Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa
File:                     3130332e38352e35362e302f32342d3234203d3e20313530353530.roa (raw, json)
Hash identifier:          ht/mlkk/r3FvrkR41j/MseqDfAWaT4XeHeyN7/uVK9I=
Subject key identifier:   20:69:39:FF:6D:7A:38:EE:D7:68:08:60:37:16:CB:4B:02:BC:07:51
Certificate issuer:       /CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A
Certificate serial:       401C46DA7F959C2525C1924D040259B61D31AC08
Authority key identifier: 60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa
Signing time:             Sun 18 Feb 2024 04:00:03 +0000
ROA not before:           Sun 18 Feb 2024 03:55:03 +0000
ROA not after:            Sun 16 Feb 2025 04:00:03 +0000
asID:                     150550
IP address blocks:        103.85.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl
                          rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1c:46:da:7f:95:9c:25:25:c1:92:4d:04:02:59:b6:1d:31:ac:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A
        Validity
            Not Before: Feb 18 03:55:03 2024 GMT
            Not After : Feb 16 04:00:03 2025 GMT
        Subject: CN=206939FF6D7A38EED76808603716CB4B02BC0751
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c4:a0:a4:f6:61:db:10:89:f8:24:62:3a:f1:
                    08:be:04:e8:18:cc:a3:d5:8c:f8:5e:37:c3:bd:9c:
                    5b:a3:59:8c:f5:1e:95:06:52:e1:60:56:95:53:dc:
                    4c:ae:7e:b5:af:7f:72:38:e7:77:0c:64:68:94:ee:
                    2b:07:92:b3:99:58:1e:9c:d1:e1:da:72:f1:f5:a4:
                    3e:cb:50:db:a5:3c:94:b5:9c:2d:f9:3f:55:a3:0b:
                    a4:70:1d:1f:86:a9:f9:c3:49:d3:5c:dc:0c:af:d9:
                    2d:05:ae:39:54:06:2f:37:e7:fb:4b:26:11:9a:8d:
                    65:e3:93:d9:a9:99:d3:6b:c4:81:84:36:7e:ba:d7:
                    48:9a:ce:e8:55:bc:12:8b:5d:20:93:df:57:5e:5e:
                    a3:56:f5:bf:7e:f0:71:ba:6d:52:98:e7:1d:8c:09:
                    31:44:23:aa:4a:77:46:50:5c:15:13:5c:50:40:b2:
                    32:86:ee:06:7f:74:7a:e0:e0:05:12:0f:af:29:13:
                    36:0b:c3:7d:54:9d:98:7f:bf:f5:0c:d6:82:d9:89:
                    83:d3:2d:a6:17:57:f7:66:67:54:bc:06:d1:3d:36:
                    e6:3e:96:68:0c:ab:38:19:4e:bc:c5:0e:d5:89:b6:
                    24:52:4c:d5:b6:28:a3:f4:07:0e:96:e6:45:25:1f:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:69:39:FF:6D:7A:38:EE:D7:68:08:60:37:16:CB:4B:02:BC:07:51
            X509v3 Authority Key Identifier:
                keyid:60:BD:54:CF:D6:7B:2F:FF:B1:3B:54:7D:9F:06:CE:DF:8E:B1:19:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/60BD54CFD67B2FFFB13B547D9F06CEDF8EB1196A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea57613b-8b04-4c45-bedf-4ab061d4dcf9/0/3130332e38352e35362e302f32342d3234203d3e20313530353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:71:b3:cb:c7:8b:8f:2c:c2:5b:5a:b6:42:a9:c9:ca:44:1c:
         42:ad:d3:77:28:23:dc:f1:06:85:1c:69:34:76:b0:ab:e9:38:
         f3:48:b6:84:c6:6c:dd:62:87:91:a0:02:13:60:a3:e9:b7:ff:
         22:88:55:95:90:45:7e:99:fc:64:af:a7:03:f6:ca:b6:f0:74:
         7e:82:70:eb:13:66:09:b9:cd:61:b9:bd:c6:15:9d:03:65:b7:
         ea:00:19:91:fb:5d:d6:3a:84:53:c1:96:16:d9:f3:e7:6f:cd:
         6c:62:59:42:da:fc:92:f8:28:57:de:aa:26:1f:f7:c6:74:38:
         25:6b:72:06:b3:39:56:2c:e6:ba:05:c8:6c:dd:45:77:c0:73:
         c0:c2:ae:17:8f:a1:46:6e:1e:66:c9:06:31:8d:6b:f9:50:bf:
         50:de:2f:17:c5:c9:ec:25:51:a6:48:2c:9a:a3:70:34:fc:56:
         83:92:16:49:e4:10:38:f6:da:f7:e2:d1:ff:4c:e6:14:2b:52:
         dc:0a:40:8b:eb:de:9f:36:13:86:3d:f7:32:12:84:55:ec:44:
         5a:82:7c:e2:ca:d2:a0:b1:dd:9f:1d:5c:33:86:7e:01:3c:a6:
         b8:38:47:00:cf:9d:e2:ac:95:0b:46:64:be:de:28:ec:2a:43:
         bd:8d:36:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org