Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa
File:                     3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa (raw, json)
Hash identifier:          BOfyfaXkMPpnykrXSSL73V0KR5iXKKYlwcwYHjmLkG8=
Subject key identifier:   7C:F1:A3:6A:E4:DB:06:C5:88:2C:1C:5C:0D:3A:D2:D8:30:33:08:1D
Certificate issuer:       /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial:       41163BB74D676A044757D55ED431A35E3DA80448
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa
Signing time:             Tue 17 Oct 2023 11:01:51 +0000
ROA not before:           Tue 17 Oct 2023 10:56:51 +0000
ROA not after:            Tue 15 Oct 2024 11:01:51 +0000
asID:                     150234
IP address blocks:        103.19.156.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
                          rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 21:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:16:3b:b7:4d:67:6a:04:47:57:d5:5e:d4:31:a3:5e:3d:a8:04:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
        Validity
            Not Before: Oct 17 10:56:51 2023 GMT
            Not After : Oct 15 11:01:51 2024 GMT
        Subject: CN=7CF1A36AE4DB06C5882C1C5C0D3AD2D83033081D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3e:dc:af:58:b1:71:1e:4e:f8:30:1f:44:40:
                    34:3d:84:de:17:70:0b:bd:d1:5e:ca:0a:79:2c:f3:
                    f4:7d:64:72:36:18:95:28:07:c1:ef:88:c3:7b:be:
                    d8:e7:09:24:33:37:d6:a7:c5:20:58:dc:81:93:0b:
                    33:fd:e3:f6:8f:00:b5:09:93:24:13:50:10:39:52:
                    ff:35:c8:22:40:52:e7:12:b8:64:21:bb:44:82:e2:
                    e6:c0:b3:8e:66:f6:34:aa:c5:b2:8f:13:c0:35:ae:
                    26:31:7a:54:a4:0e:bc:3d:10:a4:c8:38:7f:ea:96:
                    76:0c:0c:9c:36:a7:de:bf:51:37:40:2e:46:0b:70:
                    8e:cc:ca:d0:f6:bf:91:eb:0e:21:68:f1:02:89:92:
                    e2:b1:da:a7:df:28:c8:92:be:2c:68:f0:6e:13:a3:
                    06:11:ab:19:fe:0c:27:61:db:bb:2b:a1:97:a0:4a:
                    c5:23:24:a6:e5:a0:ae:e1:1b:17:2f:e5:2e:7f:3d:
                    3e:81:7a:8d:45:cc:0f:b2:2d:47:d9:a2:f6:8a:b2:
                    c0:90:d4:3d:64:94:de:2d:f2:b2:6a:45:6a:a8:fc:
                    11:75:16:c3:92:30:9d:c4:4d:92:9b:28:4e:09:84:
                    60:c8:23:40:b5:51:2c:43:a9:dd:91:3b:4d:b1:ab:
                    d6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F1:A3:6A:E4:DB:06:C5:88:2C:1C:5C:0D:3A:D2:D8:30:33:08:1D
            X509v3 Authority Key Identifier:
                keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135362e302f32332d3233203d3e20313530323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:c6:87:da:f3:5f:cc:20:98:55:19:be:49:8c:23:50:04:c1:
         0d:9d:6a:15:20:9c:57:68:08:3f:3f:42:a9:02:1d:e3:7e:77:
         ef:3a:e1:fa:d0:e2:b8:b1:6d:60:2d:90:74:15:14:e1:2e:a8:
         c2:34:a4:32:c6:00:c8:78:97:c6:cc:ca:bf:63:da:81:44:a2:
         0e:6e:43:1d:ed:8d:ff:44:42:0f:63:4f:63:0e:2e:8f:84:5c:
         df:69:ac:d6:7b:56:0e:74:c7:3a:e6:7c:3b:4d:03:c1:e0:bf:
         d4:9e:3b:7e:d8:dc:4f:07:06:1b:0b:c6:eb:52:19:63:6f:03:
         a8:e4:c6:e5:0b:0f:64:7d:39:29:bf:e5:a3:a2:96:6b:98:b7:
         80:71:99:7b:3d:58:0e:96:69:e3:1b:81:56:08:55:c3:f6:60:
         4e:f8:5e:b7:5d:22:f5:be:ef:fa:e2:30:97:15:2a:30:50:1b:
         d3:21:45:80:4a:4f:cb:b4:da:16:83:12:12:0c:c8:78:3e:72:
         c3:bc:45:16:14:d8:a6:cd:29:1c:90:af:fa:0a:df:e5:59:b0:
         01:ee:78:52:0d:d9:41:ca:f1:e2:67:50:28:bb:00:53:d8:10:
         1a:19:d5:43:da:eb:2b:78:8a:40:08:cf:6d:8a:9b:79:65:20:
         e8:89:5e:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 20 15:24:33 2024 by rpki-client on console-fra.rpki-client.org