Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
File:                     3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa (raw, json)
Hash identifier:          0DnO7PGSqNPmUgNgpAWUUOFEzmTHLBWKwG2ctGekWs8=
Subject key identifier:   16:01:57:82:D6:2E:4E:19:E5:11:79:14:F5:DC:DE:FF:69:5B:95:E7
Certificate issuer:       /CN=1DE04B1502D06C1C133ACE901223884FB36B2638
Certificate serial:       52DC75F6AC50ED918BF81FA98AAA53F78232BE42
Authority key identifier: 1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa
Signing time:             Tue 30 Apr 2024 05:00:01 +0000
ROA not before:           Tue 30 Apr 2024 04:55:01 +0000
ROA not after:            Tue 29 Apr 2025 05:00:01 +0000
asID:                     63878
IP address blocks:        103.187.114.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl
                          rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:dc:75:f6:ac:50:ed:91:8b:f8:1f:a9:8a:aa:53:f7:82:32:be:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1DE04B1502D06C1C133ACE901223884FB36B2638
        Validity
            Not Before: Apr 30 04:55:01 2024 GMT
            Not After : Apr 29 05:00:01 2025 GMT
        Subject: CN=16015782D62E4E19E5117914F5DCDEFF695B95E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:9a:b7:8f:1e:16:99:9e:d5:2b:41:b0:24:
                    76:33:82:6d:08:70:86:b0:c8:71:d5:d8:41:50:70:
                    58:85:27:08:87:b4:22:94:54:93:61:62:7f:07:3a:
                    de:e4:d9:0c:f2:f0:43:0b:bb:7f:63:33:14:43:37:
                    7b:91:c9:6e:db:6e:cd:e4:a7:5f:a6:e2:a5:f0:19:
                    d3:13:9e:73:6c:3e:87:e4:65:c0:b3:66:e2:c2:92:
                    3e:10:c1:03:d8:ec:77:a1:be:d2:c7:42:93:00:79:
                    d0:31:f1:55:0f:06:3f:f5:0e:df:f0:e8:f6:b4:4d:
                    01:0e:61:1f:d4:a6:8f:4a:e4:3b:e8:9c:d8:4d:7d:
                    00:7f:78:ec:8b:2a:3d:db:b0:94:64:bb:6b:c8:cc:
                    d0:df:1e:40:e5:ba:62:ea:d6:3d:ac:aa:09:b8:df:
                    4c:30:d9:d4:1f:11:61:ca:53:98:07:4d:f4:a6:71:
                    bc:91:8b:f7:c9:89:04:ad:8a:af:97:7f:50:7b:64:
                    3e:44:21:a5:57:f2:7f:0f:94:45:b6:46:0f:7e:9f:
                    d0:22:79:15:65:ac:19:f9:79:46:8e:84:8a:ac:c9:
                    4d:88:03:f1:46:cd:6d:99:8c:24:ea:09:3d:e5:7e:
                    3c:4d:b6:41:d7:05:1e:1f:62:3a:a4:2d:31:5e:7c:
                    dc:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:01:57:82:D6:2E:4E:19:E5:11:79:14:F5:DC:DE:FF:69:5B:95:E7
            X509v3 Authority Key Identifier:
                keyid:1D:E0:4B:15:02:D0:6C:1C:13:3A:CE:90:12:23:88:4F:B3:6B:26:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/1DE04B1502D06C1C133ACE901223884FB36B2638.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1DE04B1502D06C1C133ACE901223884FB36B2638.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82fab611-8be3-4b44-9561-752a1eda065c/0/3130332e3138372e3131342e302f32342d3234203d3e203633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:54:5a:ca:f0:e4:e2:56:9b:a7:78:29:d4:9c:46:b8:39:cc:
         a4:e7:2e:0d:73:bc:65:e8:43:2f:aa:cd:61:82:47:59:25:8a:
         fa:9a:ad:cc:c7:59:16:92:b6:8d:eb:bc:c4:86:42:45:c4:9b:
         8e:9e:29:ed:1b:ac:a2:5f:f0:af:65:e2:8b:42:5c:61:8a:7d:
         7d:f1:84:c3:a5:8f:8c:2c:9a:d6:e0:61:37:1c:08:28:ea:da:
         18:2b:97:1d:39:58:48:45:12:03:b0:47:4e:38:ea:4b:05:64:
         aa:ff:c6:15:02:ff:29:bb:4e:fb:c7:ac:b3:26:f1:e8:a2:71:
         39:f5:79:61:8e:85:1e:b9:83:6f:23:49:4c:ec:f4:b8:2a:21:
         a0:8e:a8:e5:70:72:33:bb:1f:2c:cb:34:3e:66:2f:88:2c:ca:
         35:6f:0a:46:7d:f4:5e:e9:65:e8:91:bc:e4:cb:c4:5f:65:a6:
         6d:49:aa:49:db:59:2c:6b:3d:2b:b1:c2:e9:30:e9:a5:31:3d:
         ad:0e:2f:b9:e0:eb:53:d4:83:bb:ae:f8:ad:f7:41:fb:9f:e6:
         cc:c8:8c:bd:34:e2:26:12:49:a5:db:cb:25:0c:79:7a:2d:ba:
         93:d3:ff:9f:6b:1b:bc:2d:62:68:32:18:86:92:99:46:4e:83:
         58:1a:4b:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 01:55:33 2024 by rpki-client on console-fra.rpki-client.org