Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          XhcnB2m+tMQ+zF/LI7bpXJchYGlbqcO5E3WshtU716c=
Subject key identifier:   44:AD:D4:D2:58:6C:CF:61:1B:DE:FF:DA:8A:24:2D:3C:63:5A:88:5B
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       472F3A4CFA2229DDF80C08632F9DD33D45EC003F
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:33 +0000
ROA not before:           Mon 31 Jul 2023 00:02:33 +0000
ROA not after:            Mon 29 Jul 2024 00:07:33 +0000
asID:                     58369
IP address blocks:        103.4.166.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2f:3a:4c:fa:22:29:dd:f8:0c:08:63:2f:9d:d3:3d:45:ec:00:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:33 2023 GMT
            Not After : Jul 29 00:07:33 2024 GMT
        Subject: CN=44ADD4D2586CCF611BDEFFDA8A242D3C635A885B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ee:ba:e9:46:f0:31:e5:95:64:b3:44:21:d8:
                    8c:2c:be:d0:64:b7:5c:db:f6:51:02:32:95:7b:c2:
                    22:fa:3b:85:bd:b1:f0:7f:e9:d8:25:c4:a8:ae:4d:
                    9d:0f:a5:a3:66:ef:bb:63:d3:64:d3:f5:fb:6c:31:
                    fe:69:46:4b:67:43:2f:d4:55:33:54:ba:2e:1c:2d:
                    35:24:27:63:42:50:18:f9:15:45:5c:c8:29:7f:44:
                    52:c6:eb:6c:06:9f:50:ac:5c:db:1b:a6:e1:54:12:
                    96:10:3b:4f:58:49:64:b8:e8:74:85:9e:e1:ab:49:
                    c8:3c:88:4e:e8:3d:e6:bb:c4:d8:9e:e7:5d:e5:60:
                    4d:5b:ad:b0:b2:65:98:04:d3:95:e4:95:6d:ea:91:
                    89:44:a9:af:33:1a:cc:00:06:96:36:1a:73:38:fc:
                    8c:ca:5f:32:8d:90:d4:d9:52:55:22:10:d1:cb:08:
                    dc:7b:25:bb:1c:85:39:c1:72:56:bc:91:d2:e9:55:
                    ea:c5:ea:2c:14:d7:7a:00:32:99:51:15:1e:df:f5:
                    d4:e5:ed:49:35:e9:9d:a8:af:06:87:5b:47:2e:a0:
                    22:1c:89:a4:d4:af:ac:43:5d:60:c7:12:8b:85:9d:
                    3a:35:38:77:24:c2:aa:d0:33:e3:c6:b2:ac:44:f0:
                    4b:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:AD:D4:D2:58:6C:CF:61:1B:DE:FF:DA:8A:24:2D:3C:63:5A:88:5B
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:7a:5d:b7:4d:18:13:a4:80:51:2d:b9:07:eb:56:ef:54:55:
         7d:46:2b:ed:af:93:05:1b:0b:d5:b3:2b:1e:9b:6b:72:8e:73:
         a4:eb:2c:62:7e:8a:d8:f3:45:a1:a0:65:7f:07:2a:07:cb:d7:
         65:d5:5f:df:af:e3:81:7a:e9:12:92:c6:83:ed:e9:74:5c:d1:
         62:64:aa:7d:b3:43:ab:66:11:a6:c6:05:e0:81:c0:5d:a2:7a:
         b0:94:cb:41:82:0e:a8:40:1e:ad:8e:f1:7f:77:a2:33:9c:f0:
         c2:d7:8d:2d:41:00:53:4e:4b:02:56:6d:99:2c:1e:ee:64:b9:
         5c:d1:85:a1:0b:a4:be:5a:c0:b8:00:61:83:c0:f4:d4:4a:e1:
         f0:55:44:b5:7a:d6:f3:77:d4:0f:a8:52:d6:57:00:5c:d2:47:
         2a:63:b6:5c:a6:f5:a3:16:a3:24:26:32:0b:f2:af:f9:48:f9:
         8b:2e:d0:37:91:4e:6c:e2:91:4f:5c:66:a8:8d:e1:f6:a7:91:
         0a:c8:e1:83:83:59:60:86:fd:72:b0:70:05:85:b5:ef:a7:33:
         66:d8:e5:f2:31:a4:3d:75:c6:ec:f7:58:8e:07:b2:bc:ab:6b:
         52:95:2d:65:b7:42:1e:14:94:1a:aa:cb:81:be:92:9b:16:a8:
         8b:16:18:be
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIURy86TPoiKd34DAhjL53TPUXsAD8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yMzA3MzEwMDAyMzNaFw0yNDA3MjkwMDA3MzNaMDMxMTAvBgNV
BAMTKDQ0QURENEQyNTg2Q0NGNjExQkRFRkZEQThBMjQyRDNDNjM1QTg4NUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ7rrpRvAx5ZVks0Qh2IwsvtBk
t1zb9lECMpV7wiL6O4W9sfB/6dglxKiuTZ0PpaNm77tj02TT9ftsMf5pRktnQy/U
VTNUui4cLTUkJ2NCUBj5FUVcyCl/RFLG62wGn1CsXNsbpuFUEpYQO09YSWS46HSF
nuGrScg8iE7oPea7xNie513lYE1brbCyZZgE05XklW3qkYlEqa8zGswABpY2GnM4
/IzKXzKNkNTZUlUiENHLCNx7JbschTnBcla8kdLpVerF6iwU13oAMplRFR7f9dTl
7Uk16Z2orwaHW0cuoCIciaTUr6xDXWDHEouFnTo1OHckwqrQM+PGsqxE8Ev3AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQURK3U0lhsz2Eb3v/aiiQtPGNaiFswHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzAzMzJlMzQyZTMxMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBKYwDQYJKoZIhvcN
AQELBQADggEBAFd6XbdNGBOkgFEtuQfrVu9UVX1GK+2vkwUbC9WzKx6ba3KOc6Tr
LGJ+itjzRaGgZX8HKgfL12XVX9+v44F66RKSxoPt6XRc0WJkqn2zQ6tmEabGBeCB
wF2ierCUy0GCDqhAHq2O8X93ojOc8MLXjS1BAFNOSwJWbZksHu5kuVzRhaELpL5a
wLgAYYPA9NRK4fBVRLV61vN31A+oUtZXAFzSRypjtlym9aMWoyQmMgvyr/lI+Ysu
0DeRTmzikU9cZqiN4fankQrI4YODWWCG/XKwcAWFte+nM2bY5fIxpD11xuz3WI4H
sryra1KVLWW3Qh4UlBqqy4G+kpsWqIsWGL4=
-----END CERTIFICATE-----
Generated at Fri Apr 19 20:20:00 2024 by rpki-client on console-fra.rpki-client.org