Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
File:                     3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa (raw, json)
Hash identifier:          7Yk0wVtG1i+AKTDIQrXzSMxfnP6X/rXLUcu3zDaMc9o=
Subject key identifier:   95:4F:05:EA:C9:9C:7F:22:B9:F5:EC:F8:D1:91:C4:66:1C:3E:D2:AE
Certificate issuer:       /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
Certificate serial:       5BBDE990B7CBF52CE43E0812E3F41B11E5DD891E
Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa
Signing time:             Wed 15 Nov 2023 08:01:36 +0000
ROA not before:           Wed 15 Nov 2023 07:56:36 +0000
ROA not after:            Wed 13 Nov 2024 08:01:36 +0000
asID:                     139382
IP address blocks:        103.142.240.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl
                          rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:bd:e9:90:b7:cb:f5:2c:e4:3e:08:12:e3:f4:1b:11:e5:dd:89:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
        Validity
            Not Before: Nov 15 07:56:36 2023 GMT
            Not After : Nov 13 08:01:36 2024 GMT
        Subject: CN=954F05EAC99C7F22B9F5ECF8D191C4661C3ED2AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9e:b5:9c:ec:42:89:a0:c9:26:7b:92:05:bd:
                    62:06:9c:5b:67:5f:12:40:21:46:8a:4e:03:8d:65:
                    a9:f5:6e:be:fb:6c:1c:fb:64:a4:74:3f:94:e3:18:
                    de:cb:8b:ec:36:44:ac:c3:cd:42:da:70:17:0b:08:
                    97:8f:49:c0:92:0f:ed:44:f9:a8:38:ca:2f:b2:03:
                    6f:11:43:73:4f:8a:de:29:3c:07:af:52:1e:80:20:
                    2a:e8:fa:ab:9a:10:ec:13:bf:bd:30:ee:42:18:fc:
                    a8:47:1e:7b:ef:f1:5a:81:a4:e9:08:f8:f2:9f:89:
                    10:a9:84:f4:ff:27:ec:ee:d3:3c:86:f9:9a:a7:05:
                    c4:0c:28:e8:9e:9f:ea:54:41:8b:97:f6:17:a3:9d:
                    c7:29:53:ec:11:93:40:07:fe:88:08:0f:67:b8:59:
                    45:8c:c9:ab:b4:65:e9:09:e1:22:fe:57:c3:d5:8f:
                    de:4a:3b:01:e8:63:2b:99:c6:b5:a5:11:64:7b:6e:
                    c6:45:61:c8:8e:60:62:2b:3e:a8:cd:34:ca:94:b5:
                    a7:50:fe:74:a2:e9:a9:5d:be:70:2e:b0:97:4a:dd:
                    1c:f2:30:0a:88:0b:39:67:55:68:53:6f:41:e8:85:
                    e9:42:aa:64:4e:31:8f:67:5a:2c:a6:45:d5:66:62:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4F:05:EA:C9:9C:7F:22:B9:F5:EC:F8:D1:91:C4:66:1C:3E:D2:AE
            X509v3 Authority Key Identifier:
                keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234302e302f32342d3234203d3e20313339333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.240.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:61:7e:1e:ed:86:30:e3:d7:b8:d6:78:a0:91:40:b4:3b:36:
