Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          u4m0G0dflfL/obcN7YFCyyLVLyturu5yJ22VAGA3mGc=
Subject key identifier:   5F:E8:56:87:05:25:39:1A:F9:D1:C1:FC:7C:79:6E:39:12:E0:A8:69
Certificate issuer:       /CN=D1E28E396E82778793018513BD084854BE663886
Certificate serial:       12505E4D3CDB91DA1E6A89E69C5A422E7B524E56
Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa
Signing time:             Fri 15 Dec 2023 05:00:01 +0000
ROA not before:           Fri 15 Dec 2023 04:55:01 +0000
ROA not after:            Fri 13 Dec 2024 05:00:01 +0000
asID:                     4800
IP address blocks:        103.169.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl
                          rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 09:13:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:50:5e:4d:3c:db:91:da:1e:6a:89:e6:9c:5a:42:2e:7b:52:4e:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1E28E396E82778793018513BD084854BE663886
        Validity
            Not Before: Dec 15 04:55:01 2023 GMT
            Not After : Dec 13 05:00:01 2024 GMT
        Subject: CN=5FE856870525391AF9D1C1FC7C796E3912E0A869
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:d9:bc:e0:6f:9c:b8:a8:6e:01:ba:37:ee:48:
                    ac:16:fb:50:a2:74:51:02:8a:7c:f0:e9:7d:a9:46:
                    a7:3c:99:5c:cb:8a:72:6c:78:f9:86:1a:92:e2:97:
                    66:35:3a:d5:80:2d:3c:64:42:5e:b6:e7:ef:28:f0:
                    83:53:1b:5a:19:30:39:2a:d1:92:72:7b:83:bd:f9:
                    14:61:3e:47:ea:66:8f:f2:b6:56:10:a5:5e:ee:20:
                    22:f3:19:9b:7d:05:6b:83:aa:05:60:c0:94:62:58:
                    31:65:a1:2d:d1:2c:8f:86:bd:23:44:3f:29:42:45:
                    c5:84:dc:21:8c:9f:d0:6e:7c:8e:66:57:bb:b3:ef:
                    4b:75:32:1f:72:a1:c3:70:5d:2e:69:5c:6b:2a:7a:
                    b3:a3:82:1e:12:82:45:75:e5:a9:64:46:b2:30:44:
                    eb:78:74:76:3c:d7:18:06:af:9d:97:7e:c6:83:aa:
                    19:bb:cd:fb:a6:c3:dc:87:19:0e:3c:dc:33:d7:75:
                    10:dd:4d:96:b0:34:fb:b0:9f:7d:73:87:3b:a6:b8:
                    80:5f:00:99:8b:fc:ab:8c:96:99:91:8c:8c:08:b0:
                    dc:90:64:39:79:1d:50:3f:f3:5f:e0:42:08:f6:76:
                    25:f6:d1:33:ee:82:e3:23:51:c6:7e:49:99:4f:12:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E8:56:87:05:25:39:1A:F9:D1:C1:FC:7C:79:6E:39:12:E0:A8:69
            X509v3 Authority Key Identifier:
                keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:d1:5e:7f:dc:d0:de:a4:83:f9:24:26:40:af:86:c3:a1:6d:
         6a:db:87:95:49:52:ce:d5:72:e3:8b:12:37:87:4c:11:95:23:
         a6:d3:9d:b9:f5:42:44:4b:57:2d:52:bb:08:1e:e0:2d:8d:de:
         30:ce:2b:3c:05:73:4d:bc:c5:94:29:e1:8e:c2:9c:06:d4:46:
         8e:92:63:f8:bf:5d:0e:86:37:e4:55:cc:66:ee:87:0d:ad:14:
         75:0e:58:65:be:49:04:89:28:63:42:28:91:df:03:3f:93:f1:
         f3:5c:28:ed:55:76:d0:75:29:87:b7:96:5c:95:1d:7a:eb:fb:
         da:6c:1e:69:06:cb:f2:36:2f:7a:33:15:a9:77:86:c0:48:1f:
         73:0b:8a:e0:e7:a9:38:07:ab:93:c1:b2:de:7a:10:5b:c7:2a:
         79:62:d7:63:ea:e1:88:ed:bd:3d:83:a2:0e:3c:17:9d:81:9e:
         df:b9:7d:3d:1b:fe:cd:3e:fe:20:99:d7:62:38:dd:3d:56:e9:
         6c:95:05:0d:e5:0f:59:b5:9e:0b:bc:fe:d0:ad:c4:50:c5:bb:
         46:25:76:27:11:94:15:22:f7:40:66:e1:16:ae:4e:14:24:a7:
         df:27:ef:8e:b9:02:fb:c8:06:9c:73:e9:a0:d5:60:39:89:d7:
         d5:0d:8b:06
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUElBeTTzbkdoeaonmnFpCLntSTlYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC
RTY2Mzg4NjAeFw0yMzEyMTUwNDU1MDFaFw0yNDEyMTMwNTAwMDFaMDMxMTAvBgNV
BAMTKDVGRTg1Njg3MDUyNTM5MUFGOUQxQzFGQzdDNzk2RTM5MTJFMEE4NjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2bzgb5y4qG4BujfuSKwW+1Ci
dFECinzw6X2pRqc8mVzLinJsePmGGpLil2Y1OtWALTxkQl625+8o8INTG1oZMDkq
0ZJye4O9+RRhPkfqZo/ytlYQpV7uICLzGZt9BWuDqgVgwJRiWDFloS3RLI+GvSNE
PylCRcWE3CGMn9BufI5mV7uz70t1Mh9yocNwXS5pXGsqerOjgh4SgkV15alkRrIw
ROt4dHY81xgGr52XfsaDqhm7zfumw9yHGQ483DPXdRDdTZawNPuwn31zhzumuIBf
AJmL/KuMlpmRjIwIsNyQZDl5HVA/81/gQgj2diX20TPuguMjUcZ+SZlPEqbRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUX+hWhwUlORr50cH8fHluORLgqGkwHwYDVR0j
BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF
ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2
Mzg4Ni5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2ZDYxMTM1LTc1ZTQtNDZjNi1i
ZGRkLWZiYTY4MzRkY2U0MS8wLzMxMzAzMzJlMzEzNjM5MmUzMjMzMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM4MzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWep5jANBgkqhkiG
9w0BAQsFAAOCAQEACNFef9zQ3qSD+SQmQK+Gw6FtatuHlUlSztVy44sSN4dMEZUj
ptOdufVCREtXLVK7CB7gLY3eMM4rPAVzTbzFlCnhjsKcBtRGjpJj+L9dDoY35FXM
Zu6HDa0UdQ5YZb5JBIkoY0Iokd8DP5Px81wo7VV20HUph7eWXJUdeuv72mweaQbL
8jYvejMVqXeGwEgfcwuK4OepOAerk8Gy3noQW8cqeWLXY+rhiO29PYOiDjwXnYGe
37l9PRv+zT7+IJnXYjjdPVbpbJUFDeUPWbWeC7z+0K3EUMW7RiV2JxGUFSL3QGbh
Fq5OFCSn3yfvjrkC+8gGnHPpoNVgOYnX1Q2LBg==
-----END CERTIFICATE-----
Generated at Tue May 7 12:21:27 2024 by rpki-client on console-fra.rpki-client.org