Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa
File:                     3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa (raw, json)
Hash identifier:          9QqvAfZSusq7TNTZjMNWZS+7iPHdwM0xe1dY5FOdfh4=
Subject key identifier:   0A:94:1F:53:93:2E:4D:A5:92:22:76:95:A4:16:50:8E:D5:98:AF:7D
Certificate issuer:       /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A
Certificate serial:       2F24F0A08840FC7A6AE3A4B98121D53D5E9CC15F
Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa
Signing time:             Mon 19 Aug 2024 07:34:43 +0000
ROA not before:           Mon 19 Aug 2024 07:29:43 +0000
ROA not after:            Mon 18 Aug 2025 07:34:43 +0000
asID:                     139978
IP address blocks:        103.148.18.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl
                          rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:24:f0:a0:88:40:fc:7a:6a:e3:a4:b9:81:21:d5:3d:5e:9c:c1:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A
        Validity
            Not Before: Aug 19 07:29:43 2024 GMT
            Not After : Aug 18 07:34:43 2025 GMT
        Subject: CN=0A941F53932E4DA592227695A416508ED598AF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:90:0f:06:6f:d9:f6:e2:eb:ff:0e:6c:18:
                    10:e3:84:95:61:c3:25:75:32:46:80:06:29:cb:94:
                    2f:86:78:7d:39:21:f3:3f:f8:ed:e5:7e:c8:0e:98:
                    f3:32:48:97:4c:ed:5c:ea:5c:66:6b:11:8a:62:ee:
                    8c:64:6a:cc:8d:2b:81:d6:88:16:7d:f9:c4:b0:50:
                    d7:a3:4d:1a:0a:ed:ee:a2:43:ef:e1:cb:1d:2d:30:
                    5a:89:33:ce:32:02:51:e7:70:ee:c3:71:e1:0a:f9:
                    c5:ea:5f:28:b5:41:1b:7e:88:88:44:45:89:ba:2d:
                    a8:b2:9e:af:63:31:b6:43:f2:4a:45:04:e7:3b:39:
                    c2:9c:89:cc:59:e7:cd:f9:bb:c3:7a:b1:c2:b0:02:
                    7f:75:b2:71:2b:57:36:af:27:86:64:97:8e:1f:3d:
                    e5:cd:55:13:36:92:ed:12:0a:6e:94:f7:74:98:d1:
                    d3:e8:df:77:26:bd:68:59:19:ee:b2:72:51:2d:cf:
                    3a:ea:e0:ba:24:cf:f3:bb:6c:c5:a7:9d:01:93:55:
                    e6:85:94:a0:ec:cc:12:f2:80:54:2c:c3:4b:10:dd:
                    12:d5:b4:cb:8d:e9:a3:ab:9b:d1:6f:5c:81:04:1a:
                    3d:18:6b:1d:5c:44:8d:43:43:2c:27:11:cf:aa:29:
                    ad:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:94:1F:53:93:2E:4D:A5:92:22:76:95:A4:16:50:8E:D5:98:AF:7D
            X509v3 Authority Key Identifier:
                keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3233203d3e20313339393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:82:76:7e:f3:1e:38:00:0f:ff:5b:68:69:d6:fa:a8:4c:87:
         e6:b8:0a:3b:80:4f:4f:2f:1d:ab:7f:b1:1d:c3:c0:56:2f:83:
         d3:53:fd:77:06:cb:00:76:2d:31:00:2f:ed:b1:b4:54:64:aa:
         f9:77:16:95:0e:f9:60:c7:a8:7f:21:8b:49:cb:03:40:39:04:
         04:29:35:f0:84:5c:f7:ff:3e:1a:5d:df:fa:3f:0a:04:1e:07:
         52:29:6b:3e:09:1d:b1:15:02:a9:46:63:f5:47:7a:a9:d2:28:
         a7:b2:53:65:21:0c:12:57:63:ac:64:23:08:67:0b:68:3c:d5:
         4b:e9:21:35:e7:aa:b0:1d:00:c2:96:d2:b4:ef:bc:d8:e1:60:
         79:a8:6a:f8:30:7a:7a:3f:aa:4b:1b:f9:5e:b0:d7:92:9a:0d:
         b0:b6:94:77:41:c5:a7:27:8e:3d:23:ce:ce:9e:02:06:d2:2f:
         c6:4a:46:b8:a0:01:83:39:ce:fb:c7:12:a7:ce:fc:2d:1b:f7:
         b7:ed:4e:cd:8c:46:09:41:ef:7d:f0:70:78:ce:bd:e7:bd:51:
         e4:d0:18:10:ef:d1:a9:62:0c:cb:83:04:92:01:90:53:d5:08:
         50:cb:4c:65:e3:c5:36:d8:ba:f9:28:bc:20:fb:ad:36:05:1c:
         af:d8:bd:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org