         3b:91:3b:08:2b:44:e4:13:08:85:56:2c:1d:2f:d1:0c:b6:7a:
         a8:fe:e0:c0:22:53:64:b1:bb:8c:30:63:f0:9e:be:25:12:be:
         8c:bd:2d:86:02:a5:be:58:79:95:f8:bb:e6:87:bb:7e:31:cd:
         c4:e7:23:68:db:ac:c7:98:c4:07:09:b9:1e:7d:bc:da:29:c4:
         36:7d:58:9a:12:55:06:1e:f1:85:46:42:be:d6:f5:b7:09:78:
         0e:58:36:45:df:db:90:2d:3b:85:49:5e:69:2f:b8:06:85:af:
         3f:2e:b6:d7:aa:3c:84:54:aa:a5:54:ec:57:d7:a3:45:0e:4f:
         31:a3:cf:8e:7a:e1:41:ec:38:b3:fc:c0:35:d8:a4:4f:22:ce:
         a0:63:f8:1e:16:0c:12:e0:2e:87:28:97:f5:17:b2:a6:7a:ac:
         6f:e6:26:89:23:2a:15:82:a9:03:9d:6b:7c:b2:a4:95:2c:cd:
         c9:c6:8c:83:65:4d:83:2f:25:63:17:c6:24:47:59:df:2f:61:
         8f:57:fa:d2:63:31:22:6f:6d:17:d9:49:8c:d8:43:54:54:b3:
         6a:26:a3:0e:98:1f:c1:7b:df:18:d5:49:80:56:01:93:f6:e5:
         d3:0a:40:81
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUW73pkLfL9SzkPggS4/QbEeXdiR4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYy
OTNDQjQxRTAeFw0yMzExMTUwNzU2MzZaFw0yNDExMTMwODAxMzZaMDMxMTAvBgNV
BAMTKDk1NEYwNUVBQzk5QzdGMjJCOUY1RUNGOEQxOTFDNDY2MUMzRUQyQUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmnrWc7EKJoMkme5IFvWIGnFtn
XxJAIUaKTgONZan1br77bBz7ZKR0P5TjGN7Li+w2RKzDzULacBcLCJePScCSD+1E
+ag4yi+yA28RQ3NPit4pPAevUh6AICro+quaEOwTv70w7kIY/KhHHnvv8VqBpOkI
+PKfiRCphPT/J+zu0zyG+ZqnBcQMKOien+pUQYuX9hejnccpU+wRk0AH/ogID2e4
WUWMyau0ZekJ4SL+V8PVj95KOwHoYyuZxrWlEWR7bsZFYciOYGIrPqjNNMqUtadQ
/nSi6aldvnAusJdK3RzyMAqICzlnVWhTb0HohelCqmROMY9nWiymRdVmYvDLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUlU8F6smcfyK59ez40ZHEZhw+0q4wHwYDVR0j
BBgwFoAUWjPmuCAASHsgTS4oS8oQryk8tB4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZTQxYmE3ZS02YzQyLTRjMjItYjEzYy01NDhmYzcyNzJhM2QvMC81QTMzRTZCODIw
MDA0ODdCMjA0RDJFMjg0QkNBMTBBRjI5M0NCNDFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUEzM0U2QjgyMDAwNDg3QjIwNEQyRTI4NEJDQTEwQUYyOTND
QjQxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlNDFiYTdlLTZjNDItNGMyMi1i
MTNjLTU0OGZjNzI3MmEzZC8wLzMxMzAzMzJlMzEzNDMyMmUzMjM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjvAwDQYJ
KoZIhvcNAQELBQADggEBAG1hfh7thjDj17jWeKCRQLQ7NjuROwgrROQTCIVWLB0v
0Qy2eqj+4MAiU2Sxu4wwY/CeviUSvoy9LYYCpb5YeZX4u+aHu34xzcTnI2jbrMeY
xAcJuR59vNopxDZ9WJoSVQYe8YVGQr7W9bcJeA5YNkXf25AtO4VJXmkvuAaFrz8u
tteqPIRUqqVU7FfXo0UOTzGjz4564UHsOLP8wDXYpE8izqBj+B4WDBLgLocol/UX
sqZ6rG/mJokjKhWCqQOda3yypJUszcnGjINlTYMvJWMXxiRHWd8vYY9X+tJjMSJv
bRfZSYzYQ1RUs2omow6YH8F73xjVSYBWAZP25dMKQIE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:04 2024 by rpki-client on console-ams.rpki-client.org