Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa
File:                     3130332e3234362e302e302f32322d3234203d3e2039343232.roa (raw, json)
Hash identifier:          a83xqAHnIrIROPAmgZi5ByWKOtXBG5bEUwEOTQmYf5E=
Subject key identifier:   5B:1F:C6:94:46:1E:DA:ED:5E:CA:F6:8C:F1:16:29:58:2D:4D:A3:03
Certificate issuer:       /CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
Certificate serial:       1104FF001D4428C8664E5BF28CEAF765498CBCE2
Authority key identifier: 29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa
Signing time:             Mon 31 Jul 2023 00:08:38 +0000
ROA not before:           Mon 31 Jul 2023 00:03:38 +0000
ROA not after:            Mon 29 Jul 2024 00:08:38 +0000
asID:                     9422
IP address blocks:        103.246.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl
                          rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:04:ff:00:1d:44:28:c8:66:4e:5b:f2:8c:ea:f7:65:49:8c:bc:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=295CEF87CDB74B1A43287E630C3FE568272D2F33
        Validity
            Not Before: Jul 31 00:03:38 2023 GMT
            Not After : Jul 29 00:08:38 2024 GMT
        Subject: CN=5B1FC694461EDAED5ECAF68CF11629582D4DA303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1b:8d:53:ca:82:71:57:86:55:27:9d:2d:6f:
                    89:5d:de:ed:6e:c9:51:8d:bb:75:4a:2e:b9:df:93:
                    f0:a4:46:b8:68:9c:86:fe:b3:26:a4:fc:3f:02:6a:
                    97:ba:bb:b3:07:63:9e:c7:6a:5d:ce:fe:97:7a:e4:
                    5d:9f:92:e1:c4:f6:db:a7:45:a9:cb:bc:e5:6b:60:
                    12:f4:d6:98:db:e3:59:f6:96:eb:f8:e2:b7:d6:0b:
                    1f:c2:1d:34:d4:d0:f9:6f:81:23:92:7f:1d:45:32:
                    50:36:09:95:be:e7:98:19:b7:ae:27:26:e2:a1:f1:
                    6b:5f:4f:aa:bc:67:ec:77:37:59:97:93:6c:a3:14:
                    7f:95:47:b3:07:5e:b0:47:e5:9b:ee:45:87:10:53:
                    7b:18:38:89:a9:2c:07:d8:19:0b:20:fe:1a:6d:0c:
                    d4:55:7c:89:34:50:23:23:8a:02:fd:dc:18:6c:db:
                    9f:58:1e:f5:db:88:1f:ae:ca:6f:67:95:04:90:05:
                    9c:f7:02:04:3f:b2:08:59:ba:3e:f0:8a:5a:48:eb:
                    9c:27:c7:e0:27:11:14:50:f6:6a:40:c3:2d:e5:80:
                    d5:5a:f1:1d:33:cc:fa:35:91:ca:f2:34:7b:90:cf:
                    18:ef:78:32:8c:5e:30:91:ab:c1:91:75:dc:c0:20:
                    2c:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:1F:C6:94:46:1E:DA:ED:5E:CA:F6:8C:F1:16:29:58:2D:4D:A3:03
            X509v3 Authority Key Identifier:
                keyid:29:5C:EF:87:CD:B7:4B:1A:43:28:7E:63:0C:3F:E5:68:27:2D:2F:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/295CEF87CDB74B1A43287E630C3FE568272D2F33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/295CEF87CDB74B1A43287E630C3FE568272D2F33.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187d79ba-fb55-49a5-967b-1edc749d0128/0/3130332e3234362e302e302f32322d3234203d3e2039343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         85:3b:b5:14:c3:97:a2:f6:fe:bd:96:73:ba:1c:97:cf:bb:a0:
