Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
File:                     3130332e33312e3235312e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          0IeURkURCpWgS6uNMT/joXSCdMH85OIKxL2ZLMj1Iws=
Subject key identifier:   B2:FF:E0:F3:A6:C5:C6:DD:AA:50:A0:2A:E4:DC:37:57:23:7B:2D:EE
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       5C339E4468B137929E74E8DD5715050941C2567A
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 31 Jul 2023 00:09:31 +0000
ROA not before:           Mon 31 Jul 2023 00:04:31 +0000
ROA not after:            Mon 29 Jul 2024 00:09:31 +0000
asID:                     58477
IP address blocks:        103.31.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 12:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:33:9e:44:68:b1:37:92:9e:74:e8:dd:57:15:05:09:41:c2:56:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jul 31 00:04:31 2023 GMT
            Not After : Jul 29 00:09:31 2024 GMT
        Subject: CN=B2FFE0F3A6C5C6DDAA50A02AE4DC3757237B2DEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:72:b5:57:c5:10:9c:2b:90:5f:ba:c7:93:79:
                    e0:db:bc:cb:2b:55:38:a2:4b:46:80:cc:42:54:5d:
                    66:2a:d5:2f:a8:7b:5e:d4:68:de:17:a0:97:0b:c3:
                    74:71:ab:8a:f0:30:37:f5:c0:36:49:eb:d0:77:5e:
                    08:ca:0b:f0:27:d3:30:e2:c7:4a:ce:d6:bf:8b:f3:
                    da:cd:d9:93:ae:c0:d9:ff:3b:2f:64:6d:ee:6f:dc:
                    38:f9:78:f3:f3:ab:c5:f1:1a:ee:3f:f4:d7:5c:8a:
                    ba:30:83:57:1a:1d:af:3b:2a:bd:3a:97:63:20:40:
                    fe:e6:56:7a:05:46:6b:94:e1:df:18:e2:c6:5a:b1:
                    01:7c:09:4f:fc:7e:4f:42:4d:e2:71:46:26:b7:de:
                    e1:99:c6:34:75:7a:9e:9f:fa:c2:c5:f7:cb:ea:af:
                    c3:62:d1:0a:94:34:f3:b3:77:dc:05:3e:bf:8f:aa:
                    98:e5:8a:fe:6e:d1:61:f7:c4:5f:00:ed:84:2a:06:
                    fd:38:f0:fc:dd:32:35:60:40:9b:47:3a:9c:47:03:
                    7a:53:fe:cf:18:88:ac:88:ab:b4:aa:5d:43:8a:c2:
                    60:a1:85:bb:97:42:b2:a2:d0:89:9c:72:61:4e:63:
                    b5:84:02:b9:9c:7f:65:cc:61:a8:b0:39:53:1f:82:
                    29:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:FF:E0:F3:A6:C5:C6:DD:AA:50:A0:2A:E4:DC:37:57:23:7B:2D:EE
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235312e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:53:23:d6:14:f6:26:a7:91:e4:18:1c:d6:98:05:eb:3d:32:
         28:dd:3a:bc:c2:60:2b:bc:f2:8a:57:69:6f:7d:52:18:3c:df:
         ef:e2:00:88:fa:6b:dc:a4:da:e7:f1:90:a0:92:9a:ed:87:09:
         75:e9:ff:9f:ed:65:01:07:53:c2:b8:60:16:af:71:16:af:d1:
         eb:d9:33:fc:1e:e3:7a:7e:33:05:6c:d3:72:6d:c5:38:45:f2:
         32:96:48:ff:77:e6:d6:6e:e7:48:9a:15:78:01:4f:30:c0:29:
         33:3c:da:2a:5a:be:dd:1b:ad:97:26:9d:ef:5c:92:4d:9c:7a:
         b0:19:b2:c4:ae:f2:00:c3:43:10:0a:29:88:af:dd:13:3d:e3:
         35:0c:70:5e:20:86:db:87:66:32:d3:ae:c5:d5:22:8d:fc:fd:
         e9:2c:96:79:db:f9:e3:92:ac:d7:77:a6:7d:d2:97:3b:bb:ea:
         8e:b2:b4:2b:3f:75:b6:39:83:90:dd:2f:2f:92:a4:58:33:a2:
         95:ae:61:b3:91:f6:11:8d:41:2a:39:f2:33:d5:5f:2d:7d:da:
         26:23:9c:2e:5e:cf:2b:fb:50:94:78:1d:97:5e:9c:59:99:e0:
         35:f2:93:e5:fb:5d:d3:19:10:56:0b:83:30:d3:be:1e:77:8a:
         52:82:3c:fd
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXDOeRGixN5KedOjdVxUFCUHCVnowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQy
N0MxOTFBNjAeFw0yMzA3MzEwMDA0MzFaFw0yNDA3MjkwMDA5MzFaMDMxMTAvBgNV
BAMTKEIyRkZFMEYzQTZDNUM2RERBQTUwQTAyQUU0REMzNzU3MjM3QjJERUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHcrVXxRCcK5BfuseTeeDbvMsr
VTiiS0aAzEJUXWYq1S+oe17UaN4XoJcLw3Rxq4rwMDf1wDZJ69B3XgjKC/An0zDi
x0rO1r+L89rN2ZOuwNn/Oy9kbe5v3Dj5ePPzq8XxGu4/9Ndcirowg1caHa87Kr06
l2MgQP7mVnoFRmuU4d8Y4sZasQF8CU/8fk9CTeJxRia33uGZxjR1ep6f+sLF98vq
r8Ni0QqUNPOzd9wFPr+Pqpjliv5u0WH3xF8A7YQqBv048PzdMjVgQJtHOpxHA3pT
/s8YiKyIq7SqXUOKwmChhbuXQrKi0ImccmFOY7WEArmcf2XMYaiwOVMfgiknAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsv/g86bFxt2qUKAq5Nw3VyN7Le4wHwYDVR0j
BBgwFoAUEMoXdu+orzUpLnauKwnCNCfBkaYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmM2YWEwMy0xYjRkLTQzOGUtYTlmMy1lZmVhYWU2YjA5MjEvMC8xMENBMTc3NkVG
QThBRjM1MjkyRTc2QUUyQjA5QzIzNDI3QzE5MUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTBDQTE3NzZFRkE4QUYzNTI5MkU3NkFFMkIwOUMyMzQyN0Mx
OTFBNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYzZhYTAzLTFiNGQtNDM4ZS1h
OWYzLWVmZWFhZTZiMDkyMS8wLzMxMzAzMzJlMzMzMTJlMzIzNTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcf+zANBgkqhkiG
9w0BAQsFAAOCAQEAJVMj1hT2JqeR5Bgc1pgF6z0yKN06vMJgK7zyildpb31SGDzf
7+IAiPpr3KTa5/GQoJKa7YcJden/n+1lAQdTwrhgFq9xFq/R69kz/B7jen4zBWzT
cm3FOEXyMpZI/3fm1m7nSJoVeAFPMMApMzzaKlq+3Rutlyad71ySTZx6sBmyxK7y
AMNDEAopiK/dEz3jNQxwXiCG24dmMtOuxdUijfz96SyWedv545Ks13emfdKXO7vq
jrK0Kz91tjmDkN0vL5KkWDOila5hs5H2EY1BKjnyM9VfLX3aJiOcLl7PK/tQlHgd
l16cWZngNfKT5ftd0xkQVguDMNO+HneKUoI8/Q==
-----END CERTIFICATE-----
Generated at Fri Apr 19 06:15:07 2024 by rpki-client on console-ams.rpki-client.org