Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa
File:                     3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa (raw, json)
Hash identifier:          KpqsHd1txZeYAI46/yZSEtRGNFxNP7F+jAZVZ1iPtz4=
Subject key identifier:   29:3E:49:EE:AD:E4:66:C0:A0:09:7B:B0:9B:E6:68:A3:D4:07:B9:02
Certificate issuer:       /CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
Certificate serial:       0AEB3CC72C8ED02884D2010A4665386CF94197A7
Authority key identifier: 6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa
Signing time:             Sat 02 Mar 2024 12:00:01 +0000
ROA not before:           Sat 02 Mar 2024 11:55:01 +0000
ROA not after:            Sat 01 Mar 2025 12:00:01 +0000
asID:                     131785
IP address blocks:        103.226.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl
                          rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:eb:3c:c7:2c:8e:d0:28:84:d2:01:0a:46:65:38:6c:f9:41:97:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D4B1748DE52DCE397B868772E128F7C58ACA8AB
        Validity
            Not Before: Mar  2 11:55:01 2024 GMT
            Not After : Mar  1 12:00:01 2025 GMT
        Subject: CN=293E49EEADE466C0A0097BB09BE668A3D407B902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a8:d9:17:3a:3d:aa:ee:45:99:b5:9d:34:95:
                    1e:97:54:86:40:c8:9b:96:fb:50:74:98:ab:35:52:
                    e4:ea:2d:a0:b3:8e:99:ff:48:b2:14:28:ae:aa:3a:
                    29:df:5c:1b:42:8e:47:b8:8d:17:b2:32:e8:53:53:
                    52:ac:fa:d7:17:35:94:d7:b2:0c:d8:da:f0:a9:c8:
                    5b:24:fd:ac:7e:49:4e:c3:96:cf:37:27:a5:0e:65:
                    b1:65:56:5e:a8:cf:8d:02:71:2b:e4:4e:f7:36:a5:
                    08:87:3a:88:0b:63:05:cf:29:3a:a0:e0:a3:f8:04:
                    c7:e0:ab:d9:51:af:83:ab:34:8d:c7:23:0f:ac:65:
                    16:6f:62:2e:43:dc:aa:b1:60:0e:de:99:dc:d3:63:
                    68:12:57:b4:76:12:56:61:dd:c5:fa:4f:7f:89:e2:
                    20:05:3c:ca:42:af:77:67:5e:14:91:e8:c7:85:ec:
                    0d:43:1e:d3:21:52:be:d4:2c:64:d6:40:87:cc:51:
                    5e:15:16:e0:9d:94:9c:b9:0b:62:f7:bd:c1:43:61:
                    62:ae:53:b3:83:e3:a7:70:d0:3d:65:10:d8:a8:b5:
                    1d:be:65:68:93:d3:1d:2e:01:67:95:af:16:1e:51:
                    79:65:6f:e7:39:5c:3b:87:e3:61:66:52:0f:98:3a:
                    ae:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:3E:49:EE:AD:E4:66:C0:A0:09:7B:B0:9B:E6:68:A3:D4:07:B9:02
            X509v3 Authority Key Identifier:
