Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
File:                     3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa (raw, json)
Hash identifier:          puVv8+jAPMBLLRuD3jy5lIkGPnU5FM4BijwPyoeJPeI=
Subject key identifier:   2E:8A:F1:06:96:7C:1A:00:0E:30:1D:B2:07:F6:55:0A:28:0A:11:F3
Certificate issuer:       /CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
Certificate serial:       3F13AB9158BC34847601CEB753C6198F19B1A5B8
Authority key identifier: B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa
Signing time:             Mon 31 Jul 2023 00:09:29 +0000
ROA not before:           Mon 31 Jul 2023 00:04:29 +0000
ROA not after:            Mon 29 Jul 2024 00:09:29 +0000
asID:                     139401
IP address blocks:        103.142.183.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl
                          rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 02:34:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:13:ab:91:58:bc:34:84:76:01:ce:b7:53:c6:19:8f:19:b1:a5:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B65D1460ACFC8D91183381DC64E52D2E282D14B0
        Validity
            Not Before: Jul 31 00:04:29 2023 GMT
            Not After : Jul 29 00:09:29 2024 GMT
        Subject: CN=2E8AF106967C1A000E301DB207F6550A280A11F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:12:e6:bc:60:ec:26:d0:f2:be:57:f9:bd:a3:
                    1d:db:d0:20:98:27:9e:4e:da:51:14:90:3c:41:0f:
                    cf:ff:11:f6:52:92:93:36:b8:5f:b3:26:2a:56:0c:
                    3c:86:ea:e9:ce:de:64:b2:a8:4b:7e:87:b6:98:ad:
                    d2:f0:2b:85:df:b4:26:da:3e:ff:fb:04:e1:e3:a5:
                    4a:c8:f2:2c:34:bf:1a:6f:01:8a:b7:39:5f:ed:11:
                    a6:ca:3d:c0:b4:f3:06:d7:35:7b:c0:92:dd:1c:e2:
                    48:b8:68:2e:d3:84:99:81:fb:23:fb:1d:b5:83:45:
                    9e:a8:06:39:31:f7:d9:f1:05:63:6d:da:32:cf:e4:
                    78:41:d2:44:29:88:a7:89:8d:c6:e2:28:40:6d:ba:
                    57:c8:27:7c:2b:af:8b:b3:60:05:be:f1:1f:2b:a2:
                    37:ad:ed:7d:60:0d:2f:90:39:68:cd:a7:ae:70:9f:
                    44:9e:17:64:88:8d:ff:0d:85:0e:bd:59:a1:2e:3e:
                    d8:9e:2d:c3:3a:6c:83:19:ed:fd:ff:1d:e4:3c:37:
                    df:af:5a:f7:a9:6b:8a:e4:34:3b:31:20:f2:65:19:
                    15:da:5b:b6:b9:56:30:80:cb:82:3f:93:d2:7c:45:
                    2e:81:1e:62:07:d4:f6:fe:b6:dc:3e:cf:3d:57:dd:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8A:F1:06:96:7C:1A:00:0E:30:1D:B2:07:F6:55:0A:28:0A:11:F3
            X509v3 Authority Key Identifier:
                keyid:B6:5D:14:60:AC:FC:8D:91:18:33:81:DC:64:E5:2D:2E:28:2D:14:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/B65D1460ACFC8D91183381DC64E52D2E282D14B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B65D1460ACFC8D91183381DC64E52D2E282D14B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/026cf28d-ffc7-4351-a8cb-25d19fc43177/0/3130332e3134322e3138332e302f32342d3234203d3e20313339343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.183.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:8e:51:c9:09:88:0c:70:da:1f:72:bd:d0:a4:a8:81:14:8f:
         50:70:e3:98:4f:28:7b:87:b8:97:e2:43:af:57:6b:0f:b7:3b:
         24:2c:24:19:3f:6f:8d:5f:ee:87:a0:6c:88:76:c0:03:c4:79:
         09:0b:db:6d:87:cb:92:59:e4:d0:90:ca:5b:07:08:c4:69:90:
         2f:90:e7:29:1e:5a:a2:2c:64:65:96:10:0b:06:a7:77:05:68:
         70:5a:3c:38:84:92:5d:47:ad:2c:4f:9a:b9:6e:52:22:ad:fd:
         32:1e:76:3c:05:f6:90:02:27:bf:68:ca:c9:e9:5a:43:4d:c4:
         c6:bd:d3:5c:ea:57:1e:8f:dc:c5:c6:ed:3a:2a:94:58:28:7f:
         6f:84:84:e6:2d:18:27:3f:58:8e:c6:2d:20:89:95:71:05:ae:
         35:5a:d2:85:68:58:9f:97:fd:79:c9:1c:73:d0:6a:76:3f:d1:
         d7:7e:b2:25:3e:a4:4d:41:cb:b8:21:a6:31:4b:f6:e7:7d:9a:
         22:b4:56:7e:4b:f4:d7:c1:cc:3a:6f:e3:3f:f3:cc:44:65:30:
         81:90:b1:28:f5:ab:59:77:be:25:94:66:01:a7:46:1c:99:43:
         84:75:77:3c:e0:7a:c8:ba:19:20:db:ca:08:ef:47:37:db:c7:
         1a:fa:2b:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 04:42:12 2024 by rpki-client on console-fra.rpki-client.org