Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
File:                     3130332e35332e3138342e302f32332d3234203d3e203633383734.roa (raw, json)
Hash identifier:          4Z0DfVGNTAyyzFzyUzUTw3O3gtLPAlpt/by4zuglXBs=
Subject key identifier:   0E:CC:58:8F:80:8B:26:EC:13:C6:FA:8D:34:6D:7F:90:65:8F:72:A0
Certificate issuer:       /CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
Certificate serial:       664B4AA47305BE76E2701A965F412588BCD95447
Authority key identifier: A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa
Signing time:             Thu 31 Aug 2023 05:00:00 +0000
ROA not before:           Thu 31 Aug 2023 04:55:00 +0000
ROA not after:            Thu 29 Aug 2024 05:00:00 +0000
asID:                     63874
IP address blocks:        103.53.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl
                          rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:4b:4a:a4:73:05:be:76:e2:70:1a:96:5f:41:25:88:bc:d9:54:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C
        Validity
            Not Before: Aug 31 04:55:00 2023 GMT
            Not After : Aug 29 05:00:00 2024 GMT
        Subject: CN=0ECC588F808B26EC13C6FA8D346D7F90658F72A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:94:68:55:14:4c:df:77:0e:9d:06:ce:85:d9:
                    78:77:9c:41:35:42:a7:f4:f2:7c:ff:b9:f8:3c:c2:
                    86:21:31:20:de:cd:df:f1:e2:84:d7:5b:94:e9:98:
                    3a:2d:61:67:e3:b6:3c:53:1a:65:2a:32:54:50:95:
                    e3:ae:f2:34:7f:8f:e5:87:3a:24:13:c4:ef:53:c3:
                    91:39:05:75:98:a2:bf:4b:b7:86:db:d2:4e:94:36:
                    d0:3d:b4:74:41:f7:3a:28:0c:3b:aa:e1:6b:f6:3b:
                    54:c3:a1:28:83:8e:b8:30:d9:07:1e:92:22:58:ef:
                    85:eb:e0:e8:62:f3:7d:22:9b:be:36:98:5a:f5:53:
                    d1:86:77:ab:da:3f:b7:67:d8:b6:0f:15:b2:bc:05:
                    b4:eb:93:b3:ac:9e:ed:c9:ce:d0:ee:48:50:f8:c3:
                    04:48:90:58:82:4e:c7:f4:e8:9b:3f:64:ce:21:d0:
                    ba:e4:81:3d:8d:a8:fe:1c:32:d6:1c:3f:e6:c1:d1:
                    01:df:7e:34:7d:db:c5:db:23:4e:a6:3a:95:62:17:
                    a6:b6:96:45:80:46:54:ad:d1:11:2b:9f:e2:62:de:
                    a8:bf:cc:5c:ea:be:bd:47:5d:0a:87:27:9e:c3:5a:
                    d8:c6:1d:39:03:a1:db:49:b6:af:3b:18:0e:71:7a:
                    ec:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:CC:58:8F:80:8B:26:EC:13:C6:FA:8D:34:6D:7F:90:65:8F:72:A0
            X509v3 Authority Key Identifier:
                keyid:A5:51:C9:C9:99:1E:20:FF:99:C2:A7:48:CB:76:65:B2:DE:0D:2F:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A551C9C9991E20FF99C2A748CB7665B2DE0D2F0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/10e88774-844f-4616-8bd0-dc313928730c/0/3130332e35332e3138342e302f32332d3234203d3e203633383734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.53.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ca:f5:48:69:42:8d:f7:ef:0a:dc:e2:cc:7f:7d:29:12:b0:89:
         46:00:29:b4:e1:71:c7:c7:96:0c:3b:54:5d:1c:b6:6d:15:31:
         1a:43:2e:93:e2:34:03:58:be:9d:13:35:e2:cb:a0:82:7a:8e:
         9a:53:62:38:05:a8:7c:6a:f8:e9:4f:7c:47:ab:ac:e4:1c:48:
         67:31:d3:e9:bc:4d:22:bb:40:d3:84:99:f0:fc:48:1b:a6:e3:
         a0:12:30:54:09:ca:61:fd:64:24:f0:45:ff:3c:95:03:9c:47:
         95:e1:ac:20:f7:97:63:ff:0d:73:01:b5:b8:97:61:a5:03:74:
         1b:86:28:9e:a8:28:2a:f6:b1:00:b9:0d:b4:2b:aa:e5:02:7f:
         3e:ee:c1:5d:a6:4a:36:2c:b9:c2:30:ec:f0:9d:74:4b:9c:7c:
         f8:24:d2:99:ba:8a:5b:ed:bb:c4:fc:ac:2e:e4:82:cf:a9:1e:
         f3:a7:ed:11:6d:7b:85:e7:24:98:db:c2:9b:b1:31:eb:43:15:
         77:3f:49:4f:45:1d:9d:87:63:21:6b:19:08:c1:b3:3a:9b:d6:
         0a:00:6c:55:2f:93:70:f8:c8:88:54:3f:fa:35:40:4c:a1:57:
         90:ba:93:8b:45:86:e9:07:a4:84:f9:c6:2f:51:2d:a3:9e:f0:
         81:38:69:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 09:07:38 2024 by rpki-client on console-fra.rpki-client.org