Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa
File:                     3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa (raw, json)
Hash identifier:          UDPBujreGOF3Y3EYFxIsBzZXAl/SKoj1npt193jOSmc=
Subject key identifier:   22:F8:AC:99:EA:BE:F8:70:56:44:1E:83:88:A4:DB:97:EF:C6:65:44
Certificate issuer:       /CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
Certificate serial:       0EF651D2DEA6C9ADAB52199A6538FF192EDF854E
Authority key identifier: 82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa
Signing time:             Fri 13 Oct 2023 02:00:00 +0000
ROA not before:           Fri 13 Oct 2023 01:55:00 +0000
ROA not after:            Fri 11 Oct 2024 02:00:00 +0000
asID:                     136835
IP address blocks:        103.141.154.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl
                          rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:f6:51:d2:de:a6:c9:ad:ab:52:19:9a:65:38:ff:19:2e:df:85:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8284F61C774622FEC64759E6D77C9DEEB4EC69CA
        Validity
            Not Before: Oct 13 01:55:00 2023 GMT
            Not After : Oct 11 02:00:00 2024 GMT
        Subject: CN=22F8AC99EABEF87056441E8388A4DB97EFC66544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ca:a1:ee:c2:42:56:dd:81:d8:4c:ac:d3:43:
                    cb:48:9b:b2:a2:3e:e9:f6:80:ca:02:00:54:63:3e:
                    ea:ea:55:1c:ad:c7:29:1a:c4:6a:55:a6:03:7e:4e:
                    2b:f6:a9:76:64:a9:f2:7c:de:3e:8e:f5:cf:db:9c:
                    53:f7:27:97:60:52:17:ab:56:3d:29:73:73:b9:7a:
                    01:a3:45:b7:fc:af:66:e6:55:8f:0a:2e:76:77:3f:
                    2c:f9:25:78:20:11:90:37:97:8a:17:5a:3f:ac:c1:
                    e8:e6:b7:3f:80:cb:c4:1e:8b:0c:2c:49:40:7b:4c:
                    96:9b:d3:81:18:b8:82:6c:d1:eb:9a:8a:a2:8a:4b:
                    85:45:42:72:8b:e3:72:5c:10:bf:9d:0e:3d:7a:a6:
                    ec:37:ff:07:c3:dd:5d:bf:10:c9:16:a0:57:92:ab:
                    06:c4:e2:71:9d:6a:b5:e0:75:d1:4c:50:0a:77:e3:
                    56:b8:6f:78:07:8a:f6:47:38:1a:ce:ac:2c:de:7c:
                    ba:63:6f:b2:6b:7e:42:8a:24:fc:32:c5:22:cf:3b:
                    97:40:2c:3e:ec:5b:67:30:d9:22:a8:d6:0e:74:d1:
                    b4:38:95:b1:df:f2:16:d3:15:d5:87:19:db:2e:59:
                    53:4e:04:3e:b5:95:37:15:c8:9d:38:87:c9:b6:4e:
                    d6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:F8:AC:99:EA:BE:F8:70:56:44:1E:83:88:A4:DB:97:EF:C6:65:44
            X509v3 Authority Key Identifier:
                keyid:82:84:F6:1C:77:46:22:FE:C6:47:59:E6:D7:7C:9D:EE:B4:EC:69:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8284F61C774622FEC64759E6D77C9DEEB4EC69CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea814507-7174-4f1e-8563-ef50370913c9/0/3130332e3134312e3135342e302f32342d3234203d3e20313336383335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:f9:da:15:f7:6e:24:ef:4d:e9:6b:f6:aa:8a:6a:86:a4:
         99:23:90:43:6b:2d:0d:6f:c4:d9:40:38:aa:8d:90:d3:35:58:
         5d:96:a0:64:c6:c6:22:03:87:55:c4:cc:05:91:b6:64:b2:17:
         af:26:eb:b2:34:23:0c:a5:09:e4:eb:85:4c:bf:9f:97:74:b2:
         94:d9:3d:a8:9f:ac:b9:c0:35:e0:4a:65:fc:1e:62:ee:5d:5e:
         e4:65:ba:25:b6:98:3d:f0:15:a4:fd:07:9e:ed:7c:4a:b1:96:
         23:22:fd:4b:a8:20:ac:e5:a6:40:a9:af:21:c7:23:18:f9:f0:
         77:aa:a2:e7:df:e9:89:7b:d0:c3:d9:85:3a:13:ce:47:8d:25:
         d5:ea:67:cf:2e:a2:b3:8c:54:56:cf:e2:03:9b:e2:72:48:d6:
         cc:6e:2e:7a:b6:ba:8c:18:3e:ca:c2:76:c3:e5:1b:ee:78:6e:
         36:87:b5:7f:2b:48:a9:81:15:6d:d2:2e:7f:50:50:29:ef:60:
         bd:46:09:6d:86:c8:ba:17:ed:e2:48:11:83:3a:de:25:e5:0e:
         61:10:9e:40:36:e0:9e:da:04:22:86:72:ab:e1:bf:51:fe:40:
         db:02:02:80:0c:75:51:48:bb:2e:cc:7c:cf:f2:1e:ba:18:8b:
         8d:04:cf:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 10:33:23 2024 by rpki-client on console-ams.rpki-client.org