Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
File:                     3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa (raw, json)
Hash identifier:          ZUjPAbLCVKW6oQ0Da3znQbaaNUYPHNJ70B0xbd1G9EE=
Subject key identifier:   44:9F:0A:CF:F3:66:8B:43:9F:05:2D:78:3C:C4:91:25:0E:E3:BC:E3
Certificate issuer:       /CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
Certificate serial:       5622561911AB570272906855225448D3F3987738
Authority key identifier: 01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa
Signing time:             Wed 05 Jul 2023 09:40:01 +0000
ROA not before:           Wed 05 Jul 2023 09:35:01 +0000
ROA not after:            Wed 03 Jul 2024 09:40:01 +0000
asID:                     56243
IP address blocks:        103.246.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl
                          rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 01:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:22:56:19:11:ab:57:02:72:90:68:55:22:54:48:d3:f3:98:77:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=012D2F59937FDBE65095B9EB4971D9D31EFDA93C
        Validity
            Not Before: Jul  5 09:35:01 2023 GMT
            Not After : Jul  3 09:40:01 2024 GMT
        Subject: CN=449F0ACFF3668B439F052D783CC491250EE3BCE3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:98:78:92:3e:d2:36:0b:73:34:b3:60:1a:85:
                    00:4b:be:24:b2:39:c5:40:87:43:4d:b8:50:31:00:
                    99:10:9c:98:92:ac:11:9e:2d:8a:c5:1b:a5:c3:67:
                    33:ea:8e:15:8f:49:cd:1d:c2:17:18:71:49:31:06:
                    bf:23:9d:55:16:f1:40:f7:b3:0c:17:fb:db:84:4e:
                    d1:fc:c3:8e:57:c3:d1:1c:49:87:79:84:18:27:ee:
                    d6:2f:10:4b:ce:21:67:65:32:e1:45:56:6d:f2:f8:
                    49:76:fd:71:d8:88:62:3b:37:ff:62:78:75:ee:fb:
                    07:2d:c7:2c:7b:e6:75:98:e0:d7:da:eb:d7:e3:92:
                    54:2c:dc:5d:94:13:af:bc:61:5d:83:dd:93:e8:10:
                    fc:6c:13:ab:98:03:b1:46:cb:1e:d7:64:09:8a:b3:
                    2d:5d:af:67:97:b1:e1:1c:71:0a:4a:88:a8:bd:2f:
                    b9:f6:58:4f:c7:ca:e4:b5:c8:e6:f6:45:41:0f:ba:
                    ea:71:f2:e6:40:27:c1:d0:4d:60:2d:83:e1:48:92:
                    c0:25:65:75:54:c5:46:2d:48:86:5d:36:e0:31:e2:
                    12:20:55:f4:fe:ab:c4:1e:63:04:b8:04:88:6b:7d:
                    a3:86:38:ab:f5:94:5b:c9:2b:b5:4f:b0:f9:38:92:
                    f4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:9F:0A:CF:F3:66:8B:43:9F:05:2D:78:3C:C4:91:25:0E:E3:BC:E3
            X509v3 Authority Key Identifier:
