Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
File:                     3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa (raw, json)
Hash identifier:          +Inku8JbbUNqeg+Ljrd5Bs7t4gp+eduAPT8HbuOG6qQ=
Subject key identifier:   AB:94:BF:88:09:BD:90:5B:6D:A9:89:4A:A8:47:1D:6A:38:E0:4F:3A
Certificate issuer:       /CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
Certificate serial:       0F2EE0110422A384F0005B11DC93447DCE53A4AB
Authority key identifier: 5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa
Signing time:             Wed 15 May 2024 11:00:01 +0000
ROA not before:           Wed 15 May 2024 10:55:01 +0000
ROA not after:            Wed 14 May 2025 11:00:01 +0000
asID:                     150968
IP address blocks:        103.123.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl
                          rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:2e:e0:11:04:22:a3:84:f0:00:5b:11:dc:93:44:7d:ce:53:a4:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD19173FE66EE2B9E995A99ED7DC4230113BDEF
        Validity
            Not Before: May 15 10:55:01 2024 GMT
            Not After : May 14 11:00:01 2025 GMT
        Subject: CN=AB94BF8809BD905B6DA9894AA8471D6A38E04F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:08:d0:d5:3f:32:aa:eb:47:47:9c:50:98:b3:
                    74:4d:bd:aa:e4:7e:bc:f9:e6:25:d8:46:f5:fa:61:
                    94:ba:9f:ff:11:ed:bf:cf:a7:d6:96:ee:e0:4e:c1:
                    9d:60:e4:2d:13:91:ce:59:2d:d1:b5:ce:24:50:95:
                    64:ca:d6:5c:2c:86:86:66:e4:2f:34:02:ef:4d:0c:
                    53:ac:50:c9:04:5f:4d:b9:c1:50:60:0f:14:27:2c:
                    c2:f9:cf:04:89:1d:9e:fc:55:37:61:3a:48:1c:6f:
                    92:4b:46:fe:ea:24:2b:b8:4b:df:3c:49:75:3b:a3:
                    f9:11:a5:5d:5b:20:cf:91:cd:0a:8e:2b:6c:fd:2e:
                    e1:9e:7d:02:c6:3b:25:6c:07:e7:12:67:2f:cc:9a:
                    c5:68:94:4b:c4:3b:13:4a:af:a5:e4:d7:9f:3a:ef:
                    ed:06:ca:26:f0:9e:e5:3c:88:dc:94:35:5a:a7:1b:
                    a3:8a:69:3c:ba:48:2a:2c:df:53:04:43:fb:98:fd:
                    ad:00:02:b7:4b:5b:3a:39:87:c9:16:b3:1d:12:e5:
                    6a:6c:68:b8:3d:af:6a:dc:4a:88:46:df:aa:86:cc:
                    9e:df:ad:05:69:78:d9:cb:cb:ab:a8:45:62:56:10:
                    83:76:3f:2c:25:e0:c3:99:f8:26:05:e5:79:9e:74:
                    bb:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:94:BF:88:09:BD:90:5B:6D:A9:89:4A:A8:47:1D:6A:38:E0:4F:3A
            X509v3 Authority Key Identifier:
                keyid:5A:D1:91:73:FE:66:EE:2B:9E:99:5A:99:ED:7D:C4:23:01:13:BD:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AD19173FE66EE2B9E995A99ED7DC4230113BDEF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1fedb28f-f3f9-4199-85a3-c9bf9a7a7df8/0/3130332e3132332e3137342e302f32332d3233203d3e20313530393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:fc:0d:06:ab:d0:32:6c:28:ed:a5:3e:00:ea:cb:46:31:8c:
         a6:7c:be:de:3f:d8:8a:21:3f:0e:91:42:0b:96:e1:b8:42:3e:
         cc:2d:dc:dc:11:fb:8f:8c:76:18:5e:ba:7d:14:f7:b9:1f:64:
         e0:05:a0:1c:e6:dc:2e:b9:a9:c0:46:32:ab:79:36:4c:16:fe:
         76:10:bc:3c:a8:7d:a9:17:06:a1:cc:2a:04:af:7e:77:64:d4:
         9a:56:21:eb:ad:8d:4e:bd:f7:86:14:94:6b:86:1c:2f:5b:16:
         31:fc:13:83:e0:3c:5e:59:4f:b1:e9:1e:8f:c9:7b:ca:e6:8b:
         c4:ef:64:18:9a:dd:f5:f4:ac:ab:f7:93:97:31:68:ba:89:eb:
         1c:1b:2b:30:c7:0d:20:a2:af:75:2b:86:d0:cd:1a:45:b1:05:
         88:63:70:dc:f3:96:ec:cb:9f:12:da:0e:86:b0:12:a2:37:82:
         d6:26:e3:e5:c9:fa:75:31:b4:7e:96:0c:21:a5:63:61:e1:1e:
         69:19:ee:19:38:9e:2f:af:39:2d:27:61:6a:f5:ea:e7:1f:47:
         4d:8c:58:ea:23:f4:43:9e:e8:20:f7:d2:59:f8:a1:b7:1f:e6:
         61:a7:c3:7f:5f:43:18:fc:69:22:f4:3e:da:be:4f:8a:39:7d:
         34:23:78:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:05 2024 by rpki-client on console-fra.rpki-client.org