58:81:1d:32:8b:b2:aa:a4:3c:49:ad:3f:53:05:
         70:12:d3:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 13:30:08 2024 by rpki-client on console-ams.rpki-client.org