Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa
File:                     3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa (raw, json)
Hash identifier:          hDMr/1M/yTXBkVL4ppMkYvqpM9GpnAmE6xEBAPzq6Ms=
Subject key identifier:   69:D3:AD:FA:71:98:63:81:39:6A:57:5B:53:BB:00:B0:0B:5E:55:CE
Certificate issuer:       /CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
Certificate serial:       5BCB24358FFEE1DD1001B1A7C8BE2F510409CAD2
Authority key identifier: 95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa
Signing time:             Mon 31 Jul 2023 00:08:19 +0000
ROA not before:           Mon 31 Jul 2023 00:03:19 +0000
ROA not after:            Mon 29 Jul 2024 00:08:19 +0000
asID:                     139986
IP address blocks:        103.148.84.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl
                          rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 07:55:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cb:24:35:8f:fe:e1:dd:10:01:b1:a7:c8:be:2f:51:04:09:ca:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95C3BA7F23B6351721F77DA8020731F9DA46B3C8
        Validity
            Not Before: Jul 31 00:03:19 2023 GMT
            Not After : Jul 29 00:08:19 2024 GMT
        Subject: CN=69D3ADFA71986381396A575B53BB00B00B5E55CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:78:17:c9:bf:17:76:3a:af:6b:53:a1:46:df:
                    b0:86:76:80:ad:36:64:01:db:5c:47:54:f2:40:cc:
                    86:08:4f:92:8b:d6:27:6d:84:da:e4:7b:2f:bf:2a:
                    71:93:d5:49:db:51:85:1e:c6:5c:55:83:5e:1d:14:
                    0f:03:a4:7e:1f:1f:cb:0e:e5:03:16:45:9f:21:7a:
                    a4:2f:e1:5d:52:2c:f0:ca:a5:27:93:d2:15:18:6b:
                    b5:a7:5e:ae:a1:2c:18:07:25:bd:b4:c8:a0:b6:90:
                    ce:d9:67:41:8d:91:1e:73:73:2d:a4:36:e6:27:b9:
                    6b:3e:a3:02:81:ab:46:94:3c:f4:f6:f3:ee:0e:41:
                    b9:e4:10:00:04:22:d4:05:e1:87:d1:25:aa:53:7a:
                    3e:30:08:b8:1d:37:5a:63:64:06:1d:75:d7:4d:3b:
                    0d:7e:f4:2d:7e:3a:f6:24:5d:52:7c:70:7a:e5:ce:
                    37:da:98:d2:db:ae:e7:ab:db:1b:f2:5f:27:6a:8d:
                    96:e8:71:70:e8:06:98:df:f1:0e:af:4e:75:d1:b1:
                    ee:cf:3f:fd:48:9c:82:18:47:6a:4c:12:98:61:23:
                    2c:ea:ef:92:a4:47:19:e3:dc:a3:61:91:7e:98:79:
                    8f:d6:f1:8d:f4:6c:e1:09:39:3b:b9:fd:35:a1:28:
                    81:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D3:AD:FA:71:98:63:81:39:6A:57:5B:53:BB:00:B0:0B:5E:55:CE
            X509v3 Authority Key Identifier:
