Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
File:                     3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          jYkgidAExaaSNAr38HT6BbIibRdqbYX47KSox0+YHQ8=
Subject key identifier:   E4:A6:BA:0E:FF:4D:4E:41:D3:A9:A6:7E:3B:E0:9A:ED:68:64:D5:32
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       546D8CA2BE23CA1D1A71650B68F1EFE3F3A6A433
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa
Signing time:             Mon 19 Feb 2024 09:00:01 +0000
ROA not before:           Mon 19 Feb 2024 08:55:01 +0000
ROA not after:            Mon 17 Feb 2025 09:00:01 +0000
asID:                     9341
IP address blocks:        103.180.194.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl
                          rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:6d:8c:a2:be:23:ca:1d:1a:71:65:0b:68:f1:ef:e3:f3:a6:a4:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Feb 19 08:55:01 2024 GMT
            Not After : Feb 17 09:00:01 2025 GMT
        Subject: CN=E4A6BA0EFF4D4E41D3A9A67E3BE09AED6864D532
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:31:00:e3:ad:ff:2c:aa:c2:4b:93:48:2a:5c:
                    1d:c1:30:6f:88:94:9e:dd:79:f6:c7:74:bd:01:4e:
                    62:db:2d:4e:85:2b:d8:43:b1:d4:8c:cc:77:4f:97:
                    c2:ae:a3:b1:99:cd:18:3b:6b:18:22:d5:e5:75:01:
                    6a:29:d5:8b:0a:5c:3d:64:1f:c9:06:2e:7b:dd:0d:
                    81:d6:59:91:73:f6:3f:e5:42:41:72:38:f3:4d:9b:
                    81:78:cf:53:58:82:3b:0c:7b:2c:d2:7b:55:07:13:
                    c9:da:c6:0a:b2:88:0b:28:94:ba:0b:dd:51:0e:07:
                    f6:5b:d0:f2:75:2b:d4:41:05:6d:0c:7b:e6:49:96:
                    34:dc:bd:67:4b:01:74:88:41:a3:ab:7e:0c:6f:25:
                    2d:ff:9b:cc:ed:6d:27:e5:37:07:40:66:46:9b:8c:
                    1c:a6:eb:a0:5d:20:81:66:ec:2b:ab:35:f2:97:4c:
                    2a:30:3e:04:9a:c7:b9:86:ae:4a:f4:27:ac:27:30:
                    5f:81:39:4d:04:b8:83:d6:10:2f:f9:b7:cf:0e:7c:
                    7b:89:6d:4e:aa:5b:8c:c5:ed:7e:01:10:01:cd:86:
                    0a:82:a9:43:a1:81:17:2d:60:16:a2:49:36:e6:11:
                    83:1b:c7:37:40:0c:b9:fb:9a:fc:a8:53:1f:2d:a0:
                    ff:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:A6:BA:0E:FF:4D:4E:41:D3:A9:A6:7E:3B:E0:9A:ED:68:64:D5:32
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:03:7d:94:50:34:30:4b:bb:9d:ff:82:7c:ab:92:16:98:
         5f:ed:a4:f0:2f:03:7b:ad:0a:eb:67:fb:9d:59:7c:e3:ab:2a:
         7d:47:2a:34:4c:51:34:b1:44:3f:9a:4c:24:53:89:e7:ce:37:
         e7:9d:bd:9d:51:ae:5e:c2:f0:c1:14:26:07:50:65:7b:34:e4:
         39:60:c7:8e:5c:30:f7:09:46:34:71:19:27:88:2e:18:e3:56:
         84:09:56:c8:71:f4:1c:7b:3b:44:22:b7:60:0d:d7:b2:58:7b:
         19:0d:9f:55:cd:2a:24:20:93:4e:e2:17:cc:d4:eb:77:78:18:
         b4:b5:d5:a6:32:b9:ab:f2:be:20:dc:4b:d5:2c:2d:0b:22:cd:
         cf:a9:8a:a1:c4:6a:4e:d5:b2:db:4f:af:02:6c:17:b0:7d:7e:
         db:74:ff:cd:4e:48:c6:70:3c:69:3a:e5:04:a5:ac:b6:8e:ee:
         a0:79:c2:ae:e5:5e:6d:04:f7:01:29:ba:cf:56:f9:64:77:a3:
         59:d8:33:97:ad:eb:c2:13:23:a7:f6:8f:0e:e7:71:56:3d:a7:
         e7:e1:2a:dc:16:ba:e3:a2:2c:9c:b7:c5:a1:10:e0:41:9d:d2:
         db:90:20:5a:6b:f9:6c:1f:eb:e5:ed:6a:67:7c:ce:95:e6:b2:
         0b:54:ce:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org