Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa
File:                     3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa (raw, json)
Hash identifier:          cbCMWmDy/SyxvggIQ8wPiksgaOatihhf6GyE/ZjF+qU=
Subject key identifier:   D6:72:82:74:27:EB:DE:A0:F4:31:43:83:3D:7B:41:B3:4D:69:74:3A
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       07F2C0149967F771C691B3EBA4198FF4C0B17C77
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:02 +0000
ROA not before:           Sun 30 Jul 2023 23:58:02 +0000
ROA not after:            Mon 29 Jul 2024 00:03:02 +0000
asID:                     131749
IP address blocks:        103.31.135.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f2:c0:14:99:67:f7:71:c6:91:b3:eb:a4:19:8f:f4:c0:b1:7c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:02 2023 GMT
            Not After : Jul 29 00:03:02 2024 GMT
        Subject: CN=D672827427EBDEA0F43143833D7B41B34D69743A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e0:19:46:40:f5:dd:22:87:5b:81:e2:9d:36:
                    80:8f:53:af:74:e1:d3:9d:ed:58:7e:50:a0:e3:e0:
                    9d:b0:ac:25:44:f8:fe:ef:f6:19:d6:e5:dc:fa:80:
                    b1:60:5d:39:3b:83:5c:3d:4f:79:f1:e4:22:00:3c:
                    da:23:50:b3:12:84:87:6a:cf:f0:fd:70:f1:43:b3:
                    02:4a:0d:76:b8:a8:92:dd:ea:43:ef:36:b1:c7:f8:
                    bc:50:d2:94:68:6a:8c:2c:c6:70:03:fe:e9:0b:59:
                    1a:66:1e:01:5f:64:09:ab:5c:00:80:d2:cf:14:36:
                    60:d3:45:7c:39:c1:dc:f5:ad:8a:9c:23:f3:10:16:
                    f2:82:e4:0b:22:c3:96:03:31:8e:6f:46:4d:f2:af:
                    7c:47:c7:80:75:a7:bd:0b:cc:12:69:a8:0b:69:9e:
                    7a:5c:50:95:97:28:c5:c5:fc:2a:13:33:bd:74:14:
                    46:d1:92:08:7e:50:3a:a0:1e:d9:19:f9:b0:7b:bd:
                    86:bf:1c:c4:69:77:2a:e3:5a:11:37:c8:31:0f:5a:
                    09:8c:37:73:65:77:36:ff:a6:c9:ca:71:2c:ce:d6:
                    08:12:4c:0f:2d:df:dd:03:9b:c3:9d:c2:30:ea:53:
                    05:e9:be:dd:30:d5:bf:c5:15:61:99:82:8f:58:69:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:72:82:74:27:EB:DE:A0:F4:31:43:83:3D:7B:41:B3:4D:69:74:3A
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133352e302f32342d3234203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:c5:19:2c:0c:18:58:ca:5f:ae:a8:00:76:1b:aa:2f:ba:0e:
         f8:e0:c3:c3:2a:71:81:3e:68:f3:2c:2a:2f:32:33:10:1a:79:
         21:2f:4e:9d:e3:f9:17:63:75:b5:51:b4:ac:cf:0c:13:b5:d8:
         b0:f2:e4:ba:ba:9c:1f:20:61:22:b9:95:3b:2c:6e:75:a4:5c:
         dd:60:42:42:af:cc:c6:3a:46:aa:98:8f:bf:4b:48:0c:87:e3:
         23:70:61:d1:fb:d3:81:a6:c5:19:da:46:d7:ee:38:26:fd:be:
         8c:91:ed:5c:09:19:da:7c:be:dc:48:0a:10:e3:ae:33:7f:64:
         2f:e0:8d:6d:e6:ed:1b:ca:69:d8:f6:cd:53:a5:e0:f6:6f:03:
         b2:c0:e8:b0:d5:20:e4:fc:97:e7:e5:fc:40:65:85:e8:5b:a6:
         88:5c:86:4c:26:44:c9:b2:8d:b2:97:ec:f0:a8:a7:ab:ae:ab:
         0e:1c:a8:5f:64:80:d7:c2:55:30:bb:8c:92:55:44:96:97:f1:
         b5:da:cd:1c:1e:cf:5d:88:8b:69:41:19:0f:35:d8:19:65:5e:
         44:b1:06:9b:68:5e:ad:c5:ed:84:42:bf:c0:91:15:bd:2e:36:
         9e:c9:80:24:b2:b9:96:fd:36:d6:78:20:7b:09:68:12:49:3b:
         c9:81:23:1a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUB/LAFJln93HGkbPrpBmP9MCxfHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5
NTIyNDZGRjAeFw0yMzA3MzAyMzU4MDJaFw0yNDA3MjkwMDAzMDJaMDMxMTAvBgNV
BAMTKEQ2NzI4Mjc0MjdFQkRFQTBGNDMxNDM4MzNEN0I0MUIzNEQ2OTc0M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk4BlGQPXdIodbgeKdNoCPU690
4dOd7Vh+UKDj4J2wrCVE+P7v9hnW5dz6gLFgXTk7g1w9T3nx5CIAPNojULMShIdq
z/D9cPFDswJKDXa4qJLd6kPvNrHH+LxQ0pRoaowsxnAD/ukLWRpmHgFfZAmrXACA
0s8UNmDTRXw5wdz1rYqcI/MQFvKC5Asiw5YDMY5vRk3yr3xHx4B1p70LzBJpqAtp
nnpcUJWXKMXF/CoTM710FEbRkgh+UDqgHtkZ+bB7vYa/HMRpdyrjWhE3yDEPWgmM
N3Nldzb/psnKcSzO1ggSTA8t390Dm8OdwjDqUwXpvt0w1b/FFWGZgo9YaccxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1nKCdCfr3qD0MUODPXtBs01pdDowHwYDVR0j
BBgwFoAUEP41sEDoo9BeW+m+5PCmNpUiRv8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MDBmNGYzNy1jN2ZiLTQ3ZDAtOGE4NS1lY2ZkMTJiOTE1ZjUvMC8xMEZFMzVCMDQw
RThBM0QwNUU1QkU5QkVFNEYwQTYzNjk1MjI0NkZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBGRTM1QjA0MEU4QTNEMDVFNUJFOUJFRTRGMEE2MzY5NTIy
NDZGRi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMwMGY0ZjM3LWM3ZmItNDdkMC04
YTg1LWVjZmQxMmI5MTVmNS8wLzMxMzAzMzJlMzMzMTJlMzEzMzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZx+HMA0GCSqG
SIb3DQEBCwUAA4IBAQBzxRksDBhYyl+uqAB2G6ovug744MPDKnGBPmjzLCovMjMQ
GnkhL06d4/kXY3W1UbSszwwTtdiw8uS6upwfIGEiuZU7LG51pFzdYEJCr8zGOkaq
mI+/S0gMh+MjcGHR+9OBpsUZ2kbX7jgm/b6Mke1cCRnafL7cSAoQ464zf2Qv4I1t
5u0bymnY9s1TpeD2bwOywOiw1SDk/Jfn5fxAZYXoW6aIXIZMJkTJso2yl+zwqKer
rqsOHKhfZIDXwlUwu4ySVUSWl/G12s0cHs9diItpQRkPNdgZZV5EsQabaF6txe2E
Qr/AkRW9LjaeyYAksrmW/TbWeCB7CWgSSTvJgSMa
-----END CERTIFICATE-----
Generated at Wed Apr 24 06:08:03 2024 by rpki-client on console-fra.rpki-client.org