Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa
File:                     AS55674.roa (raw, json)
Hash identifier:          BCWdYX2Qp2RmV+SqeHFrDWpspeQM4jeQTiOpybVcimA=
Subject key identifier:   AE:AD:EC:2D:40:59:3C:ED:C2:CA:4B:F1:EB:A7:34:B4:BC:39:D5:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       72395D6F616A2BFEAD9A039856D539B99671E232
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa
Signing time:             Mon 19 Feb 2024 04:00:00 +0000
ROA not before:           Mon 19 Feb 2024 03:55:00 +0000
ROA not after:            Mon 17 Feb 2025 04:00:00 +0000
asID:                     55674
IP address blocks:        103.185.194.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:39:5d:6f:61:6a:2b:fe:ad:9a:03:98:56:d5:39:b9:96:71:e2:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 19 03:55:00 2024 GMT
            Not After : Feb 17 04:00:00 2025 GMT
        Subject: CN=AEADEC2D40593CEDC2CA4BF1EBA734B4BC39D536
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4c:9a:d4:3a:5b:bb:11:06:74:77:15:6a:c7:
                    67:53:32:93:66:f8:28:ed:d1:c3:b4:0c:07:22:01:
                    a5:fc:b6:23:8b:38:91:1b:7c:9f:60:94:df:0f:7e:
                    35:32:99:f5:e4:ce:34:4a:23:ac:d7:3a:01:23:26:
                    bd:0f:cb:5a:97:94:65:d5:c9:bb:e9:86:c3:26:ae:
                    c6:ad:3e:79:49:25:1f:ea:2c:c2:92:ce:a2:17:a9:
                    6d:64:ab:9a:9a:71:4f:56:23:70:c4:3d:fa:eb:65:
                    b1:63:e8:f7:91:18:b0:8a:13:58:af:bb:8c:8a:32:
                    5f:31:be:f5:e1:33:d2:e7:a5:7f:09:1e:3e:d2:72:
                    96:1e:a8:48:ac:c7:d1:51:1c:5c:69:41:35:31:85:
                    31:99:89:e2:0e:02:3f:90:16:7c:e6:3e:4b:6c:2a:
                    3c:f9:69:88:c2:04:e5:9f:da:38:83:0f:7a:b4:ff:
                    0f:b4:cc:70:6c:c5:2e:e6:79:63:27:e0:c0:05:6d:
                    14:67:5f:48:14:53:f7:1f:43:7a:41:81:49:e4:41:
                    36:51:37:13:76:c0:54:f2:66:bc:a9:89:92:22:c9:
                    85:2c:fa:b7:30:be:0a:83:71:ca:eb:ed:04:52:27:
                    59:a8:dd:1b:a5:73:63:d2:4c:1c:e0:00:4a:45:b9:
                    31:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:AD:EC:2D:40:59:3C:ED:C2:CA:4B:F1:EB:A7:34:B4:BC:39:D5:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS55674.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:fa:3a:b1:8e:54:3f:6d:74:d4:bd:31:44:3e:f1:5c:09:a2:
         72:40:2c:23:28:a9:6c:70:67:3d:6e:cc:db:2e:9a:7b:ba:ea:
         14:c1:04:1b:ec:81:0e:ef:ae:88:7a:c2:66:1c:cf:d9:16:be:
         67:f4:ad:df:e0:b5:9a:da:cc:71:a6:c4:ec:12:4d:77:35:86:
         82:0d:79:82:1c:03:af:b2:28:b3:42:a6:d2:91:07:94:d1:8c:
         27:52:99:04:13:23:7a:57:2f:ad:19:ef:d6:6d:6e:1c:92:db:
         e5:d6:89:83:78:82:41:c1:d7:bb:78:f8:a1:b0:7f:ec:b3:03:
         ba:92:b7:bf:8c:21:1a:40:98:ce:85:b5:3c:c9:4e:24:eb:ec:
         4e:c2:10:ee:00:fa:86:39:9f:eb:87:58:88:37:18:70:8f:06:
         0b:df:21:7b:41:56:b0:04:2e:cb:c8:22:18:4b:fb:b0:ca:13:
         d4:29:f3:cc:69:bc:48:7a:07:61:1f:10:ca:88:71:34:a6:00:
         df:c8:6b:fa:f7:3b:16:02:ee:5d:03:52:15:2d:77:cd:62:4a:
         66:0f:a8:fe:b4:cd:38:59:e9:d8:53:51:5a:2a:2d:6d:f9:c0:
         04:67:ab:b6:14:e6:90:88:33:e8:96:4c:b9:46:d4:86:03:9f:
         46:4e:37:74
-----BEGIN CERTIFICATE-----
MIIE3DCCA8SgAwIBAgIUcjldb2FqK/6tmgOYVtU5uZZx4jIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDIxOTAzNTUwMFoX
DTI1MDIxNzA0MDAwMFowMzExMC8GA1UEAxMoQUVBREVDMkQ0MDU5M0NFREMyQ0E0
QkYxRUJBNzM0QjRCQzM5RDUzNjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAL1MmtQ6W7sRBnR3FWrHZ1Myk2b4KO3Rw7QMByIBpfy2I4s4kRt8n2CU3w9+
NTKZ9eTONEojrNc6ASMmvQ/LWpeUZdXJu+mGwyauxq0+eUklH+oswpLOohepbWSr
mppxT1YjcMQ9+utlsWPo95EYsIoTWK+7jIoyXzG+9eEz0uelfwkePtJylh6oSKzH
0VEcXGlBNTGFMZmJ4g4CP5AWfOY+S2wqPPlpiMIE5Z/aOIMPerT/D7TMcGzFLuZ5
YyfgwAVtFGdfSBRT9x9DekGBSeRBNlE3E3bAVPJmvKmJkiLJhSz6tzC+CoNxyuvt
BFInWajdG6VzY9JMHOAASkW5MRcCAwEAAaOCAc8wggHLMB0GA1UdDgQWBBSurewt
QFk87cLKS/HrpzS0vDnVNjAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFMGCCsGAQUFBwELBEcwRTBDBggrBgEFBQcwC4Y3cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzU1Njc0LnJv
YTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ7nCMA0GCSqGSIb3DQEBCwUAA4IBAQCa+jqxjlQ/bXTUvTFEPvFc
CaJyQCwjKKlscGc9bszbLpp7uuoUwQQb7IEO766IesJmHM/ZFr5n9K3f4LWa2sxx
psTsEk13NYaCDXmCHAOvsiizQqbSkQeU0YwnUpkEEyN6Vy+tGe/WbW4cktvl1omD
eIJBwde7ePihsH/sswO6kre/jCEaQJjOhbU8yU4k6+xOwhDuAPqGOZ/rh1iINxhw
jwYL3yF7QVawBC7LyCIYS/uwyhPUKfPMabxIegdhHxDKiHE0pgDfyGv69zsWAu5d
A1IVLXfNYkpmD6j+tM04WenYU1FaKi1t+cAEZ6u2FOaQiDPolky5RtSGA59GTjd0
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:31 2024 by rpki-client on console-ams.rpki-client.org