Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa
File:                     3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa (raw, json)
Hash identifier:          EFSq05dlwvlOTgjlLEIGwaehuKInKSBUzsGR1WC9hNk=
Subject key identifier:   54:B2:D7:7A:19:91:C7:1B:47:E4:A0:F0:F2:95:9C:6A:3B:5B:D8:51
Certificate issuer:       /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
Certificate serial:       69CF05793A536B71270033C88B6EBBBC45801E5F
Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa
Signing time:             Mon 31 Jul 2023 00:08:01 +0000
ROA not before:           Mon 31 Jul 2023 00:03:01 +0000
ROA not after:            Mon 29 Jul 2024 00:08:01 +0000
asID:                     139378
IP address blocks:        103.142.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl
                          rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cf:05:79:3a:53:6b:71:27:00:33:c8:8b:6e:bb:bc:45:80:1e:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
        Validity
            Not Before: Jul 31 00:03:01 2023 GMT
            Not After : Jul 29 00:08:01 2024 GMT
        Subject: CN=54B2D77A1991C71B47E4A0F0F2959C6A3B5BD851
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:13:d7:b9:a6:db:9c:b0:94:00:62:ed:a3:68:
                    c9:ee:85:dd:1b:30:54:17:b3:b5:e6:6e:d5:da:e5:
                    87:98:27:a3:6b:d2:c5:08:d7:0a:48:37:4f:66:a1:
                    3c:6c:e1:64:41:64:97:23:12:f1:4d:c0:d5:08:fe:
                    a1:1e:42:48:f5:f3:07:e9:02:12:30:17:8d:16:fe:
                    44:86:8f:b0:37:ec:b4:4a:aa:d0:a3:cf:84:c7:72:
                    f4:b2:2c:7c:87:0c:c1:f3:fb:89:ab:c4:d2:c6:14:
                    f9:c0:3b:f8:d1:e9:e7:15:8a:3e:f4:1c:5c:06:2a:
                    ec:54:3d:db:a3:5d:21:15:95:b8:be:3c:1c:3d:83:
                    89:3f:20:8a:98:99:a3:25:4c:4f:6e:20:e8:16:48:
                    38:26:3c:22:a6:cb:3a:8d:31:bb:76:49:93:0a:2f:
                    88:f5:44:df:ae:bf:37:a5:12:cf:d0:87:1d:e3:00:
                    18:c5:6b:3e:68:5d:79:65:36:e6:ba:88:a9:c9:0a:
                    64:d4:f7:8d:0d:f5:73:64:c5:e9:44:76:8a:5a:1b:
                    a2:bd:75:be:75:b4:27:c1:1c:dd:c7:49:4f:12:29:
                    a4:1e:21:76:c3:45:de:2b:86:6d:05:15:ae:ff:38:
                    ce:49:db:f1:40:8c:ba:ef:c8:14:b2:03:f1:39:3d:
                    29:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:B2:D7:7A:19:91:C7:1B:47:E4:A0:F0:F2:95:9C:6A:3B:5B:D8:51
            X509v3 Authority Key Identifier:
                keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230332e302f32342d3234203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:41:ff:09:87:15:7a:e2:89:3c:c9:43:65:63:a1:0b:c7:
         bb:a9:00:33:ce:10:83:9b:19:ff:63:32:ae:43:9a:56:00:79:
         f0:fb:3f:81:61:9a:f6:de:a7:3e:23:f1:d8:00:21:b7:8e:84:
         d8:1f:15:a8:86:fa:c3:ac:82:d3:ed:84:a1:24:6c:f0:fc:8b:
         e9:83:07:54:21:0c:bb:51:20:74:1e:83:5d:45:fd:1e:2f:b6:
         d6:c9:37:71:df:63:fc:b3:a7:5f:76:12:6c:d4:50:46:63:63:
         26:0e:39:c4:96:71:3e:34:27:dd:a3:52:8e:91:e2:8d:05:f7:
         cd:c9:31:db:0d:8d:93:f0:f4:cf:d6:8f:dc:6e:77:bd:8b:9c:
         ee:13:0e:32:fb:50:0d:b0:70:9b:7a:a3:dc:1c:91:b3:6b:70:
         08:af:31:1b:89:ae:ca:12:3c:ad:a7:72:4d:59:0d:91:7d:b2:
         8f:0b:da:aa:d5:14:dc:ac:18:c9:02:50:76:f7:2c:ce:86:8b:
         71:03:7b:5d:3b:68:68:01:c4:a4:ae:2c:68:06:51:c0:a3:66:
         b3:2f:a9:28:70:0e:5e:c6:b4:cf:59:78:65:c6:a4:46:3a:0b:
         18:b3:2e:01:37:ce:19:a6:5e:f4:f0:1a:9e:99:a8:2f:4f:45:
         de:08:8e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 15:53:00 2024 by rpki-client on console-fra.rpki-client.org