Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
File:                     3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa (raw, json)
Hash identifier:          Kaeoh1HesBUhf4G2Wu9QiMSZN7zVvk9VlXU3wdaVzp8=
Subject key identifier:   B5:8B:AF:C3:73:AC:30:FA:C4:0D:A5:A6:A2:89:FD:BE:B9:DB:28:FB
Certificate issuer:       /CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
Certificate serial:       5734E97F9A78B010B8E224177D2C783CD295D391
Authority key identifier: 0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa
Signing time:             Mon 31 Jul 2023 00:08:14 +0000
ROA not before:           Mon 31 Jul 2023 00:03:14 +0000
ROA not after:            Mon 29 Jul 2024 00:08:14 +0000
asID:                     38758
IP address blocks:        103.231.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl
                          rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 06:58:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:34:e9:7f:9a:78:b0:10:b8:e2:24:17:7d:2c:78:3c:d2:95:d3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C58EE25E7BF70128274D39368F0EADEB0C624BC
        Validity
            Not Before: Jul 31 00:03:14 2023 GMT
            Not After : Jul 29 00:08:14 2024 GMT
        Subject: CN=B58BAFC373AC30FAC40DA5A6A289FDBEB9DB28FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:c7:4b:e8:74:3b:47:0c:13:b6:87:fa:3f:
                    fa:42:45:54:02:5e:02:a8:30:05:bd:d3:e0:79:d9:
                    8a:42:10:a3:1d:f7:be:49:4e:75:1f:cb:2b:08:d9:
                    00:a5:c5:95:bd:2f:9b:6f:15:59:c9:be:2f:ad:1d:
                    59:3b:fd:93:32:08:6c:d8:c7:66:2e:9b:d2:36:51:
                    67:6a:be:c1:0a:e2:a3:ba:b6:32:7d:90:11:b3:19:
                    b0:6e:ab:0e:8b:f9:0e:a8:4e:33:a7:92:86:f1:e7:
                    c4:6d:b7:f2:95:81:85:27:dc:af:89:ca:f3:8e:39:
                    31:26:3a:27:1a:07:f4:81:4b:69:17:99:0f:01:6d:
                    88:6a:06:ef:ad:d1:1b:79:e1:b6:9a:0d:b5:54:c5:
                    a1:7d:e5:03:33:7b:a7:5d:2d:a0:9f:75:e1:c1:46:
                    26:a0:aa:60:0c:0c:03:e5:82:ad:03:2d:90:cd:58:
                    1d:9a:52:50:f9:4f:42:7f:94:db:40:9a:91:6f:73:
                    29:fb:d3:63:59:2e:8c:94:bf:33:f5:53:f7:a2:a1:
                    ef:c3:53:a5:32:b9:f1:39:f0:aa:32:b6:7d:13:71:
                    92:3c:b0:63:0c:d2:66:bb:f1:3d:e0:d7:3a:4f:85:
                    84:ff:99:5e:b4:9d:76:10:ca:98:8c:3a:1c:27:13:
                    e0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:8B:AF:C3:73:AC:30:FA:C4:0D:A5:A6:A2:89:FD:BE:B9:DB:28:FB
            X509v3 Authority Key Identifier:
                keyid:0C:58:EE:25:E7:BF:70:12:82:74:D3:93:68:F0:EA:DE:B0:C6:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/0C58EE25E7BF70128274D39368F0EADEB0C624BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0C58EE25E7BF70128274D39368F0EADEB0C624BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44a2322f-f351-428d-a747-90dfd322b541/0/3130332e3233312e3139362e302f32332d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:44:bf:67:10:4a:02:4e:14:df:e0:c2:b1:03:30:32:3a:19:
