Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa
File:                     3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa (raw, json)
Hash identifier:          mc1teRjwLevfOddikJdErIIbFp31lEDrPdLVSPEiXxY=
Subject key identifier:   6E:C3:20:A5:74:F4:7E:00:D4:B7:F0:E4:91:B1:47:C6:B7:89:F7:C5
Certificate issuer:       /CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
Certificate serial:       36B2675DB0FA16F909D120E74F68073327954151
Authority key identifier: D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa
Signing time:             Wed 17 Jan 2024 20:00:02 +0000
ROA not before:           Wed 17 Jan 2024 19:55:02 +0000
ROA not after:            Wed 15 Jan 2025 20:00:02 +0000
asID:                     149409
IP address blocks:        103.183.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl
                          rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:23:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:b2:67:5d:b0:fa:16:f9:09:d1:20:e7:4f:68:07:33:27:95:41:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1553F19BBD3B70719E720005FDB3145CC910A1F
        Validity
            Not Before: Jan 17 19:55:02 2024 GMT
            Not After : Jan 15 20:00:02 2025 GMT
        Subject: CN=6EC320A574F47E00D4B7F0E491B147C6B789F7C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fd:cb:0c:fb:4a:77:78:c5:55:5e:93:87:d6:c2:
                    81:ec:c9:18:b8:d9:cc:da:9e:1b:0f:61:a4:f7:1c:
                    a7:c7:e0:6e:ce:be:53:e7:17:b4:2c:3d:a9:29:e8:
                    d1:20:fa:fa:d3:0b:20:10:ad:b7:8e:d5:da:2f:ba:
                    9a:c5:f5:a9:81:2d:b0:54:fd:3e:3a:b9:c8:69:9f:
                    80:a5:aa:e7:53:67:3c:58:16:1c:b1:ae:57:9c:4d:
                    44:06:e3:98:27:a7:89:1b:b0:f8:15:b2:d6:10:81:
                    e2:ba:43:e0:df:66:33:ba:b7:c3:c7:5b:a1:25:58:
                    29:1e:d4:11:51:60:58:9d:94:ab:9c:88:86:86:5b:
                    d7:cf:2a:b2:e3:3a:27:9b:c6:82:dd:30:10:94:67:
                    63:6d:7f:57:14:7b:79:51:ba:e5:a2:1a:0d:0c:45:
                    34:8a:4d:5a:69:12:22:7d:d1:2b:d6:32:bb:a9:7a:
                    f7:46:0e:80:09:d5:fe:24:be:bf:0a:89:d3:9a:74:
                    14:e3:c2:88:d0:04:20:64:20:76:d3:5a:d3:48:1f:
                    ef:09:ec:b3:c0:f6:72:27:b4:6b:97:6f:b3:a3:81:
                    37:0a:ad:81:57:98:fd:b7:f8:0d:25:0f:14:d5:4a:
                    76:5c:26:e6:4b:2a:27:37:82:83:87:b8:8b:d1:82:
                    3e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:C3:20:A5:74:F4:7E:00:D4:B7:F0:E4:91:B1:47:C6:B7:89:F7:C5
            X509v3 Authority Key Identifier:
                keyid:D1:55:3F:19:BB:D3:B7:07:19:E7:20:00:5F:DB:31:45:CC:91:0A:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/D1553F19BBD3B70719E720005FDB3145CC910A1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1553F19BBD3B70719E720005FDB3145CC910A1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e99b604f-1578-4a0b-8f7a-58d9f13c9769/0/3130332e3138332e35382e302f32332d3233203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:66:17:a2:9a:40:0b:53:90:8a:f1:ae:84:10:cc:34:4f:f4:
         db:84:8b:c0:64:0c:a0:74:0e:24:24:1b:de:3c:0a:32:7b:07:
         29:a9:6a:6b:97:4b:fc:d4:37:00:3f:fa:95:b1:fb:59:29:c2:
         a7:3f:8b:59:a2:7d:6d:b3:1e:73:99:a0:0e:fb:b5:8c:eb:31:
         e7:f4:11:e2:79:df:4b:cd:8c:f7:e4:75:a4:94:49:be:08:68:
         69:8d:3c:87:e0:69:0b:0b:cd:c9:6f:8f:ac:06:69:b4:be:57:
         f9:86:ec:d9:d0:f2:12:2f:6a:ae:7a:c3:40:ea:6b:9d:9e:98:
         89:e6:6b:10:c4:d2:32:4e:3a:93:59:35:a9:78:e1:79:71:ef:
         79:1a:d2:b7:ad:5c:02:35:6f:42:a3:d7:8d:63:ab:21:11:8b:
         78:24:f6:af:7d:d8:cc:4e:ae:46:76:be:c1:df:64:06:44:75:
         e1:e1:8b:db:2b:df:4e:70:0d:de:b9:30:b9:61:71:96:78:a9:
         84:f3:3f:61:3d:1f:00:6b:11:f8:43:5f:85:cc:82:ea:d6:4b:
         e8:59:d6:74:d2:62:88:db:cc:7d:7a:ec:d3:be:c5:98:53:d5:
         56:06:af:0f:b3:cb:80:02:90:01:26:48:f5:cf:bf:76:21:e3:
         62:3f:0b:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:55 2024 by rpki-client on console-ams.rpki-client.org