Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa
File:                     3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa (raw, json)
Hash identifier:          5A2C36U8HTCvU0pViOzKlpqcbRYDkSYucBfxXQMgwuc=
Subject key identifier:   18:92:E6:07:9C:74:D4:0F:3F:77:57:B1:D6:4C:C3:8A:ED:5D:FD:04
Certificate issuer:       /CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0
Certificate serial:       6614983CFF6CD30375A92D7494CA5373347B6AF7
Authority key identifier: 5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa
Signing time:             Tue 02 Apr 2024 04:47:24 +0000
ROA not before:           Tue 02 Apr 2024 04:42:24 +0000
ROA not after:            Tue 01 Apr 2025 04:47:24 +0000
asID:                     139989
IP address blocks:        103.148.76.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl
                          rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:14:98:3c:ff:6c:d3:03:75:a9:2d:74:94:ca:53:73:34:7b:6a:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A0CBE2DBCF9883569F8C24BFB9E595442D835D0
        Validity
            Not Before: Apr  2 04:42:24 2024 GMT
            Not After : Apr  1 04:47:24 2025 GMT
        Subject: CN=1892E6079C74D40F3F7757B1D64CC38AED5DFD04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:19:ae:62:07:82:94:63:27:d7:96:1b:b0:99:
                    c9:1f:b8:9e:9e:b8:44:72:22:ba:f5:4a:b1:ee:2f:
                    c1:0c:1e:6f:dd:a9:77:06:bc:82:8e:7f:9c:b7:cd:
                    bf:3b:3b:1f:c9:1a:80:36:ad:65:56:45:e0:b6:8f:
                    29:2e:22:80:79:66:86:1f:08:b1:e9:50:3a:9e:1f:
                    12:1d:b1:8d:99:dd:31:c9:a2:93:e1:87:c3:43:ca:
                    f8:10:f1:fe:cd:6e:70:72:e2:ff:42:63:44:e8:6c:
                    2a:1f:73:93:97:d8:8b:ed:69:88:91:8b:f5:01:5e:
                    f3:63:a8:65:d2:ed:82:00:0b:83:32:80:86:22:0a:
                    0d:f2:ce:fc:51:57:86:60:8a:9d:6f:3b:63:02:2c:
                    77:32:dc:df:cd:77:d1:82:d9:7c:54:56:38:b6:e1:
                    0d:06:55:3e:19:d9:43:2f:8f:ea:d2:8b:d0:ec:01:
                    46:6e:dd:58:33:8c:09:38:20:12:8e:10:c1:eb:6e:
                    b0:49:b4:b8:15:69:8c:55:b6:bb:b1:5b:d0:82:cf:
                    8c:bb:de:b8:0a:12:05:f2:9e:42:89:d3:19:36:96:
                    67:07:73:66:5e:03:32:8a:04:79:34:2b:98:f1:7b:
                    b2:b8:77:08:75:b1:86:e8:a6:2a:52:7b:02:8e:45:
                    df:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:92:E6:07:9C:74:D4:0F:3F:77:57:B1:D6:4C:C3:8A:ED:5D:FD:04
            X509v3 Authority Key Identifier:
                keyid:5A:0C:BE:2D:BC:F9:88:35:69:F8:C2:4B:FB:9E:59:54:42:D8:35:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A0CBE2DBCF9883569F8C24BFB9E595442D835D0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4031746e-b0f6-4827-8c4e-b8192decc39a/0/3130332e3134382e37362e302f32332d3233203d3e20313339393839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:5a:e1:cd:c3:b7:54:07:29:46:b2:61:00:1f:45:06:fd:e9:
         af:04:eb:70:63:62:0d:7c:8a:0e:0c:82:6d:4a:7e:d8:ef:cd:
         1f:52:ca:8e:94:39:08:66:a3:3e:d5:3f:ce:01:6c:df:b6:ca:
         15:cf:3d:e9:f4:8c:2b:d8:06:e5:e6:2f:fb:31:0a:83:42:bf:
         94:65:fb:3a:ec:82:bd:0d:b1:f2:0c:8d:da:42:35:d3:9d:10:
         cc:25:43:b3:a9:9a:72:63:af:c8:5f:b9:e0:f4:f1:0d:b1:bf:
         17:7b:52:76:b5:3c:ca:27:24:c3:68:b1:ae:30:c3:a9:6b:70:
         30:33:d0:de:d6:e2:7c:74:3d:b4:54:7a:75:8d:30:0a:0b:26:
         b2:b4:e7:b4:36:cb:f1:bf:cc:e8:0a:23:73:6d:67:eb:25:50:
         93:3d:49:d7:5e:af:6f:af:c8:5b:fb:d7:65:76:fc:66:65:03:
         05:a6:b9:24:fa:cb:22:65:72:e8:ab:a3:95:fc:05:0c:d0:40:
         07:95:b9:2a:83:1a:e9:77:98:77:a0:1b:84:38:f0:96:53:d4:
         97:52:48:d7:2d:8a:e3:63:6b:e7:3f:38:59:b6:26:bd:5f:63:
         4c:12:92:df:91:ad:6b:90:4e:b5:2e:f7:21:2d:01:59:b6:83:
         c3:f0:84:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:28 2024 by rpki-client on console-fra.rpki-client.org