Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa
File:                     3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa (raw, json)
Hash identifier:          U9UbkGgkqli4+PycYhXMCjqHxStzZoKf4RJptkP1b54=
Subject key identifier:   37:DE:32:54:63:4D:8D:1E:A7:AF:E8:85:72:94:8B:6E:D8:9E:05:79
Certificate issuer:       /CN=4FA812FE6A4A85F790CB2740EF08836883716912
Certificate serial:       7C520E34836660C300645F96FE3C67E3C03E688A
Authority key identifier: 4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa
Signing time:             Fri 08 Sep 2023 06:00:00 +0000
ROA not before:           Fri 08 Sep 2023 05:55:00 +0000
ROA not after:            Fri 06 Sep 2024 06:00:00 +0000
asID:                     131767
IP address blocks:        103.90.196.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl
                          rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:18:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:52:0e:34:83:66:60:c3:00:64:5f:96:fe:3c:67:e3:c0:3e:68:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4FA812FE6A4A85F790CB2740EF08836883716912
        Validity
            Not Before: Sep  8 05:55:00 2023 GMT
            Not After : Sep  6 06:00:00 2024 GMT
        Subject: CN=37DE3254634D8D1EA7AFE88572948B6ED89E0579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:11:91:e5:70:0f:84:bf:ad:84:3b:d8:5f:48:
                    fd:16:be:c0:84:c0:88:9a:5d:41:b3:a2:04:13:09:
                    6b:70:ca:ae:e6:15:01:d2:1e:f1:3c:9d:7e:a4:5e:
                    84:f0:09:07:57:ab:89:81:b5:99:d4:8b:f6:7c:7e:
                    53:cb:6b:ca:d3:a9:d8:33:c7:cf:0d:5e:1c:a6:7a:
                    00:52:5e:e5:62:55:51:da:cf:28:5a:fa:48:89:09:
                    fe:df:4a:90:23:3a:54:dd:60:3c:94:c8:94:7e:6c:
                    48:95:1e:48:da:55:2a:58:9f:23:d9:3e:7f:0b:74:
                    c4:6f:54:58:59:97:a2:a4:6f:8f:c1:85:f5:75:86:
                    0d:21:88:d9:c4:6f:90:1c:c1:13:3c:c4:f1:b7:9d:
                    a9:b2:88:4d:f9:4d:3b:de:53:75:aa:bd:87:48:b4:
                    f9:d8:7d:a1:f0:f7:73:11:19:e5:f9:19:fc:2b:1c:
                    48:af:34:73:ce:92:0a:7d:50:d6:4a:8c:01:ca:e8:
                    21:64:82:15:0c:23:06:6e:83:8a:ac:31:d5:b3:99:
                    ef:3a:d5:5d:39:a0:e9:d9:59:11:b6:1c:d5:f2:0b:
                    5f:69:a8:69:64:7e:c8:2a:cb:53:df:50:d5:c4:29:
                    44:7d:5c:70:e6:67:6b:d4:ac:01:71:36:e7:ea:a1:
                    44:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:DE:32:54:63:4D:8D:1E:A7:AF:E8:85:72:94:8B:6E:D8:9E:05:79
            X509v3 Authority Key Identifier:
