Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133332e36382e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          NZfGU8yt/4FgZolHeyqRZ4fGy523dk2yAV0gQzO6ODk=
Subject key identifier:   3F:81:7E:D7:55:E8:AF:C8:F9:50:4F:19:D1:9E:64:47:72:9F:FC:2A
Certificate issuer:       /CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
Certificate serial:       58C647706A962911B27749D5620DA45121BA4346
Authority key identifier: 0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa
Signing time:             Thu 16 May 2024 03:00:00 +0000
ROA not before:           Thu 16 May 2024 02:55:00 +0000
ROA not after:            Thu 15 May 2025 03:00:00 +0000
asID:                     38320
IP address blocks:        103.133.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl
                          rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:05:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c6:47:70:6a:96:29:11:b2:77:49:d5:62:0d:a4:51:21:ba:43:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1
        Validity
            Not Before: May 16 02:55:00 2024 GMT
            Not After : May 15 03:00:00 2025 GMT
        Subject: CN=3F817ED755E8AFC8F9504F19D19E6447729FFC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a0:70:24:de:5b:c9:bf:2d:e9:c6:8d:64:89:
                    34:d9:a1:80:fa:8a:77:13:bf:6d:ae:06:76:4f:e9:
                    dc:62:38:f1:35:09:8c:ce:86:90:5a:e1:a5:fc:a0:
                    0e:0b:44:e6:f0:7b:94:b8:23:65:f8:37:69:8b:38:
                    93:1f:e7:a2:12:a6:f2:27:9c:a4:7c:dc:e8:57:67:
                    c9:a4:b9:5b:13:2e:f2:b9:ef:74:56:d4:c5:03:f9:
                    dd:4d:95:81:56:fb:24:d5:bd:53:8b:46:d6:db:ea:
                    75:a8:2f:04:cd:a2:b0:53:96:36:a5:1b:9a:ed:03:
                    2c:ea:a5:f6:f2:3e:8c:4d:07:7b:f9:10:ff:79:b1:
                    5f:92:7b:b7:03:58:d7:31:a8:df:4e:33:20:77:02:
                    c4:11:c4:cd:88:54:8f:de:7a:03:e3:fd:9f:30:08:
                    00:dc:c1:6d:aa:f9:c3:d0:e9:d3:1c:97:89:a4:8e:
                    0b:35:af:f7:99:3c:9b:d2:60:6d:91:67:2f:b1:65:
                    3e:52:6c:b3:d1:63:9f:69:0b:29:84:88:1f:3d:68:
                    8c:7f:e1:4e:a2:bc:05:1a:a7:ed:51:59:07:1c:f5:
                    51:eb:fb:01:59:39:c3:e2:79:a6:96:b9:4d:e3:5c:
                    76:44:29:ff:7b:bb:0c:fe:55:4c:e0:36:af:d3:1c:
                    43:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:7E:D7:55:E8:AF:C8:F9:50:4F:19:D1:9E:64:47:72:9F:FC:2A
            X509v3 Authority Key Identifier:
                keyid:0B:70:A6:C6:EF:45:0D:61:4C:1A:45:E6:1A:1E:30:C6:DB:AC:10:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0B70A6C6EF450D614C1A45E61A1E30C6DBAC10A1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b69fd5a1-6026-4bfa-a671-f2771afe007c/0/3130332e3133332e36382e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         72:6a:58:f8:66:82:ee:25:cd:5f:e4:28:79:50:6b:5f:1c:56:
         6d:ab:7f:fc:d4:1b:e8:81:87:0a:d8:c7:4d:7d:9e:72:e3:93:
         21:bd:92:8d:13:51:7c:54:29:79:78:c6:02:43:ef:63:95:2e:
         51:33:b9:bf:16:b8:84:a8:95:c8:85:97:52:a4:a0:88:58:73:
         e6:2a:1f:28:9f:17:ee:2f:0f:55:82:46:d0:1e:5e:eb:60:d6:
         d3:79:ee:75:ed:b8:2d:8a:c7:29:e9:93:c3:2f:ae:28:4a:9b:
         bc:b4:1d:f2:ac:87:91:d4:39:bf:11:5a:38:4a:60:e8:2d:29:
         c3:2f:22:74:88:a6:3e:3a:d2:e4:1d:01:76:8b:7c:82:12:3c:
         1e:fe:59:de:5a:56:a0:9f:c1:94:32:f7:de:57:f3:c2:32:5f:
         ed:cf:62:71:e5:4a:f7:f8:a9:e5:51:94:18:74:c9:31:23:42:
         6d:e6:f0:25:cb:47:f0:9a:8e:f1:52:15:88:9d:30:ed:c2:9f:
         a8:c3:fc:27:a1:6e:3d:ca:18:1f:70:16:01:69:c8:69:8a:19:
         ad:99:90:5e:29:82:e9:31:a8:6a:0d:d2:02:10:3e:a5:b1:b6:
         eb:24:b2:9b:49:f2:2a:f1:0b:ad:41:c8:a4:ca:8f:b2:70:96:
         b8:58:61:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:58 2024 by rpki-client on console-ams.rpki-client.org