Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa (raw, json)
Hash identifier:          u0L6Umjx9LGryzxVqPuOkxOIRG5b1COEPe7Yz0X2yN0=
Subject key identifier:   95:1B:D8:8F:81:9E:74:D6:01:29:76:49:E8:8E:03:7B:97:8C:29:09
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       2AB70AD9481E6066695F85D9173D4E3943826AF1
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa
Signing time:             Wed 18 Oct 2023 10:21:27 +0000
ROA not before:           Wed 18 Oct 2023 10:16:27 +0000
ROA not after:            Wed 16 Oct 2024 10:21:27 +0000
asID:                     210537
IP address blocks:        103.195.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 05:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:b7:0a:d9:48:1e:60:66:69:5f:85:d9:17:3d:4e:39:43:82:6a:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Oct 18 10:16:27 2023 GMT
            Not After : Oct 16 10:21:27 2024 GMT
        Subject: CN=951BD88F819E74D601297649E88E037B978C2909
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:44:d1:a6:cb:0d:5e:5b:55:ba:5d:69:e0:2c:
                    b1:7b:2e:3a:db:41:1b:9d:9f:5d:2c:e3:b9:ff:23:
                    ff:8a:26:68:ec:b0:52:f2:e0:4b:31:e1:cb:c4:34:
                    6c:3d:d1:9d:29:66:21:f1:20:52:75:24:d7:41:60:
                    ac:3f:62:9f:96:30:bb:23:8a:86:4a:e5:fb:6b:4d:
                    bd:40:6b:49:6a:06:4d:6c:43:75:22:4b:3f:40:a5:
                    2e:1b:93:60:6d:83:ba:98:40:ae:80:20:07:da:a0:
                    7c:99:ad:47:6b:97:ca:64:f3:25:aa:6d:52:d7:01:
                    2c:3e:f2:4d:d1:da:b1:f6:30:bf:d8:20:eb:8b:0c:
                    a1:1b:31:79:a2:6f:ee:6a:ec:34:5e:dd:df:4d:43:
                    39:42:69:08:a3:e7:5f:d7:9e:7b:7d:68:77:d9:85:
                    c8:df:fa:c3:e1:91:20:8d:bf:a8:93:b4:8c:11:aa:
                    93:17:b1:0e:c1:9e:7f:f1:06:36:6e:3d:c4:c4:e9:
                    da:3a:a1:a6:6c:b5:2b:f5:4b:aa:c5:65:52:bb:3b:
                    40:a6:02:d4:8c:ba:aa:bf:07:3f:f1:34:15:93:8a:
                    a8:ee:b1:2c:10:0b:4a:3f:3e:15:68:b9:85:c1:c5:
                    94:a4:23:af:2a:c4:a2:a7:b4:92:8c:38:6a:bf:2b:
                    3a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1B:D8:8F:81:9E:74:D6:01:29:76:49:E8:8E:03:7B:97:8C:29:09
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323130353337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:29:5d:3c:d5:84:0c:70:e5:4f:74:c8:ac:4e:12:e7:a9:aa:
         76:6d:d4:f0:68:05:1b:3b:3c:ac:16:79:c8:99:06:04:2b:f0:
         19:83:37:63:9a:39:db:7b:55:8e:5c:1b:e1:1f:6e:0d:22:7f:
         6b:ed:97:c7:43:c1:c9:3f:cd:75:30:21:60:99:88:82:5c:e8:
         f0:69:c1:79:ef:7a:ff:97:14:c3:6b:0c:37:13:43:c3:7a:1e:
         ab:f2:14:3f:ff:04:82:40:83:15:bd:f4:59:d2:52:89:23:a9:
         22:99:02:f0:f0:4e:89:16:ec:17:82:82:95:a6:a5:1d:e1:35:
         84:8c:44:17:b1:b5:f3:82:09:46:d5:ed:0a:2f:46:8c:db:8c:
         1c:4d:04:03:c4:35:90:65:7b:2d:33:b5:50:a8:00:b9:c4:2c:
         5c:7f:2f:ce:0c:df:b6:53:56:b9:32:75:c7:78:94:dc:93:6f:
         2c:13:6a:34:1e:08:4c:f3:fb:fb:e3:35:91:69:b0:14:5d:63:
         59:40:aa:1c:90:83:a0:40:ed:f7:02:1c:af:85:03:00:50:f5:
         8b:ac:0d:5a:59:09:39:96:ae:3f:a0:56:f5:ed:79:1a:41:60:
         c9:3a:37:8a:54:6c:c8:a2:7d:d8:e2:91:02:74:71:d1:7c:2b:
         40:4d:b3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 00:28:24 2024 by rpki-client on console-fra.rpki-client.org