Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa
File:                     3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa (raw, json)
Hash identifier:          OtO7trEv+mIXnYZ9PighxNjftlOq2BJEStDsCjt/cj4=
Subject key identifier:   58:D0:06:D7:90:A0:46:C0:28:9A:B5:93:06:05:12:DF:EA:1F:93:26
Certificate issuer:       /CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
Certificate serial:       2E84584B7395CEFE750795647A277F769F8A8C33
Authority key identifier: 54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa
Signing time:             Mon 01 Jul 2024 01:04:57 +0000
ROA not before:           Mon 01 Jul 2024 00:59:57 +0000
ROA not after:            Mon 30 Jun 2025 01:04:57 +0000
asID:                     132643
IP address blocks:        103.123.158.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl
                          rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:84:58:4b:73:95:ce:fe:75:07:95:64:7a:27:7f:76:9f:8a:8c:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54FF141BE96013FE6BC0816D991BCFB4F6618CBE
        Validity
            Not Before: Jul  1 00:59:57 2024 GMT
            Not After : Jun 30 01:04:57 2025 GMT
        Subject: CN=58D006D790A046C0289AB593060512DFEA1F9326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:dc:3c:a4:13:7a:0b:9a:70:20:83:9e:6a:1f:
                    31:4d:57:61:35:dc:a8:4f:df:a6:4c:49:8c:80:d1:
                    64:44:ec:60:97:a1:5b:e3:e9:8d:05:48:e1:1e:5c:
                    07:2e:1a:09:6e:e2:6b:34:27:23:6e:2e:47:c2:85:
                    e5:5c:05:d1:d2:ab:6e:0f:d6:28:c0:9e:c9:0b:f6:
                    0f:09:f9:b5:34:8c:48:64:24:19:6a:5a:17:0d:be:
                    98:79:30:c7:50:61:50:40:40:1b:d0:1c:ad:5d:08:
                    c1:f0:77:97:05:31:e9:f0:20:52:99:76:45:22:bd:
                    e9:bd:73:cf:83:4f:ae:07:d8:7f:0d:c7:44:59:cf:
                    82:3a:2f:17:75:dd:33:df:d4:55:6f:d4:e9:33:e0:
                    01:da:e0:75:9a:a0:66:27:31:ec:4b:be:2a:b0:84:
                    51:2c:15:85:e5:77:96:98:95:27:15:b5:3f:bc:de:
                    ab:96:8c:5b:0b:ad:11:d5:f7:dd:4d:9f:db:d6:08:
                    62:c7:e8:01:bd:9e:36:01:4b:75:24:23:96:35:bd:
                    e9:83:55:0f:36:12:90:00:d7:80:e0:06:34:06:e8:
                    96:a2:4d:57:5a:f1:1c:e8:ea:56:83:41:b4:eb:66:
                    7b:3a:78:6d:02:06:13:5a:59:8e:e6:9f:0d:f0:f3:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D0:06:D7:90:A0:46:C0:28:9A:B5:93:06:05:12:DF:EA:1F:93:26
            X509v3 Authority Key Identifier:
                keyid:54:FF:14:1B:E9:60:13:FE:6B:C0:81:6D:99:1B:CF:B4:F6:61:8C:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/54FF141BE96013FE6BC0816D991BCFB4F6618CBE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73af271f-c83d-441e-bea9-18a244d0e00e/0/3130332e3132332e3135382e302f32342d3234203d3e20313332363433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.123.158.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:9b:30:cb:9e:91:89:9a:85:6f:c4:9a:03:48:b3:8a:19:18:
         e8:64:ca:3c:33:cf:f3:a6:47:89:44:8e:80:0f:28:e2:a3:87:
         40:6b:95:aa:1f:65:0a:58:7a:4b:1d:0b:33:1a:aa:dd:f6:4e:
         62:7b:46:51:69:bf:28:ce:3b:a7:33:42:4e:d7:a2:08:57:ba:
         a3:e1:50:99:84:e8:84:b0:dd:a6:47:b4:b4:fa:e2:87:e8:bc:
         eb:af:5a:63:08:89:15:8a:d7:17:22:3a:03:bd:1b:20:24:d4:
         1b:df:b4:91:4a:41:95:b7:99:0b:f0:43:e0:fc:6f:9e:38:fd:
         6e:28:c6:d4:b9:23:78:63:d2:ee:c7:78:81:e6:49:18:91:bb:
         ed:61:e1:3f:42:aa:37:b6:6e:9a:6f:f1:1b:14:d2:ab:0f:23:
         3c:c5:21:fb:ba:a9:04:ec:70:dc:78:1f:1a:5a:7e:39:5b:82:
         d8:84:4a:91:85:94:89:35:ac:dd:4d:9c:bf:f1:17:f1:34:bd:
         89:08:64:4e:b2:69:10:83:62:0a:2b:51:b2:cf:d0:78:a9:4b:
         8b:09:03:67:fe:29:35:99:f7:3c:cb:6d:16:7c:69:df:1f:96:
         7e:9b:ba:b6:78:aa:df:0e:ae:ae:04:3c:bd:45:ee:f7:4b:01:
         e3:55:c9:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org