Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
File:                     3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa (raw, json)
Hash identifier:          X3LMJbMD7sbSyIgXCSsO4WP3ntGqJBFmyoBtikGfNsg=
Subject key identifier:   85:4B:35:5C:DA:AB:67:49:D2:46:9C:78:56:31:DE:65:9D:EC:AD:51
Certificate issuer:       /CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
Certificate serial:       5490DB437201E1A1626B470A116F7207E876AF50
Authority key identifier: 48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa
Signing time:             Sat 30 Sep 2023 09:00:00 +0000
ROA not before:           Sat 30 Sep 2023 08:55:00 +0000
ROA not after:            Sat 28 Sep 2024 09:00:00 +0000
asID:                     139419
IP address blocks:        103.144.54.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl
                          rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 00:37:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:90:db:43:72:01:e1:a1:62:6b:47:0a:11:6f:72:07:e8:76:af:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48CA7719CE7CE90570E1A1B6F443947AE9CAA74E
        Validity
            Not Before: Sep 30 08:55:00 2023 GMT
            Not After : Sep 28 09:00:00 2024 GMT
        Subject: CN=854B355CDAAB6749D2469C785631DE659DECAD51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ad:39:a3:39:a9:fe:f2:d2:f7:77:cc:63:12:
                    fe:c4:15:a3:69:12:6c:65:b2:7b:86:0e:8d:89:3d:
                    76:f6:56:6d:88:db:b6:7c:74:c1:45:09:84:90:f6:
                    19:eb:ff:c7:11:e5:30:10:35:f5:43:49:6b:8c:cc:
                    ac:4c:76:84:cc:eb:67:86:4a:fd:0d:7b:71:53:09:
                    5f:2c:55:bd:69:92:85:55:03:6e:24:25:f2:85:7f:
                    57:fc:61:46:7f:01:66:23:47:a8:5f:cd:bd:78:97:
                    76:ea:94:a0:99:2b:b2:29:eb:18:86:d2:b0:17:50:
                    f0:10:19:5a:fe:12:65:04:f3:3d:fa:46:b0:d9:24:
                    97:87:31:43:5c:ed:26:61:9d:40:33:fe:d4:ae:1d:
                    bf:c7:3d:9c:37:8d:f8:e1:91:ef:67:07:d0:23:16:
                    6f:0e:6f:60:1c:6b:63:74:61:92:e1:12:47:e3:91:
                    c0:64:91:71:4d:46:e8:55:0b:1d:32:81:63:ad:28:
                    7b:9e:52:28:bf:3d:71:ee:06:01:e9:8a:29:a2:c1:
                    23:1c:f9:b1:7a:33:cf:76:b2:41:ac:95:4c:72:5e:
                    8b:3f:38:8a:d6:f9:5f:2a:a9:6f:b0:3c:a1:fc:ed:
                    84:13:30:3f:2b:3b:d6:b7:a8:10:14:1e:dd:5f:f8:
                    4b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:4B:35:5C:DA:AB:67:49:D2:46:9C:78:56:31:DE:65:9D:EC:AD:51
            X509v3 Authority Key Identifier:
                keyid:48:CA:77:19:CE:7C:E9:05:70:E1:A1:B6:F4:43:94:7A:E9:CA:A7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/48CA7719CE7CE90570E1A1B6F443947AE9CAA74E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5713fc17-57f1-4671-8a16-f858ddd7da43/0/3130332e3134342e35342e302f32342d3234203d3e20313339343139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:cd:fc:b8:03:cb:53:c3:8b:e3:6f:91:a4:37:19:89:0e:b7:
         21:04:ce:a9:45:9a:05:53:e4:0e:28:ff:1b:fb:70:42:ca:da:
         a9:39:82:33:bf:84:7e:27:e5:9d:f7:cf:0b:9f:61:43:97:36:
         f6:19:ef:e8:b8:3a:3a:02:03:b2:2a:85:f0:3f:d0:3d:9d:a4:
         59:66:41:f8:1f:5f:23:20:d3:51:7e:4c:1c:8d:88:84:fd:e5:
         95:0c:4c:87:de:be:4e:bc:57:fa:d7:87:b1:b3:05:bc:d9:11:
         31:b4:95:04:b5:ae:11:b5:ba:7e:97:46:dd:8d:09:e2:71:5f:
         c8:a8:26:75:81:42:1a:24:d1:14:52:a3:42:86:be:09:b5:a0:
         95:50:8a:1f:e2:a8:fd:7a:90:6f:c8:c5:f2:e0:f5:ec:10:2c:
         d7:ac:76:1c:3c:b4:4b:1f:02:6d:7d:af:29:ca:1c:a6:b2:ce:
         1c:e6:aa:99:b9:fc:b1:fb:ea:44:e5:f3:5b:2d:2e:0b:db:45:
         97:6f:65:9b:f6:7b:09:72:5d:5d:39:5f:b0:38:ae:47:84:9d:
         30:59:c3:c3:dd:2c:60:18:e5:99:97:04:01:45:2f:88:06:2d:
         a2:93:43:7b:25:c5:dc:4b:a8:55:e2:04:8a:9a:c3:9d:cd:64:
         01:60:6f:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:21 2024 by rpki-client on console-fra.rpki-client.org