Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa
File:                     AS142390.roa (raw, json)
Hash identifier:          sEgWMVECAQBbzGLnBSlOr9GSCLJh2PIbi5Tj6tdqOUU=
Subject key identifier:   2C:6B:05:E0:94:EC:D5:36:73:9F:CD:1C:2C:1F:26:85:92:F3:D4:BE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67BD2E21BFE000C76F6594AC6759B9B18C624D31
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa
Signing time:             Tue 10 Dec 2024 04:00:00 +0000
ROA not before:           Tue 10 Dec 2024 03:55:00 +0000
ROA not after:            Tue 09 Dec 2025 04:00:00 +0000
asID:                     142390
IP address blocks:        103.171.240.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:bd:2e:21:bf:e0:00:c7:6f:65:94:ac:67:59:b9:b1:8c:62:4d:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Dec 10 03:55:00 2024 GMT
            Not After : Dec  9 04:00:00 2025 GMT
        Subject: CN=2C6B05E094ECD536739FCD1C2C1F268592F3D4BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:71:e3:c9:c2:71:f5:53:61:3d:3a:ed:01:94:
                    e0:e5:ca:e1:36:cc:cb:f7:a4:a8:04:8d:46:05:e8:
                    2b:5a:57:dc:bd:63:5f:45:1f:b4:de:18:7c:f8:9a:
                    36:06:0c:86:27:3c:09:ed:3c:8e:2f:75:b1:80:ae:
                    71:f7:fb:8e:97:db:e2:07:17:28:3d:7e:15:e0:8c:
                    52:10:4e:92:25:69:7d:8a:7f:a8:02:a6:50:87:1b:
                    2f:a8:99:2c:21:83:12:73:2f:b9:dd:7e:c4:3d:53:
                    47:e5:83:59:b7:aa:57:11:4d:e5:39:49:cf:ff:1d:
                    e1:17:8d:0c:ff:c4:dc:2c:4f:10:84:2b:b5:19:08:
                    db:29:9d:0d:a5:49:da:07:6f:72:33:fe:b6:a4:42:
                    4d:00:7b:b5:72:94:eb:30:db:46:94:e9:7e:d7:ea:
                    f2:9b:c4:a0:0f:dc:ed:55:20:bd:23:56:0f:b9:e9:
                    2e:d2:ea:3f:98:e0:fd:6c:29:f8:a0:38:5e:c2:42:
                    3c:cf:aa:21:52:2e:58:9f:f1:5b:7f:09:02:09:61:
                    48:75:63:97:f8:6e:e4:f4:51:05:2f:0f:3c:13:4e:
                    c2:82:8d:45:0e:c6:f1:a5:12:80:9c:5d:f0:d5:0b:
                    97:93:e7:12:4e:bc:1a:3d:ce:eb:5f:db:37:1b:ba:
                    d1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6B:05:E0:94:EC:D5:36:73:9F:CD:1C:2C:1F:26:85:92:F3:D4:BE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS142390.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         20:76:2d:4e:66:01:b4:f3:91:2e:9c:e9:80:88:97:de:7d:39:
         f2:94:4f:bc:c1:bf:e0:64:b7:d1:bd:06:b5:b6:07:cd:c8:49:
         8b:28:26:2c:22:03:6f:77:36:2f:1f:7e:37:4b:4b:fd:ec:8a:
         6b:0a:b7:c6:d0:7e:22:98:12:06:bd:0f:55:22:f2:42:08:89:
         34:06:fa:40:98:3f:ed:8f:7b:65:ba:dd:d9:26:1d:d9:20:79:
         d1:93:18:bb:88:8a:09:ff:58:eb:34:ec:e6:29:8d:ae:44:f2:
         a7:73:76:c0:ea:ef:f0:40:ad:d6:59:2b:1f:fc:8e:32:22:5e:
         40:f4:ce:dd:92:42:3d:a8:28:3e:af:bc:1a:2d:93:b6:9c:ac:
         02:6c:61:28:aa:d4:33:3b:15:00:b3:74:02:f9:ea:7a:8d:0d:
         6a:ce:28:08:d5:a5:6f:53:05:52:aa:73:d2:c5:c7:e7:a0:3a:
         c3:6b:fa:5d:40:2d:fa:cd:6d:71:ab:39:ef:a5:cb:58:d9:72:
         ad:6d:dc:8f:6b:43:48:51:0f:7d:31:ca:05:da:31:df:f5:8e:
         44:0c:28:76:d6:4b:b5:00:bf:03:70:38:d5:df:d1:34:95:7c:
         49:01:ec:86:92:2e:e4:1e:19:25:af:69:2b:4f:76:27:f9:05:
         4c:de:68:ea
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUZ70uIb/gAMdvZZSsZ1m5sYxiTTEwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MTIxMDAzNTUwMFoX
DTI1MTIwOTA0MDAwMFowMzExMC8GA1UEAxMoMkM2QjA1RTA5NEVDRDUzNjczOUZD
RDFDMkMxRjI2ODU5MkYzRDRCRTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBALJx48nCcfVTYT067QGU4OXK4TbMy/ekqASNRgXoK1pX3L1jX0UftN4YfPia
NgYMhic8Ce08ji91sYCucff7jpfb4gcXKD1+FeCMUhBOkiVpfYp/qAKmUIcbL6iZ
LCGDEnMvud1+xD1TR+WDWbeqVxFN5TlJz/8d4ReNDP/E3CxPEIQrtRkI2ymdDaVJ
2gdvcjP+tqRCTQB7tXKU6zDbRpTpftfq8pvEoA/c7VUgvSNWD7npLtLqP5jg/Wwp
+KA4XsJCPM+qIVIuWJ/xW38JAglhSHVjl/hu5PRRBS8PPBNOwoKNRQ7G8aUSgJxd
8NULl5PnEk68Gj3O61/bNxu60X0CAwEAAaOCAdAwggHMMB0GA1UdDgQWBBQsawXg
lOzVNnOfzRwsHyaFkvPUvjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzE0MjM5MC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAWer8DANBgkqhkiG9w0BAQsFAAOCAQEAIHYtTmYBtPORLpzpgIiX
3n058pRPvMG/4GS30b0GtbYHzchJiygmLCIDb3c2Lx9+N0tL/eyKawq3xtB+IpgS
Br0PVSLyQgiJNAb6QJg/7Y97Zbrd2SYd2SB50ZMYu4iKCf9Y6zTs5imNrkTyp3N2
wOrv8ECt1lkrH/yOMiJeQPTO3ZJCPagoPq+8Gi2TtpysAmxhKKrUMzsVALN0Avnq
eo0Nas4oCNWlb1MFUqpz0sXH56A6w2v6XUAt+s1tcas576XLWNlyrW3cj2tDSFEP
fTHKBdox3/WORAwodtZLtQC/A3A41d/RNJV8SQHshpIu5B4ZJa9pK092J/kFTN5o
6g==
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:22:53 2025 by rpki-client