Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
File:                     3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (raw, json)
Hash identifier:          cFx4F318lmgqnqfVUsIIY+PXIESbpoeWbWeYkyG5ZuM=
Subject key identifier:   4F:D1:80:1D:C6:58:EA:C7:A0:DB:31:1D:D4:A6:CA:71:71:78:5B:89
Certificate issuer:       /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
Certificate serial:       26E13E06338FE3A348ACB4194A38311540A34BC4
Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa
Signing time:             Mon 31 Jul 2023 00:06:17 +0000
ROA not before:           Mon 31 Jul 2023 00:01:17 +0000
ROA not after:            Mon 29 Jul 2024 00:06:17 +0000
asID:                     138119
IP address blocks:        103.126.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl
                          rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Mar 2024 16:36:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:e1:3e:06:33:8f:e3:a3:48:ac:b4:19:4a:38:31:15:40:a3:4b:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137
        Validity
            Not Before: Jul 31 00:01:17 2023 GMT
            Not After : Jul 29 00:06:17 2024 GMT
        Subject: CN=4FD1801DC658EAC7A0DB311DD4A6CA7171785B89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:96:d4:00:1b:a5:1c:b5:f7:2a:13:46:c1:b0:
                    d0:aa:90:2b:02:f3:7c:82:a4:4d:ba:d2:90:e5:48:
                    95:be:33:64:52:cd:d7:ff:a0:b5:58:8a:57:70:c8:
                    b8:ec:d0:1e:00:a9:89:56:15:d5:db:c0:ef:86:a0:
                    c0:b8:ea:75:13:22:9a:86:da:c9:4e:15:f3:5d:33:
                    62:cc:6c:8e:29:68:cd:c0:d3:93:4a:2c:41:15:6b:
                    ef:50:21:31:f3:e2:30:c8:5c:7d:d9:fb:ce:46:84:
                    b6:37:97:29:58:8e:7d:e2:07:d5:52:6b:a6:98:9e:
                    46:6c:38:bf:64:a1:53:ee:c1:5a:46:5f:a2:71:ae:
                    c0:1a:00:d2:7a:40:98:49:8a:b2:78:96:80:43:40:
                    fe:35:57:71:8e:d5:fb:ff:89:05:6c:ef:77:05:ea:
                    78:81:26:2c:04:e1:f1:a2:bc:07:0a:2d:87:f0:f8:
                    0a:cc:75:82:e6:2e:2a:76:bb:ce:bd:e9:14:85:3c:
                    aa:00:8f:39:e7:f6:1f:06:df:e3:17:85:41:09:c9:
                    73:e5:91:e1:e7:f1:e6:99:7e:e1:8a:12:0e:3d:b7:
                    2f:64:46:35:3d:a0:a7:cc:fd:a8:d1:16:e2:18:6e:
                    99:d9:cb:84:7d:d8:c5:f3:2b:93:74:d0:97:a5:6c:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:D1:80:1D:C6:58:EA:C7:A0:DB:31:1D:D4:A6:CA:71:71:78:5B:89
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:23:f0:65:56:4e:62:11:9b:2f:5a:c6:ba:86:22:da:21:
         f7:ff:b1:ea:87:28:f6:e4:1d:3a:1c:a6:5c:88:cf:33:83:6f:
         db:f0:b3:86:b8:45:c2:cc:d9:9e:b1:3d:7e:a7:05:ac:b1:1f:
         fe:f9:3b:64:d0:d1:2c:a9:9a:04:3e:64:50:4f:bb:50:d7:b5:
         6a:2c:3b:e6:cd:5b:71:76:19:b9:b1:da:58:57:23:70:21:28:
         8f:ec:78:43:c3:6f:8e:92:b7:2b:b1:cf:df:ca:87:51:f7:78:
         66:7d:83:25:a7:64:06:7d:56:30:48:1d:bb:29:c7:4f:7b:2b:
         e6:4a:36:60:a0:1a:54:31:32:23:24:3b:6e:f5:73:05:e3:b5:
         03:72:93:34:88:62:f3:e0:11:7f:93:76:82:ac:b3:4d:d1:fd:
         a1:c4:ee:db:32:84:e7:51:85:58:48:b7:25:b6:8b:49:23:3d:
         6e:a2:d2:dd:7d:9e:65:d1:2b:70:77:24:b4:f3:1d:6f:33:d2:
         b2:d2:ae:19:ca:c3:fe:5e:aa:8d:55:29:19:53:e7:ac:82:fd:
         24:84:bb:c1:57:2c:45:11:7d:20:9a:e4:f5:11:d2:ee:f8:d5:
         ae:5c:80:09:8f:cb:17:b2:1e:12:b5:c3:bf:c5:91:8b:34:7e:
         d6:d7:24:fd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJuE+BjOP46NIrLQZSjgxFUCjS8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz
QTIzRDEzNzAeFw0yMzA3MzEwMDAxMTdaFw0yNDA3MjkwMDA2MTdaMDMxMTAvBgNV
BAMTKDRGRDE4MDFEQzY1OEVBQzdBMERCMzExREQ0QTZDQTcxNzE3ODVCODkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnltQAG6UctfcqE0bBsNCqkCsC
83yCpE260pDlSJW+M2RSzdf/oLVYildwyLjs0B4AqYlWFdXbwO+GoMC46nUTIpqG
2slOFfNdM2LMbI4paM3A05NKLEEVa+9QITHz4jDIXH3Z+85GhLY3lylYjn3iB9VS
a6aYnkZsOL9koVPuwVpGX6JxrsAaANJ6QJhJirJ4loBDQP41V3GO1fv/iQVs73cF
6niBJiwE4fGivAcKLYfw+ArMdYLmLip2u8696RSFPKoAjznn9h8G3+MXhUEJyXPl
keHn8eaZfuGKEg49ty9kRjU9oKfM/ajRFuIYbpnZy4R92MXzK5N00JelbDwFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUT9GAHcZY6seg2zEd1KbKcXF4W4kwHwYDVR0j
BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5
OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz
RDEzNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNmNmVhMjIxLTc3YjctNDc5MS1h
OGE4LWI1MTY0YjAwZjFjNS8wLzMxMzAzMzJlMzEzMjM2MmUzMjM4MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ34cMA0GCSqG
SIb3DQEBCwUAA4IBAQCWtiPwZVZOYhGbL1rGuoYi2iH3/7Hqhyj25B06HKZciM8z
g2/b8LOGuEXCzNmesT1+pwWssR/++Ttk0NEsqZoEPmRQT7tQ17VqLDvmzVtxdhm5
sdpYVyNwISiP7HhDw2+Okrcrsc/fyodR93hmfYMlp2QGfVYwSB27KcdPeyvmSjZg
oBpUMTIjJDtu9XMF47UDcpM0iGLz4BF/k3aCrLNN0f2hxO7bMoTnUYVYSLcltotJ
Iz1uotLdfZ5l0StwdyS08x1vM9Ky0q4ZysP+XqqNVSkZU+esgv0khLvBVyxFEX0g
muT1EdLu+NWuXIAJj8sXsh4StcO/xZGLNH7W1yT9
-----END CERTIFICATE-----
Generated at Wed Mar 27 01:50:18 2024 by rpki-client on console-ams.rpki-client.org