Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa
File:                     3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa (raw, json)
Hash identifier:          EkbFVN7Rpp0TJpBRv7AVNhmEi67Q82jd7BgbYFFP8Gk=
Subject key identifier:   81:29:77:AB:A0:3A:FF:1A:36:00:56:D5:14:86:58:A6:B0:52:D9:B5
Certificate issuer:       /CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
Certificate serial:       7E0AB0272A438678219D10673DEFA160E6564AD4
Authority key identifier: B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa
Signing time:             Mon 31 Jul 2023 00:04:01 +0000
ROA not before:           Sun 30 Jul 2023 23:59:01 +0000
ROA not after:            Mon 29 Jul 2024 00:04:01 +0000
asID:                     137363
IP address blocks:        103.116.172.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl
                          rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0a:b0:27:2a:43:86:78:21:9d:10:67:3d:ef:a1:60:e6:56:4a:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3
        Validity
            Not Before: Jul 30 23:59:01 2023 GMT
            Not After : Jul 29 00:04:01 2024 GMT
        Subject: CN=812977ABA03AFF1A360056D5148658A6B052D9B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:69:4f:5a:fb:46:e1:1c:ad:f5:31:9c:53:c3:
                    5d:0f:01:8d:8d:5d:8c:bc:08:28:f4:82:26:3c:aa:
                    5e:37:7f:15:5a:c4:6a:36:f0:8a:07:27:2c:c3:69:
                    a5:39:88:9b:d6:57:5e:da:8e:ef:5f:6e:88:09:fa:
                    03:a5:d1:32:22:49:a4:d0:f4:a4:42:8a:d2:d1:f5:
                    d8:d2:97:23:3a:0d:3d:1d:ae:c5:f0:6e:b4:a3:e1:
                    80:a6:9f:2c:1e:cd:eb:6e:54:f1:45:da:65:4e:fc:
                    ed:46:32:9f:30:45:2b:b9:70:1a:c8:11:3b:ee:25:
                    ba:f3:e8:9e:89:34:51:b1:57:2f:51:87:93:e7:26:
                    6d:2f:92:89:36:93:81:32:59:4b:6f:20:e0:92:1e:
                    76:87:7d:36:b5:34:24:44:d1:d2:42:25:da:b8:90:
                    19:41:b9:b5:93:af:93:bf:fa:f0:d8:4d:8a:db:3a:
                    74:ef:38:78:31:87:70:8c:09:47:f0:c3:c5:27:b1:
                    2b:c5:0e:6a:35:60:4d:04:60:68:e3:94:c4:8f:84:
                    57:4b:f7:c5:fc:f6:fb:b7:4d:6a:75:79:ac:c8:8f:
                    82:33:10:9e:ec:f5:20:5b:3f:39:7f:bf:a3:6f:2d:
                    2b:e3:8d:e6:97:97:66:9b:d1:89:b7:75:9c:c5:e6:
                    f6:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:29:77:AB:A0:3A:FF:1A:36:00:56:D5:14:86:58:A6:B0:52:D9:B5
            X509v3 Authority Key Identifier:
                keyid:B6:EE:1F:61:D6:E8:E9:EE:C6:40:CC:C1:D7:91:DB:A1:24:99:3C:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6EE1F61D6E8E9EEC640CCC1D791DBA124993CA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d1085b4a-f573-42f3-825c-1cf0c872b152/0/3130332e3131362e3137322e302f32322d3234203d3e20313337333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.172.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:8c:de:f8:70:1a:96:e7:58:c4:0e:af:41:74:b9:c8:22:ad:
         df:cd:84:d6:ed:58:88:73:0c:1a:8f:4e:c6:0b:73:97:28:2e:
         98:f6:74:77:6b:5f:28:05:1f:0e:b8:78:0e:0c:97:86:c3:80:
         49:36:8f:f3:53:fd:5b:ca:1b:c6:5c:12:35:1c:55:30:c5:1d:
         0c:3a:4f:53:2b:1e:91:16:f2:45:6e:74:cc:0d:dd:9e:fd:19:
         fe:27:37:80:9f:43:06:8c:6b:62:b7:f7:70:50:d1:92:a7:57:
         ce:c1:91:95:5f:3b:4a:e6:9e:bf:e2:32:3c:75:35:7f:6f:c3:
         46:e1:90:8e:de:20:c8:56:b2:6f:7b:44:15:90:2a:96:7e:db:
         dc:62:11:4b:84:64:9f:3c:a8:9d:3a:c8:2b:8d:b4:dd:fc:12:
         22:d4:e4:b1:e6:bd:20:d3:5e:e5:28:46:f0:0d:a3:54:1e:1f:
         7d:3c:43:db:2c:da:0c:7c:d3:d1:5c:e6:43:ba:d4:19:e9:3e:
         ef:65:3f:3f:a5:f7:89:a9:4e:bb:cd:2a:a1:47:fb:01:03:ab:
         e3:7f:80:62:bd:f4:53:74:75:7f:3f:78:a3:4d:af:37:c5:36:
         62:10:2a:e8:00:c2:d1:b0:d4:f3:a2:73:46:9b:a9:8c:dd:ff:
         28:73:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 11:26:38 2024 by rpki-client on console-ams.rpki-client.org