Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa
File:                     3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (raw, json)
Hash identifier:          7eaGHPTG91z51KbYVWQ+PaYyc0SlY1oQy7F2psxNv7k=
Subject key identifier:   B9:6E:0B:98:19:EA:EA:D4:F0:11:F4:A7:16:74:1C:B7:76:CB:84:F5
Certificate issuer:       /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
Certificate serial:       532BBD3063B3988F1243803685AB1E5808C843F1
Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa
Signing time:             Mon 07 Aug 2023 11:00:01 +0000
ROA not before:           Mon 07 Aug 2023 10:55:01 +0000
ROA not after:            Mon 05 Aug 2024 11:00:01 +0000
asID:                     56233
IP address blocks:        103.14.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl
                          rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:2b:bd:30:63:b3:98:8f:12:43:80:36:85:ab:1e:58:08:c8:43:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859
        Validity
            Not Before: Aug  7 10:55:01 2023 GMT
            Not After : Aug  5 11:00:01 2024 GMT
        Subject: CN=B96E0B9819EAEAD4F011F4A716741CB776CB84F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:66:a6:69:d5:1b:01:bf:70:5c:4f:11:4b:e3:
                    a8:35:28:b3:ed:5e:0e:56:fd:52:9a:9b:03:70:71:
                    a0:79:f8:95:e6:ab:44:49:aa:b7:03:e9:01:56:70:
                    24:bd:60:ea:9b:b7:7d:31:81:e0:eb:1d:ff:41:fd:
                    c8:8d:5a:01:ea:57:6a:33:b1:55:f7:79:ed:16:a5:
                    bf:61:8b:b7:d4:2c:7d:d2:b3:3c:66:56:ab:a2:f2:
                    ce:7b:bf:22:3d:e4:5d:8e:a0:2b:96:9e:0a:b0:55:
                    d0:19:9b:d0:bc:40:9c:08:ed:8e:9c:da:80:f2:01:
                    d4:01:d4:f6:39:03:b6:1d:eb:07:3d:0f:20:f9:ad:
                    03:29:36:2d:00:b0:10:65:fe:bf:0c:0b:da:d1:e7:
                    64:8f:e0:f8:93:fd:88:6d:1b:47:48:e4:5d:84:2c:
                    31:b1:fa:79:4d:f6:79:e8:08:91:ae:91:ba:4b:96:
                    c4:15:84:21:47:d7:af:ae:4d:1b:09:ff:8e:a2:8f:
                    47:93:f8:7f:80:60:28:92:7c:11:9f:a5:36:c2:72:
                    e3:11:6e:42:7e:d3:a6:0d:05:56:ab:18:df:5d:36:
                    2f:05:27:49:de:60:e8:e2:5f:b1:f0:fb:c2:e8:b9:
                    39:02:98:20:b5:2f:ea:3d:ed:19:f2:1d:e3:b8:c4:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:6E:0B:98:19:EA:EA:D4:F0:11:F4:A7:16:74:1C:B7:76:CB:84:F5
            X509v3 Authority Key Identifier:
                keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/3130332e31342e3131302e302f32332d3234203d3e203536323333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6c:80:f4:db:b6:10:48:f5:a4:37:34:8a:af:fe:6b:89:fb:17:
         51:1a:05:2f:07:ef:15:c5:41:f9:33:12:f1:54:ca:d7:af:78:
         51:27:a9:1a:6e:bb:6c:03:ed:94:b9:85:78:0d:92:09:88:76:
         47:b1:b8:fa:99:3c:e6:17:11:1c:d2:0f:be:ad:a9:7d:16:fb:
         5e:60:43:10:03:bc:41:b8:43:bf:bb:ff:f8:0b:66:48:7b:1c:
         81:96:cc:cc:e0:10:5e:d1:bf:32:b0:e7:23:d1:17:35:1a:0b:
         b1:8b:7f:4b:a0:f0:0c:68:3b:c5:5f:c2:69:1c:de:9d:e7:0b:
         d8:94:5d:b5:48:77:d4:43:2e:28:22:01:45:69:11:ff:f9:90:
         fe:d9:45:b6:0d:55:d3:ee:56:19:8b:b8:2c:52:82:02:b3:31:
         a1:6d:c7:41:dd:11:47:e2:98:1f:87:24:e9:04:05:aa:ff:a3:
         1b:e0:94:cb:77:38:33:38:0d:4c:21:44:41:e6:28:06:46:c9:
         7a:d1:60:c7:bb:6e:6f:f8:5f:6e:7b:71:27:7f:cf:1a:a4:f8:
         e8:fd:15:ce:bc:1b:ab:fe:5b:10:b7:fb:28:72:b4:4b:52:3f:
         2d:98:5e:a6:1f:42:4f:ae:8f:2c:ec:b1:d4:50:db:cf:a5:70:
         ce:12:c4:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUUyu9MGOzmI8SQ4A2haseWAjIQ/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF
NTRDQTg1OTAeFw0yMzA4MDcxMDU1MDFaFw0yNDA4MDUxMTAwMDFaMDMxMTAvBgNV
BAMTKEI5NkUwQjk4MTlFQUVBRDRGMDExRjRBNzE2NzQxQ0I3NzZDQjg0RjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVZqZp1RsBv3BcTxFL46g1KLPt
Xg5W/VKamwNwcaB5+JXmq0RJqrcD6QFWcCS9YOqbt30xgeDrHf9B/ciNWgHqV2oz
sVX3ee0Wpb9hi7fULH3SszxmVqui8s57vyI95F2OoCuWngqwVdAZm9C8QJwI7Y6c
2oDyAdQB1PY5A7Yd6wc9DyD5rQMpNi0AsBBl/r8MC9rR52SP4PiT/YhtG0dI5F2E
LDGx+nlN9nnoCJGukbpLlsQVhCFH16+uTRsJ/46ij0eT+H+AYCiSfBGfpTbCcuMR
bkJ+06YNBVarGN9dNi8FJ0neYOjiX7Hw+8LouTkCmCC1L+o97RnyHeO4xLhPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuW4LmBnq6tTwEfSnFnQct3bLhPUwHwYDVR0j
BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz
REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD
QTg1OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0ZmQ0YmMyLTQxZDQtNDJlNi1h
N2ZmLTU5NDkzODg1MTI2YS8wLzMxMzAzMzJlMzEzNDJlMzEzMTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNjMyMzMzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcObjANBgkqhkiG
9w0BAQsFAAOCAQEAbID027YQSPWkNzSKr/5rifsXURoFLwfvFcVB+TMS8VTK1694
USepGm67bAPtlLmFeA2SCYh2R7G4+pk85hcRHNIPvq2pfRb7XmBDEAO8QbhDv7v/
+AtmSHscgZbMzOAQXtG/MrDnI9EXNRoLsYt/S6DwDGg7xV/CaRzenecL2JRdtUh3
1EMuKCIBRWkR//mQ/tlFtg1V0+5WGYu4LFKCArMxoW3HQd0RR+KYH4ck6QQFqv+j
G+CUy3c4MzgNTCFEQeYoBkbJetFgx7tub/hfbntxJ3/PGqT46P0Vzrwbq/5bELf7
KHK0S1I/LZheph9CT66PLOyx1FDbz6VwzhLEgg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:50 2024 by rpki-client on console-fra.rpki-client.org