Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230312e302f32342d3234203d3e20313431303733.roa
File:                     3130332e3135352e3230312e302f32342d3234203d3e20313431303733.roa (raw, json)
Hash identifier:          HprrK1DrRXvF+DEBv59pb8TodIbhtEldkv1xON1F4K4=
Subject key identifier:   1F:35:69:B5:44:A9:DD:3C:7D:5A:E7:0B:EB:11:46:95:ED:37:71:CF
Certificate issuer:       /CN=2D18956397FA6055A44153CABF07303FD6E55E44
Certificate serial:       7947190EED64E880A881EC75D59F0AF9AF9EDA1D
Authority key identifier: 2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230312e302f32342d3234203d3e20313431303733.roa
Signing time:             Mon 31 Jul 2023 00:08:30 +0000
ROA not before:           Mon 31 Jul 2023 00:03:30 +0000
ROA not after:            Mon 29 Jul 2024 00:08:30 +0000
asID:                     141073
IP address blocks:        103.155.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl
                          rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 15:21:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:47:19:0e:ed:64:e8:80:a8:81:ec:75:d5:9f:0a:f9:af:9e:da:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D18956397FA6055A44153CABF07303FD6E55E44
        Validity
            Not Before: Jul 31 00:03:30 2023 GMT
            Not After : Jul 29 00:08:30 2024 GMT
        Subject: CN=1F3569B544A9DD3C7D5AE70BEB114695ED3771CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:71:dc:4f:ce:d6:65:98:58:fe:ad:d9:06:cd:
                    79:99:6d:5b:e7:9c:a9:7e:bf:1e:8d:c6:e1:18:aa:
                    f5:58:3d:f0:09:3c:1a:9b:2c:93:19:53:eb:7e:12:
                    86:96:22:d0:95:ec:72:72:dd:87:ad:da:74:b1:c5:
                    10:2c:42:35:8d:0c:10:96:5c:64:55:6f:76:f5:ee:
                    96:5b:c6:d4:60:8e:c9:7e:bf:a1:ab:26:74:3b:78:
                    24:96:a3:d3:89:c3:aa:0a:4e:0c:98:f1:48:dc:21:
                    bd:11:ea:9b:59:46:5c:35:8a:55:43:4e:d2:7f:d8:
                    d2:c6:0d:06:47:b6:e0:0d:41:41:18:91:f3:73:02:
                    1b:2e:86:d5:0b:fa:f6:dd:b5:b9:d7:da:17:98:0b:
                    39:0a:01:15:a7:45:a0:17:bb:60:19:e1:ce:2b:9a:
                    42:7a:b8:66:cd:23:1d:dc:9e:c2:be:06:fa:57:78:
                    88:ff:2a:de:e8:57:bd:85:93:6c:92:8c:21:fa:ba:
                    d6:5f:f9:9c:aa:03:24:bc:86:9f:be:58:39:be:2c:
                    ee:ef:ed:96:30:50:0e:bf:ae:02:5e:29:dd:ee:99:
                    18:73:1e:4c:63:11:05:33:17:c3:1f:7d:3d:28:b0:
                    dc:16:5e:93:10:f2:76:6a:16:78:7d:28:1e:93:eb:
                    57:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:35:69:B5:44:A9:DD:3C:7D:5A:E7:0B:EB:11:46:95:ED:37:71:CF
            X509v3 Authority Key Identifier:
                keyid:2D:18:95:63:97:FA:60:55:A4:41:53:CA:BF:07:30:3F:D6:E5:5E:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/2D18956397FA6055A44153CABF07303FD6E55E44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2D18956397FA6055A44153CABF07303FD6E55E44.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4858f85c-a458-4a58-bbde-4bfb343dc4b0/0/3130332e3135352e3230312e302f32342d3234203d3e20313431303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:bf:d5:22:ca:09:9e:cf:12:b3:c1:eb:33:5b:13:7a:e1:02:
         aa:cf:69:09:21:8b:c1:43:cd:2c:f4:68:6f:6f:00:98:a8:ca:
         89:fb:c6:07:75:98:94:86:3f:87:61:ae:38:8c:89:3e:0b:97:
         bd:ae:45:c0:8b:c7:f7:ee:62:9b:0c:5f:a3:46:83:fb:b9:7c:
         a0:7c:e6:a1:23:ad:2a:52:8b:a0:73:0b:48:36:ae:33:2e:13:
         a5:0a:c7:a1:59:68:36:df:76:66:dc:fd:c4:2f:08:e8:bc:56:
         d0:e3:f3:8c:1f:d3:fe:e8:49:0d:21:c5:7e:fd:4b:07:b5:eb:
         8d:80:9f:f7:8f:a8:49:8c:ee:92:02:98:91:47:87:13:8c:ec:
         fd:30:e7:81:01:3e:55:9f:b9:c8:de:24:69:e8:95:09:66:2d:
         0c:1e:32:c0:fc:b6:b7:9d:78:7e:44:2e:38:c9:98:e3:e5:35:
         1a:32:c4:9f:db:5b:88:e6:b5:13:62:de:0f:73:f5:95:5c:ce:
         48:8e:c1:43:28:a6:85:85:a0:ef:0f:67:fb:66:0e:97:f0:35:
         81:04:76:76:bb:a0:0d:9e:af:40:a7:cf:f5:c5:bd:10:a4:ce:
         65:3b:9c:eb:a8:68:04:6a:f1:e5:b7:1e:80:8a:a7:a8:56:20:
         99:b3:03:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 11:19:52 2024 by rpki-client on console-ams.rpki-client.org