Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa
File:                     3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa (raw, json)
Hash identifier:          7lZc0z1FHBK2SFk1ocREUcUFnhvyKYdJm1mmHq488H8=
Subject key identifier:   92:CC:D3:74:14:A7:9D:50:C2:6A:9A:58:D2:FB:24:F3:23:DC:87:83
Certificate issuer:       /CN=6E77582BC25A225D744F9E7A58CA279875307F2F
Certificate serial:       79F4DF5029CF44E529DF86E300A9F1BB9333F608
Authority key identifier: 6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa
Signing time:             Wed 07 Aug 2024 03:56:09 +0000
ROA not before:           Wed 07 Aug 2024 03:51:09 +0000
ROA not after:            Wed 06 Aug 2025 03:56:09 +0000
asID:                     139368
IP address blocks:        103.142.88.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl
                          rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f4:df:50:29:cf:44:e5:29:df:86:e3:00:a9:f1:bb:93:33:f6:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6E77582BC25A225D744F9E7A58CA279875307F2F
        Validity
            Not Before: Aug  7 03:51:09 2024 GMT
            Not After : Aug  6 03:56:09 2025 GMT
        Subject: CN=92CCD37414A79D50C26A9A58D2FB24F323DC8783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:bb:2d:f8:47:1a:f7:62:ba:7e:83:92:88:3c:
                    b7:ac:bb:4f:b9:5e:05:6a:ed:db:0f:77:7d:82:ed:
                    4c:aa:fb:71:98:37:13:14:b2:fc:7b:da:23:92:15:
                    d9:41:f5:0a:de:80:17:01:82:ce:4c:23:b5:85:4e:
                    21:1b:2d:87:2d:ac:51:7f:0e:c2:60:f1:5a:ab:25:
                    21:15:a1:92:f1:38:35:12:ee:96:8c:8f:61:94:73:
                    92:26:c1:b1:70:d6:32:66:63:49:62:b7:b1:1e:93:
                    96:7c:ce:2b:ec:99:1c:ce:61:79:ac:f4:c3:13:af:
                    a0:1f:4e:63:40:2a:2b:2a:b5:be:2b:5f:d8:12:5c:
                    e1:f9:0c:d1:a4:12:e0:09:c0:5d:f9:b0:e7:39:e2:
                    29:83:85:28:4c:7d:8f:6d:08:e3:88:41:ab:b6:d2:
                    06:ae:6c:b3:6c:14:9b:09:04:41:f2:49:c0:01:7d:
                    3c:27:92:ce:6c:91:78:39:b6:f0:d3:bf:ae:24:52:
                    ef:6a:b7:96:45:7e:f2:00:22:d3:fd:75:3d:b3:67:
                    7c:ee:bc:1a:84:a2:40:68:80:da:e7:de:2e:43:31:
                    fe:b6:d2:c3:ee:d6:0b:32:e0:b5:4b:85:5b:c5:ab:
                    05:0b:bd:05:7d:88:54:f7:e7:33:11:61:92:9f:98:
                    91:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:D3:74:14:A7:9D:50:C2:6A:9A:58:D2:FB:24:F3:23:DC:87:83
            X509v3 Authority Key Identifier:
                keyid:6E:77:58:2B:C2:5A:22:5D:74:4F:9E:7A:58:CA:27:98:75:30:7F:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/6E77582BC25A225D744F9E7A58CA279875307F2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6E77582BC25A225D744F9E7A58CA279875307F2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ed49d49b-daea-48c0-8d77-13738b745772/0/3130332e3134322e38382e302f32332d3233203d3e20313339333638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.88.0/23

    Signature Algorithm: sha256WithRSAEncryption
         43:24:82:71:62:8f:dc:e1:d4:a9:93:7b:6a:71:5c:0b:5c:fa:
         db:a6:0b:6e:cf:4c:37:f6:e9:9f:22:14:2a:b5:68:59:1b:52:
         64:61:c6:0b:d6:bb:36:fc:1b:12:c2:f7:80:e0:3b:b4:83:d3:
         13:f9:75:da:99:90:56:e0:43:f6:3e:3a:15:a7:25:2f:aa:b5:
         3a:64:34:e8:74:0f:6a:00:0c:7b:8d:c1:4c:45:76:bc:69:15:
         ff:46:42:22:6c:05:98:55:7e:6a:7b:a2:a3:15:ac:1c:cd:96:
         49:e2:66:b0:03:f5:80:1f:be:b8:f1:54:9c:39:a1:ea:93:ba:
         27:2c:75:5e:b2:f4:55:da:24:e4:9e:5b:c3:70:15:85:37:16:
         be:3b:60:fd:83:6f:96:f3:e1:da:65:cf:3e:63:aa:56:c9:6c:
         5d:6e:f4:85:61:86:85:b7:9e:9a:23:9b:9f:f9:95:76:6a:0e:
         52:22:9e:b0:46:b7:64:6f:51:6c:af:af:3b:c0:6c:5f:d5:f6:
         18:11:76:e2:4f:55:57:c1:86:59:62:14:ae:71:d2:d3:f4:34:
         76:79:7e:76:27:e1:a6:46:21:44:b2:6a:e0:41:9e:39:81:da:
         c9:c9:79:4a:6b:ec:da:04:35:16:b7:a3:73:c4:09:47:1b:81:
         02:12:89:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:21:00 2024 by rpki-client on console-fra.rpki-client.org