Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
File:                     3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa (raw, json)
Hash identifier:          Pvk77Cu313SSMDvMf2Tda7Eo/+XV0HmgEc7n5AmgGCs=
Subject key identifier:   C9:26:4E:33:81:73:74:62:D3:0A:35:66:08:E8:00:A5:1C:BD:BD:08
Certificate issuer:       /CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
Certificate serial:       591C07C29F5D01503E3A346ECE93D8F16DC1D116
Authority key identifier: 36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa
Signing time:             Fri 07 Feb 2025 16:00:01 +0000
ROA not before:           Fri 07 Feb 2025 15:55:01 +0000
ROA not after:            Fri 06 Feb 2026 16:00:01 +0000
asID:                     139982
IP address blocks:        103.148.45.0/24 maxlen: 24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1c:07:c2:9f:5d:01:50:3e:3a:34:6e:ce:93:d8:f1:6d:c1:d1:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=368369D096CE0982CCF1F111001F2A2E8A3BB6D4
        Validity
            Not Before: Feb  7 15:55:01 2025 GMT
            Not After : Feb  6 16:00:01 2026 GMT
        Subject: CN=C9264E3381737462D30A356608E800A51CBDBD08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:f7:25:af:28:2c:ec:b2:bd:5e:bc:cb:b4:4b:
                    68:4b:27:40:68:d5:0f:15:bc:a3:05:af:7c:e9:3b:
                    69:6b:c4:86:d9:3e:6b:25:33:9c:0f:fe:5a:60:b8:
                    d9:86:66:a8:6a:cf:b0:88:8b:ad:f0:30:b0:15:39:
                    b6:74:08:3a:3c:c7:04:ee:57:f2:ef:8e:3d:fc:f5:
                    3c:bc:64:ce:42:3e:b0:a2:fc:67:6f:77:4b:3f:51:
                    42:16:fe:6e:d0:ac:8d:6a:c4:82:bb:33:ac:48:41:
                    8e:41:b3:64:c2:ca:4d:e5:32:03:f1:ea:d7:63:99:
                    b7:df:f3:7a:03:04:a8:6b:9a:1a:22:3c:bf:79:e8:
                    0f:67:51:43:c1:ec:55:70:5d:11:af:26:cd:d8:96:
                    71:be:d5:41:28:bc:1b:53:ab:c6:5e:80:49:c7:48:
                    1e:09:64:42:b5:04:b3:9a:6d:f6:9a:0b:bf:dc:89:
                    22:fa:43:ff:b5:6b:2b:69:83:cf:97:0c:64:43:16:
                    fe:a2:a1:33:69:d8:64:26:ac:08:33:23:61:8a:8c:
                    ed:59:a3:0d:b4:22:18:c3:ae:79:57:91:78:d9:5b:
                    86:cd:86:13:0a:23:ff:45:db:05:c7:bb:ce:f7:5e:
                    d3:72:2e:4c:c5:cd:d4:34:8f:b8:29:a7:22:19:aa:
                    f3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:26:4E:33:81:73:74:62:D3:0A:35:66:08:E8:00:A5:1C:BD:BD:08
            X509v3 Authority Key Identifier:
                keyid:36:83:69:D0:96:CE:09:82:CC:F1:F1:11:00:1F:2A:2E:8A:3B:B6:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/368369D096CE0982CCF1F111001F2A2E8A3BB6D4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89f26fb8-72c4-49d9-9cbe-8226397271a2/0/3130332e3134382e34352e302f32342d3234203d3e20313339393832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.45.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:27:d9:3c:7e:b8:59:4f:e1:66:29:8b:98:87:72:9b:1d:56:
         8a:f1:78:12:9a:02:3a:c2:d7:b1:5e:d1:e1:e4:02:c1:97:70:
         8e:b5:9e:3a:5d:07:26:c2:c2:14:45:aa:8e:6c:1a:f1:a5:7f:
         f9:38:34:65:19:de:ce:26:fc:00:af:be:6a:d8:00:1e:4e:be:
         42:68:a2:ad:0d:2e:d8:6a:bd:0d:aa:d2:82:42:51:e5:2f:06:
         a2:79:8c:1d:48:64:da:81:91:2b:4a:d2:db:90:47:da:e8:40:
         89:8c:ee:f0:87:5f:5c:2d:24:f3:2c:80:19:51:60:66:7b:28:
         30:1f:fa:0e:08:58:fd:b2:bc:72:12:ab:18:b7:e2:6d:21:c0:
         4f:58:50:9d:ed:40:d2:24:71:59:d9:3d:07:3d:57:2c:7f:78:
         f4:eb:57:92:ce:c1:ce:b9:26:65:dc:b2:e9:d4:00:50:0e:e3:
         ec:4a:0b:c9:da:5d:9e:e2:92:6f:bb:39:9c:26:69:41:b0:a4:
         e9:0d:36:f2:05:25:5f:53:c2:8e:22:31:e0:77:df:7e:4f:04:
         ea:06:70:7a:79:0e:50:fe:6f:d3:3b:e6:58:e4:9d:12:45:0f:
         c4:78:6b:df:25:71:5c:f4:62:33:ef:43:6f:c0:cd:ac:e3:df:
         83:04:65:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:05:40 2025 by rpki-client