Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa
File:                     3130332e38352e31322e302f32322d3234203d3e20313336303736.roa (raw, json)
Hash identifier:          tT/s2Y8JdJ4v/dB3f+CUGBmTxa0PDKPf+wvU9Fb49OM=
Subject key identifier:   EE:7B:A2:05:0E:4F:02:2B:38:59:D4:C7:A9:72:35:E9:35:02:09:60
Certificate issuer:       /CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
Certificate serial:       34F1DE3BC3F8283983D5D2E8DBB13B8CE33B6352
Authority key identifier: 34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa
Signing time:             Mon 01 Jul 2024 01:05:12 +0000
ROA not before:           Mon 01 Jul 2024 01:00:12 +0000
ROA not after:            Mon 30 Jun 2025 01:05:12 +0000
asID:                     136076
IP address blocks:        103.85.12.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl
                          rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:f1:de:3b:c3:f8:28:39:83:d5:d2:e8:db:b1:3b:8c:e3:3b:63:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C216B3A625831CC41C6A7A1460CF9DDF656B86
        Validity
            Not Before: Jul  1 01:00:12 2024 GMT
            Not After : Jun 30 01:05:12 2025 GMT
        Subject: CN=EE7BA2050E4F022B3859D4C7A97235E935020960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:83:b9:b9:b9:dd:79:8f:c1:52:e0:4b:e9:30:
                    3d:6e:ae:a6:c0:b0:2e:3b:cb:a8:3c:08:18:d6:45:
                    eb:e7:9e:0e:14:f1:07:22:ac:0b:58:c3:7e:38:cd:
                    2d:ff:41:b3:38:2d:1b:cf:8f:12:8f:f6:7e:8b:40:
                    aa:d4:41:ee:1a:62:01:52:97:b3:67:55:1d:4f:ad:
                    a9:a1:14:f1:90:2f:21:14:f3:17:9a:0b:3b:bd:57:
                    e8:e1:b3:80:2d:88:87:57:7b:8e:05:5a:ed:23:18:
                    b4:7a:35:a8:1f:20:7b:05:b5:ae:83:fe:02:fb:ff:
                    a8:7e:20:46:cd:81:da:46:5d:cf:92:fe:30:20:51:
                    50:87:03:74:b0:6d:d5:12:dd:84:f4:17:cc:8f:48:
                    e1:bf:0f:c1:79:13:a1:5a:d7:72:30:d0:01:db:69:
                    95:29:04:4e:7b:04:99:41:e2:b9:c9:c8:b9:52:0e:
                    73:32:49:98:66:57:d8:70:bb:64:91:46:8b:b4:bf:
                    61:0e:3d:45:93:f2:a9:4c:9c:03:d0:ad:c2:a3:7c:
                    32:96:8b:4e:e3:5b:7e:00:fb:9a:5e:2a:27:fd:cc:
                    b5:a2:2e:96:8d:a8:20:d4:a8:e4:6b:90:79:54:38:
                    ed:19:09:6c:c3:88:6e:6f:32:58:66:c3:76:53:a8:
                    08:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:7B:A2:05:0E:4F:02:2B:38:59:D4:C7:A9:72:35:E9:35:02:09:60
            X509v3 Authority Key Identifier:
                keyid:34:C2:16:B3:A6:25:83:1C:C4:1C:6A:7A:14:60:CF:9D:DF:65:6B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/34C216B3A625831CC41C6A7A1460CF9DDF656B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C216B3A625831CC41C6A7A1460CF9DDF656B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c700350-6632-49e2-b7e3-5d573224c56c/0/3130332e38352e31322e302f32322d3234203d3e20313336303736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d1:e0:33:71:5b:33:58:36:4a:5b:13:da:dc:9a:52:7d:ab:ee:
         2e:04:56:08:ce:24:45:01:3d:95:90:81:64:73:62:2f:dc:3f:
         16:cc:e3:5f:1d:2c:7e:45:fb:9a:f0:34:fb:39:18:a5:ef:4d:
         5d:d7:f7:ed:4d:b3:50:bb:a7:e1:d6:16:0a:46:a5:9e:b8:fc:
         db:d6:12:03:9c:1b:c5:74:98:0a:e4:63:7a:10:9b:5a:71:07:
         7e:3c:9c:22:de:58:35:1d:93:ff:2f:e4:46:8b:c5:14:b8:14:
         7d:9e:00:ea:d5:7b:8f:78:35:08:28:e0:11:3d:d8:83:65:32:
         77:40:cf:c6:d6:2e:22:38:39:13:b3:0b:37:68:21:67:8e:ca:
         5d:df:13:da:5a:46:39:78:72:b4:50:40:29:21:c5:f2:40:07:
         81:1f:6a:78:00:81:50:9b:d3:9d:cd:46:12:b4:df:62:78:f7:
         9b:ca:24:49:12:22:0f:31:66:a5:d4:7c:75:34:03:6a:bc:c4:
         28:64:1c:94:6f:4a:0c:3a:eb:7b:83:5b:b8:fd:68:d8:ee:68:
         82:d5:9c:31:1c:a6:2c:a6:cb:10:be:fa:4b:f3:37:00:d1:af:
         35:9a:e1:8f:55:cd:e5:5a:b9:4e:77:b9:d4:cd:ef:51:c9:41:
         fe:fc:2f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org