Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
File:                     3130332e342e3136372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          FAwXK9F5a5iK4/QJ/gwHDiAyq3GMyYcyyr48qizNmbw=
Subject key identifier:   F8:89:A6:E5:CC:66:7B:E1:0D:AA:1F:29:DA:D3:AF:50:DD:A8:9F:5F
Certificate issuer:       /CN=A095A9A71806956C905D5CF7CB797843D22D04B8
Certificate serial:       2B1E08704DB5E1E31B889EB3A5E05AEC1614EB23
Authority key identifier: A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 31 Jul 2023 00:07:30 +0000
ROA not before:           Mon 31 Jul 2023 00:02:30 +0000
ROA not after:            Mon 29 Jul 2024 00:07:30 +0000
asID:                     58369
IP address blocks:        103.4.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl
                          rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 10:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:1e:08:70:4d:b5:e1:e3:1b:88:9e:b3:a5:e0:5a:ec:16:14:eb:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A095A9A71806956C905D5CF7CB797843D22D04B8
        Validity
            Not Before: Jul 31 00:02:30 2023 GMT
            Not After : Jul 29 00:07:30 2024 GMT
        Subject: CN=F889A6E5CC667BE10DAA1F29DAD3AF50DDA89F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:b4:4f:d2:3c:4d:74:4a:f6:0f:2a:3e:c9:
                    b3:1a:76:d3:f2:c6:e0:a6:40:17:c4:a2:43:eb:84:
                    c4:62:8d:0f:9a:d9:df:de:97:02:09:0a:70:b7:13:
                    84:1c:e1:08:84:14:fd:26:ad:56:4e:a2:d4:ea:97:
                    54:0b:fa:a3:13:d4:5a:0c:a2:33:68:c5:bd:77:c8:
                    79:a9:9a:b7:87:5c:35:73:27:b1:be:02:79:34:06:
                    17:f9:18:44:8e:e6:d7:0a:74:f4:16:b1:cd:ab:41:
                    26:a4:02:9f:05:f8:5d:02:b9:6f:68:a6:27:31:bf:
                    03:40:ab:7b:5b:46:9a:09:9f:0f:d8:e2:ed:2f:b2:
                    c2:aa:82:8a:29:ce:e6:cc:1e:8d:85:7f:73:9c:30:
                    4d:c8:93:c0:d2:14:50:a7:12:73:06:c9:8e:e3:7e:
                    30:40:ae:35:16:b0:98:d8:bf:38:9f:6c:c5:60:f7:
                    c0:ac:90:dd:a4:0a:30:e8:8c:ad:10:d9:ea:7c:b6:
                    64:7e:37:ef:cd:5d:8b:e0:21:ea:66:00:60:66:ce:
                    a8:af:81:a1:82:29:64:2e:92:52:b1:a9:e9:f5:1c:
                    d7:ba:e1:10:77:df:fa:b2:94:00:b6:25:8c:b6:11:
                    5e:26:25:10:86:ac:04:b7:2a:5e:01:4e:e7:eb:9c:
                    07:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:89:A6:E5:CC:66:7B:E1:0D:AA:1F:29:DA:D3:AF:50:DD:A8:9F:5F
            X509v3 Authority Key Identifier:
                keyid:A0:95:A9:A7:18:06:95:6C:90:5D:5C:F7:CB:79:78:43:D2:2D:04:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/A095A9A71806956C905D5CF7CB797843D22D04B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A095A9A71806956C905D5CF7CB797843D22D04B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16a81182-7ceb-465c-a5b5-a14ec739bf99/0/3130332e342e3136372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.4.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:91:51:8e:7b:95:a2:2f:5b:4f:df:26:09:2f:06:4f:2a:
