Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/3130332e31382e34342e302f32332d3234203d3e20313530323735.roa
File:                     3130332e31382e34342e302f32332d3234203d3e20313530323735.roa (raw, json)
Hash identifier:          xJRuT/6nONJPjophDonQuebgMTErUOSZcXr71chV5rM=
Subject key identifier:   B5:44:4D:15:D4:DA:8E:5A:B0:76:39:CF:49:E5:9E:F2:7B:67:DC:B5
Certificate issuer:       /CN=A6A73303D7FB4B926766F1EA71A883290C724BC9
Certificate serial:       4E7EAD1DB0D5DBFE9443017361C144EC93EE0BBC
Authority key identifier: A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/3130332e31382e34342e302f32332d3234203d3e20313530323735.roa
Signing time:             Tue 12 Mar 2024 06:02:01 +0000
ROA not before:           Tue 12 Mar 2024 05:57:01 +0000
ROA not after:            Tue 11 Mar 2025 06:02:01 +0000
asID:                     150275
IP address blocks:        103.18.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.crl
                          rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 22:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:7e:ad:1d:b0:d5:db:fe:94:43:01:73:61:c1:44:ec:93:ee:0b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6A73303D7FB4B926766F1EA71A883290C724BC9
        Validity
            Not Before: Mar 12 05:57:01 2024 GMT
            Not After : Mar 11 06:02:01 2025 GMT
        Subject: CN=B5444D15D4DA8E5AB07639CF49E59EF27B67DCB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ee:b4:a7:89:70:c0:0a:c2:43:cf:77:59:23:
                    a6:97:1e:08:f7:96:07:ec:76:47:e9:15:25:19:f2:
                    b1:0f:a6:28:31:94:b1:aa:dd:e8:9e:57:9c:62:2f:
                    7b:17:46:df:c4:da:b5:d0:0e:c6:8a:80:98:28:cc:
                    dc:6c:c5:e5:af:48:3f:d0:96:fd:e8:2c:56:0c:b8:
                    4a:07:87:68:78:89:db:60:e5:18:c5:32:40:06:09:
                    84:0b:e2:13:41:a5:c5:dd:15:ab:60:b5:c8:a2:31:
                    6b:04:3a:8e:79:b9:1f:5f:26:2a:f5:cc:ab:fa:ae:
                    1a:a4:fb:e1:1e:a8:56:de:93:78:f8:8b:a9:79:75:
                    cd:b8:bb:d3:2d:2a:07:6d:75:4f:a9:9c:28:45:ad:
                    89:c2:03:34:48:03:8f:c9:2e:52:b1:15:97:a6:9d:
                    23:30:0e:d1:e8:60:25:ae:49:5f:2f:d4:62:22:8f:
                    0c:15:d3:62:de:5c:88:bb:fb:94:7e:7a:4c:cc:c2:
                    94:8a:21:74:13:58:75:36:1a:62:70:b9:31:0f:50:
                    90:74:94:e6:6e:0e:db:6b:7d:61:22:01:a4:8e:26:
                    b0:c0:94:e0:86:30:69:9c:e1:2c:75:f7:4b:48:fc:
                    4c:24:6c:1f:c9:36:77:9d:d0:6c:cd:02:cb:bc:87:
                    b3:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:44:4D:15:D4:DA:8E:5A:B0:76:39:CF:49:E5:9E:F2:7B:67:DC:B5
            X509v3 Authority Key Identifier:
                keyid:A6:A7:33:03:D7:FB:4B:92:67:66:F1:EA:71:A8:83:29:0C:72:4B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/A6A73303D7FB4B926766F1EA71A883290C724BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A6A73303D7FB4B926766F1EA71A883290C724BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b64d8c1-c714-4592-8fc5-e392ebff1e98/0/3130332e31382e34342e302f32332d3234203d3e20313530323735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:d0:6e:19:22:d6:8c:f5:61:7f:cd:8f:3d:dd:c6:8d:07:36:
         98:de:a7:cb:08:4a:a6:33:f3:3f:e7:11:1e:1e:73:cb:07:e9:
         eb:41:af:48:62:75:27:87:8b:b7:16:66:95:3d:43:3d:04:21:
         8c:74:ad:bf:3b:eb:78:85:a6:90:2d:fb:28:98:d4:30:f4:53:
         ca:65:ac:5b:5a:c8:e3:45:5d:ef:a3:90:16:a0:d9:f6:6e:cb:
         b8:75:b2:fd:80:15:5b:65:c4:59:10:6c:16:25:fb:29:80:b3:
         84:dd:22:88:c6:af:f6:75:11:63:69:b6:5f:b9:3b:99:97:fe:
         7e:65:9a:4a:6a:e4:12:93:c0:a2:c7:e2:1c:bd:72:e0:71:4c:
         06:af:f3:6e:93:3b:e5:50:ce:82:d8:0b:f3:8b:c4:00:94:f0:
         4f:a1:d1:2c:1c:36:96:7c:67:6e:63:f1:cf:c3:a0:51:8d:80:
         c4:29:29:82:3e:57:fb:14:31:88:67:13:fe:01:7d:13:3d:3e:
         68:cd:fa:54:30:c9:fa:bd:08:25:0b:65:01:d6:ac:f8:f2:53:
         97:43:e2:ba:2f:16:57:79:08:93:08:83:ff:f8:67:91:77:a8:
         48:04:41:ac:a1:cd:92:e6:08:3c:d7:96:13:7f:07:e2:84:85:
         f2:35:c5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 28 23:26:29 2024 by rpki-client on console-ams.rpki-client.org