                keyid:95:C3:BA:7F:23:B6:35:17:21:F7:7D:A8:02:07:31:F9:DA:46:B3:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/95C3BA7F23B6351721F77DA8020731F9DA46B3C8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/140e9c9f-d607-4497-af28-4d2b9092d5a6/0/3130332e3134382e38342e302f32342d3234203d3e20313339393836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.84.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:ca:cc:ef:84:69:da:5c:5f:d5:ff:55:1f:df:47:47:cc:51:
         07:c8:23:78:05:27:47:fa:ce:3e:de:96:c1:b9:d6:fe:52:e6:
         9f:6b:6e:f2:58:9a:cf:e8:e9:e9:d0:08:e6:6c:0d:16:4b:0e:
         de:33:75:2e:88:1a:f0:cc:f2:65:eb:0f:e8:10:8e:e9:1a:77:
         c5:5b:dc:87:4e:4d:2d:27:f3:77:83:67:2d:3c:af:be:dc:bb:
         64:48:b2:01:7d:0f:c9:77:f2:8a:66:a4:ee:b8:cf:79:6c:3f:
         20:c9:de:1d:b7:93:f7:17:89:04:cc:de:36:21:23:4d:e7:0e:
         79:f6:0a:bb:da:5f:a2:09:62:7f:77:ca:e4:cb:02:89:3e:a2:
         9a:75:4f:d8:af:a7:96:97:e6:49:a9:40:f6:52:45:48:38:9a:
         89:ab:20:d2:69:1e:c4:db:62:0b:48:e8:cb:c3:9c:ba:fb:bd:
         1d:f7:a0:39:9b:e0:bf:b0:9e:b0:5a:f5:53:9d:a3:7a:a8:3e:
         72:d6:46:11:d1:50:47:60:38:68:f0:a3:11:2d:31:21:87:eb:
         7e:28:78:b8:22:5c:e0:c1:7b:05:8f:d3:72:c8:3e:e5:e3:d2:
         34:c7:52:db:d4:9f:a6:59:72:f4:ae:b1:6a:b3:3a:75:60:2a:
         40:6a:e7:c2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUW8skNY/+4d0QAbGnyL4vUQQJytIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlE
QTQ2QjNDODAeFw0yMzA3MzEwMDAzMTlaFw0yNDA3MjkwMDA4MTlaMDMxMTAvBgNV
BAMTKDY5RDNBREZBNzE5ODYzODEzOTZBNTc1QjUzQkIwMEIwMEI1RTU1Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBeBfJvxd2Oq9rU6FG37CGdoCt
NmQB21xHVPJAzIYIT5KL1idthNrkey+/KnGT1UnbUYUexlxVg14dFA8DpH4fH8sO
5QMWRZ8heqQv4V1SLPDKpSeT0hUYa7WnXq6hLBgHJb20yKC2kM7ZZ0GNkR5zcy2k
NuYnuWs+owKBq0aUPPT28+4OQbnkEAAEItQF4YfRJapTej4wCLgdN1pjZAYddddN
Ow1+9C1+OvYkXVJ8cHrlzjfamNLbruer2xvyXydqjZbocXDoBpjf8Q6vTnXRse7P
P/1InIIYR2pMEphhIyzq75KkRxnj3KNhkX6YeY/W8Y30bOEJOTu5/TWhKIGlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUadOt+nGYY4E5aldbU7sAsAteVc4wHwYDVR0j
BBgwFoAUlcO6fyO2NRch932oAgcx+dpGs8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDBlOWM5Zi1kNjA3LTQ0OTctYWYyOC00ZDJiOTA5MmQ1YTYvMC85NUMzQkE3RjIz
QjYzNTE3MjFGNzdEQTgwMjA3MzFGOURBNDZCM0M4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTVDM0JBN0YyM0I2MzUxNzIxRjc3REE4MDIwNzMxRjlEQTQ2
QjNDOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0MGU5YzlmLWQ2MDctNDQ5Ny1h
ZjI4LTRkMmI5MDkyZDVhNi8wLzMxMzAzMzJlMzEzNDM4MmUzODM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzODM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5RUMA0GCSqG
SIb3DQEBCwUAA4IBAQBZyszvhGnaXF/V/1Uf30dHzFEHyCN4BSdH+s4+3pbBudb+
Uuafa27yWJrP6Onp0AjmbA0WSw7eM3UuiBrwzPJl6w/oEI7pGnfFW9yHTk0tJ/N3
g2ctPK++3LtkSLIBfQ/Jd/KKZqTuuM95bD8gyd4dt5P3F4kEzN42ISNN5w559gq7
2l+iCWJ/d8rkywKJPqKadU/Yr6eWl+ZJqUD2UkVIOJqJqyDSaR7E22ILSOjLw5y6
+70d96A5m+C/sJ6wWvVTnaN6qD5y1kYR0VBHYDho8KMRLTEhh+t+KHi4IlzgwXsF
j9NyyD7l49I0x1Lb1J+mWXL0rrFqszp1YCpAaufC
-----END CERTIFICATE-----
Generated at Fri Apr 19 02:45:37 2024 by rpki-client on console-ams.rpki-client.org