Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa
File:                     3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa (raw, json)
Hash identifier:          lTTMNp23OoQSOjYn9CEyh/tDJ/V59anhjOuqBy8g+QY=
Subject key identifier:   AF:E9:2D:43:5A:71:7A:76:65:CA:5C:22:A9:2B:6A:44:D8:E1:2F:7D
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       20A2E9FB3572A1466E4084BAF104B5CC673CCC13
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa
Signing time:             Mon 31 Jul 2023 00:09:29 +0000
ROA not before:           Mon 31 Jul 2023 00:04:29 +0000
ROA not after:            Mon 29 Jul 2024 00:09:29 +0000
asID:                     139401
IP address blocks:        103.142.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 20:14:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:e9:fb:35:72:a1:46:6e:40:84:ba:f1:04:b5:cc:67:3c:cc:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jul 31 00:04:29 2023 GMT
            Not After : Jul 29 00:09:29 2024 GMT
        Subject: CN=AFE92D435A717A7665CA5C22A92B6A44D8E12F7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:11:39:00:54:58:30:2a:4e:b3:f8:11:9b:09:
                    79:cf:ec:11:dc:06:bf:78:52:e3:8f:d5:4d:50:d2:
                    92:34:50:13:8d:e1:41:38:94:87:62:bc:67:35:55:
                    cc:70:bb:b6:42:6c:92:c1:69:a5:77:b3:93:da:99:
                    c8:61:93:78:81:93:30:52:e2:1b:97:9e:76:06:0b:
                    ae:36:d2:4b:83:9e:bd:3e:0c:64:90:f0:b4:eb:50:
                    75:78:12:4c:6c:fd:bf:6d:dd:09:93:c8:a6:39:b7:
                    61:09:aa:67:1e:15:f1:74:b9:58:21:f2:99:f9:24:
                    4c:3a:47:13:0e:dc:22:fb:9b:43:b0:53:d1:26:eb:
                    80:37:c8:1f:65:ec:8c:f2:31:c2:00:9f:3d:07:b3:
                    ca:ae:f1:8e:22:a3:da:3b:4b:cc:70:cc:26:7e:2c:
                    9f:aa:4f:3f:3c:21:13:7a:fd:83:2f:45:a6:39:96:
                    02:66:25:ce:c4:c7:e7:d5:ed:29:76:b4:43:c7:a9:
                    65:98:8d:7e:68:fb:21:43:e4:a1:2c:2b:5b:9c:a3:
                    4c:bf:0d:ab:32:5e:d3:90:92:0d:55:e8:5e:70:35:
                    b5:73:76:78:0a:84:05:81:af:7a:d7:08:49:5b:fd:
                    bf:f7:46:5a:c1:77:72:01:5f:73:7a:27:6b:20:f8:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E9:2D:43:5A:71:7A:76:65:CA:5C:22:A9:2B:6A:44:D8:E1:2F:7D
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138322e302f32342d3234203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:ed:b2:87:63:c6:1e:8c:c8:6a:05:db:16:70:98:aa:80:b8:
         37:38:cf:71:9a:6c:e3:71:fc:cd:d8:7c:c5:8f:29:e6:ab:6a:
         7e:08:96:0a:c9:4a:f0:83:db:35:52:08:57:ef:09:54:f0:e4:
         c4:de:14:66:4a:d5:ff:19:5d:c5:6c:30:cf:7e:ea:c1:c9:2c:
         98:8f:ff:6c:09:a6:1d:ef:05:7c:86:8c:41:ba:08:83:2b:49:
         1a:d2:a5:c7:ce:c5:fa:fd:eb:12:7d:46:a4:21:14:02:37:d4:
         8b:12:41:e6:2c:2b:f1:39:26:37:dc:c7:12:b2:1e:f5:66:f1:
         05:eb:51:1a:b5:b9:dd:f6:f3:a6:ae:77:61:81:6f:22:fa:ca:
         07:ff:51:88:77:3c:db:15:12:1a:1a:cf:0e:c5:e6:c4:0b:29:
         05:3c:bf:e1:1e:f2:0b:e3:f8:bd:f8:00:fb:df:64:24:7b:0b:
         e0:0e:ff:fd:f7:bf:95:76:b4:75:e7:f7:79:0d:a3:f6:0c:c3:
         4e:98:60:8d:90:16:02:49:af:f4:69:e9:38:b8:89:94:2e:fa:
         11:02:d9:e5:2c:e9:26:1b:48:41:af:83:6b:9e:54:bd:0d:6e:
         ac:49:73:8d:8d:8c:c8:a8:55:8b:8f:20:04:d6:a8:d9:94:c8:
         de:5f:ec:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 16:11:05 2024 by rpki-client on console-ams.rpki-client.org