Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
File:                     3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          M04lbY81cSgReu/x5nMfcW4XL5j03JobsQGzMj/Vmmw=
Subject key identifier:   84:E1:91:D7:92:42:7D:49:79:7B:BD:3C:45:A0:84:41:82:E5:86:3F
Certificate issuer:       /CN=1976DD7D4FBDFBEB355F0B96690613959E106872
Certificate serial:       706DD61D7E54FED6A86F82FF28FEDAA49AA0F483
Authority key identifier: 19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa
Signing time:             Mon 01 Jul 2024 01:04:05 +0000
ROA not before:           Mon 01 Jul 2024 00:59:05 +0000
ROA not after:            Mon 30 Jun 2025 01:04:05 +0000
asID:                     55699
IP address blocks:        103.193.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl
                          rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:6d:d6:1d:7e:54:fe:d6:a8:6f:82:ff:28:fe:da:a4:9a:a0:f4:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1976DD7D4FBDFBEB355F0B96690613959E106872
        Validity
            Not Before: Jul  1 00:59:05 2024 GMT
            Not After : Jun 30 01:04:05 2025 GMT
        Subject: CN=84E191D792427D49797BBD3C45A0844182E5863F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:33:e5:33:11:8f:e2:35:21:85:d0:1b:e7:8d:
                    39:ce:2a:2f:42:97:01:4b:1f:b6:99:ad:22:15:a9:
                    0e:ae:5c:19:7f:c9:2d:01:5c:8e:23:71:74:88:9a:
                    88:43:dc:33:7f:df:3f:1d:9d:4d:32:ed:e5:4d:35:
                    6f:f6:e4:e6:d0:20:24:06:68:32:1d:1f:96:ac:f0:
                    d9:c5:fa:61:52:f9:10:47:5a:98:ee:be:dc:1b:cc:
                    78:ca:25:c4:ab:1f:ab:86:98:a2:15:95:0f:c6:fe:
                    b1:de:a4:aa:5a:d7:f1:7d:3e:f0:91:41:0f:fb:78:
                    2e:16:18:31:be:57:44:ec:47:d7:5b:9d:c6:b2:94:
                    86:d7:bf:47:6e:4e:32:47:8a:27:c7:dc:b8:3a:87:
                    c5:75:69:91:1d:58:53:34:91:5b:a4:7a:c6:2d:63:
                    9c:16:bc:b1:83:9a:20:96:07:02:69:c6:de:ae:a8:
                    91:1c:67:30:d7:0c:72:5c:51:b9:5a:ee:c4:9b:49:
                    59:dc:aa:6e:a9:96:b7:4a:56:28:5f:fb:54:eb:4d:
                    bb:7f:d9:d4:89:2b:9b:b1:52:b3:96:38:3e:0a:1a:
                    c8:30:86:37:8b:b5:ca:c8:00:c2:4d:39:64:23:6f:
                    d9:c3:fa:32:87:a3:ac:66:2d:3f:c5:bb:ae:ba:84:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E1:91:D7:92:42:7D:49:79:7B:BD:3C:45:A0:84:41:82:E5:86:3F
            X509v3 Authority Key Identifier:
                keyid:19:76:DD:7D:4F:BD:FB:EB:35:5F:0B:96:69:06:13:95:9E:10:68:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/1976DD7D4FBDFBEB355F0B96690613959E106872.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1976DD7D4FBDFBEB355F0B96690613959E106872.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b599ed96-d408-4418-b82a-5d5a8e6657f3/0/3130332e3139332e3131362e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.193.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:27:0a:c4:60:62:86:96:6e:21:75:27:6d:92:71:86:5b:c4:
         cd:e3:c6:c8:37:d3:d0:68:76:8e:96:af:b6:4d:ca:47:4e:2a:
         2f:69:be:f3:3d:65:5c:f0:cb:19:cb:17:ee:03:99:81:e1:6b:
         b8:cc:5e:7e:23:68:ed:1c:f3:e3:51:65:33:62:34:f8:48:25:
         67:af:8b:a9:f8:86:e9:f0:32:60:67:02:1e:bc:50:4d:c1:01:
         b1:b8:cf:56:c6:2c:b4:0d:de:4e:19:81:4e:8c:30:f8:5d:1f:
         fb:4c:d0:34:fb:9b:5b:c2:b4:1f:4d:00:06:b7:ac:17:40:c7:
         0b:cd:7a:9d:13:95:7e:3c:b1:09:0a:85:96:3b:2f:09:9f:2c:
         bf:72:86:f9:91:22:0e:87:15:04:44:89:39:ea:68:02:0c:eb:
         e0:ae:0a:5b:a6:20:25:95:88:5c:d9:7f:13:09:29:41:f9:35:
         af:01:d1:9a:ff:f8:32:37:f0:96:de:f8:c4:ff:7f:f0:17:83:
         76:91:a2:75:70:00:fc:a9:04:7d:51:58:78:e0:cc:b0:6a:cd:
         2c:e9:eb:1b:a7:a2:3e:b2:90:a8:f5:77:72:63:4a:53:f8:92:
         ee:f0:b8:de:ed:9e:fc:70:23:ed:da:82:92:73:72:00:be:66:
         b6:66:9f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:15 2024 by rpki-client on console-ams.rpki-client.org