Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa
File:                     3130332e32302e3139302e302f32342d3234203d3e203435373331.roa (raw, json)
Hash identifier:          pRYg4QOXg2bX2KaZClSnUpJbKSyY0C4fS4YrMITJrSc=
Subject key identifier:   82:06:89:E2:A8:1B:1D:A0:BE:3A:66:D5:65:5B:2F:FD:FF:0E:7E:7F
Certificate issuer:       /CN=B6F0131510E62F73E5F29246F9C8F691811A704D
Certificate serial:       13EEF89F411CA53195EF9BD4B58493F1A1E77D28
Authority key identifier: B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa
Signing time:             Mon 01 Jul 2024 01:05:49 +0000
ROA not before:           Mon 01 Jul 2024 01:00:49 +0000
ROA not after:            Mon 30 Jun 2025 01:05:49 +0000
asID:                     45731
IP address blocks:        103.20.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl
                          rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ee:f8:9f:41:1c:a5:31:95:ef:9b:d4:b5:84:93:f1:a1:e7:7d:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F0131510E62F73E5F29246F9C8F691811A704D
        Validity
            Not Before: Jul  1 01:00:49 2024 GMT
            Not After : Jun 30 01:05:49 2025 GMT
        Subject: CN=820689E2A81B1DA0BE3A66D5655B2FFDFF0E7E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:29:0c:0f:bd:1d:89:2b:1b:09:62:20:2e:fb:
                    82:78:c0:7b:bb:02:f6:2e:75:e8:fb:6e:4d:25:29:
                    30:f8:67:5e:de:7b:e2:1e:5e:96:c2:66:5b:c0:e0:
                    6d:d7:9c:fc:65:bf:46:c3:ab:a1:f8:d8:6f:87:4f:
                    5f:3a:a3:31:66:c0:68:66:31:5f:a6:0b:2c:82:64:
                    47:cb:6a:af:d8:de:74:f7:90:7b:56:68:01:3d:f2:
                    ce:ad:f8:a5:ca:b3:3a:35:e0:4e:a7:cd:c2:49:23:
                    85:fb:9e:96:03:cd:ca:7d:33:8b:c1:6c:cf:f3:fe:
                    2d:c0:6b:77:ab:7f:91:20:96:1e:e2:a1:8e:58:5d:
                    9a:67:1d:ac:65:7b:6b:32:14:42:66:9d:89:04:5a:
                    f1:3e:88:eb:bb:8d:cf:b8:ad:38:16:9f:6f:01:ce:
                    63:e2:ca:51:bc:f1:dd:30:e7:18:34:1e:9e:b3:4a:
                    80:46:ab:6d:15:59:89:a2:51:1f:46:da:bc:49:d5:
                    33:8d:58:81:4b:83:77:71:04:d0:b2:dd:53:58:8b:
                    2a:0e:97:88:7b:c9:6c:d8:b2:79:d9:e6:e5:9c:6f:
                    73:ab:ce:2d:16:5a:7e:20:82:38:f5:3c:2d:a9:9c:
                    4b:a4:9f:c5:81:08:69:1a:cd:66:5e:19:da:c0:2f:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:06:89:E2:A8:1B:1D:A0:BE:3A:66:D5:65:5B:2F:FD:FF:0E:7E:7F
            X509v3 Authority Key Identifier:
                keyid:B6:F0:13:15:10:E6:2F:73:E5:F2:92:46:F9:C8:F6:91:81:1A:70:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/B6F0131510E62F73E5F29246F9C8F691811A704D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F0131510E62F73E5F29246F9C8F691811A704D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85d8dab4-8bb6-4ed0-8dab-5a406167b99d/0/3130332e32302e3139302e302f32342d3234203d3e203435373331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:b7:49:ad:ae:f1:12:19:4c:22:22:3e:e6:f6:6b:d7:c3:05:
         d6:c8:96:9e:22:0b:6b:87:ac:25:59:e6:60:2b:8d:f5:70:9d:
         a6:13:b4:77:12:26:3f:04:80:aa:00:e4:7a:bb:30:e8:b5:c9:
         39:4a:4a:14:56:00:29:1a:a9:19:4f:8b:69:5b:8f:6b:ef:fa:
         5a:f4:96:47:5c:2b:a8:89:57:c9:61:7f:01:00:b4:42:31:f2:
         e3:43:47:62:a8:60:9e:ce:53:e8:98:30:08:10:29:9a:48:3f:
         9f:1a:fc:dd:43:f8:0b:40:2e:74:5f:8f:83:e6:02:fc:38:ce:
         88:55:2e:95:34:fb:b7:72:e4:6c:6e:21:ed:71:d2:53:b4:3c:
         a8:6c:9f:e9:8e:c7:00:11:22:a5:48:d4:1d:ba:6a:b7:78:39:
         31:21:71:48:3d:22:64:9c:7d:08:be:43:0e:fc:fd:85:2c:4c:
         11:5d:be:c9:e7:21:38:f1:65:2d:5f:d6:da:a6:ac:e2:47:48:
         0c:60:96:0a:58:a7:9d:f0:86:42:c2:2e:46:8a:3c:1a:51:34:
         d2:58:57:90:21:9e:34:1f:eb:ec:bf:7e:32:f7:0a:7a:4b:5a:
         58:d8:c0:d8:42:50:79:d9:65:1f:b8:e6:1f:bb:38:25:3f:8d:
         66:60:87:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:10:18 2024 by rpki-client on console-fra.rpki-client.org