         43:e2:a6:b5:d3:49:ec:ea:aa:76:89:e5:fe:0c:fb:f3:fc:af:
         e2:38:8a:f0:a6:d7:40:39:42:e0:9a:27:b9:02:54:55:d0:24:
         de:eb:0b:62:ef:d7:f9:44:ad:c8:be:41:b2:32:2c:b3:50:41:
         93:31:81:29:1e:6b:99:35:72:4e:7a:61:87:15:b9:94:80:b1:
         32:94:1a:11:38:d7:2b:ed:8f:86:f6:28:25:ed:1c:52:2a:ea:
         64:5c:ae:83:e6:68:85:45:a1:85:09:2b:4d:5a:22:85:43:3d:
         79:64:2c:86:4f:02:26:98:c5:25:9f:a6:0d:3e:44:85:8f:5a:
         38:e8:9f:21:c0:07:34:68:95:60:8f:66:f9:71:8b:61:89:4f:
         2b:7a:71:e7:c7:5c:e5:8f:63:a9:6f:91:0c:a1:92:a7:c3:13:
         a6:2f:d4:de:b7:d4:4b:e9:e8:ac:df:9a:8b:a2:55:35:cf:df:
         f8:76:28:74:17:4c:ff:13:38:b7:14:02:b4:0d:03:3a:c3:16:
         d7:39:de:1c:c7:19:de:bf:33:fc:05:7c:75:96:a5:b1:2c:02:
         81:90:c7:a9:d9:ce:fd:8b:f6:a3:86:1b:b2:1f:b0:57:3d:ab:
         07:bd:67:6f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUKx4IcE214eMbiJ6zpeBa7BYU6yMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNE
MjJEMDRCODAeFw0yMzA3MzEwMDAyMzBaFw0yNDA3MjkwMDA3MzBaMDMxMTAvBgNV
BAMTKEY4ODlBNkU1Q0M2NjdCRTEwREFBMUYyOURBRDNBRjUwRERBODlGNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCopbRP0jxNdEr2Dyo+ybMadtPy
xuCmQBfEokPrhMRijQ+a2d/elwIJCnC3E4Qc4QiEFP0mrVZOotTql1QL+qMT1FoM
ojNoxb13yHmpmreHXDVzJ7G+Ank0Bhf5GESO5tcKdPQWsc2rQSakAp8F+F0CuW9o
picxvwNAq3tbRpoJnw/Y4u0vssKqgoopzubMHo2Ff3OcME3Ik8DSFFCnEnMGyY7j
fjBArjUWsJjYvzifbMVg98CskN2kCjDojK0Q2ep8tmR+N+/NXYvgIepmAGBmzqiv
gaGCKWQuklKxqen1HNe64RB33/qylAC2JYy2EV4mJRCGrAS3Kl4BTufrnAdVAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+Imm5cxme+ENqh8p2tOvUN2on18wHwYDVR0j
BBgwFoAUoJWppxgGlWyQXVz3y3l4Q9ItBLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmE4MTE4Mi03Y2ViLTQ2NWMtYTViNS1hMTRlYzczOWJmOTkvMC9BMDk1QTlBNzE4
MDY5NTZDOTA1RDVDRjdDQjc5Nzg0M0QyMkQwNEI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTA5NUE5QTcxODA2OTU2QzkwNUQ1Q0Y3Q0I3OTc4NDNEMjJE
MDRCOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2YTgxMTgyLTdjZWItNDY1Yy1h
NWI1LWExNGVjNzM5YmY5OS8wLzMxMzAzMzJlMzQyZTMxMzYzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnBKcwDQYJKoZIhvcN
AQELBQADggEBAIL/kVGOe5WiL1tP3yYJLwZPKkPiprXTSezqqnaJ5f4M+/P8r+I4
ivCm10A5QuCaJ7kCVFXQJN7rC2Lv1/lErci+QbIyLLNQQZMxgSkea5k1ck56YYcV
uZSAsTKUGhE41yvtj4b2KCXtHFIq6mRcroPmaIVFoYUJK01aIoVDPXlkLIZPAiaY
xSWfpg0+RIWPWjjonyHABzRolWCPZvlxi2GJTyt6cefHXOWPY6lvkQyhkqfDE6Yv
1N631Evp6KzfmouiVTXP3/h2KHQXTP8TOLcUArQNAzrDFtc53hzHGd6/M/wFfHWW
pbEsAoGQx6nZzv2L9qOGG7IfsFc9qwe9Z28=
-----END CERTIFICATE-----
Generated at Wed Apr 24 10:29:46 2024 by rpki-client on console-fra.rpki-client.org