Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32332d3233203d3e2039333431.roa
File:                     3130332e32302e38362e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          65Uc7tASorcyS0Qr/CgdB8o/er52YPLXn+SWIjCX6vw=
Subject key identifier:   92:28:A7:DF:8E:FC:B7:BB:D1:59:D9:64:03:7E:95:AF:7A:86:BF:A2
Certificate issuer:       /CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
Certificate serial:       0AD4B130F2AE7634C8E5F262C70128BFFC585D37
Authority key identifier: EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 06 Oct 2023 09:01:17 +0000
ROA not before:           Fri 06 Oct 2023 08:56:17 +0000
ROA not after:            Fri 04 Oct 2024 09:01:17 +0000
asID:                     9341
IP address blocks:        103.20.86.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl
                          rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:d4:b1:30:f2:ae:76:34:c8:e5:f2:62:c7:01:28:bf:fc:58:5d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE2C52F7BE52A0EB695A549A42E701EEE7E45D68
        Validity
            Not Before: Oct  6 08:56:17 2023 GMT
            Not After : Oct  4 09:01:17 2024 GMT
        Subject: CN=9228A7DF8EFCB7BBD159D964037E95AF7A86BFA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e6:5b:c6:e3:c6:50:10:bc:77:d5:78:bb:2f:
                    ae:3e:c8:5e:9e:fd:55:64:b0:c7:b7:05:2f:96:6d:
                    24:1e:ec:82:84:5c:d0:ce:23:d7:60:2e:d1:a7:18:
                    bb:95:0a:83:30:81:08:7d:4c:3a:0e:78:fe:00:06:
                    f6:d0:34:b5:44:60:9c:50:fb:1c:4c:e8:a0:00:c7:
                    58:a3:bc:0a:7b:fb:36:f7:37:26:e9:ca:19:da:b2:
                    17:c7:56:ab:d5:13:bf:15:10:b3:fc:43:78:d6:14:
                    ac:0e:0a:59:aa:6e:d9:63:e7:ac:a3:98:01:64:17:
                    36:dc:71:55:f0:ca:66:37:9b:56:cc:34:46:d5:5b:
                    da:fc:87:ec:b9:3f:37:ba:dc:e9:28:22:02:97:7d:
                    b6:8d:a4:2e:28:6b:e1:f9:c7:34:64:ee:a5:68:50:
                    7f:6a:87:70:84:dd:9e:db:ef:52:ff:a6:9c:76:12:
                    07:f0:b9:a6:cb:0a:ed:53:24:47:9d:d5:47:b1:c8:
                    be:b9:aa:39:54:10:f0:49:cf:b8:62:8f:26:8c:b0:
                    7d:04:95:78:6e:bc:59:ec:d6:6e:bf:94:3f:ee:90:
                    ae:d6:7f:f3:a8:73:0e:b5:2d:e3:09:47:ad:99:ae:
                    c4:83:37:3a:15:dd:82:40:00:32:68:50:e0:65:a0:
                    1e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:28:A7:DF:8E:FC:B7:BB:D1:59:D9:64:03:7E:95:AF:7A:86:BF:A2
            X509v3 Authority Key Identifier:
                keyid:EE:2C:52:F7:BE:52:A0:EB:69:5A:54:9A:42:E7:01:EE:E7:E4:5D:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE2C52F7BE52A0EB695A549A42E701EEE7E45D68.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/aaa489a6-5485-487f-b5dd-8f4edeb46bcb/0/3130332e32302e38362e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:65:af:03:b9:46:85:24:e9:2b:12:2f:e0:4f:bf:a2:60:25:
         c5:ab:57:84:01:b7:2d:fd:4b:3e:72:8f:9a:cb:42:f8:55:d2:
         16:07:b0:f0:28:fc:a2:83:60:77:84:5f:f4:d1:8a:c7:74:e1:
         a2:d5:af:db:24:28:d5:e4:0f:80:4f:ff:de:a1:d2:a2:b2:b6:
         b1:2f:35:6e:ff:23:6f:6d:26:ae:ad:bd:49:3a:87:0d:ac:75:
         f5:12:f3:8b:78:48:17:87:9a:4f:19:d1:0d:72:cf:32:aa:d9:
         74:05:6d:68:a9:53:bf:0f:ee:81:9d:98:e3:15:af:c5:3d:bf:
         4a:2c:e3:56:7a:41:ea:ff:84:7d:64:78:33:fb:b1:0f:40:c0:
         f9:44:72:09:e0:a6:e9:57:d7:cc:66:30:af:f7:ae:d5:13:c1:
         a0:90:47:a2:14:4f:a7:67:e2:77:09:88:28:c8:73:55:36:68:
         af:17:5c:26:22:5c:e8:02:85:50:c7:74:38:87:b3:dd:23:50:
         72:af:35:d1:31:57:68:2b:c8:5e:a3:57:8d:8e:ae:2d:60:66:
         66:7e:6c:93:7d:8b:7f:ee:05:86:a4:c3:28:96:7c:3b:04:86:
         75:0f:8c:0f:fc:0a:29:cc:47:09:71:32:a2:12:d7:fc:a4:16:
         87:3d:71:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:03:10 2024 by rpki-client on console-fra.rpki-client.org