Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e32322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          MNHbYnTgL0SGTGYHdvhoKXGC6Rg2+Vp4a6GwXg0eb1w=
Subject key identifier:   26:39:DA:67:21:4F:B0:E4:F2:51:2A:03:B6:E3:F0:AE:11:85:ED:DC
Certificate issuer:       /CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
Certificate serial:       7507B2694AB7B8672D03FD7FC7DBE00F0A6E1836
Authority key identifier: 67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 10:01:49 +0000
ROA not before:           Fri 01 Sep 2023 09:56:49 +0000
ROA not after:            Fri 30 Aug 2024 10:01:49 +0000
asID:                     17995
IP address blocks:        103.167.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl
                          rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 02:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:07:b2:69:4a:b7:b8:67:2d:03:fd:7f:c7:db:e0:0f:0a:6e:18:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E
        Validity
            Not Before: Sep  1 09:56:49 2023 GMT
            Not After : Aug 30 10:01:49 2024 GMT
        Subject: CN=2639DA67214FB0E4F2512A03B6E3F0AE1185EDDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:e8:b8:2d:41:cd:5e:00:7c:30:e3:46:65:22:
                    11:98:3f:30:04:b3:fe:50:62:90:fa:86:6e:de:00:
                    ec:f1:49:af:57:0a:f5:5c:9c:4e:83:f9:53:a3:a0:
                    ec:a8:20:5e:30:33:87:a5:fe:f2:21:73:50:5e:4c:
                    7c:cf:4b:92:ac:5b:3b:e6:ec:96:72:2a:75:18:74:
                    79:28:79:a9:c0:3e:ef:a6:cc:51:2b:01:a6:b9:77:
                    38:16:f7:e1:05:2f:4b:85:5e:de:39:4a:b4:fd:28:
                    70:c1:55:72:25:da:25:15:f0:37:76:a4:ef:55:36:
                    0e:5d:41:6b:6d:db:41:50:71:b8:b1:10:9e:68:db:
                    2e:06:ca:ec:43:0e:71:7f:23:c8:00:30:38:57:5c:
                    79:aa:3a:f3:15:98:3d:69:95:60:91:1a:ce:ff:30:
                    d9:bf:1f:b4:e1:07:bc:dd:94:d7:08:e8:2d:cc:e0:
                    f5:95:83:ed:76:90:51:c3:79:bb:81:f3:d7:64:bc:
                    91:f5:4c:25:70:be:43:6d:df:ef:56:3e:6f:d6:24:
                    1b:f0:e3:90:52:8b:a0:5c:b1:64:98:51:81:eb:77:
                    44:c0:01:94:e3:04:a3:64:c6:77:75:43:3a:54:64:
                    1d:0b:b2:32:a2:96:15:39:65:1e:46:24:47:14:b1:
                    5c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:39:DA:67:21:4F:B0:E4:F2:51:2A:03:B6:E3:F0:AE:11:85:ED:DC
            X509v3 Authority Key Identifier:
                keyid:67:75:D0:05:3C:ED:1C:5F:FF:BB:3D:5E:F0:FD:EC:48:05:2F:23:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6775D0053CED1C5FFFBB3D5EF0FDEC48052F233E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/181e305b-0039-4b0e-8c59-2423280b7c3c/0/3130332e3136372e32322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:64:aa:2b:68:dc:33:66:6c:ae:16:71:b6:50:f9:9a:11:99:
