Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa
File:                     3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (raw, json)
Hash identifier:          UBD4YSX2GrKOcis2ffdiBkbZonrDnfLgQDUAL7583H4=
Subject key identifier:   77:70:20:F3:19:D0:E8:45:DB:A9:5A:6A:37:D1:8D:2E:13:13:10:59
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       7BB717042EDE26AD27A2D047030728499320F520
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa
Signing time:             Wed 23 Aug 2023 14:03:11 +0000
ROA not before:           Wed 23 Aug 2023 13:58:11 +0000
ROA not after:            Wed 21 Aug 2024 14:03:11 +0000
asID:                     46055
IP address blocks:        103.198.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 17:04:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:b7:17:04:2e:de:26:ad:27:a2:d0:47:03:07:28:49:93:20:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Aug 23 13:58:11 2023 GMT
            Not After : Aug 21 14:03:11 2024 GMT
        Subject: CN=777020F319D0E845DBA95A6A37D18D2E13131059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8e:82:a5:34:e2:1d:89:e0:4d:17:73:0e:74:
                    71:b0:79:fe:ac:5d:93:db:25:44:e6:66:9f:dd:64:
                    f9:1f:51:3f:cd:18:69:6f:a9:86:f8:c9:0e:9c:91:
                    66:09:e1:bc:a4:d6:48:93:e9:d6:94:35:94:0f:83:
                    26:76:36:2b:80:5d:71:26:2a:32:59:07:2b:07:f2:
                    77:4f:3f:2a:c7:2a:38:c1:25:dd:e2:08:a4:8a:cf:
                    2d:60:fe:b4:23:c5:11:4a:c4:76:44:32:bc:8d:d3:
                    b9:ef:22:c5:a6:7e:e8:c4:4e:c0:6d:1f:ad:9d:33:
                    b0:31:39:18:9b:41:f2:75:1e:6f:74:01:0c:54:bc:
                    5b:fc:32:51:76:a0:84:df:d0:2f:23:42:81:41:98:
                    ab:63:58:f1:25:14:99:90:84:bc:76:9d:8c:4e:3b:
                    94:03:03:0f:c2:9f:8c:49:b7:51:ef:01:c2:60:00:
                    fd:ad:34:c8:73:49:40:b8:12:12:2a:8b:25:10:23:
                    f1:ee:6b:d7:fc:3e:fe:c1:75:16:2d:1c:93:de:5e:
                    d0:f3:cf:92:b8:1e:14:c7:0a:0e:cf:d6:ee:06:2a:
                    61:4a:f6:1d:75:4a:af:c4:ef:29:61:6f:4c:d9:05:
                    e8:af:c7:27:bf:93:bd:95:6a:44:a3:07:ae:2b:29:
                    7d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:70:20:F3:19:D0:E8:45:DB:A9:5A:6A:37:D1:8D:2E:13:13:10:59
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:3d:02:d3:f7:f8:46:f2:72:99:8b:05:de:aa:92:fa:f3:af:
         fc:bd:00:02:5d:3d:db:80:94:96:9c:53:f4:64:3b:42:6b:4f:
         aa:47:e1:02:ee:9f:a7:8e:87:c6:eb:1a:97:f8:55:c9:28:d0:
         27:2a:e3:ba:d6:75:e4:41:97:78:97:4a:e9:15:4e:d5:86:09:
         af:50:b7:35:40:a0:62:c4:31:54:57:df:ca:22:6b:24:f3:e9:
         3f:8e:8f:81:fe:4c:60:c7:5a:f1:86:30:0d:77:34:0c:bf:3c:
         11:ee:1d:9e:bb:26:2e:e5:b7:d1:14:b6:d4:f0:29:44:fb:0b:
         c1:b2:a3:ba:98:b1:f2:10:2f:28:d0:89:ff:7c:42:f6:88:71:
         1a:a9:8d:9c:fc:f3:28:ca:60:b1:2f:cc:65:30:8d:4b:13:ca:
         93:1d:1b:8d:3c:0e:bb:d3:f7:45:91:bd:4c:8f:22:f9:27:f3:
         5a:7b:b1:a4:3f:40:cf:83:cd:1e:1a:3f:f0:9b:4f:fc:e9:bc:
         90:53:c6:65:7e:bb:00:de:e1:da:8e:78:6b:cd:7b:a4:d6:b0:
         e3:3c:d0:de:e2:28:77:8b:aa:d2:f9:bb:9f:1c:8e:1a:13:3e:
         40:9c:8f:0d:72:d9:09:dc:1c:67:10:dd:f2:32:51:cd:55:63:
         28:77:c5:ed
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUe7cXBC7eJq0notBHAwcoSZMg9SAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx
M0ZGREE5MTAeFw0yMzA4MjMxMzU4MTFaFw0yNDA4MjExNDAzMTFaMDMxMTAvBgNV
BAMTKDc3NzAyMEYzMTlEMEU4NDVEQkE5NUE2QTM3RDE4RDJFMTMxMzEwNTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWjoKlNOIdieBNF3MOdHGwef6s
XZPbJUTmZp/dZPkfUT/NGGlvqYb4yQ6ckWYJ4byk1kiT6daUNZQPgyZ2NiuAXXEm
KjJZBysH8ndPPyrHKjjBJd3iCKSKzy1g/rQjxRFKxHZEMryN07nvIsWmfujETsBt
H62dM7AxORibQfJ1Hm90AQxUvFv8MlF2oITf0C8jQoFBmKtjWPElFJmQhLx2nYxO
O5QDAw/Cn4xJt1HvAcJgAP2tNMhzSUC4EhIqiyUQI/Hua9f8Pv7BdRYtHJPeXtDz
z5K4HhTHCg7P1u4GKmFK9h11Sq/E7ylhb0zZBeivxye/k72VakSjB64rKX2BAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUd3Ag8xnQ6EXbqVpqN9GNLhMTEFkwHwYDVR0j
BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw
NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG
REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i
NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8Z6MA0GCSqG
SIb3DQEBCwUAA4IBAQBvPQLT9/hG8nKZiwXeqpL686/8vQACXT3bgJSWnFP0ZDtC
a0+qR+EC7p+njofG6xqX+FXJKNAnKuO61nXkQZd4l0rpFU7VhgmvULc1QKBixDFU
V9/KImsk8+k/jo+B/kxgx1rxhjANdzQMvzwR7h2euyYu5bfRFLbU8ClE+wvBsqO6
mLHyEC8o0In/fEL2iHEaqY2c/PMoymCxL8xlMI1LE8qTHRuNPA670/dFkb1MjyL5
J/Nae7GkP0DPg80eGj/wm0/86byQU8ZlfrsA3uHajnhrzXuk1rDjPNDe4ih3i6rS
+bufHI4aEz5AnI8NctkJ3BxnEN3yMlHNVWMod8Xt
-----END CERTIFICATE-----
Generated at Wed May 1 10:31:57 2024 by rpki-client on console-fra.rpki-client.org