Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
File:                     3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa (raw, json)
Hash identifier:          wMT5Uti780H/voTnheIDTy/4tLxmM/JtNUucmvcTdoI=
Subject key identifier:   CB:1C:11:68:12:84:1E:CC:55:05:89:2B:D8:13:BA:25:60:84:94:87
Certificate issuer:       /CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
Certificate serial:       606E28D8ABB249024F08A98193B2C44A9ABAD64E
Authority key identifier: F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa
Signing time:             Thu 28 Dec 2023 12:09:14 +0000
ROA not before:           Thu 28 Dec 2023 12:04:14 +0000
ROA not after:            Thu 26 Dec 2024 12:09:14 +0000
asID:                     211407
IP address blocks:        103.195.65.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl
                          rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:6e:28:d8:ab:b2:49:02:4f:08:a9:81:93:b2:c4:4a:9a:ba:d6:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA
        Validity
            Not Before: Dec 28 12:04:14 2023 GMT
            Not After : Dec 26 12:09:14 2024 GMT
        Subject: CN=CB1C116812841ECC5505892BD813BA2560849487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ca:c1:53:84:f2:e9:42:18:23:3f:fc:0b:5d:
                    f2:5e:d3:e5:25:89:e2:5b:16:8d:45:50:fa:b8:88:
                    52:22:a5:ef:01:31:c8:02:97:2e:fe:2f:08:97:b0:
                    39:97:af:12:9e:40:09:77:35:df:8e:23:42:73:33:
                    16:5e:d3:3a:f6:ab:16:05:bc:4f:8f:57:6e:39:81:
                    ac:fc:75:21:0f:2f:49:28:48:d5:0c:7f:0a:38:05:
                    dc:29:e7:a9:ec:5b:77:d9:b2:04:16:82:00:04:cb:
                    aa:74:0b:c3:74:2f:c6:38:6f:1f:72:31:86:1a:a7:
                    ba:61:41:50:16:03:7f:b4:22:dd:d5:bb:87:48:d8:
                    46:96:9d:09:59:18:6e:56:96:06:42:34:20:98:9d:
                    a1:45:9f:af:a1:35:85:b2:fb:d6:0d:58:f2:a8:88:
                    cf:36:9a:09:9b:69:c2:1e:e9:d1:10:57:60:ce:e0:
                    c7:70:9f:a2:24:c8:9b:90:05:8f:cf:a3:49:20:d6:
                    53:6e:32:b8:c5:ee:4e:1f:46:00:75:a2:a3:7d:70:
                    3e:79:b6:f3:c8:33:7f:10:32:8d:97:b5:5e:8b:72:
                    77:ba:57:31:96:04:ca:b9:6c:08:95:63:4b:e8:92:
                    0e:52:5a:d0:ba:c6:60:e8:da:9c:29:e4:74:da:4e:
                    56:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1C:11:68:12:84:1E:CC:55:05:89:2B:D8:13:BA:25:60:84:94:87
            X509v3 Authority Key Identifier:
                keyid:F8:E1:2F:0A:43:3C:8B:73:3B:E3:1D:B5:E0:CD:1E:F2:02:FC:21:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8E12F0A433C8B733BE31DB5E0CD1EF202FC21EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80ce4796-49de-43b1-a152-b18d11ada529/0/3130332e3139352e36352e302f32342d3234203d3e20323131343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.195.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:36:a4:19:f5:cd:5a:39:be:75:f3:68:14:c2:64:f5:32:0c:
         fe:e4:8e:54:74:04:a2:47:9d:eb:ca:66:ed:16:21:2d:61:38:
         3c:b4:20:50:34:77:81:4a:af:b9:2e:38:40:28:3d:97:e8:05:
         76:bb:cc:27:ce:9d:e1:bf:4b:4c:f4:16:69:f4:d3:46:78:fa:
         c1:f0:5a:2b:f5:fa:c1:fa:87:86:4d:f6:16:3a:7a:f3:ac:c3:
         56:ca:0f:bc:68:bf:52:c1:72:d3:b4:7e:00:6b:19:cc:d2:2d:
         a0:2b:8f:2e:51:8b:24:a7:eb:ea:e5:1a:c7:44:e8:a8:d4:d6:
         4c:58:bb:af:33:8b:b0:e5:80:26:42:50:08:6f:07:eb:a0:d0:
         be:7e:f2:59:fe:1c:1c:54:4f:69:db:c8:e6:72:f6:9c:76:77:
         ed:fe:a0:d0:24:4c:b0:37:cb:7f:d5:dd:e6:c8:91:0f:9a:9f:
         c2:64:66:69:4f:33:f8:c1:e9:c3:b3:cb:42:06:59:bd:85:8e:
         44:8e:6f:f2:08:7e:90:33:86:09:7b:80:9d:1a:7e:5f:50:ee:
         b6:71:31:fb:10:82:66:af:eb:94:06:cf:29:d1:6e:2f:e0:1d:
         0b:a8:29:2d:18:49:8b:34:95:e7:cd:d7:6c:f0:18:df:d1:50:
         3d:93:5b:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org