Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa
File:                     3130332e31382e37362e302f32322d3234203d3e203535373031.roa (raw, json)
Hash identifier:          +F5lnK/DcoKow6YUd/aKzsWqPPLw0E1bweJ+UicZtp8=
Subject key identifier:   93:60:FB:76:26:DD:CA:13:75:F0:07:C8:E2:7B:15:53:34:EF:4C:7B
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       613476330E36C4EC026226672C63331736787CA6
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa
Signing time:             Mon 31 Jul 2023 00:13:39 +0000
ROA not before:           Mon 31 Jul 2023 00:08:39 +0000
ROA not after:            Mon 29 Jul 2024 00:13:39 +0000
asID:                     55701
IP address blocks:        103.18.76.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 31 Mar 2024 16:28:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:34:76:33:0e:36:c4:ec:02:62:26:67:2c:63:33:17:36:78:7c:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jul 31 00:08:39 2023 GMT
            Not After : Jul 29 00:13:39 2024 GMT
        Subject: CN=9360FB7626DDCA1375F007C8E27B155334EF4C7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:39:62:26:f8:c7:fb:08:af:7f:99:df:f7:f1:
                    c7:4a:72:9d:f8:8a:31:05:02:64:8f:6d:55:9b:6a:
                    41:d2:40:a5:60:c7:48:9f:4b:93:15:15:ca:3d:1f:
                    d2:de:e4:23:10:e0:28:fc:ad:cc:df:85:3c:e0:ca:
                    55:1e:b6:3f:ed:9b:dc:a8:47:8b:3e:03:3f:27:e6:
                    51:8c:4d:65:e3:f4:26:ae:00:9e:3f:ea:b6:bc:c5:
                    e3:44:a2:83:c3:dd:c5:57:66:5a:11:9c:92:c9:fc:
                    ea:76:0d:02:a7:57:72:61:6e:e8:cb:33:5b:09:22:
                    b7:ed:6a:dc:b2:9b:a2:7b:16:77:60:0b:92:3e:f4:
                    c1:4c:68:b7:82:01:da:35:fd:22:ef:79:71:f4:18:
                    a1:da:15:e9:c3:bc:bc:d4:b8:99:1c:aa:3b:7a:ef:
                    a8:6e:80:7c:f5:56:86:c9:b1:63:7d:80:14:61:9a:
                    35:09:e3:18:da:c3:c3:b5:59:a2:d7:58:18:3f:2b:
                    31:66:91:ff:25:e6:fd:14:93:67:a9:5f:82:52:74:
                    36:80:2b:dd:91:ca:7b:b6:8d:ed:12:60:e7:d8:9b:
                    37:ae:f5:f9:3f:d6:d8:8c:61:c3:b4:97:44:c8:79:
                    2b:7d:53:a2:a2:6f:7f:5f:d6:c4:19:9c:dd:2b:0d:
                    3c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:60:FB:76:26:DD:CA:13:75:F0:07:C8:E2:7B:15:53:34:EF:4C:7B
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e31382e37362e302f32322d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.76.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:50:b6:be:d6:aa:1a:b1:13:1a:59:93:19:c3:34:f7:a0:d6:
         98:c9:db:63:20:32:21:90:aa:6c:df:9d:61:8f:82:4e:e7:ce:
         9b:fa:22:17:ae:1a:03:fc:d5:14:ca:34:f7:8d:90:5e:a5:19:
         07:6f:42:17:22:37:51:95:8d:b1:b5:b6:cf:e3:6b:f3:00:0a:
         84:7c:ad:08:3b:1a:b0:ee:1a:78:00:23:2d:46:2f:12:24:51:
         56:3c:96:16:fb:71:6b:bb:3f:05:a2:02:77:64:5b:61:b7:1a:
         c9:2d:75:ae:05:e3:27:5c:79:07:54:b4:27:88:14:9e:0d:c8:
         8c:20:91:ab:58:18:3b:c6:02:a8:98:23:b9:0b:04:63:58:d5:
         f2:bd:6f:92:6e:34:91:df:d9:8d:dc:6f:02:62:94:b1:5d:b3:
         7a:00:b8:d2:db:1c:37:cf:d0:95:6a:1f:91:61:1f:fd:67:ff:
         7a:64:b0:06:03:5c:d9:11:f3:83:52:20:e6:d4:75:91:50:fe:
         a7:bd:48:d4:bb:c5:ac:4a:ae:84:9f:bc:a2:16:aa:93:5c:79:
         c3:c4:af:c3:62:a6:ec:3b:28:f1:6e:ca:9a:30:24:a0:3b:2b:
         ef:2c:72:5a:62:ce:c1:ac:20:28:b5:b1:51:0f:ae:0b:fe:b2:
         2c:59:3e:4c
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYTR2Mw42xOwCYiZnLGMzFzZ4fKYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yMzA3MzEwMDA4MzlaFw0yNDA3MjkwMDEzMzlaMDMxMTAvBgNV
BAMTKDkzNjBGQjc2MjZERENBMTM3NUYwMDdDOEUyN0IxNTUzMzRFRjRDN0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5OWIm+Mf7CK9/md/38cdKcp34
ijEFAmSPbVWbakHSQKVgx0ifS5MVFco9H9Le5CMQ4Cj8rczfhTzgylUetj/tm9yo
R4s+Az8n5lGMTWXj9CauAJ4/6ra8xeNEooPD3cVXZloRnJLJ/Op2DQKnV3JhbujL
M1sJIrftatyym6J7FndgC5I+9MFMaLeCAdo1/SLveXH0GKHaFenDvLzUuJkcqjt6
76hugHz1VobJsWN9gBRhmjUJ4xjaw8O1WaLXWBg/KzFmkf8l5v0Uk2epX4JSdDaA
K92Rynu2je0SYOfYmzeu9fk/1tiMYcO0l0TIeSt9U6Kib39f1sQZnN0rDTx1AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUk2D7dibdyhN18AfI4nsVUzTvTHswHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMxMzAzMzJlMzEzODJlMzczNjJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDM1MzUzNzMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnEkwwDQYJKoZIhvcN
AQELBQADggEBAHVQtr7WqhqxExpZkxnDNPeg1pjJ22MgMiGQqmzfnWGPgk7nzpv6
IheuGgP81RTKNPeNkF6lGQdvQhciN1GVjbG1ts/ja/MACoR8rQg7GrDuGngAIy1G
LxIkUVY8lhb7cWu7PwWiAndkW2G3Gsktda4F4ydceQdUtCeIFJ4NyIwgkatYGDvG
AqiYI7kLBGNY1fK9b5JuNJHf2Y3cbwJilLFds3oAuNLbHDfP0JVqH5FhH/1n/3pk
sAYDXNkR84NSIObUdZFQ/qe9SNS7xaxKroSfvKIWqpNcecPEr8Nipuw7KPFuypow
JKA7K+8sclpizsGsICi1sVEPrgv+sixZPkw=
-----END CERTIFICATE-----
Generated at Fri Mar 29 11:25:30 2024 by rpki-client on console-fra.rpki-client.org