Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
File:                     3130332e3138352e38322e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier:          BVrIv2Fw5IrlJDyxYncV6+HA/ENUfn3s4EYFzFN/Dzo=
Subject key identifier:   2E:2E:3A:7C:D8:C3:2F:C9:CE:7A:5C:64:1F:A3:DD:0F:A7:D4:05:31
Certificate issuer:       /CN=B392381083372148D0977D0066CFF38FD5A32CDB
Certificate serial:       784D7A1423B610FB8A92D9517030D3E1B58B9859
Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa
Signing time:             Thu 25 Jan 2024 02:00:01 +0000
ROA not before:           Thu 25 Jan 2024 01:55:01 +0000
ROA not after:            Thu 23 Jan 2025 02:00:01 +0000
asID:                     58820
IP address blocks:        103.185.82.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl
                          rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 12:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:4d:7a:14:23:b6:10:fb:8a:92:d9:51:70:30:d3:e1:b5:8b:98:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB
        Validity
            Not Before: Jan 25 01:55:01 2024 GMT
            Not After : Jan 23 02:00:01 2025 GMT
        Subject: CN=2E2E3A7CD8C32FC9CE7A5C641FA3DD0FA7D40531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:97:d6:e0:63:87:65:79:e2:5c:3e:17:bd:56:
                    bb:70:93:b8:99:7a:8e:6d:8e:dd:ba:f6:b9:17:69:
                    4f:06:7a:f1:8a:69:2f:dd:cd:a6:0b:b3:03:87:97:
                    cb:12:1d:37:b1:5c:25:ad:a1:48:90:6c:12:6b:f4:
                    98:0f:59:21:e7:5b:11:6a:92:d2:3e:06:49:25:86:
                    05:49:cb:09:56:b7:4f:dc:22:ad:22:8a:c4:1f:ec:
                    e5:9c:2e:7b:a6:c9:01:52:44:ba:18:83:50:b3:40:
                    97:d3:11:1c:76:50:42:a6:c3:57:bd:19:b1:77:cb:
                    1c:67:e8:83:30:1d:af:23:29:12:f0:4b:48:8a:9d:
                    59:ea:04:b8:a3:91:44:64:43:57:e1:21:2e:d3:d2:
                    83:49:ff:f8:37:41:1c:ee:b0:f4:53:4a:6f:04:65:
                    68:44:d3:98:11:98:0f:2c:c4:5f:97:57:ea:c0:53:
                    f8:bc:58:d1:9d:03:67:9a:02:a6:b0:4b:94:48:61:
                    6f:27:32:f0:15:99:52:17:27:a9:d0:d2:ed:ea:16:
                    f4:19:34:3b:81:17:ac:99:d1:d0:a3:ff:43:b6:ad:
                    b1:74:3e:cb:33:6f:90:c7:4b:7e:a5:78:6a:00:6c:
                    93:2b:1a:a8:13:9f:53:50:18:9d:e9:39:6c:d6:49:
                    06:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:2E:3A:7C:D8:C3:2F:C9:CE:7A:5C:64:1F:A3:DD:0F:A7:D4:05:31
            X509v3 Authority Key Identifier:
                keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:8b:10:41:09:a5:e0:cc:99:9e:79:69:92:6e:5f:bd:dc:30:
