Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34362e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          xHrYTXOxZag0p2mpTPSa60kYzihupucJrJV9czXgXDM=
Subject key identifier:   80:5E:DE:55:CE:06:5C:D1:8A:93:9C:B5:EB:91:7D:88:DD:3E:BA:3B
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       0F6AF00D8E25D843C1A8591C40EA29B506A4EB71
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 06 Jul 2023 11:00:01 +0000
ROA not before:           Thu 06 Jul 2023 10:55:01 +0000
ROA not after:            Thu 04 Jul 2024 11:00:01 +0000
asID:                     23694
IP address blocks:        103.66.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:6a:f0:0d:8e:25:d8:43:c1:a8:59:1c:40:ea:29:b5:06:a4:eb:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Jul  6 10:55:01 2023 GMT
            Not After : Jul  4 11:00:01 2024 GMT
        Subject: CN=805EDE55CE065CD18A939CB5EB917D88DD3EBA3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:35:13:fd:9a:b0:86:b0:1a:e4:4c:dc:92:
                    6e:47:f0:52:fc:03:bc:99:b5:13:23:c0:f0:40:77:
                    b5:d3:0f:fa:1c:60:57:ff:33:d4:b3:fa:a2:44:f8:
                    03:62:b5:0c:e0:6b:2c:90:17:bc:76:3f:5b:b7:02:
                    a9:8a:7c:d8:46:a2:31:51:65:09:b2:0b:a2:0e:af:
                    8a:df:e7:dc:86:53:a5:d6:1f:ab:b7:32:15:cc:5e:
                    c9:8d:b8:7b:ab:fc:48:86:d0:a8:81:53:e5:dd:6e:
                    65:bf:23:03:99:85:8b:57:61:a0:7e:0f:a8:10:fe:
                    d4:98:a3:0b:55:0d:c2:c5:9e:3b:6b:ea:de:43:7e:
                    b2:6c:f5:30:7f:39:85:4d:c6:13:c6:a5:76:2c:b5:
                    5c:a2:55:9b:c1:b3:d8:97:1d:70:28:d9:3e:e5:03:
                    93:dd:7c:66:98:cf:31:6b:50:6d:13:39:f3:6d:b7:
                    40:d2:19:d8:d6:99:bd:4b:e0:e7:7d:d4:b9:5e:f2:
                    85:ea:63:01:99:43:3f:7f:4c:4b:fd:81:62:9d:73:
                    f3:98:da:90:06:6c:92:a4:c6:d7:66:cd:62:07:b6:
                    e5:7a:e3:27:b1:06:24:fe:ed:87:2a:a9:3c:5d:65:
                    34:d4:91:d6:d0:75:a9:05:19:9b:35:d2:4e:0d:19:
                    33:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:5E:DE:55:CE:06:5C:D1:8A:93:9C:B5:EB:91:7D:88:DD:3E:BA:3B
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34362e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ba:0d:9c:35:56:22:37:ab:29:56:d3:d2:4e:c6:c1:f0:3c:96:
         99:a9:0e:e8:66:30:b9:0a:cf:8b:dd:cb:bd:58:25:03:b2:5a:
         54:37:1c:10:fe:57:7d:fa:6f:04:a1:80:69:b2:7c:dc:f7:fb:
         6a:0d:87:92:fe:9d:b4:79:f8:43:b2:6b:22:bb:ed:60:bb:dd:
         17:44:5c:b7:c6:f7:84:43:8a:2f:2f:cd:98:c6:5f:ea:68:f6:
         c4:09:8a:04:13:79:43:bc:26:cf:1d:6a:e1:af:1c:3c:d6:88:
         3a:38:55:8e:0b:33:84:6a:33:7f:c7:77:50:bc:38:9b:2d:89:
         dc:09:eb:4e:6a:af:b9:47:a0:a4:9c:7d:2d:6b:7b:78:ad:83:
         25:87:69:60:80:79:11:1c:99:ab:4e:9e:02:af:34:a4:87:aa:
         d6:a5:26:63:e9:26:81:00:a4:6d:6a:d3:a0:88:23:06:e2:0d:
         2b:ce:57:e3:5b:39:8c:36:1c:f0:ff:5f:8f:58:15:0a:14:0d:
         84:a3:3b:50:3b:c6:43:9a:a5:69:c4:9a:f1:11:01:5a:37:1c:
         70:95:58:03:35:0f:33:33:c1:9b:79:ed:97:e9:c9:e6:c3:6b:
         e9:67:b2:46:3a:62:c9:bf:a8:1d:88:79:c7:65:16:3b:74:f1:
         ff:90:92:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:14:09 2024 by rpki-client on console-fra.rpki-client.org