Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS397763.roa
File:                     AS397763.roa (raw, json)
Hash identifier:          +xTnyFuFrlWeb4CrYjH4jtlTx+DB6zw7srYMyBgKRkY=
Subject key identifier:   8E:81:25:38:0D:7E:39:DC:76:C4:96:F5:2C:15:DE:ED:EB:45:F7:40
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       779A66012D0FC4BB246F149B7D0FEE1E9C4AD7FA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS397763.roa
Signing time:             Mon 13 Jan 2025 03:02:30 +0000
ROA not before:           Mon 13 Jan 2025 02:57:30 +0000
ROA not after:            Mon 12 Jan 2026 03:02:30 +0000
asID:                     397763
IP address blocks:        103.114.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 07 Apr 2025 17:17:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:66:01:2d:0f:c4:bb:24:6f:14:9b:7d:0f:ee:1e:9c:4a:d7:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000
        Validity
            Not Before: Jan 13 02:57:30 2025 GMT
            Not After : Jan 12 03:02:30 2026 GMT
        Subject: CN=8E8125380D7E39DC76C496F52C15DEEDEB45F740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:aa:5c:46:dd:04:db:f2:6f:9e:de:90:46:b6:
                    ad:8f:0e:5c:da:16:df:ca:25:1b:10:3b:cd:ab:04:
                    93:07:1a:41:12:09:19:a5:63:4b:32:56:88:c8:66:
                    ab:d6:b7:4d:df:3c:da:ab:b2:b1:a7:d6:97:b6:8d:
                    67:ee:df:b9:81:5d:3a:32:b3:b4:c5:5f:fa:3d:f7:
                    04:f4:04:a8:ee:09:08:6d:59:85:04:9a:73:1e:3f:
                    64:d1:d6:bb:36:7c:95:b6:76:48:3d:45:8a:18:7e:
                    58:d4:1b:67:5c:e4:6b:06:c4:7e:e8:d9:16:60:10:
                    d5:95:36:47:24:be:3b:4c:98:40:7e:c2:6d:60:be:
                    15:81:09:5c:b4:58:46:9c:7a:9c:f8:44:67:6e:a4:
                    0d:01:9f:a4:0d:b2:ab:fe:98:da:13:d0:e8:8d:fa:
                    bd:ae:a2:00:f8:3b:3f:cf:cb:bd:84:99:3a:dd:1a:
                    92:ba:c2:68:5a:b5:c6:3c:44:37:50:c6:6f:43:49:
                    ad:17:28:24:eb:9f:5f:f1:65:8b:fe:ad:69:b0:55:
                    99:f0:5f:47:de:c0:0a:43:0d:90:93:2a:0d:41:fd:
                    4e:0d:85:3c:af:a0:08:eb:0f:cd:3a:7f:1c:d1:cf:
                    99:31:86:f3:62:8d:72:66:22:e4:b2:86:0b:1f:ce:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:81:25:38:0D:7E:39:DC:76:C4:96:F5:2C:15:DE:ED:EB:45:F7:40
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS397763.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.114.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:5b:4f:8d:f9:e1:57:ad:dc:24:44:76:ad:c3:48:db:ca:16:
         45:3d:96:86:9c:b5:3d:e2:39:97:85:9e:bf:1a:50:1c:bf:e1:
         ad:b7:0a:1e:fd:58:c8:ae:1a:74:fa:a2:7a:86:e9:d9:77:2d:
         37:de:29:b8:08:74:69:3a:fe:4d:9f:ed:7f:5e:25:b5:d2:fb:
         d8:a2:ab:a7:b4:c1:6a:da:31:f4:54:f5:53:05:29:a7:62:34:
         32:ba:12:06:d0:85:03:4c:75:27:41:c5:98:6d:e9:58:04:a3:
         5f:21:77:3f:2c:27:f1:62:c3:d6:af:f7:70:18:a4:f4:16:32:
         7e:a8:0f:d0:09:c7:a6:61:c8:8c:73:d2:13:23:18:f3:65:a8:
         8a:0b:81:e0:37:55:6f:ad:18:1f:e1:9b:1e:71:2a:0c:50:45:
         24:5a:f0:35:cc:7f:34:29:d2:ec:d3:b2:2a:25:ff:da:24:c2:
         e3:44:69:ee:a2:d1:f4:78:43:fd:8a:15:47:cb:1f:7e:43:11:
         68:03:11:a7:ac:2e:a2:d0:07:a2:18:b0:b5:b3:25:39:8c:ca:
         f5:47:7e:da:8a:53:f0:f3:f1:47:f1:0e:23:87:09:8d:dc:f3:
         fc:d3:a4:53:f4:0a:8a:3c:1d:e5:06:09:b0:47:70:bb:13:32:
         58:cc:16:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 06:20:07 2025 by rpki-client