Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
File:                     3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          vHWbrR/eEXNjZ5ax++YrUQDvEMfCGNSugwoO5OAA+Ac=
Subject key identifier:   3A:21:33:D6:C3:D3:56:6D:6E:75:42:C3:EB:DA:3E:08:3C:EE:C2:34
Certificate issuer:       /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial:       422F2778582359FB1C9EC3D93CA81A80EE5EA571
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:28 +0000
ROA not before:           Mon 31 Jul 2023 00:02:28 +0000
ROA not after:            Mon 29 Jul 2024 00:07:28 +0000
asID:                     58369
IP address blocks:        103.140.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
                          rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:2f:27:78:58:23:59:fb:1c:9e:c3:d9:3c:a8:1a:80:ee:5e:a5:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
        Validity
            Not Before: Jul 31 00:02:28 2023 GMT
            Not After : Jul 29 00:07:28 2024 GMT
        Subject: CN=3A2133D6C3D3566D6E7542C3EBDA3E083CEEC234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:74:a8:a9:39:a8:e9:a6:9e:5c:7a:2a:ef:7f:
                    1c:4c:9b:3a:3a:9f:0e:4d:8d:4a:3c:89:c0:29:ab:
                    72:0b:5d:3f:2c:f4:f5:98:2f:80:fc:2a:0c:94:c9:
                    7f:f3:57:9e:6a:50:59:23:17:94:1a:46:75:4a:07:
                    82:5d:e8:db:67:29:d8:48:0a:23:49:35:aa:2d:d9:
                    2f:55:e4:d9:05:30:4f:14:8c:81:d3:82:0f:db:67:
                    40:d1:84:b7:fc:d3:c4:2d:af:79:14:5f:73:b5:38:
                    5d:33:58:eb:53:50:47:44:2a:46:fe:15:59:2a:f0:
                    69:a4:16:5a:ec:72:03:af:48:a0:9d:20:e6:85:8e:
                    4a:11:e6:93:6c:94:17:bb:69:ca:df:85:d1:1c:17:
                    ee:be:f3:9b:7c:69:53:34:ef:93:83:b9:43:97:8b:
                    14:1d:20:84:ad:f2:69:51:28:b8:e3:cb:3a:1a:b2:
                    b2:41:11:30:3a:9f:ef:47:35:21:e2:39:ca:31:d8:
                    bb:27:83:48:7b:c8:06:cd:2b:e1:f5:3b:31:89:97:
                    19:4d:f8:87:26:ae:16:ca:6b:21:87:05:99:ff:d7:
                    7b:1e:f7:a3:a8:cd:ab:80:d3:0c:74:ab:88:16:b6:
                    70:72:59:af:f6:d2:93:09:c4:e4:05:30:7a:e7:af:
                    a6:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:21:33:D6:C3:D3:56:6D:6E:75:42:C3:EB:DA:3E:08:3C:EE:C2:34
            X509v3 Authority Key Identifier:
                keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cf:49:5e:d0:4a:ac:3d:1a:ee:19:11:80:ae:c3:6d:2f:c6:26:
         76:d6:64:f3:a1:78:e1:5e:02:42:82:87:0e:20:b1:1b:95:bf:
         5c:82:cc:ca:8a:fb:b9:3a:d5:76:70:c3:4d:07:77:17:97:ae:
         ac:0c:e4:09:f9:37:45:d3:a2:48:6a:bf:dd:32:75:c7:4d:71:
         b6:ea:1f:6b:97:6e:9b:67:47:18:29:b6:19:0b:b8:b3:0a:2c:
         43:4c:aa:38:b9:62:6f:87:d0:04:96:a6:41:77:77:97:34:26:
         7a:bb:24:8e:53:9c:1b:d5:91:e4:e5:98:e8:83:e9:08:6e:87:
         ed:12:23:8e:b2:a4:d2:74:3d:24:37:03:19:d4:76:2d:41:d0:
         16:08:f2:21:92:7a:0a:e0:67:f5:e0:9c:5b:20:c5:7a:d2:d6:
         f0:60:57:cb:ce:52:bc:3c:2e:81:bb:c3:2a:23:54:d5:14:21:
         aa:58:d4:63:4d:10:5b:3f:94:16:d8:6f:73:8b:c4:e1:16:ca:
         97:ef:23:11:b6:ca:63:2e:61:9c:8f:26:39:93:27:88:92:55:
         a4:54:de:18:4b:16:c0:2c:62:b9:69:f1:4b:a1:d4:9b:59:23:
         8c:ad:27:2c:9d:7c:26:d4:8b:8e:9a:55:e6:92:53:fd:7c:b2:
         10:57:3b:9d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUQi8neFgjWfscnsPZPKgagO5epXEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE
MEU4OTMxMjAeFw0yMzA3MzEwMDAyMjhaFw0yNDA3MjkwMDA3MjhaMDMxMTAvBgNV
BAMTKDNBMjEzM0Q2QzNEMzU2NkQ2RTc1NDJDM0VCREEzRTA4M0NFRUMyMzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dKipOajppp5ceirvfxxMmzo6
nw5NjUo8icApq3ILXT8s9PWYL4D8KgyUyX/zV55qUFkjF5QaRnVKB4Jd6NtnKdhI
CiNJNaot2S9V5NkFME8UjIHTgg/bZ0DRhLf808Qtr3kUX3O1OF0zWOtTUEdEKkb+
FVkq8GmkFlrscgOvSKCdIOaFjkoR5pNslBe7acrfhdEcF+6+85t8aVM075ODuUOX
ixQdIISt8mlRKLjjyzoasrJBETA6n+9HNSHiOcox2Lsng0h7yAbNK+H1OzGJlxlN
+IcmrhbKayGHBZn/13se96OozauA0wx0q4gWtnByWa/20pMJxOQFMHrnr6YTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOiEz1sPTVm1udULD69o+CDzuwjQwHwYDVR0j
BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG
MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4
OTMxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1MjIyNmVhLTVlMjYtNGVhNS1h
Njg5LTQ3NTdhZDA1Zjk1Mi8wLzMxMzAzMzJlMzEzNDMwMmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMIjANBgkqhkiG
9w0BAQsFAAOCAQEAz0le0EqsPRruGRGArsNtL8YmdtZk86F44V4CQoKHDiCxG5W/
XILMyor7uTrVdnDDTQd3F5eurAzkCfk3RdOiSGq/3TJ1x01xtuofa5dum2dHGCm2
GQu4swosQ0yqOLlib4fQBJamQXd3lzQmerskjlOcG9WR5OWY6IPpCG6H7RIjjrKk
0nQ9JDcDGdR2LUHQFgjyIZJ6CuBn9eCcWyDFetLW8GBXy85SvDwugbvDKiNU1RQh
qljUY00QWz+UFthvc4vE4RbKl+8jEbbKYy5hnI8mOZMniJJVpFTeGEsWwCxiuWnx
S6HUm1kjjK0nLJ18JtSLjppV5pJT/XyyEFc7nQ==
-----END CERTIFICATE-----
Generated at Wed Apr 24 15:47:54 2024 by rpki-client on console-ams.rpki-client.org