Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa
File:                     AS139983.roa (raw, json)
Hash identifier:          eMYJgTPlJgI+IoO5wLkxJ3xz72IIOgPSD4TT5a60FcU=
Subject key identifier:   A2:E8:6D:46:99:6C:FD:1A:30:32:59:13:8E:9F:85:89:9D:3F:71:00
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7275D5B4D3F1A6BDC8CD42016E8BE8651A87DC37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa
Signing time:             Tue 11 Jun 2024 05:00:00 +0000
ROA not before:           Tue 11 Jun 2024 04:55:00 +0000
ROA not after:            Tue 10 Jun 2025 05:00:00 +0000
asID:                     139983
IP address blocks:        103.148.48.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Feb 2025 06:34:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:75:d5:b4:d3:f1:a6:bd:c8:cd:42:01:6e:8b:e8:65:1a:87:dc:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jun 11 04:55:00 2024 GMT
            Not After : Jun 10 05:00:00 2025 GMT
        Subject: CN=A2E86D46996CFD1A303259138E9F85899D3F7100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ae:de:a6:34:bb:d1:7d:87:e3:ee:dd:34:24:
                    f5:b3:ae:11:ac:da:34:16:ce:78:cd:9a:26:68:1f:
                    d6:30:36:3f:74:2a:18:92:10:62:fc:76:f8:6a:4d:
                    15:cb:9f:7d:2c:5f:75:43:50:79:45:6b:60:af:b0:
                    f7:a2:07:69:54:24:1a:be:be:b2:74:0c:65:94:24:
                    e9:f4:39:60:55:1a:25:e0:76:e6:ba:ef:8c:b9:cf:
                    42:ef:ff:05:73:8b:29:f5:fb:cb:b9:41:24:dc:f1:
                    51:f7:21:d8:7f:63:47:2e:76:a5:3c:a7:d6:69:3f:
                    fb:66:e5:8c:58:af:2a:25:0f:86:7c:b1:5f:83:cb:
                    c9:b1:f0:1f:0f:13:d1:67:eb:a7:71:fb:91:ad:bc:
                    b7:4f:23:d9:3e:b1:6b:a3:86:a5:76:0d:f1:53:51:
                    51:b7:a7:54:f2:98:25:9e:12:82:20:9a:fc:8b:9a:
                    b4:47:df:45:6a:d1:52:c0:83:02:19:d8:e8:a2:ea:
                    b8:06:35:2c:5f:64:71:a7:97:69:cf:d3:26:fb:dc:
                    d5:3a:fd:f9:58:bf:db:9f:fe:47:c6:0e:63:4d:2d:
                    44:bb:18:b4:47:98:5a:3a:9d:8f:8c:04:57:2e:9f:
                    09:b6:22:3d:52:13:d4:87:55:e1:00:db:4f:f5:bb:
                    7b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E8:6D:46:99:6C:FD:1A:30:32:59:13:8E:9F:85:89:9D:3F:71:00
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS139983.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:c3:a0:d3:be:ae:17:87:1f:b1:18:69:09:fc:7c:4b:c7:9f:
         08:6e:84:11:5f:df:e4:97:0e:e4:6d:96:c6:01:48:7d:54:23:
         a5:e3:25:e6:4e:40:05:9a:65:81:ac:fb:54:dc:e5:09:5c:ad:
         67:93:13:71:36:7f:cc:a6:c5:35:f5:53:fb:08:75:b5:5f:5f:
         a8:9c:cd:5e:56:fd:36:60:ae:0e:0b:78:84:d0:54:25:4c:5c:
         7e:75:da:b1:03:c0:e2:ec:de:a1:82:a6:2a:86:56:7a:92:53:
         6c:c6:84:49:5e:81:f9:d5:31:6a:e6:56:c5:24:b2:1b:d0:a8:
         44:05:57:ec:f8:39:e1:7c:e4:73:18:78:85:48:12:01:1a:40:
         fd:fb:0e:21:3d:03:2b:30:18:cf:f3:2a:46:18:72:a2:f0:f9:
         77:58:7a:0a:03:3f:1d:64:4f:25:89:d5:0f:01:a6:95:2b:fb:
         5e:05:11:b3:4d:92:68:24:88:50:34:cf:d9:20:bb:b3:4b:f2:
         fb:9e:3c:62:62:c7:89:9a:03:6e:f1:0f:68:74:be:58:32:74:
         10:74:80:d6:44:66:e2:55:fc:33:e2:1d:a9:14:a0:be:ab:88:
         43:e5:ff:87:8a:eb:f2:96:bc:99:6e:46:6c:e2:e8:b4:d5:db:
         61:08:c4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:06:10 2025 by rpki-client