                keyid:01:2D:2F:59:93:7F:DB:E6:50:95:B9:EB:49:71:D9:D3:1E:FD:A9:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/012D2F59937FDBE65095B9EB4971D9D31EFDA93C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/186b3889-6966-45ef-9073-ad14011ac3b2/0/3130332e3234362e3131382e302f32342d3234203d3e203536323433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:6a:6d:8c:cd:cf:bd:b0:d6:ca:26:87:99:28:74:29:3a:bb:
         21:6a:0a:c1:7b:39:cc:79:ea:fd:a3:c5:1f:0b:67:4d:3a:71:
         53:90:26:56:ed:32:e6:f1:e2:f4:35:d3:ea:dc:17:58:06:b2:
         32:65:19:26:70:d2:71:22:8b:19:9b:bf:1d:b7:8a:8d:64:ab:
         03:9c:ef:6e:83:d0:f9:1f:8e:27:6c:c5:58:c7:66:f8:a5:4f:
         27:24:88:05:61:9d:80:a8:2e:1d:ed:0e:94:48:5c:0f:24:77:
         c4:da:a0:59:6d:4c:c1:46:48:9d:07:a6:59:eb:81:0f:f8:6e:
         c9:68:c6:40:54:24:d3:cc:63:1c:01:c6:56:82:2a:78:2d:64:
         e3:bb:c3:73:9a:df:ee:c9:61:30:50:f0:40:2f:c7:c6:ef:64:
         0f:54:d4:74:54:51:c0:8c:fd:4c:d9:dd:61:37:6e:32:6b:b5:
         30:c8:c2:a5:07:f4:ba:35:75:12:45:7b:29:c3:4e:3b:cb:6c:
         c6:17:de:01:72:b7:f3:1f:9d:ba:80:2b:e0:ee:67:89:80:f9:
         a3:16:85:ec:af:5b:cb:a7:cf:4f:d4:8b:60:c0:25:dd:52:98:
         bd:5b:e5:13:55:a7:c2:6b:36:90:74:35:ab:d3:76:80:83:8b:
         bc:97:9a:3a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUViJWGRGrVwJykGhVIlRI0/OYdzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMx
RUZEQTkzQzAeFw0yMzA3MDUwOTM1MDFaFw0yNDA3MDMwOTQwMDFaMDMxMTAvBgNV
BAMTKDQ0OUYwQUNGRjM2NjhCNDM5RjA1MkQ3ODNDQzQ5MTI1MEVFM0JDRTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrmHiSPtI2C3M0s2AahQBLviSy
OcVAh0NNuFAxAJkQnJiSrBGeLYrFG6XDZzPqjhWPSc0dwhcYcUkxBr8jnVUW8UD3
swwX+9uETtH8w45Xw9EcSYd5hBgn7tYvEEvOIWdlMuFFVm3y+El2/XHYiGI7N/9i
eHXu+wctxyx75nWY4Nfa69fjklQs3F2UE6+8YV2D3ZPoEPxsE6uYA7FGyx7XZAmK
sy1dr2eXseEccQpKiKi9L7n2WE/HyuS1yOb2RUEPuupx8uZAJ8HQTWAtg+FIksAl
ZXVUxUYtSIZdNuAx4hIgVfT+q8QeYwS4BIhrfaOGOKv1lFvJK7VPsPk4kvQ/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQURJ8Kz/Nmi0OfBS14PMSRJQ7jvOMwHwYDVR0j
BBgwFoAUAS0vWZN/2+ZQlbnrSXHZ0x79qTwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODZiMzg4OS02OTY2LTQ1ZWYtOTA3My1hZDE0MDExYWMzYjIvMC8wMTJEMkY1OTkz
N0ZEQkU2NTA5NUI5RUI0OTcxRDlEMzFFRkRBOTNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEyRDJGNTk5MzdGREJFNjUwOTVCOUVCNDk3MUQ5RDMxRUZE
QTkzQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4NmIzODg5LTY5NjYtNDVlZi05
MDczLWFkMTQwMTFhYzNiMi8wLzMxMzAzMzJlMzIzNDM2MmUzMTMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/Z2MA0GCSqG
SIb3DQEBCwUAA4IBAQAmam2Mzc+9sNbKJoeZKHQpOrshagrBeznMeer9o8UfC2dN
OnFTkCZW7TLm8eL0NdPq3BdYBrIyZRkmcNJxIosZm78dt4qNZKsDnO9ug9D5H44n
bMVYx2b4pU8nJIgFYZ2AqC4d7Q6USFwPJHfE2qBZbUzBRkidB6ZZ64EP+G7JaMZA
VCTTzGMcAcZWgip4LWTju8Nzmt/uyWEwUPBAL8fG72QPVNR0VFHAjP1M2d1hN24y
a7UwyMKlB/S6NXUSRXspw047y2zGF94BcrfzH526gCvg7meJgPmjFoXsr1vLp89P
1ItgwCXdUpi9W+UTVafCazaQdDWr03aAg4u8l5o6
-----END CERTIFICATE-----
Generated at Thu May 2 20:47:14 2024 by rpki-client on console-fra.rpki-client.org