         65:35:9d:c1:8b:b3:65:76:a7:6e:4e:dc:c2:43:69:e2:9c:1f:
         1d:26:1d:88:b1:3a:74:9f:f9:fb:8a:43:d8:89:e4:0a:5e:dc:
         fc:e3:d5:48:4a:9f:ac:be:bc:ea:e2:44:5a:b3:03:50:04:94:
         63:25:ce:a4:c0:fd:f9:9c:82:c7:ff:20:01:e6:c6:05:78:1f:
         0b:34:98:fe:16:71:88:d6:55:aa:86:34:0b:69:28:cf:7c:12:
         53:43:20:e7:2e:e2:b7:f4:ab:2d:c9:db:8e:85:85:61:f6:a9:
         c2:84:d3:1b:d2:2a:48:a5:ed:8e:d6:0c:93:37:dc:41:ff:82:
         97:e6:2b:51:3d:52:0e:25:6c:53:8b:a4:88:8c:df:5d:7c:85:
         b2:96:d9:16:30:0f:6d:dc:fe:57:bf:35:5b:32:a6:a2:83:db:
         12:f3:89:93:ee:d8:77:e7:99:d5:cc:95:e8:7a:3a:51:dd:de:
         d9:14:f5:4f:5a:fb:70:4f:3b:f0:27:a7:84:ef:2d:2b:b9:a5:
         0f:4a:18:c7:d7:b1:44:ba:66:aa:31:5b:43:b6:4f:88:38:49:
         8f:21:ac:19:db:d7:e3:a6:d3:da:62:34:f4:ef:11:8d:5f:83:
         c4:b3:53:2e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVzTpf5p4sBC44iQXfSx4PNKV05EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEM1OEVFMjVFN0JGNzAxMjgyNzREMzkzNjhGMEVBREVC
MEM2MjRCQzAeFw0yMzA3MzEwMDAzMTRaFw0yNDA3MjkwMDA4MTRaMDMxMTAvBgNV
BAMTKEI1OEJBRkMzNzNBQzMwRkFDNDBEQTVBNkEyODlGREJFQjlEQjI4RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklsdL6HQ7RwwTtof6P/pCRVQC
XgKoMAW90+B52YpCEKMd975JTnUfyysI2QClxZW9L5tvFVnJvi+tHVk7/ZMyCGzY
x2Yum9I2UWdqvsEK4qO6tjJ9kBGzGbBuqw6L+Q6oTjOnkobx58Rtt/KVgYUn3K+J
yvOOOTEmOicaB/SBS2kXmQ8BbYhqBu+t0Rt54baaDbVUxaF95QMze6ddLaCfdeHB
RiagqmAMDAPlgq0DLZDNWB2aUlD5T0J/lNtAmpFvcyn702NZLoyUvzP1U/eioe/D
U6UyufE58Koytn0TcZI8sGMM0ma78T3g1zpPhYT/mV60nXYQypiMOhwnE+CJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtYuvw3OsMPrEDaWmoon9vrnbKPswHwYDVR0j
BBgwFoAUDFjuJee/cBKCdNOTaPDq3rDGJLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NGEyMzIyZi1mMzUxLTQyOGQtYTc0Ny05MGRmZDMyMmI1NDEvMC8wQzU4RUUyNUU3
QkY3MDEyODI3NEQzOTM2OEYwRUFERUIwQzYyNEJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEM1OEVFMjVFN0JGNzAxMjgyNzREMzkzNjhGMEVBREVCMEM2
MjRCQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0YTIzMjJmLWYzNTEtNDI4ZC1h
NzQ3LTkwZGZkMzIyYjU0MS8wLzMxMzAzMzJlMzIzMzMxMmUzMTM5MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzczNTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ+fEMA0GCSqG
SIb3DQEBCwUAA4IBAQCNRL9nEEoCThTf4MKxAzAyOhllNZ3Bi7NldqduTtzCQ2ni
nB8dJh2IsTp0n/n7ikPYieQKXtz849VISp+svrzq4kRaswNQBJRjJc6kwP35nILH
/yAB5sYFeB8LNJj+FnGI1lWqhjQLaSjPfBJTQyDnLuK39KstyduOhYVh9qnChNMb
0ipIpe2O1gyTN9xB/4KX5itRPVIOJWxTi6SIjN9dfIWyltkWMA9t3P5XvzVbMqai
g9sS84mT7th355nVzJXoejpR3d7ZFPVPWvtwTzvwJ6eE7y0ruaUPShjH17FEumaq
MVtDtk+IOEmPIawZ29fjptPaYjT07xGNX4PEs1Mu
-----END CERTIFICATE-----
Generated at Fri Apr 26 13:34:42 2024 by rpki-client on console-ams.rpki-client.org