Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa
File:                     3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa (raw, json)
Hash identifier:          EgXFWCsi2DSxac+68rKRt/Y36Erzou88jNkm+BZlILw=
Subject key identifier:   E6:B3:A5:28:FC:08:CB:F5:02:D2:87:66:E8:BF:80:21:9C:C8:D8:22
Certificate issuer:       /CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
Certificate serial:       53B4BDCE88FFC5A98ADF3BF1CBADDFFDA1B27583
Authority key identifier: 28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa
Signing time:             Tue 09 Jul 2024 05:02:40 +0000
ROA not before:           Tue 09 Jul 2024 04:57:40 +0000
ROA not after:            Tue 08 Jul 2025 05:02:40 +0000
asID:                     149405
IP address blocks:        103.183.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl
                          rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:b4:bd:ce:88:ff:c5:a9:8a:df:3b:f1:cb:ad:df:fd:a1:b2:75:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C
        Validity
            Not Before: Jul  9 04:57:40 2024 GMT
            Not After : Jul  8 05:02:40 2025 GMT
        Subject: CN=E6B3A528FC08CBF502D28766E8BF80219CC8D822
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4a:39:9a:09:c4:f0:3c:e1:2b:c6:86:e0:52:
                    77:d6:06:31:15:b5:ba:fa:98:60:38:af:2b:fa:f4:
                    26:0e:3b:0f:bc:85:19:7c:4d:76:1f:5b:ca:88:ca:
                    50:c6:71:3d:00:fa:6d:54:8f:8a:1c:d4:0a:48:73:
                    81:b9:d9:66:38:b0:22:77:71:7c:97:da:03:d7:c7:
                    03:e2:54:30:01:0a:74:28:39:70:79:2b:c5:01:d7:
                    9b:e9:3f:09:8a:ef:09:49:95:09:81:9a:7b:5a:a8:
                    cf:67:94:46:b1:da:6d:7a:02:83:95:21:42:90:89:
                    af:fa:f9:95:d2:69:13:5f:90:bf:26:b3:14:b3:28:
                    7e:63:92:7a:d6:36:3c:98:65:64:52:7c:96:ce:6b:
                    f6:64:fa:3a:d1:80:8c:f1:4e:82:ca:76:88:71:d9:
                    74:21:7c:8d:25:c2:f1:99:ec:af:34:7f:d0:99:4d:
                    97:a1:e4:95:ef:c8:95:aa:bf:b9:eb:82:94:b0:cf:
                    62:51:be:10:8f:58:da:69:a0:ad:3d:46:63:3a:e4:
                    9e:4c:25:fe:da:ae:4a:e7:17:7c:80:50:56:20:77:
                    dd:76:b0:bc:e1:aa:09:28:30:42:8b:69:17:65:7d:
                    a4:3c:e0:79:29:c0:c7:c2:98:82:0a:cb:c3:e3:07:
                    8e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B3:A5:28:FC:08:CB:F5:02:D2:87:66:E8:BF:80:21:9C:C8:D8:22
            X509v3 Authority Key Identifier:
                keyid:28:63:C0:F5:0E:0E:E5:0D:A8:CD:FB:2E:F1:2D:4B:58:11:B1:66:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2863C0F50E0EE50DA8CDFB2EF12D4B5811B1666C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f54ddc65-61c1-49e1-a895-3c03f587a27b/0/3130332e3138332e35362e302f32332d3234203d3e20313439343035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         33:3b:5f:9e:03:cb:57:0a:71:5a:7d:8e:ef:23:fe:7d:31:e7:
         34:81:0b:d0:92:77:6b:d6:9d:eb:f8:04:d3:cb:9f:5f:fb:4d:
         26:b8:ea:e7:2d:c5:52:f8:70:3d:58:dc:e2:40:f7:02:c9:0b:
         3d:cf:f9:f2:5f:2e:3c:68:c8:6d:83:30:65:a7:3e:3e:95:79:
         38:8f:50:17:0a:e1:5a:7c:63:3f:94:33:c9:65:36:5a:f2:65:
         b9:72:59:43:7f:ee:16:47:b3:f3:ef:6e:17:61:02:f1:3d:94:
         65:12:6c:32:64:b1:a7:99:f9:3c:bd:12:13:a1:65:ba:75:6d:
         d8:97:ad:ac:3d:af:7e:9c:b2:31:22:b0:70:bb:81:40:3a:d3:
         54:20:ad:af:75:19:10:b1:45:ea:b8:1d:4a:e3:b0:47:3c:d0:
         cd:bd:9a:e4:d3:a5:e9:57:87:20:1d:25:64:03:e5:3f:db:fe:
         9a:ab:8c:32:b2:7d:68:6c:77:28:f3:94:30:d2:f9:2a:97:b7:
         a1:7a:4e:4b:82:da:c8:5f:2c:02:eb:46:74:d3:32:75:97:60:
         6a:bf:28:02:a3:d7:c9:32:bd:72:4c:14:79:9b:c5:2d:4b:11:
         f3:89:03:8b:c9:35:1e:5f:9e:d1:f6:35:df:06:61:20:8f:f3:
         e9:c2:d3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org