Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa
File:                     3130332e3135382e35392e302f32342d3234203d3e203137393935.roa (raw, json)
Hash identifier:          FGWwMwfrQVqGJcikkjMEXVMes51zuWO5ybelqWxkrl8=
Subject key identifier:   C6:1E:B4:7F:34:1B:8D:8C:3E:39:1C:7A:41:86:D6:3E:20:73:8F:2C
Certificate issuer:       /CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
Certificate serial:       35730BF8E65D629834FD3B2D9FC9F0D74745F48E
Authority key identifier: 78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa
Signing time:             Thu 08 Jun 2023 07:00:00 +0000
ROA not before:           Thu 08 Jun 2023 06:55:00 +0000
ROA not after:            Thu 06 Jun 2024 07:00:00 +0000
asID:                     17995
IP address blocks:        103.158.59.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl
                          rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 13:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:73:0b:f8:e6:5d:62:98:34:fd:3b:2d:9f:c9:f0:d7:47:45:f4:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=789DB789FE19F1F0B926ADA4C70A43CAA8237469
        Validity
            Not Before: Jun  8 06:55:00 2023 GMT
            Not After : Jun  6 07:00:00 2024 GMT
        Subject: CN=C61EB47F341B8D8C3E391C7A4186D63E20738F2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ac:54:f9:28:ff:b3:9b:f0:ee:ec:fe:1a:8c:
                    79:e3:90:34:77:1d:1c:ba:e1:a6:de:5f:d9:e4:c0:
                    cd:c8:d2:8a:6a:f4:7f:bc:17:f1:46:12:43:66:78:
                    45:81:1a:78:63:ca:f2:92:d0:6f:2c:6b:ef:92:75:
                    1f:d3:5c:d8:a4:1f:26:5b:29:e1:38:ef:36:69:9b:
                    c9:99:5c:27:02:3b:dc:3a:45:f0:e6:12:e7:16:a6:
                    f9:e1:c2:e5:03:23:c0:c8:96:37:38:79:86:bc:0f:
                    a8:d9:26:e3:57:2e:c3:93:3e:ce:6c:0c:c2:e0:84:
                    c8:bb:7c:95:8e:b5:52:ac:4c:5b:53:80:4d:b5:c4:
                    68:d7:24:9b:0c:5b:5a:46:fc:27:3f:2f:08:d6:14:
                    fd:34:f5:d9:b6:9e:f2:a5:c9:fb:cf:83:04:d1:19:
                    77:ab:8b:bd:1d:0d:e1:ad:9f:13:71:b3:20:32:b3:
                    78:77:aa:43:17:24:68:bf:bb:f0:13:38:d4:7b:92:
                    c0:38:8e:04:93:dd:04:0d:0a:57:2e:43:5f:5f:ea:
                    5d:09:46:e2:3b:84:47:cc:6e:1f:f6:b3:49:68:e1:
                    b5:f2:29:7b:a3:3f:0d:24:02:11:48:12:40:e3:34:
                    31:17:87:9c:2a:26:ac:c5:73:d1:7c:3d:8d:0b:bf:
                    a1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:1E:B4:7F:34:1B:8D:8C:3E:39:1C:7A:41:86:D6:3E:20:73:8F:2C
            X509v3 Authority Key Identifier:
