Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
File:                     3130332e31382e3134342e302f32322d3234203d3e203538383137.roa (raw, json)
Hash identifier:          DC43B8Xo7h2ljAWpUZviJXTvCavbkCtDwBXs88Zr/+o=
Subject key identifier:   D4:54:E3:BB:E7:FE:1B:8E:EC:CF:A1:75:94:B9:62:60:D1:DD:36:17
Certificate issuer:       /CN=19D983F92968E71520E086B32ACAFEFB5BF04943
Certificate serial:       433648205339DFF12E2DD690054067E210D47C76
Authority key identifier: 19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa
Signing time:             Mon 31 Jul 2023 00:02:29 +0000
ROA not before:           Sun 30 Jul 2023 23:57:29 +0000
ROA not after:            Mon 29 Jul 2024 00:02:29 +0000
asID:                     58817
IP address blocks:        103.18.144.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl
                          rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:36:48:20:53:39:df:f1:2e:2d:d6:90:05:40:67:e2:10:d4:7c:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19D983F92968E71520E086B32ACAFEFB5BF04943
        Validity
            Not Before: Jul 30 23:57:29 2023 GMT
            Not After : Jul 29 00:02:29 2024 GMT
        Subject: CN=D454E3BBE7FE1B8EECCFA17594B96260D1DD3617
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:5d:c8:04:06:cd:1b:8f:70:bd:a5:84:fc:2c:
                    8c:ff:2d:20:a8:d0:dd:ef:c0:9f:8b:be:d8:97:89:
                    0b:cc:d9:2d:36:5a:36:cc:43:df:bb:bb:93:c4:3f:
                    6b:14:b0:2d:af:79:39:81:7e:ee:38:59:f0:1f:34:
                    d8:a5:54:40:51:d3:76:1e:b9:f4:ac:df:56:4e:e9:
                    b6:f1:e7:d9:1d:86:b5:0b:a6:42:6a:d4:b5:3b:0d:
                    e1:34:d8:65:ce:22:18:b1:8f:45:78:d5:f4:5f:e5:
                    22:c6:6e:08:92:69:c2:b2:25:ab:d4:40:56:47:82:
                    e9:99:94:e1:4e:4a:ab:52:fd:e2:5d:ae:8b:f4:42:
                    9d:47:cc:45:a9:27:cb:30:94:09:0c:64:2a:d7:15:
                    40:fe:52:d8:6d:c0:9c:88:bf:81:b7:7e:a6:43:88:
                    67:c4:53:21:e1:a8:eb:01:1a:75:f3:a2:3a:94:88:
                    50:a5:05:e3:9a:51:e8:2b:56:b9:dd:e0:6f:a7:c6:
                    2f:34:cf:79:92:18:f4:5b:cd:87:63:85:fd:1e:8a:
                    11:13:fc:4f:ca:31:ae:d8:eb:77:2e:ec:3e:e6:ae:
                    ea:74:38:04:aa:78:d5:15:ca:3e:c4:18:d5:b1:a6:
                    f8:b7:a0:d5:97:b7:ae:98:ed:f1:62:60:41:59:5f:
                    ea:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:54:E3:BB:E7:FE:1B:8E:EC:CF:A1:75:94:B9:62:60:D1:DD:36:17
            X509v3 Authority Key Identifier:
                keyid:19:D9:83:F9:29:68:E7:15:20:E0:86:B3:2A:CA:FE:FB:5B:F0:49:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/19D983F92968E71520E086B32ACAFEFB5BF04943.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19D983F92968E71520E086B32ACAFEFB5BF04943.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cb1f109-b9fe-4323-84e3-b60bb4dc1ecc/0/3130332e31382e3134342e302f32322d3234203d3e203538383137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         13:a8:b0:23:cf:ca:18:8b:5a:d9:2f:47:38:79:10:aa:7b:0e:
         75:3f:56:1f:f5:04:41:17:44:bc:e3:a9:2f:dd:d6:6b:eb:59:
         37:95:15:64:b7:2a:54:7f:3c:cd:a8:1f:6e:44:61:24:23:5c:
         64:d7:58:a3:8d:e7:d7:5f:be:58:a9:40:38:64:c5:a5:52:aa:
         bc:99:94:62:8a:4e:87:b6:61:2a:a4:8e:7c:38:5d:1d:43:7e:
         e9:f6:7a:5b:9b:53:1c:9a:e4:06:a0:1a:06:9f:7c:02:a9:24:
         dd:2b:0d:b7:a0:fb:97:01:9b:2e:36:4d:e7:20:89:78:4a:10:
         a7:a1:46:df:cc:10:39:51:8f:ed:cb:c5:9d:c4:90:13:eb:e1:
         8f:b8:0c:19:a3:c2:1c:4e:27:f3:7d:e7:1c:7c:4d:99:c1:a2:
         30:b1:40:2f:9c:4b:33:31:b9:2f:84:26:99:3a:80:a5:5a:55:
         8a:38:67:42:49:23:4a:23:77:6a:95:52:31:6c:c2:f3:14:64:
         7a:ba:2a:5c:4e:e4:11:ad:c7:2a:39:66:6c:47:41:7f:d7:cf:
         1c:c6:ef:a1:80:b6:18:0f:f3:4a:d7:b5:db:b6:18:cf:3f:87:
         a5:44:15:58:a7:db:4e:f5:0f:a7:1c:7a:a4:18:ce:d1:f8:30:
         90:b0:5a:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 22:55:04 2024 by rpki-client on console-ams.rpki-client.org