Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
File:                     3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa (raw, json)
Hash identifier:          5ABTRITD+1V6ycDjhEAtANpp//RJ/7asg0m/ulVMnY8=
Subject key identifier:   5E:FB:CF:20:6C:B7:34:CC:D6:31:D3:71:95:23:5C:C6:E4:B0:75:65
Certificate issuer:       /CN=F1F25C19AB419E370912452242B8B55038581157
Certificate serial:       2BE8137818984DA38287E1D83FE42EE4C733944C
Authority key identifier: F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa
Signing time:             Fri 12 Apr 2024 06:00:00 +0000
ROA not before:           Fri 12 Apr 2024 05:55:00 +0000
ROA not after:            Fri 11 Apr 2025 06:00:00 +0000
asID:                     150483
IP address blocks:        103.54.168.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl
                          rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e8:13:78:18:98:4d:a3:82:87:e1:d8:3f:e4:2e:e4:c7:33:94:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1F25C19AB419E370912452242B8B55038581157
        Validity
            Not Before: Apr 12 05:55:00 2024 GMT
            Not After : Apr 11 06:00:00 2025 GMT
        Subject: CN=5EFBCF206CB734CCD631D37195235CC6E4B07565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e0:d9:7c:ea:c1:5b:71:09:9c:31:83:30:8d:
                    8b:fc:b5:ff:83:9a:07:15:97:aa:07:98:6d:80:45:
                    05:19:2a:32:5b:4b:9e:0a:74:e6:12:fb:99:f3:f6:
                    c0:7f:92:89:39:91:89:cc:3e:97:8c:c6:f8:9d:91:
                    29:a3:04:14:e6:6c:64:4d:fd:a9:90:93:d1:47:71:
                    00:34:8c:b4:5f:2e:d5:78:99:0c:1b:e8:b5:3d:68:
                    11:72:f4:de:68:8e:e5:84:a8:f4:06:79:7a:f4:4a:
                    25:ec:a0:53:bd:2d:7d:9e:e4:fd:04:1c:ab:72:e4:
                    5c:0e:2c:41:65:ff:de:9a:9f:f6:51:49:59:42:0d:
                    3e:2c:14:41:b9:df:0b:42:df:04:76:46:eb:7b:44:
                    83:8d:71:27:24:8b:6d:09:e1:bb:87:8d:8c:94:da:
                    13:49:3a:d2:bc:d5:a0:f1:57:8c:00:9c:d2:19:6b:
                    d1:19:00:da:13:bf:c5:af:a5:3b:a9:4a:69:c7:89:
                    d0:a7:27:5e:ea:1e:d7:ac:9e:dd:ff:93:54:94:5c:
                    87:93:ee:0d:6c:4c:d9:ff:53:48:33:ca:9c:75:60:
                    c1:a9:5e:99:44:10:f3:80:9f:7e:f4:0f:06:d7:15:
                    69:dd:52:18:b2:8b:bf:01:fc:6b:2e:ba:e2:b5:ca:
                    5e:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:FB:CF:20:6C:B7:34:CC:D6:31:D3:71:95:23:5C:C6:E4:B0:75:65
            X509v3 Authority Key Identifier:
                keyid:F1:F2:5C:19:AB:41:9E:37:09:12:45:22:42:B8:B5:50:38:58:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/F1F25C19AB419E370912452242B8B55038581157.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1F25C19AB419E370912452242B8B55038581157.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe330633-a7d1-4d0a-a1cc-b6c3eedfbc17/0/3130332e35342e3136382e302f32332d3233203d3e20313530343833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.168.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5d:67:07:38:e7:2a:fa:30:4f:14:ec:9b:48:1a:2d:fa:88:3a:
         be:6a:a2:a4:c9:0d:05:b6:90:79:36:7f:ca:cf:b0:66:f8:89:
         77:20:88:1f:e5:fe:a4:f6:4a:09:fc:91:26:61:be:11:75:74:
         2f:cf:a1:a0:83:d6:62:7c:cd:7b:96:cf:27:d6:4e:a3:92:5f:
         c1:85:3e:8c:f3:0e:b8:a3:4a:94:c1:cb:19:b3:40:eb:2a:32:
         79:f0:0d:13:11:89:9c:ab:12:68:9f:7e:9d:68:31:b4:c7:76:
         9b:ba:85:4a:ed:49:5f:d3:56:bc:ab:89:1b:bf:20:82:2f:ef:
         fb:8d:f3:bf:be:ed:48:95:14:b3:e3:29:80:d7:fd:54:9c:bd:
         1a:61:18:f0:9a:5f:93:d9:f0:a0:6b:f4:2a:14:fb:cf:b6:3c:
         43:1b:1f:a8:68:b5:af:6f:16:85:63:af:b4:8f:86:b5:e6:83:
         90:9e:22:b7:4d:f2:99:ee:a4:b2:7a:2f:22:f2:30:52:11:93:
         d3:d3:75:2e:eb:4d:e4:f0:59:c4:f6:66:aa:f5:43:15:70:c8:
         1a:4a:d3:42:67:14:7b:24:b0:75:23:f9:60:c4:89:cb:89:cd:
         e2:b2:a6:b4:d2:ed:77:35:ee:84:aa:71:59:7e:3d:35:a6:b8:
         fc:b5:de:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:16 2024 by rpki-client on console-ams.rpki-client.org