Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
File:                     3130332e3138332e362e302f32332d3234203d3e20313439343037.roa (raw, json)
Hash identifier:          RDDgBBtE0xos6kwYIBw+I6nY7IgKsTrVh7gyqIHaqoQ=
Subject key identifier:   90:20:AC:4B:14:E1:9B:84:3A:9C:CD:1C:A7:E9:AA:F5:3A:06:65:C7
Certificate issuer:       /CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
Certificate serial:       1DEB9941EAA70CEAB624AD8FAABDCF936AF389D8
Authority key identifier: D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa
Signing time:             Sun 04 Feb 2024 16:00:01 +0000
ROA not before:           Sun 04 Feb 2024 15:55:01 +0000
ROA not after:            Sun 02 Feb 2025 16:00:01 +0000
asID:                     149407
IP address blocks:        103.183.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl
                          rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:eb:99:41:ea:a7:0c:ea:b6:24:ad:8f:aa:bd:cf:93:6a:f3:89:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26
        Validity
            Not Before: Feb  4 15:55:01 2024 GMT
            Not After : Feb  2 16:00:01 2025 GMT
        Subject: CN=9020AC4B14E19B843A9CCD1CA7E9AAF53A0665C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0e:0a:10:18:ba:a9:08:b7:9f:17:b6:3c:53:
                    18:48:c8:e3:0e:6f:ad:6d:7a:7f:6b:d8:42:96:61:
                    61:49:3c:62:b1:17:ac:a2:6d:f6:15:8e:d7:30:f7:
                    22:95:eb:a0:50:d6:05:1b:9c:2f:3f:a4:1f:46:f9:
                    d6:dc:6e:bf:81:35:65:eb:f0:06:5f:59:ad:34:59:
                    2b:63:0a:89:fe:c2:e7:23:ac:79:1e:c4:d4:9a:cb:
                    11:f5:ed:7d:8f:c9:7a:ee:41:ab:ea:d4:e4:95:fc:
                    a3:41:0a:b9:c0:ba:64:75:e6:9a:0e:79:da:28:8e:
                    b8:df:22:fc:1a:3e:bc:39:6a:e5:5b:65:71:1a:9b:
                    96:f4:06:8a:e5:a1:c9:e2:95:6e:22:fb:ca:6b:3e:
                    42:a3:31:3c:31:23:5c:8d:57:9f:56:7b:a8:fe:bf:
                    3a:ca:8e:ed:c5:a3:17:fb:f2:26:56:a6:ff:9e:29:
                    f3:c0:63:57:0a:0f:14:53:e8:0a:1b:bb:75:89:aa:
                    05:b6:4d:04:dd:e2:60:08:48:ac:3c:c9:11:c4:db:
                    b4:af:19:fd:41:f2:72:af:63:d2:a2:36:52:89:35:
                    90:0c:6e:d8:52:80:e4:30:9d:f6:ef:c9:fc:5d:2b:
                    42:d0:ab:b0:3c:09:9a:3f:b3:ba:8a:4c:7c:48:46:
                    92:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:AC:4B:14:E1:9B:84:3A:9C:CD:1C:A7:E9:AA:F5:3A:06:65:C7
            X509v3 Authority Key Identifier:
                keyid:D2:1A:35:97:D7:B5:EB:D9:A5:47:68:0F:1C:2E:D7:A4:64:DD:9F:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D21A3597D7B5EBD9A547680F1C2ED7A464DD9F26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cc5605d-f17a-4010-9253-210c64f148bd/0/3130332e3138332e362e302f32332d3234203d3e20313439343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:90:84:b9:cb:bd:52:aa:5b:b9:9f:0d:de:b4:6d:fb:dd:93:
         95:ce:05:ce:e2:8b:35:c9:f0:1e:b4:8f:6a:3c:80:ba:5e:7a:
         f8:74:c6:1d:c3:9d:f2:c7:59:3f:6b:09:a1:9e:ac:93:a5:e0:
         65:35:39:fe:90:bb:67:13:53:66:2f:fe:69:87:85:f3:34:fb:
         3c:d5:a4:76:27:61:0d:7e:01:35:7d:67:06:bf:f1:05:db:a9:
         9b:75:06:3d:2b:a9:fd:4d:4e:1a:27:9b:04:34:06:00:8c:77:
         7e:18:64:73:f9:ca:04:4d:48:18:41:2d:2c:67:28:11:77:02:
         59:83:f2:0f:29:06:26:e7:13:e7:1f:20:c8:cd:e9:c7:c0:ca:
         28:ef:09:cb:cb:fe:e3:f8:1c:c4:85:2e:96:e9:c0:80:0d:d6:
         9c:ee:92:5e:e8:02:9c:ba:a2:9d:fc:f5:53:1d:55:e8:31:45:
         03:ca:cc:47:7d:14:6e:0b:3e:5f:56:cd:2a:d0:60:a2:e6:ae:
         49:3f:10:88:b2:99:9e:66:92:0a:f6:4c:c2:3d:46:d2:53:e9:
         89:60:fc:12:eb:14:13:d8:49:f7:96:95:9a:bc:8a:29:07:af:
         e6:16:f0:a9:0e:17:60:b0:da:2a:d4:a8:ad:ab:f1:b6:d1:28:
         5e:b1:c8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:56 2024 by rpki-client on console-ams.rpki-client.org