Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
File:                     3130332e3139302e37362e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          +VxS865NF5556hQSI4UCLWlCm19xCVbSRzri6GP8Ruo=
Subject key identifier:   18:DA:A3:04:3E:39:60:D2:37:51:49:4B:63:BF:FD:A2:02:DA:B3:34
Certificate issuer:       /CN=A5D12164B9484E51D4BE4B03823526989B147558
Certificate serial:       1AD0DDD8BA3BB1EED935AB4F28BAD957AF7546AE
Authority key identifier: A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 12 Jun 2023 08:00:00 +0000
ROA not before:           Mon 12 Jun 2023 07:55:00 +0000
ROA not after:            Mon 10 Jun 2024 08:00:00 +0000
asID:                     4800
IP address blocks:        103.190.76.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl
                          rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 22:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:d0:dd:d8:ba:3b:b1:ee:d9:35:ab:4f:28:ba:d9:57:af:75:46:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5D12164B9484E51D4BE4B03823526989B147558
        Validity
            Not Before: Jun 12 07:55:00 2023 GMT
            Not After : Jun 10 08:00:00 2024 GMT
        Subject: CN=18DAA3043E3960D23751494B63BFFDA202DAB334
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:59:bc:43:2f:43:82:69:94:36:1a:85:2c:
                    16:95:55:2e:97:bc:3d:47:b6:db:d7:27:9e:fd:c0:
                    77:36:5b:e4:c3:74:fc:c6:ea:96:7d:2e:ef:78:48:
                    e3:af:c8:6a:4f:07:35:47:37:9a:d4:11:ea:70:cc:
                    58:79:1c:72:5b:f7:e2:72:c0:c7:ad:bd:df:06:b8:
                    5a:53:3a:f0:d8:62:23:d1:2a:72:8b:f1:56:5b:ed:
                    3a:dd:4e:fd:be:08:b0:23:a7:f8:ff:bc:c3:40:55:
                    0c:9f:53:84:bf:85:5e:ad:2e:6f:b9:8e:e1:95:37:
                    69:a8:f7:2f:04:e0:2e:ed:d6:0f:fe:0e:b3:7b:a6:
                    db:1e:a5:88:5c:96:38:0c:bb:a2:56:2e:64:d2:b9:
                    e6:34:46:02:af:fa:5a:21:73:02:3a:3d:93:a3:e2:
                    ff:95:12:d1:c7:33:47:e6:db:88:98:e1:40:cc:e8:
                    eb:63:64:f6:59:3a:c6:fe:7f:65:bd:81:b4:0c:78:
                    0a:61:56:ca:1c:b8:0b:6b:dd:e5:3f:77:fd:bf:c3:
                    8f:b3:44:1f:e3:ff:0c:4c:b7:b1:66:39:10:03:5b:
                    c6:27:54:4d:c3:29:22:90:8c:a7:3d:08:a1:31:8a:
                    b5:4c:9b:81:8f:2d:72:a1:29:de:2a:a0:38:d3:b8:
                    6f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DA:A3:04:3E:39:60:D2:37:51:49:4B:63:BF:FD:A2:02:DA:B3:34
            X509v3 Authority Key Identifier:
                keyid:A5:D1:21:64:B9:48:4E:51:D4:BE:4B:03:82:35:26:98:9B:14:75:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/A5D12164B9484E51D4BE4B03823526989B147558.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A5D12164B9484E51D4BE4B03823526989B147558.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e2caccf-327e-42bd-9b31-0a873d2e6692/0/3130332e3139302e37362e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:eb:dd:5f:44:c3:22:57:cd:a5:67:be:01:1d:63:a7:d3:f9:
         db:ec:de:5e:2d:e8:98:eb:10:1b:8b:27:34:e5:33:94:ab:60:
         87:09:67:a1:93:5d:e6:cf:5a:a3:b5:07:0e:61:85:27:22:db:
         63:30:1b:78:29:1a:33:1d:e9:47:0e:b8:33:13:7a:d6:6c:25:
         a0:f6:04:a4:ad:51:2f:25:d1:7a:c0:ee:ab:72:e1:e8:f4:55:
         03:dc:7e:34:1d:34:0a:6c:5c:49:4d:42:2d:24:8c:bf:c1:6c:
         d7:a2:cf:b5:de:f2:a2:8b:2d:8e:2a:85:fb:ed:bd:a5:bf:20:
         ca:22:38:d1:c4:c2:2b:58:a2:10:64:e0:47:69:44:83:37:11:
         22:78:bb:e6:2e:10:64:0f:7c:f9:08:14:bc:2f:3e:86:8e:af:
         9e:f3:3a:0e:62:2a:2a:7c:f1:83:11:43:73:e3:73:af:ab:57:
         5a:55:97:27:a7:74:a4:50:78:37:9d:7b:9f:f5:1a:96:e5:22:
         2d:3b:27:ba:96:36:d7:4e:c5:70:86:c6:38:40:39:fc:b5:a3:
         f8:fd:b6:3c:8c:0a:11:3e:34:dd:4a:90:6f:75:f4:d1:66:f2:
         68:ee:5f:06:8c:6d:d2:c4:41:91:e7:e6:74:44:1c:4d:5f:b7:
         4e:8a:0a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 23:04:16 2024 by rpki-client on console-fra.rpki-client.org