Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
File:                     3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Jog10QAYslnPjVZScpp7e+Stj37Vvp9/CNzc04LtKo0=
Subject key identifier:   26:67:ED:74:85:0A:B6:AE:43:9D:69:6E:46:9F:B2:19:28:12:DE:74
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       1341C992FDD82780F95160F6BF1E8217137AF21B
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 11 Jul 2023 11:00:00 +0000
ROA not before:           Tue 11 Jul 2023 10:55:00 +0000
ROA not after:            Tue 09 Jul 2024 11:00:00 +0000
asID:                     9341
IP address blocks:        103.215.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 07:56:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:41:c9:92:fd:d8:27:80:f9:51:60:f6:bf:1e:82:17:13:7a:f2:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Jul 11 10:55:00 2023 GMT
            Not After : Jul  9 11:00:00 2024 GMT
        Subject: CN=2667ED74850AB6AE439D696E469FB2192812DE74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:74:24:ee:2f:0b:9e:c6:2a:50:5d:99:e7:4e:
                    50:c8:08:13:7c:e5:71:59:c3:66:1d:ee:11:0f:4b:
                    4a:a6:de:14:0d:a2:52:42:90:2e:91:c7:27:a4:f4:
                    f3:2f:ab:5e:16:3b:21:7c:d9:66:04:e9:3e:41:ef:
                    b9:85:cf:d8:2b:7e:89:0c:df:70:f7:c4:54:61:cd:
                    29:11:6c:dd:c3:56:76:49:5c:92:12:00:6f:9c:04:
                    8a:a0:e9:95:f5:9e:4d:b7:ba:36:70:e1:ee:55:6a:
                    54:36:e1:ff:cb:5d:5f:3a:59:98:74:19:18:5a:d3:
                    29:16:5d:94:6c:7d:c8:34:f4:c1:45:3b:da:93:56:
                    9c:4a:cf:54:1d:d7:85:64:43:9d:5f:31:43:6d:3b:
                    51:93:b8:e4:32:de:01:07:24:2c:03:d7:bb:df:64:
                    2b:58:29:9d:6d:72:b9:d9:08:77:29:c6:7e:f7:c3:
                    30:85:e1:ed:5f:8a:f2:3c:6c:81:aa:27:10:0c:74:
                    96:88:f8:91:18:ea:76:87:a8:cb:34:f4:9b:8f:0e:
                    a4:be:40:fe:cd:8f:ec:9e:34:50:8f:52:d3:f1:08:
                    00:bc:8b:5a:e6:50:f6:b1:32:1f:39:73:da:48:c3:
                    ed:fd:0a:e6:2d:e9:72:38:01:5a:2a:bd:50:44:77:
                    dc:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:67:ED:74:85:0A:B6:AE:43:9D:69:6E:46:9F:B2:19:28:12:DE:74
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         c8:8c:cf:9e:0d:f9:2f:23:1f:e5:d1:f5:1f:a5:80:30:61:1c:
         db:a2:c3:bd:00:38:3d:db:d5:49:c5:63:76:32:52:cb:c7:0b:
         9f:44:19:ca:05:a0:35:8f:25:f3:99:bf:7b:54:30:e4:8a:9d:
         10:36:a8:34:81:34:00:e2:ca:e0:a1:87:8d:1f:53:19:2a:40:
         7a:d8:ac:59:66:0f:e8:2b:38:e0:ac:16:b3:8c:6d:08:ab:33:
         03:28:62:97:7d:e7:75:3a:b1:f4:61:19:fe:9a:53:f1:06:5c:
         e0:0b:84:d1:a2:bf:3a:72:26:a1:85:f9:18:d0:64:c8:a2:e9:
         05:f2:63:64:ba:b4:6c:7d:60:24:75:79:1f:4f:8d:41:17:9a:
         96:08:b2:8f:0c:e9:3e:7a:8f:15:22:d0:3c:8d:6a:0c:42:2c:
         92:6f:43:3f:7a:7d:dc:3a:c9:83:87:cd:28:53:43:be:b9:83:
         28:bd:fe:fb:2d:47:ad:52:fa:84:c8:aa:fd:bd:4b:8b:a0:b9:
         21:cf:1d:8d:86:c0:0e:f2:9d:8d:cc:b1:bf:5d:c3:d1:45:be:
         eb:40:bf:9e:38:00:8a:6a:9c:d9:69:18:8e:0e:0a:70:ca:33:
         2f:79:aa:23:32:cf:cc:ee:1c:07:89:2c:40:8c:c2:8c:c8:16:
         72:b9:74:d4
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUE0HJkv3YJ4D5UWD2vx6CFxN68hswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz
QjI3MUUzRTAeFw0yMzA3MTExMDU1MDBaFw0yNDA3MDkxMTAwMDBaMDMxMTAvBgNV
BAMTKDI2NjdFRDc0ODUwQUI2QUU0MzlENjk2RTQ2OUZCMjE5MjgxMkRFNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+dCTuLwuexipQXZnnTlDICBN8
5XFZw2Yd7hEPS0qm3hQNolJCkC6Rxyek9PMvq14WOyF82WYE6T5B77mFz9grfokM
33D3xFRhzSkRbN3DVnZJXJISAG+cBIqg6ZX1nk23ujZw4e5ValQ24f/LXV86WZh0
GRha0ykWXZRsfcg09MFFO9qTVpxKz1Qd14VkQ51fMUNtO1GTuOQy3gEHJCwD17vf
ZCtYKZ1tcrnZCHcpxn73wzCF4e1fivI8bIGqJxAMdJaI+JEY6naHqMs09JuPDqS+
QP7Nj+yeNFCPUtPxCAC8i1rmUPaxMh85c9pIw+39CuYt6XI4AVoqvVBEd9wvAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUJmftdIUKtq5DnWluRp+yGSgS3nQwHwYDVR0j
BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3
RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3
MUUzRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h
Yjk0LTVjNWU3NDg4MjU0Ny8wLzMxMzAzMzJlMzIzMTM1MmUzMjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn1xgwDQYJKoZIhvcN
AQELBQADggEBAMiMz54N+S8jH+XR9R+lgDBhHNuiw70AOD3b1UnFY3YyUsvHC59E
GcoFoDWPJfOZv3tUMOSKnRA2qDSBNADiyuChh40fUxkqQHrYrFlmD+grOOCsFrOM
bQirMwMoYpd953U6sfRhGf6aU/EGXOALhNGivzpyJqGF+RjQZMii6QXyY2S6tGx9
YCR1eR9PjUEXmpYIso8M6T56jxUi0DyNagxCLJJvQz96fdw6yYOHzShTQ765gyi9
/vstR61S+oTIqv29S4uguSHPHY2GwA7ynY3Msb9dw9FFvutAv544AIpqnNlpGI4O
CnDKMy95qiMyz8zuHAeJLECMwozIFnK5dNQ=
-----END CERTIFICATE-----
Generated at Tue May 7 03:52:27 2024 by rpki-client on console-fra.rpki-client.org