                keyid:6D:4B:17:48:DE:52:DC:E3:97:B8:68:77:2E:12:8F:7C:58:AC:A8:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D4B1748DE52DCE397B868772E128F7C58ACA8AB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24207523-d5f5-4acc-b0ac-bfb0954fa4e0/0/3130332e3232362e35352e302f32342d3234203d3e20313331373835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:fc:62:ed:8a:7d:3c:b7:d8:51:e2:c4:0c:7e:ea:b9:e3:5a:
         7d:f6:b9:7d:1e:f5:60:77:b3:4c:20:f6:bb:fc:05:b1:45:6e:
         71:85:e2:e5:f0:06:e5:17:34:b6:e1:46:fb:c3:ab:3e:41:1f:
         5f:07:b8:77:2f:ec:31:2c:bb:aa:24:8b:09:2e:55:94:c0:b8:
         e7:71:09:ef:6f:28:b2:b0:8b:5e:3c:0c:48:84:be:17:49:39:
         2a:0b:7e:db:c6:d5:40:43:21:c2:fc:40:53:94:e5:c6:a4:ca:
         f0:25:ec:07:00:9d:a1:f4:e1:c5:fc:c7:1d:34:4b:67:76:de:
         54:65:ab:54:da:67:e4:74:13:90:26:72:79:0e:11:87:97:f8:
         ee:2c:ad:d0:7f:23:d2:37:67:e7:a7:cc:22:78:e2:96:56:61:
         46:69:e6:74:87:72:e7:63:77:db:75:83:47:03:3a:90:f4:ff:
         e7:e3:cb:78:6f:09:29:8a:24:9b:2d:7e:c0:58:b8:a9:57:97:
         f3:24:08:e5:8d:d9:12:ce:6c:87:3c:ca:6b:f6:76:2a:c8:04:
         13:ec:97:a6:6e:57:41:02:3c:c0:53:59:21:c0:15:c1:ed:71:
         7e:5a:8a:0f:b8:a1:fa:f5:55:e8:50:55:b0:6e:a7:9f:23:fa:
         17:04:42:80
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCus8xyyO0CiE0gEKRmU4bPlBl6cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1
OEFDQThBQjAeFw0yNDAzMDIxMTU1MDFaFw0yNTAzMDExMjAwMDFaMDMxMTAvBgNV
BAMTKDI5M0U0OUVFQURFNDY2QzBBMDA5N0JCMDlCRTY2OEEzRDQwN0I5MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFqNkXOj2q7kWZtZ00lR6XVIZA
yJuW+1B0mKs1UuTqLaCzjpn/SLIUKK6qOinfXBtCjke4jReyMuhTU1Ks+tcXNZTX
sgzY2vCpyFsk/ax+SU7Dls83J6UOZbFlVl6oz40CcSvkTvc2pQiHOogLYwXPKTqg
4KP4BMfgq9lRr4OrNI3HIw+sZRZvYi5D3KqxYA7emdzTY2gSV7R2ElZh3cX6T3+J
4iAFPMpCr3dnXhSR6MeF7A1DHtMhUr7ULGTWQIfMUV4VFuCdlJy5C2L3vcFDYWKu
U7OD46dw0D1lENiotR2+ZWiT0x0uAWeVrxYeUXllb+c5XDuH42FmUg+YOq4fAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKT5J7q3kZsCgCXuwm+Zoo9QHuQIwHwYDVR0j
BBgwFoAUbUsXSN5S3OOXuGh3LhKPfFisqKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NDIwNzUyMy1kNWY1LTRhY2MtYjBhYy1iZmIwOTU0ZmE0ZTAvMC82RDRCMTc0OERF
NTJEQ0UzOTdCODY4NzcyRTEyOEY3QzU4QUNBOEFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQ0QjE3NDhERTUyRENFMzk3Qjg2ODc3MkUxMjhGN0M1OEFD
QThBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0MjA3NTIzLWQ1ZjUtNGFjYy1i
MGFjLWJmYjA5NTRmYTRlMC8wLzMxMzAzMzJlMzIzMjM2MmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+I3MA0GCSqG
SIb3DQEBCwUAA4IBAQBQ/GLtin08t9hR4sQMfuq541p99rl9HvVgd7NMIPa7/AWx
RW5xheLl8AblFzS24Ub7w6s+QR9fB7h3L+wxLLuqJIsJLlWUwLjncQnvbyiysIte
PAxIhL4XSTkqC37bxtVAQyHC/EBTlOXGpMrwJewHAJ2h9OHF/McdNEtndt5UZatU
2mfkdBOQJnJ5DhGHl/juLK3QfyPSN2fnp8wieOKWVmFGaeZ0h3LnY3fbdYNHAzqQ
9P/n48t4bwkpiiSbLX7AWLipV5fzJAjljdkSzmyHPMpr9nYqyAQT7JembldBAjzA
U1khwBXB7XF+WooPuKH69VXoUFWwbqefI/oXBEKA
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:34:54 2024 by rpki-client on console-ams.rpki-client.org