Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa
File:                     3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa (raw, json)
Hash identifier:          ywqbC3u64/3fAs2hl+hAogVLaS8vKG9/441bav+Hcsc=
Subject key identifier:   C2:80:FE:4A:FB:8A:A8:E9:50:DF:0E:5C:D2:D4:97:D0:3D:9A:97:A6
Certificate issuer:       /CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1
Certificate serial:       71DF9B3B2D1AFD8C76AFACD891BE28243DF5799E
Authority key identifier: 51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa
Signing time:             Thu 17 Aug 2023 01:00:01 +0000
ROA not before:           Thu 17 Aug 2023 00:55:01 +0000
ROA not after:            Thu 15 Aug 2024 01:00:01 +0000
asID:                     138130
IP address blocks:        103.133.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl
                          rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:df:9b:3b:2d:1a:fd:8c:76:af:ac:d8:91:be:28:24:3d:f5:79:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=515ACA294C72135FCEF93DC148ABB7A0B6AF73F1
        Validity
            Not Before: Aug 17 00:55:01 2023 GMT
            Not After : Aug 15 01:00:01 2024 GMT
        Subject: CN=C280FE4AFB8AA8E950DF0E5CD2D497D03D9A97A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:24:a6:a1:af:1f:4f:a3:02:6e:d8:e9:00:69:
                    f6:fa:27:54:77:0a:70:73:7f:3d:3a:90:2f:f5:6e:
                    ff:d6:ba:8c:86:08:4f:a9:a1:ed:53:1c:f2:e6:66:
                    8a:8b:51:59:77:a0:2f:29:2a:bc:4e:dd:c1:25:72:
                    42:d3:a3:5a:ab:e0:1c:6f:b7:75:04:c9:50:bf:7f:
                    9f:61:db:ff:27:e4:27:3a:8b:7b:a6:ba:f1:43:cc:
                    66:96:ae:2c:43:67:be:8e:dc:fd:9a:35:90:bf:68:
                    9c:ab:4d:90:b4:df:84:94:18:7a:86:90:4e:d2:8d:
                    b7:a8:85:46:6c:08:1e:a5:7d:28:de:25:88:40:1c:
                    62:5f:1f:6f:4c:f4:69:5c:27:12:96:09:b9:e8:de:
                    e6:1c:b0:a3:9d:87:b0:cd:92:a8:b7:16:33:a2:55:
                    c6:da:56:5a:c0:47:ab:93:41:9e:89:54:f2:b7:72:
                    96:3f:b3:fa:0b:2b:07:40:f0:7a:e0:95:3c:84:6a:
                    ed:1e:83:40:2d:4a:74:b1:f4:5e:f4:c4:ec:70:dc:
                    cc:36:cc:ba:fc:d4:a2:81:58:55:da:81:56:f7:26:
                    39:94:a5:8a:2c:8e:51:1c:88:be:ad:69:6e:ca:b1:
                    b1:78:3a:0e:e1:ad:33:2e:b3:f6:8a:ac:a6:b8:ca:
                    ff:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:FE:4A:FB:8A:A8:E9:50:DF:0E:5C:D2:D4:97:D0:3D:9A:97:A6
            X509v3 Authority Key Identifier:
                keyid:51:5A:CA:29:4C:72:13:5F:CE:F9:3D:C1:48:AB:B7:A0:B6:AF:73:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/515ACA294C72135FCEF93DC148ABB7A0B6AF73F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4fdff390-1695-44ee-88e5-42ed12816b00/0/3130332e3133332e32342e302f32322d3234203d3e20313338313330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.133.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0c:01:fa:41:d3:7b:c6:8a:43:46:af:61:56:5a:86:b3:54:10:
