Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
File:                     3130332e3135332e322e302f32332d3233203d3e20313430333839.roa (raw, json)
Hash identifier:          aMttCCoWwggxjQO9X8q2SwlkHQXigOcS+3HrsPqHEpA=
Subject key identifier:   48:C9:3E:E9:11:FB:2C:63:DD:59:6C:70:BF:38:27:B2:73:A5:CB:B6
Certificate issuer:       /CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
Certificate serial:       7683EAD492EF11AA67E2FE85B1AB008E26BA2388
Authority key identifier: E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa
Signing time:             Mon 31 Jul 2023 00:04:23 +0000
ROA not before:           Sun 30 Jul 2023 23:59:23 +0000
ROA not after:            Mon 29 Jul 2024 00:04:23 +0000
asID:                     140389
IP address blocks:        103.153.2.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl
                          rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:83:ea:d4:92:ef:11:aa:67:e2:fe:85:b1:ab:00:8e:26:ba:23:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E226B4FA842DCE6C386449F14F8C21CFD80CF977
        Validity
            Not Before: Jul 30 23:59:23 2023 GMT
            Not After : Jul 29 00:04:23 2024 GMT
        Subject: CN=48C93EE911FB2C63DD596C70BF3827B273A5CBB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d0:e8:ac:bd:fa:07:86:59:ed:f1:11:63:d7:
                    0d:6b:99:05:86:f0:cb:6c:50:5f:76:89:74:d2:92:
                    3a:7b:82:b6:6f:ab:0c:2f:cf:b4:48:c9:d7:2b:06:
                    61:23:fb:86:5e:7b:fa:eb:fb:14:a0:a0:a1:93:95:
                    00:7a:15:c5:30:5c:84:4d:ac:a4:be:e8:95:9f:86:
                    52:6b:b5:74:50:66:2b:ff:5f:7a:93:74:8f:ec:8d:
                    5b:f0:fa:7c:c6:fc:db:08:08:4c:61:a9:c4:ca:c5:
                    f9:4f:b2:f1:cb:a2:4e:58:ac:03:9f:90:a9:9b:c8:
                    53:3b:70:57:f6:86:39:24:fb:c9:12:8f:fa:1d:88:
                    a2:c1:df:50:cb:cc:69:a9:1f:63:be:60:38:e3:6f:
                    2e:a2:cd:be:d4:be:c3:27:27:01:55:48:11:65:8f:
                    f9:18:75:0a:30:0f:9d:67:bd:b4:6c:8d:14:88:5a:
                    22:be:c3:60:7c:e0:c5:d0:06:1c:c4:c7:6e:ae:a2:
                    76:57:6c:ec:d5:5e:8f:a2:40:7f:3e:30:2a:c7:28:
                    35:82:f0:6d:8b:d7:e8:59:39:72:8a:c2:64:c1:00:
                    be:f8:18:3c:89:eb:e2:c9:af:3a:2f:00:1b:3a:22:
                    47:0f:59:b8:41:28:f2:be:19:91:8a:54:26:54:ce:
                    2b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C9:3E:E9:11:FB:2C:63:DD:59:6C:70:BF:38:27:B2:73:A5:CB:B6
            X509v3 Authority Key Identifier:
                keyid:E2:26:B4:FA:84:2D:CE:6C:38:64:49:F1:4F:8C:21:CF:D8:0C:F9:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/E226B4FA842DCE6C386449F14F8C21CFD80CF977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E226B4FA842DCE6C386449F14F8C21CFD80CF977.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ebc1ab71-91d0-4f0b-bb29-cbb7d35e74ba/0/3130332e3135332e322e302f32332d3233203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:ad:60:52:f2:d9:3e:43:6d:58:be:57:f7:7f:98:ae:d2:61:
         29:7e:b9:26:a7:33:95:96:4b:03:c1:bb:cd:86:0a:e9:6e:06:
         57:72:08:5a:d4:1a:24:a2:65:02:66:84:70:fe:65:c9:a4:85:
         78:9e:73:7d:b2:b3:c4:9a:83:ca:47:46:bc:f8:24:3c:94:8a:
         62:0f:ad:59:ed:15:32:fe:ca:16:1b:86:55:a3:d5:5a:ba:14:
         2b:6c:1f:74:1f:e2:ec:e2:48:73:fc:80:80:43:70:77:c6:cb:
         91:5d:53:05:fe:d2:4d:8f:00:89:a0:b6:c8:a6:db:5e:9d:e7:
         5f:d1:86:a2:c6:75:3f:08:58:9a:d1:df:0a:9f:ca:1b:09:2b:
         38:39:b7:7a:d3:a1:c0:02:e8:c8:12:b7:dd:f9:4f:a8:d6:45:
         67:c7:cf:3f:c2:54:7a:b0:6c:98:04:bf:7d:8a:6f:17:d9:88:
         e0:e7:20:30:97:63:c8:a1:40:5b:e2:27:89:84:56:dd:d1:ed:
         51:89:20:44:73:d1:7c:b4:7d:0f:09:54:ea:b7:f8:63:42:be:
         7b:77:57:b0:a5:2a:57:82:68:ec:35:a3:10:dc:c8:c1:39:1d:
         45:bd:88:12:97:62:44:3b:58:e6:16:f8:08:3d:32:80:de:24:
         9b:19:19:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 14:42:32 2024 by rpki-client on console-ams.rpki-client.org