Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa
File:                     3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa (raw, json)
Hash identifier:          pdHthYm8EnnXFBJ9taP9vA57ywSIhYFdIDtyWwgjFnI=
Subject key identifier:   93:78:0C:4F:74:7A:AC:17:E9:95:A8:ED:3E:BE:AC:12:04:EC:86:7F
Certificate issuer:       /CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB
Certificate serial:       3C96137ACF6D3C9B69A01BE383D1CB0A2B4588F9
Authority key identifier: EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa
Signing time:             Mon 31 Jul 2023 09:01:17 +0000
ROA not before:           Mon 31 Jul 2023 08:56:17 +0000
ROA not after:            Mon 29 Jul 2024 09:01:17 +0000
asID:                     149937
IP address blocks:        103.191.150.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl
                          rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:96:13:7a:cf:6d:3c:9b:69:a0:1b:e3:83:d1:cb:0a:2b:45:88:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB
        Validity
            Not Before: Jul 31 08:56:17 2023 GMT
            Not After : Jul 29 09:01:17 2024 GMT
        Subject: CN=93780C4F747AAC17E995A8ED3EBEAC1204EC867F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:af:7c:11:af:b7:e6:90:41:79:26:94:c3:b8:
                    12:ab:66:78:6b:4b:c7:6f:a0:ad:bf:fe:04:12:11:
                    91:7f:aa:f9:ac:92:89:34:95:7f:ee:8a:9f:0c:2e:
                    f0:00:9c:b0:59:81:08:04:94:52:b3:a6:f6:52:92:
                    43:2a:00:c1:57:27:a0:fe:b9:a3:10:cc:98:5a:3c:
                    fe:f0:48:8c:31:60:de:91:10:c4:d7:19:b6:fb:71:
                    a5:b4:cd:27:33:1a:d7:83:35:e7:57:03:03:fe:2a:
                    45:0e:bd:c2:73:85:db:a7:39:94:da:e2:ed:01:00:
                    01:a0:93:00:47:ed:11:3c:83:72:ef:b6:41:dd:0a:
                    5e:7a:4b:0c:ef:28:cb:18:9e:cb:b4:d7:c8:e5:19:
                    bd:20:ab:9b:bd:d7:8a:5e:68:f8:4a:61:a5:a3:9a:
                    97:5d:c9:1a:70:78:15:e6:d1:3f:3d:25:df:5a:f0:
                    27:61:12:d5:b2:37:e2:a1:b7:b1:df:11:0c:bb:18:
                    9f:b1:0b:7a:11:a4:75:b3:95:9c:73:3e:34:fa:e9:
                    ed:01:3e:2f:91:ea:39:fc:30:70:95:35:11:87:0f:
                    f0:13:c7:fe:9b:33:c1:4d:5d:c8:38:07:5f:99:d1:
                    df:bd:6a:a5:5c:8e:2c:9c:e1:00:ac:fd:9a:e5:a5:
                    a4:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:78:0C:4F:74:7A:AC:17:E9:95:A8:ED:3E:BE:AC:12:04:EC:86:7F
            X509v3 Authority Key Identifier:
                keyid:EA:EA:2F:2F:07:FF:F3:43:40:77:7B:3B:BD:7D:1D:18:6F:4E:C1:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EAEA2F2F07FFF34340777B3BBD7D1D186F4EC1CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18b42420-56d0-451a-a29d-5f9d6230e227/0/3130332e3139312e3135302e302f32332d3234203d3e20313439393337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:cc:96:04:76:8c:b9:c7:b1:67:76:fe:44:59:b2:99:40:1c:
         28:4b:d7:2f:22:50:cd:50:56:6e:a9:e0:a2:bb:f4:bd:f0:ce:
         cd:ef:04:18:06:3b:1c:5b:cb:fe:3e:ed:1b:22:a2:3c:e1:e8:
         93:cd:35:e6:15:96:0b:bc:2a:70:13:8f:41:40:40:73:90:d9:
         c9:67:98:cb:31:1a:b5:ec:0a:b1:c5:fd:99:f6:c9:49:bf:55:
         cc:52:5a:1b:98:50:31:8e:5a:68:49:6d:46:40:68:61:9d:8f:
         9e:71:ea:f8:82:60:7d:3a:54:f9:b9:be:cf:65:09:ad:65:50:
         9d:14:eb:30:19:79:91:9e:76:64:0d:4b:5b:0f:6d:da:12:df:
         0a:35:ac:b0:c0:69:34:5b:58:fd:92:78:49:de:02:15:e3:04:
         aa:a4:d1:84:9c:ce:ae:1e:83:a9:ac:d2:7e:17:99:03:e2:6c:
         eb:da:e4:bd:fd:2a:cd:19:98:3d:a0:52:6f:ff:91:f5:7f:97:
         66:8d:6b:c0:bc:b2:e8:60:23:fd:da:80:d4:c3:89:65:6d:95:
         10:e4:44:d1:20:86:8e:0f:68:ef:f7:ec:4b:c9:6f:87:e6:c0:
         43:1e:f2:05:fe:4d:1f:d2:50:f9:62:e3:38:f0:e0:f6:b2:4f:
         dc:ac:8f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 22:08:22 2024 by rpki-client on console-fra.rpki-client.org