Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa
File:                     3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa (raw, json)
Hash identifier:          iGi8ZJdwh992ll5WnyxL8YNkn8dlux6XU876hpRDfPY=
Subject key identifier:   65:91:17:DB:15:4D:27:F0:D6:06:DF:EA:94:70:E2:CB:02:2B:C2:12
Certificate issuer:       /CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
Certificate serial:       49F156B544C146606E75BA7305B2FDBDE024BA74
Authority key identifier: 5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa
Signing time:             Wed 15 Nov 2023 08:01:36 +0000
ROA not before:           Wed 15 Nov 2023 07:56:36 +0000
ROA not after:            Wed 13 Nov 2024 08:01:36 +0000
asID:                     139382
IP address blocks:        103.142.241.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl
                          rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:f1:56:b5:44:c1:46:60:6e:75:ba:73:05:b2:fd:bd:e0:24:ba:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A33E6B82000487B204D2E284BCA10AF293CB41E
        Validity
            Not Before: Nov 15 07:56:36 2023 GMT
            Not After : Nov 13 08:01:36 2024 GMT
        Subject: CN=659117DB154D27F0D606DFEA9470E2CB022BC212
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3b:52:31:1f:67:46:88:bd:d2:1f:e8:f6:dd:
                    66:e5:f0:a2:2e:43:98:ee:ef:4f:1c:df:39:e5:e4:
                    e9:aa:64:5f:d9:d4:f5:c8:15:88:ee:91:53:0c:56:
                    16:4a:91:34:82:73:21:b8:af:b0:9c:38:71:7b:07:
                    56:42:78:20:fd:c0:33:8b:8c:ef:a8:7e:ae:05:80:
                    73:e5:d5:b3:44:fd:55:61:e6:9c:ca:c9:3d:bd:8a:
                    c5:ec:84:b7:87:0a:e2:32:b4:7d:3a:f3:2f:e8:64:
                    89:9f:3f:18:ef:63:26:50:f5:ea:8f:e3:ba:d9:b8:
                    d5:ef:02:16:46:a3:bb:34:81:70:22:86:f9:4e:eb:
                    e2:61:95:83:c5:e4:4d:e5:3b:9a:91:d3:75:db:05:
                    ab:5f:09:c0:54:60:14:f4:e2:51:11:3a:7f:87:b7:
                    32:98:fc:2a:bc:21:bc:0e:36:5c:85:6a:b4:fc:a8:
                    0e:89:70:d6:21:b4:87:1d:ff:f5:aa:03:32:28:dc:
                    04:1d:42:62:6b:18:78:08:45:a4:c0:17:97:e7:ce:
                    c3:00:69:06:cb:f4:3e:38:2e:86:ce:70:26:7f:0d:
                    d4:d8:e0:be:86:47:8a:54:c7:2f:29:2d:9e:2e:30:
                    03:a1:ab:3e:9b:98:d8:60:d0:b3:a7:d1:63:cb:82:
                    3a:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:91:17:DB:15:4D:27:F0:D6:06:DF:EA:94:70:E2:CB:02:2B:C2:12
            X509v3 Authority Key Identifier:
                keyid:5A:33:E6:B8:20:00:48:7B:20:4D:2E:28:4B:CA:10:AF:29:3C:B4:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/5A33E6B82000487B204D2E284BCA10AF293CB41E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5A33E6B82000487B204D2E284BCA10AF293CB41E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e41ba7e-6c42-4c22-b13c-548fc7272a3d/0/3130332e3134322e3234312e302f32342d3234203d3e20313339333832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.241.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:f4:f3:1c:93:71:bc:a7:c4:ab:fa:57:29:92:f6:f1:af:7b:
         d9:59:aa:0b:a8:f6:30:45:5a:8e:38:c4:ed:2b:26:b0:8c:27:
         00:58:36:f9:2e:12:e4:11:5c:cd:e0:39:1a:73:a9:7b:7c:b8:
         b1:a3:67:44:50:b2:43:66:2a:db:02:24:60:53:18:65:ce:62:
         59:85:b0:2b:cb:9c:d5:44:af:ea:d2:0b:ca:e7:ed:9e:e3:bb:
         20:95:0d:b7:a3:85:fb:28:fc:03:e7:7c:09:b5:3b:08:81:fa:
         2f:ac:d6:1f:5e:63:6f:66:fd:94:4b:7b:2c:4a:e6:f4:63:29:
         b6:55:05:4d:5a:39:9f:02:b2:bb:52:de:bf:52:ff:46:8c:7f:
         8c:1b:eb:56:f1:15:4a:e6:99:ce:d7:ae:df:1a:7f:f0:b7:7a:
         d0:81:3e:bd:c5:c0:42:dd:91:a9:ca:1d:c7:86:f6:58:19:89:
         10:11:bc:89:0a:08:d0:29:f1:0a:71:07:99:91:a3:a6:20:de:
         19:2d:db:43:b6:45:4c:64:04:50:a4:82:50:5a:b1:27:ec:38:
         67:dd:51:2b:46:a6:58:21:82:0e:67:53:a1:39:8b:45:21:db:
         d7:15:2a:b7:f2:98:8c:23:31:72:3a:b4:a7:72:b5:2e:dd:d3:
         a5:4e:4a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:04 2024 by rpki-client on console-ams.rpki-client.org