Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa
File:                     3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa (raw, json)
Hash identifier:          mLGy362AL1S8Ab7sCSt0+XDOGeHQuwm8+sniUmwq0DI=
Subject key identifier:   0D:BB:AE:DD:FB:6C:37:6E:48:4C:2A:98:94:BF:1A:02:0A:36:58:68
Certificate issuer:       /CN=4515472806DD01B59715410103D51C05E4F28B96
Certificate serial:       5B7853F7044A5CA5486E80FBB9D50D1539EA6397
Authority key identifier: 45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa
Signing time:             Thu 22 Feb 2024 02:00:00 +0000
ROA not before:           Thu 22 Feb 2024 01:55:00 +0000
ROA not after:            Thu 20 Feb 2025 02:00:00 +0000
asID:                     147090
IP address blocks:        103.173.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl
                          rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:78:53:f7:04:4a:5c:a5:48:6e:80:fb:b9:d5:0d:15:39:ea:63:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4515472806DD01B59715410103D51C05E4F28B96
        Validity
            Not Before: Feb 22 01:55:00 2024 GMT
            Not After : Feb 20 02:00:00 2025 GMT
        Subject: CN=0DBBAEDDFB6C376E484C2A9894BF1A020A365868
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:28:41:e8:f2:65:94:9c:1a:1b:fb:42:d5:16:
                    52:c5:d4:76:6c:6b:a0:30:3a:e4:b1:38:63:5b:29:
                    c9:84:a5:82:8d:56:c5:7d:d2:e9:f0:c3:30:9a:79:
                    36:24:c8:bf:f1:40:d9:09:3a:02:1f:9d:f1:f6:8c:
                    c0:e3:68:e3:cc:39:6b:e4:16:ce:02:c5:31:3f:50:
                    a7:a0:40:e9:1f:f0:23:9b:76:51:0b:82:6d:71:62:
                    2a:42:6c:6f:ab:e9:78:a2:94:0d:0c:88:14:89:28:
                    27:e7:cb:49:e9:2f:3b:67:d2:fa:77:48:02:95:9a:
                    cc:c5:29:95:89:ed:67:92:6c:59:47:40:8f:fa:f1:
                    28:c8:14:d5:85:1f:b5:a1:2b:6e:69:bd:e3:d0:a7:
                    35:a8:ab:27:6c:d3:08:1d:71:6f:f5:27:a6:6b:eb:
                    ad:83:6a:9b:60:81:8a:44:81:c1:78:aa:19:70:b7:
                    52:7e:8b:74:f0:c0:d3:d6:05:d4:2f:28:eb:9b:f0:
                    61:17:5c:a7:14:d9:80:01:37:89:16:dc:8f:2d:5d:
                    51:d3:a0:a7:8f:94:9e:50:be:ea:7d:3d:dd:74:ac:
                    3e:46:0b:ee:dd:4f:19:29:32:bf:23:c6:dc:66:2c:
                    3a:f5:1c:3c:bc:9f:5a:79:c4:55:ae:7b:23:fc:a3:
                    04:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BB:AE:DD:FB:6C:37:6E:48:4C:2A:98:94:BF:1A:02:0A:36:58:68
            X509v3 Authority Key Identifier:
                keyid:45:15:47:28:06:DD:01:B5:97:15:41:01:03:D5:1C:05:E4:F2:8B:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/4515472806DD01B59715410103D51C05E4F28B96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4515472806DD01B59715410103D51C05E4F28B96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54f1372c-43a6-4fda-b50e-d01eb42c689f/0/3130332e3137332e3134322e302f32342d3234203d3e20313437303930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ab:2a:24:96:bc:ef:32:8b:7f:71:02:e3:ff:a2:54:be:dc:
         bc:21:36:a8:14:81:a6:34:5d:44:81:d4:4d:fd:15:28:a9:51:
         e6:bd:d4:61:ba:7a:54:09:e3:5a:30:f5:29:51:e8:34:aa:c8:
         49:31:6d:83:c2:d0:a9:4d:80:24:f9:30:a6:a1:31:2b:ea:8a:
         b0:ef:a9:de:ff:56:a4:5a:7f:b3:fd:f5:e6:b7:23:61:6a:aa:
         f0:e4:9a:e0:2a:56:76:37:a2:ef:ee:03:5c:93:8c:73:94:3c:
         1b:f2:11:96:dd:fe:42:9e:e2:ff:0f:a9:2c:c8:35:45:c0:07:
         9d:ad:fb:b0:89:e4:30:cc:cc:13:3f:f6:fd:58:e2:8e:1b:ea:
         f1:0e:47:b0:23:c5:7c:8e:8d:f6:7b:5f:1d:36:44:01:fe:43:
         f6:44:b4:81:59:63:57:95:3e:63:67:86:e3:05:cc:b0:dc:0f:
         aa:a2:bc:b5:e4:3f:2e:51:c0:70:85:f7:db:95:2c:ae:bb:f0:
         40:7c:ed:39:10:83:22:90:9d:c1:0d:40:c2:74:aa:55:53:a1:
         da:4e:1d:8f:85:f6:64:ad:af:64:f1:52:b8:2c:2e:dd:1b:da:
         25:02:85:7a:b0:00:ce:66:83:90:44:1e:06:fe:67:55:06:08:
         9d:2a:5d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 00:19:20 2024 by rpki-client on console-fra.rpki-client.org