Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
File:                     3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          tKnvOcGTVqsW/yS5Z2lvba/Xzg8OV2BXKtMn/U4SLRQ=
Subject key identifier:   A3:3B:A0:D6:B1:28:06:31:53:E8:1A:36:A7:19:15:FA:97:CA:23:4B
Certificate issuer:       /CN=DC19ED76CCD72AB435328C48847EF794698443FE
Certificate serial:       18AB9CC607AC9026959ACD3AFE2D0E1222FD3D12
Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 17 Jun 2024 07:00:01 +0000
ROA not before:           Mon 17 Jun 2024 06:55:01 +0000
ROA not after:            Mon 16 Jun 2025 07:00:01 +0000
asID:                     58369
IP address blocks:        103.188.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl
                          rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ab:9c:c6:07:ac:90:26:95:9a:cd:3a:fe:2d:0e:12:22:fd:3d:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE
        Validity
            Not Before: Jun 17 06:55:01 2024 GMT
            Not After : Jun 16 07:00:01 2025 GMT
        Subject: CN=A33BA0D6B128063153E81A36A71915FA97CA234B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:94:b7:63:26:de:d5:e4:98:ab:98:0c:c0:
                    68:90:8e:7f:91:16:70:86:27:d3:26:71:6e:96:7d:
                    25:1d:02:ab:ed:44:31:f7:3c:4a:05:64:a3:cc:a1:
                    0a:7f:00:4f:18:35:f0:07:b8:04:62:f4:03:f0:8b:
                    61:49:ad:49:8c:3a:57:0f:79:96:a7:b2:bf:7b:22:
                    06:cb:74:ec:b2:c7:f1:8a:ee:f6:24:f6:6e:05:93:
                    ee:15:66:a7:84:f2:0d:f4:02:cc:92:3e:0f:80:8e:
                    9a:b5:97:47:9d:7d:6b:15:6f:3e:1c:e4:41:14:93:
                    97:08:92:f0:1b:e8:22:dc:35:5c:b2:30:31:f2:f6:
                    86:9c:bd:ee:35:7b:1c:78:59:c8:bc:5d:46:e9:a9:
                    f2:53:5d:9f:df:69:a8:e9:6b:35:e0:18:45:6d:7b:
                    f8:c9:e2:26:2c:59:40:8e:a8:05:7a:83:0f:47:73:
                    50:21:87:30:92:60:3b:61:ec:71:ed:51:d4:e9:d0:
                    46:55:04:3a:13:c9:bc:ef:f5:b7:8d:90:5b:6f:9a:
                    d7:ee:23:8d:55:86:62:b2:02:60:50:73:41:5c:e8:
                    2a:23:b2:c5:eb:7b:b3:fe:13:39:27:41:ae:91:18:
                    cb:ab:59:f5:f3:50:7f:b2:98:b5:7f:b1:ef:83:e4:
                    55:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:A0:D6:B1:28:06:31:53:E8:1A:36:A7:19:15:FA:97:CA:23:4B
            X509v3 Authority Key Identifier:
                keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.188.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:cf:13:ff:c5:75:e6:16:c1:55:73:69:5a:a5:63:14:de:bd:
         98:bb:41:71:7f:e8:3a:3e:3d:d1:a7:8c:8d:cb:33:48:e2:70:
         d8:6c:2b:18:5e:26:82:f0:62:dc:33:a9:a7:d4:2f:83:38:de:
         7f:d1:d1:d7:d7:9a:59:66:52:68:d0:62:d8:23:28:00:fe:b2:
         83:09:a9:23:22:40:31:dd:58:29:b1:e4:3c:9d:80:aa:ef:84:
         2f:1e:e5:e2:01:40:84:ab:ff:72:ca:ae:42:17:52:86:22:b5:
         d3:94:a6:7a:f1:00:87:a2:1f:e3:93:4d:b8:dc:a5:96:0d:b6:
         15:36:29:89:df:14:10:32:79:d1:61:c1:fe:ab:8d:67:ef:67:
         8c:78:fe:9d:65:81:6f:04:ff:d3:c6:d7:b2:58:39:cc:fa:7b:
         18:89:b6:47:c2:d0:69:2b:80:b9:a8:a5:ec:c3:96:6d:55:43:
         df:34:a8:32:f1:3a:9c:1f:79:68:d0:0e:15:3f:05:cb:85:cd:
         fd:b3:dd:14:11:15:75:03:17:9a:10:18:93:62:7c:62:3a:22:
         3e:0c:4b:77:0e:a3:89:4e:7e:86:0c:43:7d:7f:87:bd:f4:7c:
         ee:30:ae:d4:ce:2f:5e:a2:97:f1:da:18:0e:1c:c3:02:56:3a:
         b4:a3:e0:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org