Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
File:                     3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa (raw, json)
Hash identifier:          i0triinOFo57r21W0KMGJe02D4RojFS13zmyllLuDS4=
Subject key identifier:   52:E1:4A:57:B3:C6:20:3C:68:95:19:02:5F:AA:5C:76:67:B6:CA:8F
Certificate issuer:       /CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
Certificate serial:       51D30039FC89D02345C1515092F5E5D1F2660EC3
Authority key identifier: 02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa
Signing time:             Sun 06 Aug 2023 05:00:01 +0000
ROA not before:           Sun 06 Aug 2023 04:55:01 +0000
ROA not after:            Sun 04 Aug 2024 05:00:01 +0000
asID:                     138881
IP address blocks:        103.140.188.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl
                          rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 15:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:d3:00:39:fc:89:d0:23:45:c1:51:50:92:f5:e5:d1:f2:66:0e:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=02AC8DC3B003059A7040EDCFC881D9C93B064C18
        Validity
            Not Before: Aug  6 04:55:01 2023 GMT
            Not After : Aug  4 05:00:01 2024 GMT
        Subject: CN=52E14A57B3C6203C689519025FAA5C7667B6CA8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:14:47:80:af:f0:dc:09:b3:80:6f:23:2c:37:
                    ba:b9:98:5f:c6:79:c9:8c:72:5c:8f:2f:4c:a0:a0:
                    03:c9:af:4f:a3:e2:4b:a4:d8:eb:a6:8e:fc:e1:39:
                    b6:4c:53:34:39:f0:67:e7:31:9e:7f:52:d6:68:21:
                    9e:96:94:20:55:b8:ff:5a:11:bd:8b:3c:c4:d1:62:
                    3c:5c:ce:6a:da:4c:23:c4:65:9e:29:3b:9a:85:27:
                    ea:12:2d:00:78:35:69:e3:6f:61:7e:eb:15:57:56:
                    78:1e:14:50:f6:e1:f4:f3:6b:24:ab:b3:b1:0b:3d:
                    dd:79:d1:2f:ce:21:fa:c6:98:50:73:60:b1:75:d0:
                    d1:e5:3b:0b:ee:a7:d5:64:6f:05:40:70:e0:fd:0f:
                    73:1a:27:7a:b1:33:38:65:9f:a8:67:f5:6d:78:a7:
                    e0:66:34:13:b8:f0:a2:1e:b7:87:66:98:3a:0a:19:
                    62:1c:43:97:a4:d2:64:7c:00:2d:33:c4:ca:45:e1:
                    5c:90:60:cb:ce:dd:d3:01:2c:dd:0d:a9:38:45:49:
                    bb:18:71:fc:d8:58:c7:76:1c:b8:61:12:31:91:57:
                    ab:dd:71:d9:a2:80:27:50:6a:85:12:16:9f:97:6f:
                    3f:7e:e9:c3:3e:3a:d2:f7:f2:07:af:fa:44:60:3d:
                    3b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:E1:4A:57:B3:C6:20:3C:68:95:19:02:5F:AA:5C:76:67:B6:CA:8F
            X509v3 Authority Key Identifier:
                keyid:02:AC:8D:C3:B0:03:05:9A:70:40:ED:CF:C8:81:D9:C9:3B:06:4C:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/02AC8DC3B003059A7040EDCFC881D9C93B064C18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/02AC8DC3B003059A7040EDCFC881D9C93B064C18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02cb0b3a-692d-442e-9308-903c02d5718f/0/3130332e3134302e3138382e302f32342d3234203d3e20313338383831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:99:f3:cc:87:43:db:25:a1:0b:f3:54:df:c4:ca:24:ee:df:
         cf:89:cf:dd:76:23:29:3d:87:53:48:b9:29:10:60:1d:28:1f:
         b3:fa:01:f5:79:ce:f9:fe:60:08:2f:3d:3b:1a:ee:af:bb:bf:
         6e:b9:eb:21:06:98:62:fa:6a:de:be:19:a4:4f:2e:c5:4e:f7:
         9c:bb:a2:fe:83:7d:b3:12:38:d9:8d:3b:80:dc:24:37:a4:85:
         b5:96:1e:e9:2a:61:9c:8a:c6:60:59:54:0d:66:a2:7f:9a:73:
         8b:78:d8:45:10:26:61:e1:ad:f5:9f:9b:6c:4e:32:86:f3:74:
         f3:05:c1:a5:e4:d2:a8:d3:2c:4d:a1:5e:ed:8b:3c:7f:f8:4d:
         8b:b9:9f:87:46:f1:26:27:dd:62:8a:4b:32:40:2e:53:99:93:
         da:38:b1:22:6f:db:16:a5:ff:3a:ba:c7:54:27:77:21:31:21:
         22:66:65:f2:09:fb:2b:48:b3:7a:6d:c3:ef:6b:65:ad:d0:14:
         63:48:62:9d:c1:56:3e:5c:93:02:d5:4e:ab:1a:50:ef:9a:67:
         37:d5:04:68:62:53:9b:8f:48:d4:54:69:52:3d:d9:c3:69:40:
         14:89:4f:97:72:e4:a9:d8:cc:c0:76:7c:34:c3:7c:b0:13:df:
         b6:04:d3:cb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUdMAOfyJ0CNFwVFQkvXl0fJmDsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5Qzkz
QjA2NEMxODAeFw0yMzA4MDYwNDU1MDFaFw0yNDA4MDQwNTAwMDFaMDMxMTAvBgNV
BAMTKDUyRTE0QTU3QjNDNjIwM0M2ODk1MTkwMjVGQUE1Qzc2NjdCNkNBOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeFEeAr/DcCbOAbyMsN7q5mF/G
ecmMclyPL0ygoAPJr0+j4kuk2OumjvzhObZMUzQ58GfnMZ5/UtZoIZ6WlCBVuP9a
Eb2LPMTRYjxczmraTCPEZZ4pO5qFJ+oSLQB4NWnjb2F+6xVXVngeFFD24fTzaySr
s7ELPd150S/OIfrGmFBzYLF10NHlOwvup9VkbwVAcOD9D3MaJ3qxMzhln6hn9W14
p+BmNBO48KIet4dmmDoKGWIcQ5ek0mR8AC0zxMpF4VyQYMvO3dMBLN0NqThFSbsY
cfzYWMd2HLhhEjGRV6vdcdmigCdQaoUSFp+Xbz9+6cM+OtL38gev+kRgPTttAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUUuFKV7PGIDxolRkCX6pcdme2yo8wHwYDVR0j
BBgwFoAUAqyNw7ADBZpwQO3PyIHZyTsGTBgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MmNiMGIzYS02OTJkLTQ0MmUtOTMwOC05MDNjMDJkNTcxOGYvMC8wMkFDOERDM0Iw
MDMwNTlBNzA0MEVEQ0ZDODgxRDlDOTNCMDY0QzE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDJBQzhEQzNCMDAzMDU5QTcwNDBFRENGQzg4MUQ5QzkzQjA2
NEMxOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyY2IwYjNhLTY5MmQtNDQyZS05
MzA4LTkwM2MwMmQ1NzE4Zi8wLzMxMzAzMzJlMzEzNDMwMmUzMTM4MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM4MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjLwwDQYJ
KoZIhvcNAQELBQADggEBAKeZ88yHQ9sloQvzVN/EyiTu38+Jz912Iyk9h1NIuSkQ
YB0oH7P6AfV5zvn+YAgvPTsa7q+7v2656yEGmGL6at6+GaRPLsVO95y7ov6DfbMS
ONmNO4DcJDekhbWWHukqYZyKxmBZVA1mon+ac4t42EUQJmHhrfWfm2xOMobzdPMF
waXk0qjTLE2hXu2LPH/4TYu5n4dG8SYn3WKKSzJALlOZk9o4sSJv2xal/zq6x1Qn
dyExISJmZfIJ+ytIs3ptw+9rZa3QFGNIYp3BVj5ckwLVTqsaUO+aZzfVBGhiU5uP
SNRUaVI92cNpQBSJT5dy5KnYzMB2fDTDfLAT37YE08s=
-----END CERTIFICATE-----
Generated at Tue Apr 16 14:20:54 2024 by rpki-client on console-fra.rpki-client.org