Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa
File:                     3130332e32392e3138342e302f32332d3233203d3e203536323630.roa (raw, json)
Hash identifier:          Nsp3rpvc2YxoshFdcWRRW5YXfWkFYR9yncxDLnk5/TU=
Subject key identifier:   FB:DC:F4:75:CF:38:08:08:0C:BF:5E:BA:01:91:E5:22:FA:22:BC:CD
Certificate issuer:       /CN=4C44F6F543BDBB858D3656D41A36660407672BDE
Certificate serial:       53039D7EE4E7CBAF3674A11658408B49DBE52C5B
Authority key identifier: 4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa
Signing time:             Tue 26 Dec 2023 10:00:34 +0000
ROA not before:           Tue 26 Dec 2023 09:55:34 +0000
ROA not after:            Tue 24 Dec 2024 10:00:34 +0000
asID:                     56260
IP address blocks:        103.29.184.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl
                          rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:03:9d:7e:e4:e7:cb:af:36:74:a1:16:58:40:8b:49:db:e5:2c:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C44F6F543BDBB858D3656D41A36660407672BDE
        Validity
            Not Before: Dec 26 09:55:34 2023 GMT
            Not After : Dec 24 10:00:34 2024 GMT
        Subject: CN=FBDCF475CF3808080CBF5EBA0191E522FA22BCCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:a8:f6:7e:32:4b:26:91:00:49:f1:d2:8e:8d:
                    09:a5:9e:11:e6:81:99:be:e0:db:02:ea:c0:d9:d6:
                    9c:f0:26:81:68:77:88:37:2f:72:14:3f:ab:e1:34:
                    42:37:bc:af:8a:a9:25:4f:d7:a2:aa:8d:e6:13:15:
                    71:3e:2b:1b:5a:42:88:68:dd:db:db:7c:2b:5b:1f:
                    33:ad:1b:b7:a6:a5:6c:90:c0:d4:76:2a:39:3d:7f:
                    78:e3:76:0a:2f:c4:44:3c:e2:33:9c:83:f4:8b:33:
                    74:d2:ed:d1:c9:ed:49:05:d3:4d:9e:af:0a:0d:87:
                    8a:7d:11:5f:b7:5d:60:e8:c6:78:35:20:d7:c3:05:
                    6b:a7:e9:a2:13:e0:7e:9c:65:04:9c:03:a7:71:e9:
                    92:95:8f:94:7a:94:68:6a:9e:fa:d2:38:50:16:a2:
                    be:b9:47:9d:57:bc:3a:3a:77:ec:60:72:0c:16:e1:
                    0b:d8:50:10:c5:16:50:6d:e6:7c:6c:1c:2a:da:86:
                    05:0c:36:6b:60:f6:0b:e8:fe:48:e3:36:e9:b7:67:
                    92:58:0a:ad:7f:9e:18:68:a1:1c:c0:ec:15:da:7c:
                    96:45:fb:ae:2e:00:82:f1:05:e0:ec:7d:ef:53:40:
                    3a:02:6a:77:13:c9:fd:6a:12:01:f1:10:3c:16:f4:
                    2f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DC:F4:75:CF:38:08:08:0C:BF:5E:BA:01:91:E5:22:FA:22:BC:CD
            X509v3 Authority Key Identifier:
                keyid:4C:44:F6:F5:43:BD:BB:85:8D:36:56:D4:1A:36:66:04:07:67:2B:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/4C44F6F543BDBB858D3656D41A36660407672BDE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C44F6F543BDBB858D3656D41A36660407672BDE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/85f2c66c-1f87-4d98-a467-3218b645b3ac/0/3130332e32392e3138342e302f32332d3233203d3e203536323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.29.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:5d:02:2b:7b:4f:a6:17:96:3e:c8:76:6c:b8:84:47:94:5e:
         f5:98:d9:8e:be:ba:0f:5a:0a:ad:bb:7f:99:2b:03:91:04:ad:
         2f:0d:8c:9d:c6:6b:e3:76:eb:c2:93:9f:00:2e:e3:9b:a1:0c:
         db:d5:72:b2:b3:f6:47:d8:bd:98:ef:fe:17:1f:c7:50:88:08:
         34:79:92:f8:1f:84:84:40:62:90:7c:67:09:12:cf:38:26:84:
         47:20:7a:30:55:07:93:68:eb:6a:84:ab:22:ea:9d:11:7d:f2:
         68:3c:eb:31:4f:af:94:82:55:b5:78:fa:0e:fe:50:a3:3c:a7:
         f2:4e:a4:d6:4c:a2:91:ee:fb:9b:7f:a5:bc:6f:4f:19:ae:8f:
         8b:72:75:df:d9:cd:f1:b9:ae:4d:6f:1f:83:ea:38:fc:c8:ac:
         b9:8e:93:8f:81:7c:22:c7:91:57:39:ca:0b:7e:24:4c:7d:ab:
         22:8e:e3:aa:09:1c:40:43:4a:83:0f:bc:58:b4:df:e6:6b:89:
         a9:13:73:33:7d:f5:bc:7a:21:c9:58:ee:27:9e:45:44:cf:bc:
         25:b2:c1:d8:98:8e:d0:b1:91:c7:6e:0b:ed:05:28:fa:2a:0d:
         c7:e0:69:f5:ae:e1:fa:e8:bd:b5:00:cb:73:a5:fd:51:22:aa:
         40:b4:3c:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 13:26:10 2024 by rpki-client on console-ams.rpki-client.org