         44:d4:52:0d:ec:89:66:4f:a7:58:69:34:84:ea:df:30:01:dd:
         18:69:28:b0:f8:5c:33:9d:dd:ef:b3:05:1a:08:92:c0:20:74:
         8a:7a:c7:41:ee:61:d6:11:ff:cb:3e:43:ed:d1:b6:c1:d6:e9:
         a4:b1:5f:27:3e:bf:07:af:7c:74:d0:55:24:28:43:47:bc:33:
         ae:37:ae:78:f6:fa:03:80:55:f9:32:ed:dd:2e:db:1e:c5:bd:
         e4:51:bd:7f:a6:17:4a:91:c5:ec:79:c7:ba:45:7e:a8:93:b6:
         9d:b1:d3:2a:b6:de:71:e1:8b:3d:7c:bf:e8:2f:32:ee:71:d6:
         c2:3a:19:10:92:eb:27:a9:b5:9e:ad:66:4e:8e:da:49:82:37:
         65:5b:02:d3:fc:81:2a:ff:ae:9f:a2:5e:92:24:7d:cd:87:03:
         77:e1:7a:e5:2b:cc:df:1e:04:d2:cd:89:d6:36:14:a5:f1:4d:
         2b:4a:16:be:4d:9f:d3:1d:3b:54:9f:a5:14:9e:10:d1:55:27:
         70:59:3e:77:76:a2:ad:d1:52:00:08:83:69:37:d4:ed:48:59:
         22:7e:ff:db:e6:ce:3d:0f:b0:a4:9c:36:55:94:9c:6f:60:39:
         96:51:ac:31
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUdQeyaUq3uGctA/1/x9vgDwpuGDYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjc3NUQwMDUzQ0VEMUM1RkZGQkIzRDVFRjBGREVDNDgw
NTJGMjMzRTAeFw0yMzA5MDEwOTU2NDlaFw0yNDA4MzAxMDAxNDlaMDMxMTAvBgNV
BAMTKDI2MzlEQTY3MjE0RkIwRTRGMjUxMkEwM0I2RTNGMEFFMTE4NUVEREMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa6LgtQc1eAHww40ZlIhGYPzAE
s/5QYpD6hm7eAOzxSa9XCvVcnE6D+VOjoOyoIF4wM4el/vIhc1BeTHzPS5KsWzvm
7JZyKnUYdHkoeanAPu+mzFErAaa5dzgW9+EFL0uFXt45SrT9KHDBVXIl2iUV8Dd2
pO9VNg5dQWtt20FQcbixEJ5o2y4GyuxDDnF/I8gAMDhXXHmqOvMVmD1plWCRGs7/
MNm/H7ThB7zdlNcI6C3M4PWVg+12kFHDebuB89dkvJH1TCVwvkNt3+9WPm/WJBvw
45BSi6BcsWSYUYHrd0TAAZTjBKNkxnd1QzpUZB0LsjKilhU5ZR5GJEcUsVzhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJjnaZyFPsOTyUSoDtuPwrhGF7dwwHwYDVR0j
BBgwFoAUZ3XQBTztHF//uz1e8P3sSAUvIz4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODFlMzA1Yi0wMDM5LTRiMGUtOGM1OS0yNDIzMjgwYjdjM2MvMC82Nzc1RDAwNTND
RUQxQzVGRkZCQjNENUVGMEZERUM0ODA1MkYyMzNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjc3NUQwMDUzQ0VEMUM1RkZGQkIzRDVFRjBGREVDNDgwNTJG
MjMzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4MWUzMDViLTAwMzktNGIwZS04
YzU5LTI0MjMyODBiN2MzYy8wLzMxMzAzMzJlMzEzNjM3MmUzMjMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWenFjANBgkqhkiG
9w0BAQsFAAOCAQEAg2SqK2jcM2ZsrhZxtlD5mhGZRNRSDeyJZk+nWGk0hOrfMAHd
GGkosPhcM53d77MFGgiSwCB0inrHQe5h1hH/yz5D7dG2wdbppLFfJz6/B698dNBV
JChDR7wzrjeuePb6A4BV+TLt3S7bHsW95FG9f6YXSpHF7HnHukV+qJO2nbHTKrbe
ceGLPXy/6C8y7nHWwjoZEJLrJ6m1nq1mTo7aSYI3ZVsC0/yBKv+un6JekiR9zYcD
d+F65SvM3x4E0s2J1jYUpfFNK0oWvk2f0x07VJ+lFJ4Q0VUncFk+d3airdFSAAiD
aTfU7UhZIn7/2+bOPQ+wpJw2VZScb2A5llGsMQ==
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:12:40 2024 by rpki-client on console-ams.rpki-client.org