Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa
File:                     3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa (raw, json)
Hash identifier:          /PRz/zmWkBjm+cUep/NvEo1NBr/XECh//UBWBSXOZP4=
Subject key identifier:   4B:D0:8A:E0:28:AE:3A:52:DC:2A:A3:70:4E:E5:E3:83:5A:D9:7C:74
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       2D9722E2CA16923871BCE798CEB5FD95790E84A2
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa
Signing time:             Fri 05 Jul 2024 06:26:40 +0000
ROA not before:           Fri 05 Jul 2024 06:21:40 +0000
ROA not after:            Fri 04 Jul 2025 06:26:40 +0000
asID:                     151506
IP address blocks:        103.234.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:97:22:e2:ca:16:92:38:71:bc:e7:98:ce:b5:fd:95:79:0e:84:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Jul  5 06:21:40 2024 GMT
            Not After : Jul  4 06:26:40 2025 GMT
        Subject: CN=4BD08AE028AE3A52DC2AA3704EE5E3835AD97C74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:94:9d:15:b0:98:ba:fa:3b:32:01:32:d0:80:
                    ae:9c:08:84:c5:6c:82:7f:26:83:fe:c0:42:77:a5:
                    62:48:32:05:47:56:25:ee:f1:bb:b8:7f:7e:36:31:
                    75:87:80:98:96:c9:62:ad:44:b4:0e:ba:f7:99:bb:
                    33:56:01:1c:16:32:5e:c8:68:18:fd:49:38:57:f3:
                    7a:9f:30:00:c1:d8:74:82:73:c1:08:76:5d:f1:a6:
                    1a:39:d6:5f:50:e1:32:f2:1e:cb:eb:ba:cf:8d:7d:
                    ea:c4:0e:2a:f7:3b:0f:80:44:7b:39:a2:2b:80:1f:
                    94:32:61:35:0e:f1:42:f7:1d:75:3d:73:ff:0f:76:
                    76:bf:5f:3e:ea:f1:59:cb:54:04:3a:69:62:95:b3:
                    7c:98:93:f6:46:ab:16:d1:b0:ee:82:e5:e4:36:74:
                    a0:d1:c9:c8:09:9a:45:df:fe:51:ee:36:58:47:8c:
                    5f:60:17:ea:18:ba:5f:ec:a5:5b:9f:d7:d5:66:9a:
                    a0:23:2e:96:19:9e:e1:87:31:f1:c0:6d:83:93:b8:
                    34:b3:1a:c2:41:de:97:f5:e9:e9:2f:e8:81:d1:25:
                    62:4c:f4:69:71:8e:d2:9e:79:8c:97:03:86:cc:4a:
                    00:0e:97:ba:92:b8:d2:d9:0b:cd:06:c4:a3:8d:3e:
                    ca:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:D0:8A:E0:28:AE:3A:52:DC:2A:A3:70:4E:E5:E3:83:5A:D9:7C:74
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32332d3233203d3e20313531353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:ba:c8:ce:e5:e7:fa:82:6c:c1:94:76:d0:74:d3:bd:40:27:
         19:46:92:39:51:68:a2:c6:ec:1f:69:15:0d:46:6f:40:18:b6:
         6e:2e:2b:58:2b:b2:9f:2c:1a:d8:42:a3:3a:4d:ea:ce:33:f5:
         44:59:07:2b:2a:c1:5e:c8:59:d6:17:66:c1:ac:af:1a:ee:63:
         fb:0c:06:b2:35:3c:3b:34:8a:bc:a4:af:7d:84:23:12:d9:42:
         b0:fb:7d:11:0a:be:c6:7a:2c:42:87:dc:61:12:51:9b:17:d9:
         a8:ed:03:df:2f:71:9e:c9:6b:4d:6d:6d:20:db:24:4d:1e:5f:
         c1:01:29:83:7c:cb:70:13:d4:08:4d:62:85:a1:d5:aa:b2:bf:
         a0:c3:33:3f:de:3f:f1:91:c1:f5:8f:3f:f7:7a:e2:20:c4:c8:
         6a:3b:3d:f5:ac:2c:41:85:80:2c:a3:26:80:ee:cc:68:ff:e6:
         82:2e:d2:60:11:f0:69:41:29:d5:b5:4c:00:86:f3:31:63:19:
         67:cc:c4:0d:29:f0:3a:66:51:77:86:06:45:65:16:7e:52:82:
         24:6a:2b:45:cc:93:14:f7:6e:f4:74:c0:dc:81:66:3a:5e:e3:
         b9:6c:d2:8d:c4:b8:98:7c:a1:4e:96:3c:c8:70:c4:74:26:24:
         b4:8a:57:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:29:42 2024 by rpki-client on console-fra.rpki-client.org