         72:ec:eb:48:0c:f8:b0:d6:6c:d0:0a:b1:f1:29:2e:7b:2c:20:
         34:8d:af:48:78:04:d3:41:da:01:5a:42:06:5e:db:29:4f:f2:
         5f:d3:75:e7:7a:f2:b3:4b:ab:b4:48:bd:1d:8a:7b:8f:4f:32:
         4d:d0:d0:cc:e2:37:4c:0a:ec:69:89:ec:6f:38:0d:e1:7c:6b:
         c0:b4:f4:0a:58:42:0d:da:39:09:28:ea:b7:83:5b:87:e1:35:
         3d:1c:91:cf:96:06:b9:d9:f8:5f:11:6e:cc:3f:cc:35:a7:67:
         42:a7:40:6c:26:f4:8b:df:0c:8c:b7:92:41:c1:f7:6a:2d:37:
         ec:72:3e:07:33:8b:78:86:66:5d:7c:ca:dd:10:11:fa:56:ee:
         9f:85:58:28:f6:71:ae:82:57:fe:da:ef:54:83:e5:d2:11:11:
         85:0a:62:3d:3a:c5:94:ea:d4:b9:de:c2:ce:d1:31:b4:f8:95:
         b6:1f:c5:27:99:91:75:86:bc:4f:c8:2a:7c:c5:fb:c4:c8:41:
         2b:78:e2:3f:9d:45:00:bc:9a:11:a3:8a:27:68:07:92:1b:09:
         8c:24:da:d4:f3:96:5d:9d:9e:c0:a4:db:59:ce:ba:48:e1:8f:
         0c:66:bb:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcd+bOy0a/Yx2r6zYkb4oJD31eZ4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBC
NkFGNzNGMTAeFw0yMzA4MTcwMDU1MDFaFw0yNDA4MTUwMTAwMDFaMDMxMTAvBgNV
BAMTKEMyODBGRTRBRkI4QUE4RTk1MERGMEU1Q0QyRDQ5N0QwM0Q5QTk3QTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6JKahrx9PowJu2OkAafb6J1R3
CnBzfz06kC/1bv/WuoyGCE+poe1THPLmZoqLUVl3oC8pKrxO3cElckLTo1qr4Bxv
t3UEyVC/f59h2/8n5Cc6i3umuvFDzGaWrixDZ76O3P2aNZC/aJyrTZC034SUGHqG
kE7SjbeohUZsCB6lfSjeJYhAHGJfH29M9GlcJxKWCbno3uYcsKOdh7DNkqi3FjOi
VcbaVlrAR6uTQZ6JVPK3cpY/s/oLKwdA8HrglTyEau0eg0AtSnSx9F70xOxw3Mw2
zLr81KKBWFXagVb3JjmUpYosjlEciL6taW7KsbF4Og7hrTMus/aKrKa4yv9JAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwoD+SvuKqOlQ3w5c0tSX0D2al6YwHwYDVR0j
BBgwFoAUUVrKKUxyE1/O+T3BSKu3oLavc/EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZmRmZjM5MC0xNjk1LTQ0ZWUtODhlNS00MmVkMTI4MTZiMDAvMC81MTVBQ0EyOTRD
NzIxMzVGQ0VGOTNEQzE0OEFCQjdBMEI2QUY3M0YxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTE1QUNBMjk0QzcyMTM1RkNFRjkzREMxNDhBQkI3QTBCNkFG
NzNGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmZGZmMzkwLTE2OTUtNDRlZS04
OGU1LTQyZWQxMjgxNmIwMC8wLzMxMzAzMzJlMzEzMzMzMmUzMjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ4UYMA0GCSqG
SIb3DQEBCwUAA4IBAQAMAfpB03vGikNGr2FWWoazVBBy7OtIDPiw1mzQCrHxKS57
LCA0ja9IeATTQdoBWkIGXtspT/Jf03XnevKzS6u0SL0dinuPTzJN0NDM4jdMCuxp
iexvOA3hfGvAtPQKWEIN2jkJKOq3g1uH4TU9HJHPlga52fhfEW7MP8w1p2dCp0Bs
JvSL3wyMt5JBwfdqLTfscj4HM4t4hmZdfMrdEBH6Vu6fhVgo9nGuglf+2u9Ug+XS
ERGFCmI9OsWU6tS53sLO0TG0+JW2H8UnmZF1hrxPyCp8xfvEyEEreOI/nUUAvJoR
o4onaAeSGwmMJNrU85ZdnZ7ApNtZzrpI4Y8MZrvA
-----END CERTIFICATE-----
Generated at Sat May 4 14:44:41 2024 by rpki-client on console-ams.rpki-client.org