Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138065.roa
File:                     AS138065.roa (raw, json)
Hash identifier:          rQ/GT6JoVFXY3OqGp5sFbue6J09hMX076geYF7zbjMs=
Subject key identifier:   26:25:8D:F4:94:84:94:96:FD:45:FF:8E:D4:21:E7:F0:20:EE:7E:29
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       458F434FD2F0DC8088BAB9ED1B7F51F220E6DAA5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138065.roa
Signing time:             Thu 06 Jun 2024 02:00:00 +0000
ROA not before:           Thu 06 Jun 2024 01:55:00 +0000
ROA not after:            Thu 05 Jun 2025 02:00:00 +0000
asID:                     138065
IP address blocks:        103.219.226.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:8f:43:4f:d2:f0:dc:80:88:ba:b9:ed:1b:7f:51:f2:20:e6:da:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jun  6 01:55:00 2024 GMT
            Not After : Jun  5 02:00:00 2025 GMT
        Subject: CN=26258DF494849496FD45FF8ED421E7F020EE7E29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:85:56:89:bc:e3:78:93:76:3d:ee:66:90:63:
                    13:51:cf:7b:a1:6d:df:c2:a6:7b:92:1e:32:19:d3:
                    6b:db:27:f9:39:a1:95:6a:3c:d6:15:ac:74:3d:1d:
                    ea:5b:8f:08:9a:be:4c:06:01:65:38:88:46:84:a8:
                    2f:d5:8d:91:e5:f3:b4:09:68:60:aa:09:7a:1e:2f:
                    3d:5b:58:c8:e7:af:e3:78:43:5c:dc:00:79:02:1e:
                    dd:8c:d9:3a:6b:0a:31:7e:58:ea:1c:5c:ae:de:c8:
                    a1:79:4b:9e:5a:20:4f:e0:86:73:d4:93:f8:dc:ed:
                    e2:1f:c2:00:72:7c:c7:8e:15:c1:36:a6:a3:fa:7c:
                    6a:97:d8:18:57:3b:29:98:25:83:b0:66:af:87:bb:
                    39:2b:9c:41:9b:fc:93:43:a7:29:11:5d:6c:e4:9a:
                    17:28:c3:99:6e:f7:a8:d6:06:99:1f:fc:75:d9:b0:
                    58:bc:6c:6d:9f:6c:79:62:a0:05:02:ad:21:9f:13:
                    b4:6e:f9:3d:f1:8c:72:f0:55:f5:96:ad:63:01:ae:
                    03:00:4b:63:a5:6f:57:e3:c6:11:e8:a5:28:ba:e6:
                    14:2e:a9:fe:2e:cb:24:96:f6:e3:4a:76:e4:bd:f2:
                    58:7c:ca:77:a6:00:02:e4:f2:29:e7:84:0c:9f:a1:
                    9b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:25:8D:F4:94:84:94:96:FD:45:FF:8E:D4:21:E7:F0:20:EE:7E:29
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS138065.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.219.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:e1:c5:e3:60:4f:d3:ae:64:db:b9:a7:e9:ec:62:9a:ea:cc:
         73:4c:38:97:8d:0d:04:b0:f0:28:1c:9a:79:8b:fa:1e:36:42:
         cf:2c:28:9d:e0:68:16:66:0d:6b:cc:e8:e0:c9:16:12:63:74:
         c3:8d:d8:6a:86:ec:3d:c4:18:f6:6d:b6:62:a0:48:2b:ee:08:
         ee:70:54:bc:75:fd:56:55:fc:1a:0e:4f:75:95:4c:6a:14:45:
         b1:1e:91:69:51:7b:35:46:e1:22:81:d2:01:c4:3b:e5:99:e2:
         29:81:39:e1:a4:96:40:db:93:31:6d:c1:86:3c:c5:22:7f:25:
         cf:bc:22:d1:63:b1:42:ed:2b:07:d5:2e:58:71:41:79:f4:8c:
         ae:d8:f4:69:1c:0d:29:f9:06:00:d8:ff:91:9b:05:e1:4f:71:
         eb:77:87:94:0c:7c:a7:de:73:26:a3:44:89:07:50:11:19:ef:
         7a:80:48:ec:6a:af:44:e9:f4:10:88:7b:04:d2:95:33:22:82:
         e2:0c:54:50:0e:88:7a:da:f5:c6:41:10:9a:e5:24:ca:9d:d9:
         99:bb:fd:56:1f:45:9a:25:ee:af:06:22:e5:01:32:d5:57:30:
         10:09:02:bd:0d:dd:ce:46:eb:44:5a:51:b1:71:3b:91:2e:d1:
         90:56:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:53:04 2025 by rpki-client