                keyid:78:9D:B7:89:FE:19:F1:F0:B9:26:AD:A4:C7:0A:43:CA:A8:23:74:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/789DB789FE19F1F0B926ADA4C70A43CAA8237469.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/789DB789FE19F1F0B926ADA4C70A43CAA8237469.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b74d76b-5b16-4ab5-abcf-e4a8607a28b2/0/3130332e3135382e35392e302f32342d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.59.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:f3:02:87:f7:50:78:f0:48:57:66:40:16:21:66:8b:3d:45:
         28:0f:cd:a5:c3:41:ed:a7:8d:2a:c9:c6:08:8f:76:7d:57:3b:
         83:9e:42:78:68:72:75:76:0a:42:0f:13:44:7f:00:4f:9a:45:
         5a:75:ff:6f:73:8b:74:8b:96:82:80:fd:ac:e0:c8:b7:e9:f9:
         03:94:d5:31:6c:da:69:44:ea:fc:9b:b5:57:97:cb:1e:9b:b8:
         da:bb:a2:ec:2b:8e:b6:8b:10:7c:b8:23:2a:22:a7:8b:30:05:
         22:78:30:63:c5:48:c3:53:dc:bd:02:9b:4e:1d:89:5b:e8:f6:
         14:c3:49:04:b4:2e:b0:8f:87:4f:93:bc:e8:b2:02:31:79:ef:
         dc:68:8c:93:a2:c8:ce:ce:1d:6e:17:ed:46:f9:91:5a:78:f7:
         81:f2:10:a4:99:eb:2d:53:11:fa:2e:e1:36:d7:48:ef:13:cf:
         c1:46:61:b5:f0:63:54:cf:14:36:02:31:db:e0:7c:b2:ef:0e:
         31:af:18:aa:fe:a3:ca:c3:ed:02:69:af:0c:af:60:c3:75:be:
         9b:ba:15:5f:84:77:f6:b2:26:81:0f:16:96:d6:9e:a1:60:35:
         9d:dc:a2:af:b6:9d:7b:7d:da:18:8b:18:ea:af:8d:8f:fb:64:
         cf:b6:09:4f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNXML+OZdYpg0/Tstn8nw10dF9I4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FB
ODIzNzQ2OTAeFw0yMzA2MDgwNjU1MDBaFw0yNDA2MDYwNzAwMDBaMDMxMTAvBgNV
BAMTKEM2MUVCNDdGMzQxQjhEOEMzRTM5MUM3QTQxODZENjNFMjA3MzhGMkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNrFT5KP+zm/Du7P4ajHnjkDR3
HRy64abeX9nkwM3I0opq9H+8F/FGEkNmeEWBGnhjyvKS0G8sa++SdR/TXNikHyZb
KeE47zZpm8mZXCcCO9w6RfDmEucWpvnhwuUDI8DIljc4eYa8D6jZJuNXLsOTPs5s
DMLghMi7fJWOtVKsTFtTgE21xGjXJJsMW1pG/Cc/LwjWFP009dm2nvKlyfvPgwTR
GXeri70dDeGtnxNxsyAys3h3qkMXJGi/u/ATONR7ksA4jgST3QQNClcuQ19f6l0J
RuI7hEfMbh/2s0lo4bXyKXujPw0kAhFIEkDjNDEXh5wqJqzFc9F8PY0Lv6GbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxh60fzQbjYw+ORx6QYbWPiBzjywwHwYDVR0j
BBgwFoAUeJ23if4Z8fC5Jq2kxwpDyqgjdGkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
Yjc0ZDc2Yi01YjE2LTRhYjUtYWJjZi1lNGE4NjA3YTI4YjIvMC83ODlEQjc4OUZF
MTlGMUYwQjkyNkFEQTRDNzBBNDNDQUE4MjM3NDY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzg5REI3ODlGRTE5RjFGMEI5MjZBREE0QzcwQTQzQ0FBODIz
NzQ2OS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNzRkNzZiLTViMTYtNGFiNS1h
YmNmLWU0YTg2MDdhMjhiMi8wLzMxMzAzMzJlMzEzNTM4MmUzNTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeeOzANBgkqhkiG
9w0BAQsFAAOCAQEARfMCh/dQePBIV2ZAFiFmiz1FKA/NpcNB7aeNKsnGCI92fVc7
g55CeGhydXYKQg8TRH8AT5pFWnX/b3OLdIuWgoD9rODIt+n5A5TVMWzaaUTq/Ju1
V5fLHpu42rui7CuOtosQfLgjKiKnizAFIngwY8VIw1PcvQKbTh2JW+j2FMNJBLQu
sI+HT5O86LICMXnv3GiMk6LIzs4dbhftRvmRWnj3gfIQpJnrLVMR+i7hNtdI7xPP
wUZhtfBjVM8UNgIx2+B8su8OMa8Yqv6jysPtAmmvDK9gw3W+m7oVX4R39rImgQ8W
ltaeoWA1ndyir7ade33aGIsY6q+Nj/tkz7YJTw==
-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org