Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
File:                     3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          ha1nuxkGtCt2FVgKltrEh/XiFZsRxXfTomoyqF6agNg=
Subject key identifier:   D4:A6:F3:59:87:F3:FA:F9:0A:AB:11:04:18:9E:ED:B8:AE:49:C0:C9
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       3E38FA1CE74721FE2E88CE2E714E44D5748CCAC5
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa
Signing time:             Mon 31 Jul 2023 00:09:28 +0000
ROA not before:           Mon 31 Jul 2023 00:04:28 +0000
ROA not after:            Mon 29 Jul 2024 00:09:28 +0000
asID:                     135451
IP address blocks:        103.96.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:38:fa:1c:e7:47:21:fe:2e:88:ce:2e:71:4e:44:d5:74:8c:ca:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jul 31 00:04:28 2023 GMT
            Not After : Jul 29 00:09:28 2024 GMT
        Subject: CN=D4A6F35987F3FAF90AAB1104189EEDB8AE49C0C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6d:01:c7:6c:97:ab:5d:3c:c9:e0:69:62:e7:
                    48:92:e3:1f:d5:73:a1:a0:62:a0:b5:b2:c8:e2:42:
                    11:9c:b1:46:1e:b7:28:72:df:6f:06:de:d7:6c:e1:
                    ef:6e:c1:e8:94:5d:00:31:62:30:48:bf:54:15:4e:
                    1b:04:05:e9:7a:5c:f4:7b:58:bd:02:f1:9c:67:7c:
                    1a:05:81:36:ba:76:98:6e:de:eb:56:d1:d6:28:c6:
                    3d:43:04:9d:20:70:1b:c2:dd:2e:04:d4:27:6a:46:
                    22:02:67:15:9d:92:4d:1b:68:6b:18:8d:88:82:24:
                    16:36:16:78:e7:44:d9:12:06:b6:1e:26:e3:58:9c:
                    7a:54:73:f5:d1:ce:ae:ef:b0:d4:0f:bf:70:dd:10:
                    50:2b:4a:01:03:2f:a5:84:c2:4d:c5:62:9e:0a:b0:
                    b7:4e:95:f1:50:46:85:9f:13:f9:b1:f7:73:99:40:
                    bd:d9:ee:2f:ce:ec:ed:9c:ee:f7:02:0f:7c:92:92:
                    32:e1:5c:48:c7:ec:ac:60:d5:fd:61:43:e5:6b:4b:
                    58:eb:a3:04:9e:19:72:34:f4:48:a0:da:44:1a:06:
                    4e:73:0d:e0:61:f9:80:dc:75:02:d0:3d:ea:62:3b:
                    f2:30:7e:c7:f1:e0:d9:45:2f:64:3f:d4:e2:52:8a:
                    fc:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A6:F3:59:87:F3:FA:F9:0A:AB:11:04:18:9E:ED:B8:AE:49:C0:C9
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131362e302f32342d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:89:10:36:01:87:d5:19:3a:41:4b:8e:5a:5c:2f:c8:8e:1d:
         f1:fe:21:8a:65:9e:5f:41:d9:10:e6:36:64:ba:5e:78:ed:c6:
         c1:f5:02:6c:e2:a8:29:03:d2:21:f6:38:b2:a0:0e:2e:3d:ef:
         cf:08:30:0d:b9:4e:cb:a2:a2:7d:da:c3:1a:46:98:a6:62:2e:
         d7:35:b9:97:4a:5c:8d:5a:ad:b3:ba:c7:f5:92:43:7e:22:a5:
         b9:45:0a:52:25:12:21:ad:e2:62:f0:7b:ce:a8:5c:fb:14:4f:
         c2:e6:98:ab:d5:6b:64:93:f0:98:b0:26:47:27:f0:f2:c0:c6:
         74:9d:d8:27:1f:e6:42:a0:37:af:52:d8:d8:f7:63:11:ec:0c:
         bf:53:f3:66:3e:76:61:84:e4:77:09:a4:1e:ea:9f:a1:1b:c0:
         3b:30:e1:34:ea:9f:4d:1b:c8:69:9f:38:5c:4b:5b:ac:6c:fd:
         67:53:6d:c6:fa:16:51:43:16:7b:19:19:84:6b:fb:60:2a:c5:
         39:18:1f:d3:88:15:e6:0b:1b:0c:dc:8e:5e:6d:d8:75:e4:98:
         a0:2f:71:48:71:21:fc:cc:53:50:2e:15:7c:e7:b0:3f:54:45:
         9b:b0:98:a6:41:a8:9c:71:8b:3c:64:4d:53:51:48:33:0a:c8:
         a9:bd:93:3f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPjj6HOdHIf4uiM4ucU5E1XSMysUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUx
MTdFOEU3OTAeFw0yMzA3MzEwMDA0MjhaFw0yNDA3MjkwMDA5MjhaMDMxMTAvBgNV
BAMTKEQ0QTZGMzU5ODdGM0ZBRjkwQUFCMTEwNDE4OUVFREI4QUU0OUMwQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+bQHHbJerXTzJ4Gli50iS4x/V
c6GgYqC1ssjiQhGcsUYetyhy328G3tds4e9uweiUXQAxYjBIv1QVThsEBel6XPR7
WL0C8ZxnfBoFgTa6dphu3utW0dYoxj1DBJ0gcBvC3S4E1CdqRiICZxWdkk0baGsY
jYiCJBY2FnjnRNkSBrYeJuNYnHpUc/XRzq7vsNQPv3DdEFArSgEDL6WEwk3FYp4K
sLdOlfFQRoWfE/mx93OZQL3Z7i/O7O2c7vcCD3ySkjLhXEjH7Kxg1f1hQ+VrS1jr
owSeGXI09Eig2kQaBk5zDeBh+YDcdQLQPepiO/Iwfsfx4NlFL2Q/1OJSivybAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1KbzWYfz+vkKqxEEGJ7tuK5JwMkwHwYDVR0j
BBgwFoAUBbx2T4X5+IzkH9h5xhJeZRF+jnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
MWMxZDU2ZS0xNWM2LTRiNjUtYTlhOC1mOTBhZDZmYmEwOTAvMC8wNUJDNzY0Rjg1
RjlGODhDRTQxRkQ4NzlDNjEyNUU2NTExN0U4RTc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDVCQzc2NEY4NUY5Rjg4Q0U0MUZEODc5QzYxMjVFNjUxMTdF
OEU3OS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzExYzFkNTZlLTE1YzYtNGI2NS1h
OWE4LWY5MGFkNmZiYTA5MC8wLzMxMzAzMzJlMzkzNjJlMzEzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2B0MA0GCSqG
SIb3DQEBCwUAA4IBAQB7iRA2AYfVGTpBS45aXC/Ijh3x/iGKZZ5fQdkQ5jZkul54
7cbB9QJs4qgpA9Ih9jiyoA4uPe/PCDANuU7LoqJ92sMaRpimYi7XNbmXSlyNWq2z
usf1kkN+IqW5RQpSJRIhreJi8HvOqFz7FE/C5pir1Wtkk/CYsCZHJ/DywMZ0ndgn
H+ZCoDevUtjY92MR7Ay/U/NmPnZhhOR3CaQe6p+hG8A7MOE06p9NG8hpnzhcS1us
bP1nU23G+hZRQxZ7GRmEa/tgKsU5GB/TiBXmCxsM3I5ebdh15JigL3FIcSH8zFNQ
LhV857A/VEWbsJimQaiccYs8ZE1TUUgzCsipvZM/
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org