Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
File:                     3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (raw, json)
Hash identifier:          COnIxbrfTCjsEG5W/HWfPCxaF3wCXT5XTyQrtBYYFBE=
Subject key identifier:   00:A5:2C:67:24:6A:38:F7:2D:0F:04:90:63:AF:79:18:92:0F:67:7E
Certificate issuer:       /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
Certificate serial:       759B61B4D4E3640B4BE01F3321685BC37F1518DC
Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa
Signing time:             Mon 31 Jul 2023 00:04:42 +0000
ROA not before:           Sun 30 Jul 2023 23:59:42 +0000
ROA not after:            Mon 29 Jul 2024 00:04:42 +0000
asID:                     135471
IP address blocks:        103.71.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl
                          rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:9b:61:b4:d4:e3:64:0b:4b:e0:1f:33:21:68:5b:c3:7f:15:18:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77
        Validity
            Not Before: Jul 30 23:59:42 2023 GMT
            Not After : Jul 29 00:04:42 2024 GMT
        Subject: CN=00A52C67246A38F72D0F049063AF7918920F677E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:44:5a:56:05:1d:f3:89:8f:b6:a5:0c:1d:fb:
                    7b:14:c9:03:2a:18:97:5e:0c:0a:b5:dc:45:71:aa:
                    a6:2e:0c:f4:f2:2c:c2:a7:34:36:0f:8a:39:94:36:
                    bd:65:e6:8b:e8:04:68:b3:9c:70:94:05:e0:21:ef:
                    0b:18:43:8a:b0:27:76:08:0e:f4:48:90:22:7e:a7:
                    5f:e1:97:57:f6:18:97:41:e4:c5:b5:49:dc:99:7e:
                    a2:37:bc:13:2e:39:a9:5a:36:cc:50:ce:a9:ff:f3:
                    c6:b8:19:b1:5e:19:76:9c:a0:2b:a3:72:2b:30:75:
                    00:4a:96:da:61:8d:67:d4:25:18:91:b4:8d:3c:16:
                    c9:da:d3:a7:29:8e:93:5f:50:0d:55:88:88:60:05:
                    df:7f:8a:a0:0b:4d:22:20:fd:d4:ea:17:6b:c4:f3:
                    68:d1:6e:98:5e:ef:73:ce:6e:df:c2:c7:90:53:01:
                    16:50:7d:ba:41:a4:80:a0:0a:62:10:a4:8c:65:91:
                    bf:55:ed:64:12:ad:6c:ff:17:e3:af:30:0f:a3:27:
                    7e:51:34:2f:d9:77:a2:35:bf:aa:5e:94:35:9d:c3:
                    6a:ce:da:77:6a:13:21:e6:c7:fa:93:86:f6:b5:3f:
                    dc:b2:7c:48:9c:4f:7f:83:c4:d8:98:a0:fb:0c:01:
                    b6:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A5:2C:67:24:6A:38:F7:2D:0F:04:90:63:AF:79:18:92:0F:67:7E
            X509v3 Authority Key Identifier:
                keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:24:b9:39:47:6d:2d:aa:84:f2:54:46:2a:e8:d4:60:34:59:
         d0:09:aa:aa:7b:06:a6:75:ab:5e:62:8c:bd:a8:0b:9d:78:69:
         0f:6c:27:05:d6:41:ca:1e:d6:0e:73:1c:80:77:e9:81:94:be:
         f7:e2:0a:2d:a3:f0:86:48:80:0b:e7:77:1a:35:fc:72:3d:27:
         89:b9:01:99:7f:5f:04:b2:86:a4:28:cc:e1:3f:ba:26:c0:ca:
         dc:7b:05:66:2f:98:92:da:24:d9:37:21:4d:b5:f9:c2:cd:99:
         c9:fa:27:eb:57:b8:ce:a8:fc:b7:01:8f:5a:82:23:f5:9d:53:
         73:5a:22:20:17:19:ce:f5:3c:75:e6:d3:4d:7e:33:69:93:e5:
         10:21:54:be:38:63:a9:13:31:b2:0e:ff:d9:b1:63:52:7e:1f:
         3e:47:c1:52:07:7b:d3:5b:e4:17:95:2e:8b:9b:84:7e:0b:5e:
         dd:f3:b6:ce:5f:c0:bf:72:88:81:f3:15:f0:14:98:3c:2c:8c:
         09:24:fa:63:b0:2e:32:cf:c2:11:e9:7a:84:6f:3d:00:d2:94:
         98:f3:d1:e8:c3:a1:10:5d:b5:c9:c2:26:b5:0e:b6:a2:0b:d0:
         8f:a3:0f:ea:67:9f:6e:83:af:db:8d:82:4d:15:32:b9:02:56:
         cb:1a:67:01
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUdZthtNTjZAtL4B8zIWhbw38VGNwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC
NjNGQ0M3NzAeFw0yMzA3MzAyMzU5NDJaFw0yNDA3MjkwMDA0NDJaMDMxMTAvBgNV
BAMTKDAwQTUyQzY3MjQ2QTM4RjcyRDBGMDQ5MDYzQUY3OTE4OTIwRjY3N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDERFpWBR3ziY+2pQwd+3sUyQMq
GJdeDAq13EVxqqYuDPTyLMKnNDYPijmUNr1l5ovoBGiznHCUBeAh7wsYQ4qwJ3YI
DvRIkCJ+p1/hl1f2GJdB5MW1SdyZfqI3vBMuOalaNsxQzqn/88a4GbFeGXacoCuj
ciswdQBKltphjWfUJRiRtI08Fsna06cpjpNfUA1ViIhgBd9/iqALTSIg/dTqF2vE
82jRbphe73PObt/Cx5BTARZQfbpBpICgCmIQpIxlkb9V7WQSrWz/F+OvMA+jJ35R
NC/Zd6I1v6pelDWdw2rO2ndqEyHmx/qThva1P9yyfEicT3+DxNiYoPsMAbYNAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAKUsZyRqOPctDwSQY695GJIPZ34wHwYDVR0j
BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1
OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG
Q0M3Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ2MzAyODEwLTU2NGMtNDViNy04
YTcyLWVmNmI4ZjYzMDljMC8wLzMxMzAzMzJlMzczMTJlMzIzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0f/MA0GCSqG
SIb3DQEBCwUAA4IBAQASJLk5R20tqoTyVEYq6NRgNFnQCaqqewamdateYoy9qAud
eGkPbCcF1kHKHtYOcxyAd+mBlL734goto/CGSIAL53caNfxyPSeJuQGZf18Esoak
KMzhP7omwMrcewVmL5iS2iTZNyFNtfnCzZnJ+ifrV7jOqPy3AY9agiP1nVNzWiIg
FxnO9Tx15tNNfjNpk+UQIVS+OGOpEzGyDv/ZsWNSfh8+R8FSB3vTW+QXlS6Lm4R+
C17d87bOX8C/coiB8xXwFJg8LIwJJPpjsC4yz8IR6XqEbz0A0pSY89How6EQXbXJ
wia1DraiC9CPow/qZ59ug6/bjYJNFTK5AlbLGmcB
-----END CERTIFICATE-----
Generated at Fri Apr 19 19:14:48 2024 by rpki-client on console-ams.rpki-client.org