                keyid:4F:A8:12:FE:6A:4A:85:F7:90:CB:27:40:EF:08:83:68:83:71:69:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/4FA812FE6A4A85F790CB2740EF08836883716912.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4FA812FE6A4A85F790CB2740EF08836883716912.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/24d108f7-08b2-409f-8a70-a9c67ae5ed22/0/3130332e39302e3139362e302f32322d3234203d3e20313331373637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:bc:30:6a:e9:9c:50:45:11:57:c7:12:fa:45:ca:ad:82:
         cc:51:96:ad:ac:dc:21:ad:d4:8f:62:7d:49:5c:f0:52:d7:8a:
         2d:72:f8:32:21:87:43:c5:37:99:47:8a:8c:9d:de:7a:13:9a:
         f5:45:5a:d0:c9:25:ce:16:4b:8d:0c:34:ee:f4:0b:ca:42:56:
         f4:3b:81:6d:6c:a0:73:31:f0:3f:be:a0:b8:e7:76:7c:a4:d5:
         a0:81:fe:98:fa:ce:8b:1b:e7:45:25:9d:59:ea:7a:46:60:a6:
         1f:41:c0:f1:d2:a0:89:6a:7b:2d:73:21:5d:94:a0:63:5a:74:
         b4:e6:5b:13:5e:ad:1d:eb:8e:bd:70:d7:d6:1f:2e:b1:83:54:
         39:71:a6:11:41:77:ba:49:7c:63:54:44:1d:15:4f:89:64:4b:
         83:1f:98:f2:9b:a9:be:74:80:e9:1c:8a:4c:2e:b7:1c:1c:76:
         58:32:fd:ba:7f:67:a1:9a:0c:51:e1:78:c8:91:eb:ce:5f:59:
         c0:b2:9e:ab:b8:3c:85:7d:60:ad:f4:e9:53:1e:93:86:e8:b9:
         db:4c:6f:ee:a5:7a:54:e3:af:b8:99:2d:2a:7d:4c:b4:5c:cc:
         f8:a3:cf:04:43:b2:fb:0c:78:97:48:f3:dc:58:67:41:de:af:
         fb:4d:17:16
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUfFIONINmYMMAZF+W/jxn48A+aIowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4
MzcxNjkxMjAeFw0yMzA5MDgwNTU1MDBaFw0yNDA5MDYwNjAwMDBaMDMxMTAvBgNV
BAMTKDM3REUzMjU0NjM0RDhEMUVBN0FGRTg4NTcyOTQ4QjZFRDg5RTA1NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5EZHlcA+Ev62EO9hfSP0WvsCE
wIiaXUGzogQTCWtwyq7mFQHSHvE8nX6kXoTwCQdXq4mBtZnUi/Z8flPLa8rTqdgz
x88NXhymegBSXuViVVHazyha+kiJCf7fSpAjOlTdYDyUyJR+bEiVHkjaVSpYnyPZ
Pn8LdMRvVFhZl6Kkb4/BhfV1hg0hiNnEb5AcwRM8xPG3namyiE35TTveU3WqvYdI
tPnYfaHw93MRGeX5GfwrHEivNHPOkgp9UNZKjAHK6CFkghUMIwZug4qsMdWzme86
1V05oOnZWRG2HNXyC19pqGlkfsgqy1PfUNXEKUR9XHDmZ2vUrAFxNufqoURxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUN94yVGNNjR6nr+iFcpSLbtieBXkwHwYDVR0j
BBgwFoAUT6gS/mpKhfeQyydA7wiDaINxaRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NGQxMDhmNy0wOGIyLTQwOWYtOGE3MC1hOWM2N2FlNWVkMjIvMC80RkE4MTJGRTZB
NEE4NUY3OTBDQjI3NDBFRjA4ODM2ODgzNzE2OTEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEZBODEyRkU2QTRBODVGNzkwQ0IyNzQwRUYwODgzNjg4Mzcx
NjkxMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI0ZDEwOGY3LTA4YjItNDA5Zi04
YTcwLWE5YzY3YWU1ZWQyMi8wLzMxMzAzMzJlMzkzMDJlMzEzOTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ1rEMA0GCSqG
SIb3DQEBCwUAA4IBAQCmg7wwaumcUEURV8cS+kXKrYLMUZatrNwhrdSPYn1JXPBS
14otcvgyIYdDxTeZR4qMnd56E5r1RVrQySXOFkuNDDTu9AvKQlb0O4FtbKBzMfA/
vqC453Z8pNWggf6Y+s6LG+dFJZ1Z6npGYKYfQcDx0qCJanstcyFdlKBjWnS05lsT
Xq0d6469cNfWHy6xg1Q5caYRQXe6SXxjVEQdFU+JZEuDH5jym6m+dIDpHIpMLrcc
HHZYMv26f2ehmgxR4XjIkevOX1nAsp6ruDyFfWCt9OlTHpOG6LnbTG/upXpU46+4
mS0qfUy0XMz4o88EQ7L7DHiXSPPcWGdB3q/7TRcW
-----END CERTIFICATE-----
Generated at Thu May 2 03:10:51 2024 by rpki-client on console-ams.rpki-client.org