Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa
File:                     3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa (raw, json)
Hash identifier:          sexqXYVW8ieC6sdlJt/dGasLBkG6h3AUR692knSaF1U=
Subject key identifier:   DF:4B:6A:1E:A9:BB:F8:34:E2:40:77:93:21:38:2B:67:84:DC:96:5F
Certificate issuer:       /CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
Certificate serial:       39D48A2060C49A906E70F103CF446B966D1EA36B
Authority key identifier: 14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa
Signing time:             Mon 17 Jun 2024 06:01:31 +0000
ROA not before:           Mon 17 Jun 2024 05:56:31 +0000
ROA not after:            Mon 16 Jun 2025 06:01:31 +0000
asID:                     149398
IP address blocks:        103.182.76.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl
                          rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 22:16:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:d4:8a:20:60:c4:9a:90:6e:70:f1:03:cf:44:6b:96:6d:1e:a3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E
        Validity
            Not Before: Jun 17 05:56:31 2024 GMT
            Not After : Jun 16 06:01:31 2025 GMT
        Subject: CN=DF4B6A1EA9BBF834E240779321382B6784DC965F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:bf:81:61:c8:3c:20:a3:de:e7:f1:ea:2c:84:
                    13:1a:6e:0c:6f:35:46:cb:11:64:c5:d9:4b:9c:50:
                    33:e6:2d:da:06:3e:d4:38:07:1e:54:8b:f1:b0:71:
                    f3:7d:ae:8d:41:3f:4d:7c:a7:05:07:3b:5d:74:ae:
                    3a:bc:a1:54:fe:9b:b2:df:cb:4e:62:da:2f:c7:59:
                    6e:d7:c4:30:8c:bf:4d:b0:d6:e4:ca:50:13:0e:65:
                    00:10:39:b8:14:1f:9a:c7:d7:6c:5d:14:a8:47:72:
                    0e:3c:78:c6:ae:b2:cf:9b:13:51:53:ae:b3:12:dc:
                    f5:fa:0e:6d:f1:d6:ee:bf:5f:78:cd:92:28:fc:76:
                    76:bc:10:28:f8:70:e5:b0:37:67:e9:96:5a:48:ce:
                    fa:ed:c5:02:16:85:69:4a:c7:aa:85:54:3f:24:52:
                    33:82:1c:24:2d:3f:e4:82:7a:45:00:c4:d6:62:fb:
                    90:77:d2:37:aa:49:f8:73:11:0a:ab:4a:51:af:f2:
                    9d:f2:78:41:5b:e8:24:5f:08:4c:f1:4b:70:de:b5:
                    00:95:06:15:72:ac:31:21:d1:1c:35:31:9e:e0:d9:
                    e4:d9:8e:0f:a1:dd:28:2e:eb:93:de:52:b8:c2:07:
                    bd:61:74:53:30:de:e9:db:d3:6b:18:fb:ec:aa:b0:
                    4f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4B:6A:1E:A9:BB:F8:34:E2:40:77:93:21:38:2B:67:84:DC:96:5F
            X509v3 Authority Key Identifier:
                keyid:14:CB:3B:6C:E8:B4:3B:B7:43:9A:AE:A8:6D:73:DF:3A:F1:59:4D:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/14CB3B6CE8B43BB7439AAEA86D73DF3AF1594D9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d4dcde3-757f-43d4-ade2-ff0887cc2487/0/3130332e3138322e37362e302f32342d3234203d3e20313439333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:bc:ed:17:9c:cc:ba:1b:9f:3f:6f:3b:d8:14:58:38:33:93:
         14:e1:a3:0c:06:38:36:08:ad:24:0d:85:a1:5a:bf:00:63:6e:
         58:16:93:ba:79:3f:3b:84:58:6b:d1:71:14:8f:58:90:5e:82:
         2f:c4:55:9d:e1:dd:77:32:03:71:5c:41:c8:fd:35:ae:02:a9:
         ea:a7:40:8b:38:7e:82:29:af:13:1d:f3:e1:97:2d:ef:04:5d:
         45:23:7e:89:a8:67:eb:07:58:be:ff:0a:da:13:6c:e4:c7:36:
         4b:c0:0a:34:a5:80:c0:e5:39:1a:9b:7b:de:ad:8d:79:cc:40:
         d1:cd:a9:dc:58:ed:b8:2a:bb:6f:f0:e4:a2:f0:f8:cc:24:16:
         d3:67:06:95:f5:26:fb:91:87:d4:53:8a:69:5d:26:2d:83:ee:
         96:0a:18:66:fe:16:eb:d0:02:d9:85:13:29:d8:b7:e0:7c:d6:
         e7:37:73:57:42:d7:7f:90:af:06:11:63:71:cc:3d:a4:43:d1:
         5a:65:bd:b1:43:58:98:e4:e7:d5:3a:c5:40:4a:80:a7:8e:cf:
         51:5c:9a:c6:0d:8e:a3:d7:97:60:ff:95:e2:59:81:d2:54:c4:
         24:f5:4d:1f:96:05:32:14:9b:db:37:10:da:12:8a:b8:91:f3:
         53:a0:b8:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:05:22 2025 by rpki-client