Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa (raw, json)
Hash identifier:          MusaVD8Rj5ogKmHgFDdrJrrSMHNpTmm2r0jTc52+4c0=
Subject key identifier:   BF:8D:0D:B2:CD:07:A4:4B:82:0E:04:FD:0A:8C:9E:AE:AD:27:23:49
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       24983D7B4BA80B905E4FA3F87EF284179FD32AC3
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa
Signing time:             Fri 14 Jun 2024 14:00:00 +0000
ROA not before:           Fri 14 Jun 2024 13:55:00 +0000
ROA not after:            Fri 13 Jun 2025 14:00:00 +0000
asID:                     139419
IP address blocks:        103.144.54.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:98:3d:7b:4b:a8:0b:90:5e:4f:a3:f8:7e:f2:84:17:9f:d3:2a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Jun 14 13:55:00 2024 GMT
            Not After : Jun 13 14:00:00 2025 GMT
        Subject: CN=BF8D0DB2CD07A44B820E04FD0A8C9EAEAD272349
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:a1:df:35:5c:f5:ba:63:28:ba:ba:f4:bc:cc:
                    a7:85:46:01:5e:ea:74:a1:86:f0:37:0b:a1:07:b2:
                    e1:cd:54:1c:f1:fb:3b:53:8c:72:36:ad:cf:92:5d:
                    90:31:90:80:86:d1:1f:0e:b5:41:d2:e8:8b:18:71:
                    82:64:29:a0:10:66:db:f1:4d:3d:1f:2f:e2:89:dc:
                    f9:9e:08:fa:fc:0e:88:1f:da:7d:a9:56:fb:83:53:
                    68:5f:77:e9:5a:9d:8a:f6:16:7c:82:4c:5e:9c:8f:
                    0f:7b:97:62:68:58:07:9c:39:bb:72:7a:93:bd:14:
                    66:5f:0d:7c:9a:f0:ab:a9:3c:60:28:6b:e3:84:27:
                    b5:b1:49:4f:fe:a8:cc:00:0c:e4:aa:eb:bd:0f:93:
                    27:0e:c7:4d:09:09:1c:1a:5d:05:21:78:24:8a:26:
                    c9:81:17:87:1b:15:f5:00:85:4a:58:37:4d:a0:78:
                    74:cd:95:ed:c9:cd:9c:ae:79:a6:6f:d1:be:6d:dc:
                    84:c5:dd:fe:cc:38:c4:eb:70:d2:1e:eb:9c:8d:80:
                    9c:b4:14:34:88:72:a5:a5:a8:55:66:82:8c:2a:39:
                    fc:24:bf:18:59:ad:d1:39:81:62:f9:4b:f9:35:ef:
                    c7:2f:67:39:ce:a2:58:44:52:93:27:65:db:ee:aa:
                    c6:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:8D:0D:B2:CD:07:A4:4B:82:0E:04:FD:0A:8C:9E:AE:AD:27:23:49
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32332d3233203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:2a:3d:51:06:96:17:07:b9:5d:83:51:ca:0f:c7:c5:32:1d:
         a8:8f:cf:0a:38:bd:0f:52:e5:90:15:a1:13:0d:b9:f8:a0:ed:
         c9:f0:3c:84:62:2d:55:e3:dd:1a:4b:05:9a:22:e4:ff:b1:eb:
         9f:54:14:61:43:fb:58:7b:02:40:1c:b1:e1:d9:ab:79:cb:91:
         cb:6a:58:bb:3d:34:08:a9:ec:dd:77:c8:a7:e4:80:6c:37:90:
         5f:cd:cd:09:37:da:b2:60:de:3b:a3:dd:52:10:48:fc:44:ca:
         a4:14:42:f5:e0:f4:4d:3a:46:e4:2c:82:5b:87:12:2b:7b:e4:
         14:74:1a:34:17:8d:f8:3b:b8:71:ec:e9:40:24:8e:71:71:97:
         b5:3c:64:72:23:19:aa:63:5a:27:64:44:7e:08:fd:bf:a1:a2:
         54:a6:f9:c1:b5:20:7f:f8:96:6f:68:33:98:46:f1:c0:67:93:
         cf:49:13:bc:84:ed:d9:01:52:fe:33:ef:23:24:01:58:10:65:
         22:c3:f3:98:eb:58:3e:d7:ed:a0:1e:6d:41:db:e1:e4:33:18:
         b5:57:a6:ec:cb:bf:bc:33:16:33:db:b6:0e:82:82:66:7e:9c:
         21:5c:d7:04:91:d5:b4:04:1a:35:54:a8:52:a3:86:3a:49:1d:
         dc:98:33:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org