Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa
File:                     3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa (raw, json)
Hash identifier:          dFLx1K9CxPSO43EACK9uXqjF70W0uu5DiMJttmxvieI=
Subject key identifier:   AE:E9:26:97:CE:A0:77:D9:6F:D2:6E:9D:A9:F8:03:96:67:DA:20:D7
Certificate issuer:       /CN=4F022459BA46CF30700E070671C752B44729E249
Certificate serial:       5A261B6ABBFBF83D91F187DEEDDA9A28555C0B38
Authority key identifier: 4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa
Signing time:             Tue 30 Apr 2024 07:27:54 +0000
ROA not before:           Tue 30 Apr 2024 07:22:54 +0000
ROA not after:            Tue 29 Apr 2025 07:27:54 +0000
asID:                     150510
IP address blocks:        103.61.234.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl
                          rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:07:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:26:1b:6a:bb:fb:f8:3d:91:f1:87:de:ed:da:9a:28:55:5c:0b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F022459BA46CF30700E070671C752B44729E249
        Validity
            Not Before: Apr 30 07:22:54 2024 GMT
            Not After : Apr 29 07:27:54 2025 GMT
        Subject: CN=AEE92697CEA077D96FD26E9DA9F8039667DA20D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:fa:90:05:73:1f:05:7d:e5:e8:50:a5:8e:82:
                    d3:ec:b7:3c:3c:04:08:9e:c4:55:28:15:d0:6c:ab:
                    55:11:8a:78:f9:16:0a:c6:c5:6a:fa:c5:51:05:d8:
                    8b:0f:d4:10:d3:d3:fb:e1:2e:b1:58:3a:22:03:bb:
                    5d:3b:eb:b4:1d:eb:fc:f8:d4:94:f9:69:63:d1:af:
                    05:44:c3:ab:59:62:c3:de:99:ab:62:35:8b:1d:ed:
                    16:c3:a2:ba:f9:39:c3:94:29:cc:04:1d:49:07:f4:
                    f8:db:ad:59:7b:0c:2f:3d:54:92:d8:09:6e:fd:0c:
                    2f:ee:e2:ed:b2:b7:79:e3:74:91:a2:31:c2:f3:f3:
                    d1:a5:c2:57:1a:35:67:57:bb:2c:d5:f5:27:e1:ec:
                    20:f7:fd:b7:2e:3b:4a:a6:15:e3:a3:40:68:c3:86:
                    10:d4:9c:94:58:61:48:ee:fc:5d:d0:a1:e2:27:50:
                    bf:6a:1a:1f:c0:b1:a3:f1:20:7c:c4:15:b7:ae:75:
                    de:da:a2:e0:4b:1d:42:5b:3c:ca:3c:c2:6b:47:1f:
                    c7:69:d4:91:f3:db:cf:31:18:8e:69:64:74:a1:21:
                    57:22:c7:55:76:87:47:a0:40:de:e7:e6:b5:c7:db:
                    46:e8:23:fe:b0:9a:1c:d1:4e:c8:9f:e1:a4:4c:b2:
                    b7:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:E9:26:97:CE:A0:77:D9:6F:D2:6E:9D:A9:F8:03:96:67:DA:20:D7
            X509v3 Authority Key Identifier:
                keyid:4F:02:24:59:BA:46:CF:30:70:0E:07:06:71:C7:52:B4:47:29:E2:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/4F022459BA46CF30700E070671C752B44729E249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F022459BA46CF30700E070671C752B44729E249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a2bfe9a-3823-44e9-97c0-2191a56bafd3/0/3130332e36312e3233342e302f32332d3233203d3e20313530353130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.61.234.0/23

    Signature Algorithm: sha256WithRSAEncryption
         cf:5d:c3:e9:33:1c:9b:f6:03:14:02:2b:7b:e7:2e:e5:4e:2e:
         c4:84:84:5e:58:56:6d:30:08:9d:e2:66:b4:d5:ca:40:ea:38:
         8d:b5:f2:3d:a2:af:d1:1a:7e:15:8e:c9:0f:4e:1e:76:6b:a0:
         86:ca:1c:da:3b:c8:b4:6e:49:db:1b:c2:6f:fc:df:d2:16:f8:
         97:9d:3f:6e:ac:ad:b4:57:0b:a3:35:5a:a0:61:ed:1e:73:e1:
         d2:46:e6:3a:73:be:82:3d:bc:5e:e0:f2:f0:03:21:6d:e1:dd:
         17:13:67:ca:eb:fd:b9:6a:df:6c:4f:94:e9:57:b4:36:3b:82:
         82:5a:38:51:c9:d8:5d:6f:34:c1:87:bb:13:26:85:e4:4b:ac:
         43:0d:f5:28:d6:7a:85:09:ca:ee:47:dc:bd:1c:7f:8e:cb:55:
         88:93:a3:e9:26:24:22:87:04:1f:fd:cb:9c:db:eb:e0:68:3c:
         f5:82:6e:a8:0a:21:64:63:0b:b4:07:d1:48:47:99:5d:97:de:
         3e:68:62:2a:af:06:a6:f0:e3:18:9d:98:80:8a:7b:95:29:b6:
         7a:1d:62:ee:89:6a:09:ff:f8:9d:cb:79:84:9b:2d:1a:92:61:
         c6:f2:66:87:83:80:b9:7d:10:ba:f7:29:80:64:5b:d7:bb:f6:
         15:be:50:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:01:21 2024 by rpki-client on console-fra.rpki-client.org