Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa
File:                     3130332e34342e31392e302f32342d3234203d3e20313530313931.roa (raw, json)
Hash identifier:          S+iZ2vFMm+caBelJBGh3qclR+XaMzURLzk5zl/dIZ3E=
Subject key identifier:   82:25:9B:A9:80:5E:4E:DB:4F:8D:74:97:32:C2:01:57:C5:A9:C8:C6
Certificate issuer:       /CN=B956E5764D9917A7389654D67836D02779ED9E22
Certificate serial:       13ACC41DC4E532DF258A1AF48E28C00F1AD3516C
Authority key identifier: B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa
Signing time:             Thu 24 Aug 2023 18:00:00 +0000
ROA not before:           Thu 24 Aug 2023 17:55:00 +0000
ROA not after:            Thu 22 Aug 2024 18:00:00 +0000
asID:                     150191
IP address blocks:        103.44.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl
                          rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:ac:c4:1d:c4:e5:32:df:25:8a:1a:f4:8e:28:c0:0f:1a:d3:51:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B956E5764D9917A7389654D67836D02779ED9E22
        Validity
            Not Before: Aug 24 17:55:00 2023 GMT
            Not After : Aug 22 18:00:00 2024 GMT
        Subject: CN=82259BA9805E4EDB4F8D749732C20157C5A9C8C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c9:50:9b:cf:b9:e9:09:41:23:32:d9:0a:6f:
                    90:c5:96:5d:fa:e1:f1:b6:ed:ee:6e:f5:07:6a:e5:
                    8b:c4:b7:28:da:a1:2f:87:77:73:3c:98:df:76:6f:
                    13:18:0c:0e:88:58:8c:97:c3:6c:7b:9c:cb:c1:38:
                    6e:1b:c5:65:6e:4e:cf:fb:fc:d5:20:05:e4:65:6d:
                    ae:e6:9a:b8:cb:d5:e1:da:d8:2a:56:33:02:83:9b:
                    0e:02:5d:97:eb:3b:66:b5:8d:63:f6:00:a6:31:33:
                    be:0c:c8:5c:d0:45:4a:7e:ab:a7:fc:7d:a8:d2:2a:
                    af:c5:75:ec:df:e4:86:63:eb:66:75:1d:8d:4c:75:
                    6e:45:63:e0:7e:1f:98:40:ef:b6:1f:88:f2:4f:97:
                    ff:a1:84:ca:b0:5e:cc:bb:5b:ec:8a:e0:41:f0:ba:
                    8a:b4:f5:96:52:bb:d6:b5:57:f9:21:fd:17:30:c3:
                    9c:4d:3a:2f:3c:2e:b3:9f:76:bb:c9:8d:5d:7a:ff:
                    5f:4e:b1:be:86:56:3a:bf:95:c7:9a:53:1c:f2:e9:
                    60:85:f5:4f:c8:89:c5:98:33:2e:cc:cc:53:3c:1f:
                    e5:b3:38:5f:48:f4:d2:8d:a2:3d:24:49:ff:e8:01:
                    d1:d5:e8:2c:3f:42:be:63:5d:28:d9:46:c1:04:54:
                    24:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:25:9B:A9:80:5E:4E:DB:4F:8D:74:97:32:C2:01:57:C5:A9:C8:C6
            X509v3 Authority Key Identifier:
                keyid:B9:56:E5:76:4D:99:17:A7:38:96:54:D6:78:36:D0:27:79:ED:9E:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/B956E5764D9917A7389654D67836D02779ED9E22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B956E5764D9917A7389654D67836D02779ED9E22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b8117ca8-b4e5-467a-88a8-a4b63e40c3ed/0/3130332e34342e31392e302f32342d3234203d3e20313530313931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:24:92:9d:7b:de:23:f6:0d:14:78:ad:50:f7:2c:16:05:16:
         14:75:58:91:fd:28:fe:a9:db:52:f7:ca:45:71:bd:bd:8d:7e:
         13:34:7b:dd:5a:1d:98:69:5f:58:05:68:8f:58:d9:65:03:4e:
         fd:91:be:16:6f:ef:e0:18:19:80:41:ef:9d:e9:f0:d5:72:6d:
         d5:12:d8:7a:a3:b6:ec:b2:3a:5b:d5:9e:d3:af:06:b2:2b:29:
         f9:cf:2c:5e:14:39:e2:93:17:27:76:f8:84:51:ed:cc:73:b3:
         b4:6a:4c:95:b3:40:52:2a:9f:e3:91:f6:b7:49:15:96:cc:32:
         18:19:b2:ad:65:8c:52:3a:bc:72:87:03:b6:03:9e:eb:ff:b9:
         e1:79:f9:9a:ce:cb:42:60:80:8e:42:82:24:54:17:73:60:bf:
         04:34:48:c2:41:8e:8a:75:f9:a6:58:b0:ea:82:28:a8:50:e0:
         79:3d:4c:34:e6:1a:b6:f0:07:f3:45:fb:a3:13:02:c2:d5:9a:
         6d:61:f3:8f:ca:9b:18:48:49:cb:38:99:0d:58:c9:c5:65:e1:
         da:61:b0:4a:f2:2b:d8:08:5c:69:51:e7:74:48:70:7d:33:6b:
         cd:c1:0f:a1:a2:d1:66:c5:a2:23:f0:d6:58:d2:27:cb:2a:a3:
         a3:de:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:57 2024 by rpki-client on console-ams.rpki-client.org