Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa
File:                     3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          4qLNGi/A/2Nusn9fOdkgGQAfH65+C/+F6uRVaqCMnSM=
Subject key identifier:   89:99:68:13:D8:CB:69:CC:FB:40:0D:57:D7:1A:D0:BE:1B:7E:D4:76
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       1A67CE93E49557F8CE1DABAAFD1167F6D2127307
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa
Signing time:             Mon 01 Jul 2024 01:04:08 +0000
ROA not before:           Mon 01 Jul 2024 00:59:08 +0000
ROA not after:            Mon 30 Jun 2025 01:04:08 +0000
asID:                     139982
IP address blocks:        103.148.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl
                          rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:67:ce:93:e4:95:57:f8:ce:1d:ab:aa:fd:11:67:f6:d2:12:73:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Jul  1 00:59:08 2024 GMT
            Not After : Jun 30 01:04:08 2025 GMT
        Subject: CN=89996813D8CB69CCFB400D57D71AD0BE1B7ED476
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:24:b0:8e:dd:8c:ec:f3:c5:9a:22:34:22:
                    1e:36:2d:26:74:d5:a3:38:17:61:d0:4c:96:a7:46:
                    4c:e7:5e:f0:64:b8:39:d1:f2:01:21:38:64:ee:e6:
                    3f:87:59:17:ed:b6:0a:b7:98:7d:ac:98:fd:dc:cb:
                    ce:c7:3d:b7:c3:82:ff:66:09:0c:0f:c4:4d:28:46:
                    74:bd:49:fa:e8:b7:4d:52:e4:3e:4b:39:c9:ff:2c:
                    37:9a:db:f2:8e:ec:e0:1d:a8:de:68:b4:a2:a6:49:
                    d2:94:b2:e7:ee:68:70:b9:30:7f:ea:e4:99:9d:a7:
                    9f:90:08:a1:3e:5c:67:e2:fc:db:ee:1d:2e:0a:bc:
                    b5:4e:2f:be:49:00:37:36:cc:07:9d:df:62:82:0f:
                    a2:e6:62:57:e7:fd:f0:c2:16:e5:e5:9f:64:7f:a2:
                    50:07:c8:8f:91:d9:13:52:7e:3e:a1:ba:f2:4b:e8:
                    e0:05:8b:a8:b2:98:d3:4c:e3:b7:c8:a1:15:32:21:
                    ed:f3:13:80:f7:e7:21:d7:3c:3b:76:f2:d8:74:a5:
                    39:a9:31:67:33:ac:54:64:94:83:49:1a:6a:ec:40:
                    48:dc:5e:c1:0d:f1:26:0e:91:24:c6:a2:73:34:7d:
                    fc:74:64:06:4e:d4:d7:ac:bd:98:e0:5c:0b:b2:27:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:99:68:13:D8:CB:69:CC:FB:40:0D:57:D7:1A:D0:BE:1B:7E:D4:76
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34342e302f32332d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:25:ca:71:01:3a:d2:4a:63:47:fa:3b:0e:7c:aa:52:ed:58:
         46:4f:18:fe:80:97:84:83:cf:1c:f1:4c:30:ad:9a:40:de:8e:
         ed:3b:75:55:35:73:7d:b3:6d:99:5e:f1:8b:fa:99:b5:d6:57:
         0c:f2:76:b7:21:27:be:e0:e6:4f:fe:6a:91:6d:b6:6e:1c:20:
         71:3d:75:ed:3b:3a:18:89:b8:c9:47:4d:30:34:d3:04:ed:54:
         96:69:f8:63:7a:ba:1f:a9:6f:ce:f8:85:e3:9a:65:6e:ac:e5:
         5a:19:db:75:e5:6b:b8:3f:3c:87:28:ed:2d:43:d5:41:f4:6c:
         d6:b4:6e:6b:5c:33:8c:f0:6a:23:34:05:a2:a7:82:44:78:7f:
         4e:91:47:e3:71:56:80:cc:72:d5:22:7c:c9:be:31:9d:2b:08:
         9e:94:1f:43:94:64:09:c4:7e:89:e1:18:dc:e7:5c:38:c6:44:
         4c:66:6d:8a:8a:ab:9a:a1:5f:18:5f:bf:2f:33:a6:c6:d2:1a:
         02:76:46:1a:87:8f:c2:89:7e:16:ca:c8:73:18:75:50:9a:d8:
         92:ce:e9:9c:cc:29:ec:c6:a8:b8:aa:0b:24:d4:d3:82:7a:96:
         01:6b:96:00:66:e5:bb:9d:28:ba:c7:5c:00:a1:a8:b7:52:96:
         96:1e:40:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org