         2c:bf:cb:b5:82:6e:7e:19:db:03:ed:20:8d:05:17:eb:84:1c:
         df:5a:18:71:61:dd:42:b4:d2:8e:b1:95:95:3c:4c:16:de:8d:
         99:a9:4d:5a:20:c3:40:72:8e:20:ef:ab:d0:55:f2:5a:32:2c:
         49:80:52:e5:a9:21:01:a7:61:b5:9e:6f:72:db:75:3a:19:80:
         9a:22:e3:fe:cf:66:9c:a7:64:66:df:6c:b2:ea:6a:f6:a7:90:
         27:b5:4f:8b:f9:49:66:17:04:1c:2d:38:03:40:15:aa:a3:76:
         98:db:28:83:86:e3:eb:4f:ca:de:61:0e:95:a5:18:37:64:44:
         6c:98:4e:78:70:07:a8:45:5c:f4:15:ba:f2:4c:11:4b:3d:02:
         f7:de:4f:f1:02:f4:07:a7:47:0e:d1:7b:0d:2b:da:98:97:5b:
         cb:d1:34:20:72:b7:13:fe:db:ff:a7:d5:b6:06:12:f1:a7:b8:
         87:fd:11:5e:73:bd:b6:d3:87:19:ff:c3:39:b9:a9:23:64:fb:
         16:99:01:5f:d8:bf:63:9f:a2:ca:64:fc:93:29:c0:b8:76:cb:
         45:e4:63:42:8f:a6:5a:b9:59:e1:71:a7:1e:d9:0e:95:4c:72:
         e3:a8:76:f2
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUEQT/AB1EKMhmTlvyjOr3ZUmMvOIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1Njgy
NzJEMkYzMzAeFw0yMzA3MzEwMDAzMzhaFw0yNDA3MjkwMDA4MzhaMDMxMTAvBgNV
BAMTKDVCMUZDNjk0NDYxRURBRUQ1RUNBRjY4Q0YxMTYyOTU4MkQ0REEzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaG41TyoJxV4ZVJ50tb4ld3u1u
yVGNu3VKLrnfk/CkRrhonIb+syak/D8Cape6u7MHY57Hal3O/pd65F2fkuHE9tun
RanLvOVrYBL01pjb41n2luv44rfWCx/CHTTU0PlvgSOSfx1FMlA2CZW+55gZt64n
JuKh8WtfT6q8Z+x3N1mXk2yjFH+VR7MHXrBH5ZvuRYcQU3sYOImpLAfYGQsg/hpt
DNRVfIk0UCMjigL93Bhs259YHvXbiB+uym9nlQSQBZz3AgQ/sghZuj7wilpI65wn
x+AnERRQ9mpAwy3lgNVa8R0zzPo1kcryNHuQzxjveDKMXjCRq8GRddzAICxlAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUWx/GlEYe2u1eyvaM8RYpWC1NowMwHwYDVR0j
BBgwFoAUKVzvh823SxpDKH5jDD/laCctLzMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODdkNzliYS1mYjU1LTQ5YTUtOTY3Yi0xZWRjNzQ5ZDAxMjgvMC8yOTVDRUY4N0NE
Qjc0QjFBNDMyODdFNjMwQzNGRTU2ODI3MkQyRjMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjk1Q0VGODdDREI3NEIxQTQzMjg3RTYzMEMzRkU1NjgyNzJE
MkYzMy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTg3ZDc5YmEtZmI1NS00OWE1LTk2
N2ItMWVkYzc0OWQwMTI4LzAvMzEzMDMzMmUzMjM0MzYyZTMwMmUzMDJmMzIzMjJk
MzIzNDIwM2QzZTIwMzkzNDMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn9gAwDQYJKoZIhvcNAQEL
BQADggEBAIU7tRTDl6L2/r2Wc7ocl8+7oCy/y7WCbn4Z2wPtII0FF+uEHN9aGHFh
3UK00o6xlZU8TBbejZmpTVogw0ByjiDvq9BV8loyLEmAUuWpIQGnYbWeb3LbdToZ
gJoi4/7PZpynZGbfbLLqavankCe1T4v5SWYXBBwtOANAFaqjdpjbKIOG4+tPyt5h
DpWlGDdkRGyYTnhwB6hFXPQVuvJMEUs9AvfeT/EC9AenRw7Rew0r2piXW8vRNCBy
txP+2/+n1bYGEvGnuIf9EV5zvbbThxn/wzm5qSNk+xaZAV/Yv2Ofospk/JMpwLh2
y0XkY0KPplq5WeFxpx7ZDpVMcuOodvI=
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org