         f2:50:f4:f3:ae:5f:7a:a7:f6:61:97:69:c4:e1:f2:b1:18:0c:
         18:b6:0f:21:ea:6c:63:e4:1e:70:cf:2e:61:e5:f5:d0:ff:33:
         ff:18:8c:42:d5:26:ae:b4:ac:00:04:bb:44:f9:61:1e:0d:49:
         86:25:ca:2c:26:d2:95:30:09:4f:b7:0e:16:49:c3:69:86:50:
         25:c4:c2:3d:b2:b3:66:46:e5:cd:ab:ff:77:1f:ab:78:7a:96:
         95:6a:68:67:e4:f9:b4:21:ac:20:ca:66:69:ce:e6:fb:58:34:
         0e:85:7e:01:e1:d0:fb:84:64:7a:fa:fc:3d:25:da:01:92:5c:
         9b:00:56:b8:79:9b:c4:3f:6a:4a:d4:41:59:87:86:10:e0:84:
         80:24:83:1f:49:d3:df:5d:8c:ae:f6:e8:3e:d5:69:be:32:34:
         ac:31:47:8d:7a:58:88:1f:98:44:26:dd:72:3b:8e:8b:5e:bf:
         4c:cb:63:18:0e:ca:3f:0a:6a:bc:ba:1d:af:c9:43:a0:d1:ee:
         78:9b:29:00:14:70:38:df:62:04:c5:83:d4:64:3e:47:3c:59:
         93:4e:8f:8c:52:df:03:90:af:27:f1:52:dc:6b:4e:8e:2d:e9:
         5c:38:ff:59
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUeE16FCO2EPuKktlRcDDT4bWLmFkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZE
NUEzMkNEQjAeFw0yNDAxMjUwMTU1MDFaFw0yNTAxMjMwMjAwMDFaMDMxMTAvBgNV
BAMTKDJFMkUzQTdDRDhDMzJGQzlDRTdBNUM2NDFGQTNERDBGQTdENDA1MzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD6l9bgY4dleeJcPhe9Vrtwk7iZ
eo5tjt269rkXaU8GevGKaS/dzaYLswOHl8sSHTexXCWtoUiQbBJr9JgPWSHnWxFq
ktI+BkklhgVJywlWt0/cIq0iisQf7OWcLnumyQFSRLoYg1CzQJfTERx2UEKmw1e9
GbF3yxxn6IMwHa8jKRLwS0iKnVnqBLijkURkQ1fhIS7T0oNJ//g3QRzusPRTSm8E
ZWhE05gRmA8sxF+XV+rAU/i8WNGdA2eaAqawS5RIYW8nMvAVmVIXJ6nQ0u3qFvQZ
NDuBF6yZ0dCj/0O2rbF0Psszb5DHS36leGoAbJMrGqgTn1NQGJ3pOWzWSQa1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQULi46fNjDL8nOelxkH6PdD6fUBTEwHwYDVR0j
BBgwFoAUs5I4EIM3IUjQl30AZs/zj9WjLNswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YmYyY2YwMy1mOWY5LTRiY2EtOGMyYy02MDczMjgwZGZlYTgvMC9CMzkyMzgxMDgz
MzcyMTQ4RDA5NzdEMDA2NkNGRjM4RkQ1QTMyQ0RCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjM5MjM4MTA4MzM3MjE0OEQwOTc3RDAwNjZDRkYzOEZENUEz
MkNEQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViZjJjZjAzLWY5ZjktNGJjYS04
YzJjLTYwNzMyODBkZmVhOC8wLzMxMzAzMzJlMzEzODM1MmUzODMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe5UjANBgkqhkiG
9w0BAQsFAAOCAQEAiIsQQQml4MyZnnlpkm5fvdww8lD0865feqf2YZdpxOHysRgM
GLYPIepsY+QecM8uYeX10P8z/xiMQtUmrrSsAAS7RPlhHg1JhiXKLCbSlTAJT7cO
FknDaYZQJcTCPbKzZkblzav/dx+reHqWlWpoZ+T5tCGsIMpmac7m+1g0DoV+AeHQ
+4Rkevr8PSXaAZJcmwBWuHmbxD9qStRBWYeGEOCEgCSDH0nT312MrvboPtVpvjI0
rDFHjXpYiB+YRCbdcjuOi16/TMtjGA7KPwpqvLodr8lDoNHueJspABRwON9iBMWD
1GQ+RzxZk06PjFLfA5CvJ/FS3GtOji3pXDj/WQ==
-----END CERTIFICATE-----
Generated at Sun May 5 09:36:49 2024 by rpki-client on console-ams.rpki-client.org