Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa
File:                     3130332e31382e3131342e302f32332d3234203d3e203435323837.roa (raw, json)
Hash identifier:          CUFRIYyC4nZnGOT2WXpaLTKVzY3g2e0UEGzUYIHb0/E=
Subject key identifier:   05:5C:B4:6F:65:E4:00:9E:59:87:01:DA:A2:F4:59:24:CA:0B:A4:30
Certificate issuer:       /CN=F9CF581400AB7EE53AB913B25561ED007481F16F
Certificate serial:       12E71D9BD9CC7900CCC421FA1B8A2F1A2D0316E4
Authority key identifier: F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa
Signing time:             Tue 03 Oct 2023 10:00:02 +0000
ROA not before:           Tue 03 Oct 2023 09:55:02 +0000
ROA not after:            Tue 01 Oct 2024 10:00:02 +0000
asID:                     45287
IP address blocks:        103.18.114.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl
                          rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 00:35:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e7:1d:9b:d9:cc:79:00:cc:c4:21:fa:1b:8a:2f:1a:2d:03:16:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9CF581400AB7EE53AB913B25561ED007481F16F
        Validity
            Not Before: Oct  3 09:55:02 2023 GMT
            Not After : Oct  1 10:00:02 2024 GMT
        Subject: CN=055CB46F65E4009E598701DAA2F45924CA0BA430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:23:ac:f0:74:86:53:dd:fd:b0:a0:c8:77:6f:
                    7a:4d:f6:95:b4:4b:98:3d:4e:41:b7:1c:28:4f:f5:
                    db:dc:41:62:38:ce:b6:89:b7:f1:7f:a8:68:1c:e4:
                    61:22:93:d3:45:a9:18:3d:64:70:04:ec:ae:31:13:
                    6c:01:df:11:92:9c:b6:a4:96:de:d4:43:ca:16:15:
                    aa:f8:13:f4:ed:a1:96:a8:09:2e:9a:38:42:86:29:
                    4a:65:2a:ac:52:1d:8a:1e:f7:8b:a6:fe:89:c7:eb:
                    cc:77:74:fd:04:61:66:91:95:33:37:41:86:93:5e:
                    32:af:c0:44:e5:c7:24:1a:2d:18:d3:ba:4c:ec:bb:
                    76:ba:86:c0:f1:8d:8f:65:28:ec:4d:da:e7:fe:e3:
                    db:07:f1:1d:7c:19:65:b8:4b:ab:24:a8:10:6a:e9:
                    63:f9:bb:b8:fa:16:d2:5a:1a:b2:04:50:50:14:99:
                    65:8b:ef:00:c9:82:97:46:0e:7c:25:16:2a:95:45:
                    18:ed:4e:a3:a1:52:ca:9f:6b:c8:9a:1c:bd:6b:09:
                    52:13:f0:0e:60:3d:11:0e:3c:57:45:97:9f:ee:a0:
                    a7:e3:ff:16:cc:a4:f6:39:36:9f:0a:fb:cb:6d:c1:
                    a4:0a:31:60:f8:7b:4f:9c:e7:fd:6f:d1:9c:31:ab:
                    e8:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:5C:B4:6F:65:E4:00:9E:59:87:01:DA:A2:F4:59:24:CA:0B:A4:30
            X509v3 Authority Key Identifier:
                keyid:F9:CF:58:14:00:AB:7E:E5:3A:B9:13:B2:55:61:ED:00:74:81:F1:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/F9CF581400AB7EE53AB913B25561ED007481F16F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F9CF581400AB7EE53AB913B25561ED007481F16F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/360b9a87-8058-466f-b4a9-a777b4681ae1/0/3130332e31382e3131342e302f32332d3234203d3e203435323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.114.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c4:e5:48:49:9e:61:01:c5:2e:3d:04:e1:3a:ce:9b:45:6c:d7:
         55:57:76:bd:5e:13:d2:54:ad:e9:d0:50:51:9a:e5:fd:e8:ed:
         63:74:c4:7f:63:85:dd:95:11:7f:2e:e3:6e:b4:e1:0e:33:20:
         45:62:4b:f9:38:0f:54:cd:50:53:71:07:28:18:96:3a:29:f2:
         19:31:1e:3f:14:cc:f2:75:2b:89:5b:22:bb:ae:07:e8:b1:21:
         11:2c:19:bc:42:34:cb:e3:b7:91:2a:7a:46:a2:da:b9:50:fd:
         ba:08:13:a4:cf:45:3a:58:1f:68:14:2c:52:ce:26:4e:72:f1:
         46:ad:c7:62:53:55:6d:3c:b4:58:9b:e7:e4:55:ef:14:a7:68:
         02:7e:9b:36:7c:6f:22:b7:92:01:7a:f3:2f:cd:fb:18:cb:8f:
         02:fb:d1:49:11:22:85:9f:27:8e:e4:17:c8:4e:5b:c3:7f:e0:
         50:eb:89:1d:9f:00:2c:9e:6e:8e:47:06:c2:7d:9a:4b:d7:bc:
         76:7d:cc:76:6e:57:9c:43:1a:b4:ac:49:04:b8:22:f7:b2:36:
         d8:fa:2d:d0:c7:75:0e:05:06:8c:13:4b:5a:a1:6b:b5:f3:5a:
         59:50:13:9a:49:5f:a1:0c:fb:cb:2d:2e:9f:42:41:e9:7e:d9:
         c4:5b:47:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 20:02:07 2024 by rpki-client on console-ams.rpki-client.org