Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File:                     3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          8/ITWjqRZUL5iM9Mvik/rTJfLq+NT1sqJoOk49tnyps=
Subject key identifier:   13:BF:2B:B0:5F:2C:5E:44:FF:04:10:51:3A:88:24:D3:9F:00:9B:7D
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       66EF7185BE5878F31CA501A4E6E3173EFDFF99A2
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time:             Fri 08 Mar 2024 15:16:20 +0000
ROA not before:           Fri 08 Mar 2024 15:11:20 +0000
ROA not after:            Fri 07 Mar 2025 15:16:20 +0000
asID:                     139982
IP address blocks:        103.148.45.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
                          rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:ef:71:85:be:58:78:f3:1c:a5:01:a4:e6:e3:17:3e:fd:ff:99:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Mar  8 15:11:20 2024 GMT
            Not After : Mar  7 15:16:20 2025 GMT
        Subject: CN=13BF2BB05F2C5E44FF0410513A8824D39F009B7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bf:bd:91:b1:25:e2:07:49:40:ed:a3:3a:db:
                    29:21:47:7e:39:31:26:24:09:f6:98:c6:df:30:be:
                    44:d0:a8:f9:0f:50:ce:57:1b:55:53:e6:47:f8:2a:
                    4a:fd:2d:9a:1f:82:00:a9:30:c0:7e:ce:e2:c8:27:
                    f4:6b:a3:7e:69:67:2d:9c:bc:1e:e6:82:6c:9f:b3:
                    5d:91:e2:7d:89:f5:3a:84:75:c5:6b:fc:0e:0d:35:
                    49:66:92:7a:ff:7e:82:df:69:46:f1:72:2a:fd:d2:
                    f6:cc:e7:49:8e:bf:5e:95:6f:a1:6e:4a:49:da:08:
                    04:d2:91:37:d0:8d:0a:8f:b6:dd:e1:62:a5:47:76:
                    5c:af:38:be:a8:87:70:29:9f:72:59:f8:26:12:81:
                    e5:59:a8:ac:b4:78:bb:92:73:fc:71:f8:69:78:f6:
                    4d:00:af:20:bc:79:83:b0:0b:af:c1:5e:f9:bd:58:
                    dd:cb:20:7e:14:d5:ce:0c:83:9d:dd:66:d2:4f:e2:
                    e2:14:39:d6:bc:79:00:e7:09:3c:7f:00:df:f5:e5:
                    76:4d:fe:ae:86:25:f3:00:6b:02:c9:85:6f:76:7a:
                    d8:73:d4:13:59:95:72:fd:ef:d8:d9:74:77:a2:ae:
                    13:dc:25:23:59:c0:f1:a5:0d:db:25:e8:eb:73:e3:
                    7c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:BF:2B:B0:5F:2C:5E:44:FF:04:10:51:3A:88:24:D3:9F:00:9B:7D
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:39:02:26:bc:0c:4e:3a:4f:5f:79:65:6a:57:42:bc:b7:66:
         e3:1c:fd:20:43:69:d3:05:11:d6:b2:10:8c:4f:d1:28:39:46:
         74:c9:ed:43:67:2b:f6:ac:c1:a2:c2:14:2d:78:5d:5d:b5:ba:
         06:59:aa:3a:d2:6e:f5:cb:f1:dc:71:73:59:8a:95:30:15:50:
         ce:e9:ac:b6:cb:cf:02:16:73:e7:ce:53:70:a1:fe:5c:d6:df:
         55:44:5a:2e:61:ab:76:eb:10:26:54:ec:f4:68:55:53:65:ac:
         91:08:b2:8e:d9:36:97:9d:c0:a8:5f:91:b1:d1:5a:bd:af:1c:
         92:89:b9:c7:ed:21:ea:ad:7b:ef:56:39:b8:f8:ff:99:98:7d:
         0e:d0:eb:6d:f5:e9:e1:ec:af:c8:94:32:c9:c1:58:e0:80:0a:
         7a:04:f7:3f:9d:34:1a:54:7d:78:df:b8:2e:e0:45:2e:e0:d6:
         03:60:1f:c5:ff:27:5c:12:43:ce:bd:07:59:f3:73:5c:5f:9a:
         87:c6:bb:93:88:d8:63:60:95:25:e5:5b:55:1b:e9:89:86:79:
         cb:b4:63:0d:6d:2f:1e:22:0c:66:6c:96:2f:42:6c:15:f0:9e:
         03:e4:48:16:59:55:60:76:e3:39:5e:cf:1d:e6:eb:99:bd:56:
         05:96:a4:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 00:51:51 2024 by rpki-client on console-ams.rpki-client.org