Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa
File:                     3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (raw, json)
Hash identifier:          cIrCUSST0qUoomqGAVAogGxv3R4K/i/4Mu9V4Uwpfh4=
Subject key identifier:   D8:E8:A5:47:83:23:13:51:79:E0:88:A8:54:85:A2:9F:96:A9:D8:37
Certificate issuer:       /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254
Certificate serial:       7C0DB2D007ED63438B446D0F9DEF51B2FCC6CD33
Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa
Signing time:             Tue 10 Sep 2024 07:02:28 +0000
ROA not before:           Tue 10 Sep 2024 06:57:28 +0000
ROA not after:            Tue 09 Sep 2025 07:02:28 +0000
asID:                     139995
IP address blocks:        103.148.192.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl
                          rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:03:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:0d:b2:d0:07:ed:63:43:8b:44:6d:0f:9d:ef:51:b2:fc:c6:cd:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254
        Validity
            Not Before: Sep 10 06:57:28 2024 GMT
            Not After : Sep  9 07:02:28 2025 GMT
        Subject: CN=D8E8A5478323135179E088A85485A29F96A9D837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:6b:a8:af:ce:61:f7:f4:c9:6e:47:50:17:fe:
                    c4:d7:d5:dd:1c:83:48:59:ee:01:12:9c:23:ec:99:
                    43:1d:14:b3:65:73:a8:42:ae:53:3a:66:74:3e:2f:
                    63:ba:0a:50:4e:ff:c0:86:8e:7e:f4:9c:29:9d:b1:
                    27:d4:d5:12:c6:b7:4f:2d:a7:52:a1:88:ed:aa:ba:
                    8b:29:18:62:a1:1c:d7:84:c6:2a:a2:65:38:43:17:
                    60:1d:95:9e:cc:c8:ed:d9:9e:54:56:51:e4:d7:d7:
                    96:3c:34:62:0a:3a:d4:98:90:e1:1c:f2:16:1e:69:
                    63:61:45:c3:21:19:98:ff:3b:2c:c7:15:59:f3:79:
                    e6:20:6f:bd:7b:3c:d2:ff:fe:7c:75:95:33:ab:b3:
                    e8:b9:f3:96:00:a9:56:b6:fd:35:c2:2c:54:90:a0:
                    f4:f0:10:b5:71:25:a9:75:fc:00:0a:71:f2:dc:98:
                    80:58:ef:78:0d:ca:39:c4:08:33:87:0f:67:a2:1a:
                    e2:5f:a3:50:cb:e1:97:d9:96:e2:85:fd:f6:cb:d3:
                    db:96:25:d8:6a:1c:b9:f7:f7:8f:74:53:d3:5a:50:
                    5c:3e:4d:b6:1a:c8:61:08:74:01:21:18:0a:e1:bc:
                    ee:c6:d2:66:2e:d3:1e:9c:76:a0:ac:22:77:64:90:
                    32:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E8:A5:47:83:23:13:51:79:E0:88:A8:54:85:A2:9F:96:A9:D8:37
            X509v3 Authority Key Identifier:
                keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         11:c0:7e:79:1b:c2:da:f6:fa:ce:42:8c:2c:58:20:45:63:3a:
         e8:08:60:1d:d0:d6:a4:50:d0:9c:93:e9:19:37:97:b2:55:35:
         82:97:70:59:b6:27:b4:53:5c:1c:4d:63:be:da:79:3d:57:9f:
         20:68:f3:3a:16:61:6e:7c:72:42:69:ec:87:88:bd:90:20:87:
         32:7e:93:d3:29:bd:7f:f1:7a:c3:3c:80:3d:3c:62:fd:b1:cb:
         d2:67:62:d1:28:ed:03:36:b8:cb:8c:03:a1:9f:b7:ce:e6:ec:
         c5:ad:2e:de:f7:93:23:ce:56:6d:6c:59:a3:5e:cf:82:a5:65:
         17:4a:a0:0e:6b:94:28:59:b2:05:4c:11:1b:3b:9d:ae:c6:d6:
         f3:46:d1:60:07:42:c5:1f:29:ce:d6:2d:22:c4:d7:65:9f:1d:
         63:7d:5d:4f:9d:e2:70:3f:cb:2d:58:42:15:2f:4e:ff:c1:01:
         01:96:81:7b:d3:4e:10:f4:57:13:8c:8d:d6:34:39:88:92:86:
         58:3c:01:24:eb:90:df:ed:5d:d9:2d:f6:af:44:a4:96:b5:fb:
         01:3e:fd:08:da:32:f6:48:48:87:ea:61:e2:04:3f:db:bd:e9:
         7a:25:83:2c:07:a3:eb:ae:98:1f:6a:fd:f3:3b:c0:4b:1d:d3:
         a2:41:b1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org