Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
File:                     3130332e36362e34372e302f32342d3234203d3e203233363934.roa (raw, json)
Hash identifier:          Sgx32MhbFX+LuBkfZz9cheSTEtwkKgK/VvHJ4jyLMyc=
Subject key identifier:   3E:B1:E5:9E:89:12:5A:4B:68:18:92:F5:2C:84:13:CB:96:55:A4:07
Certificate issuer:       /CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
Certificate serial:       0FF019A0DED76D6A308255D8230ADB08AF290523
Authority key identifier: 3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa
Signing time:             Thu 06 Jul 2023 12:00:01 +0000
ROA not before:           Thu 06 Jul 2023 11:55:01 +0000
ROA not after:            Thu 04 Jul 2024 12:00:01 +0000
asID:                     23694
IP address blocks:        103.66.47.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl
                          rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:f0:19:a0:de:d7:6d:6a:30:82:55:d8:23:0a:db:08:af:29:05:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0D060F214DF8E6493243033EBD30ABD627ED36
        Validity
            Not Before: Jul  6 11:55:01 2023 GMT
            Not After : Jul  4 12:00:01 2024 GMT
        Subject: CN=3EB1E59E89125A4B681892F52C8413CB9655A407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:42:b0:4f:1d:d8:29:49:0a:3c:30:05:3c:fe:
                    57:27:07:7b:de:3a:73:cd:33:fb:71:22:33:21:c1:
                    fb:ec:03:b5:e7:99:4f:1b:61:88:2f:7c:fc:a1:2d:
                    e9:07:ff:94:58:4c:79:7f:d6:49:01:63:23:e7:99:
                    77:56:c8:24:01:10:42:ed:fa:b8:de:23:da:bc:04:
                    8b:66:f3:d9:31:d6:a3:49:4c:f0:24:b8:46:6d:08:
                    0b:2e:55:59:31:72:7d:b9:ec:82:4e:18:98:7b:79:
                    52:9f:f1:20:ec:9e:b4:e2:59:ba:65:23:3e:5d:4b:
                    4d:ae:22:05:c1:21:be:b3:68:6f:53:ef:d7:2f:ef:
                    3c:5d:eb:8c:d7:a6:ea:4c:7b:76:b8:0b:ca:87:e3:
                    f3:b8:57:0a:58:86:8d:d4:7f:3c:d1:19:86:7d:72:
                    3e:ff:50:00:e9:09:47:d5:1b:e9:d0:b0:36:d8:9d:
                    ae:99:61:94:04:a5:64:67:c0:66:1c:5c:fe:14:53:
                    8b:1d:83:61:be:13:bb:66:be:3e:75:db:bd:15:64:
                    e7:6d:2d:d1:c7:51:27:8b:15:46:f2:d7:4a:df:ed:
                    d5:d3:39:43:2b:b2:32:1b:43:fa:e1:dd:1b:23:ce:
                    34:f1:e2:06:f2:9d:86:17:e9:dc:30:97:a2:4a:f8:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B1:E5:9E:89:12:5A:4B:68:18:92:F5:2C:84:13:CB:96:55:A4:07
            X509v3 Authority Key Identifier:
                keyid:3E:0D:06:0F:21:4D:F8:E6:49:32:43:03:3E:BD:30:AB:D6:27:ED:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3E0D060F214DF8E6493243033EBD30ABD627ED36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0D060F214DF8E6493243033EBD30ABD627ED36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b4f8511-07b3-4a61-bd04-2e665c9278fc/0/3130332e36362e34372e302f32342d3234203d3e203233363934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:cb:a8:2f:1a:ca:99:4b:0c:b0:97:31:aa:17:c2:cf:ed:67:
         c2:43:7b:c7:9f:4e:f3:5d:d3:e4:06:f4:c5:ba:4d:3e:05:09:
         d9:4d:02:71:15:b0:1c:76:09:b5:1f:49:19:46:1c:91:1e:84:
         91:0a:b1:3b:f3:c5:8b:0f:9c:cb:5a:37:ad:b2:9d:9f:bb:24:
         22:41:b9:52:79:22:73:a9:32:5d:5d:a8:a5:60:7d:75:4f:95:
         c7:f2:cc:37:f6:f8:05:4a:66:59:77:52:ea:49:8b:13:3a:ea:
         9a:61:e1:d3:ee:9d:c7:6e:63:6e:90:f6:6d:42:8c:78:8b:2a:
         e9:16:d2:8a:64:a2:a3:e9:52:dd:e6:95:a9:df:81:16:ac:c1:
         2a:3d:31:ea:60:2d:12:a8:73:35:d8:48:73:a7:64:88:75:c4:
         a5:5d:48:af:59:ec:02:13:0d:3c:5d:18:3f:9f:4c:23:b0:c2:
         5b:af:36:8e:1f:15:42:84:31:26:a4:76:3a:9b:4b:85:de:55:
         0c:f7:c1:aa:ec:b5:35:02:32:9b:6d:c5:66:b9:97:54:f9:ac:
         6b:83:ae:fc:68:95:77:d2:c0:c4:40:39:b5:98:22:db:38:44:
         c8:fa:d6:9c:6e:8b:52:79:f5:15:86:57:d0:ed:46:f1:2b:bb:
         04:0e:ce:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:15 2024 by rpki-client on console-ams.rpki-client.org