Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538353532.roa
File:                     3130332e31312e32382e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          PO5LNGmPVSbw7jKA0s64/LoXL7lYOjuvrY8x2VSiSEA=
Subject key identifier:   A3:3B:B8:25:BF:24:80:0B:04:51:49:D6:90:7C:B0:5C:E9:29:8D:6A
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       4CD90413A0EF24F39486697AF2A96D56884D6E85
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 31 Jul 2023 00:03:56 +0000
ROA not before:           Sun 30 Jul 2023 23:58:56 +0000
ROA not after:            Mon 29 Jul 2024 00:03:56 +0000
asID:                     58552
IP address blocks:        103.11.28.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 21:40:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:d9:04:13:a0:ef:24:f3:94:86:69:7a:f2:a9:6d:56:88:4d:6e:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul 30 23:58:56 2023 GMT
            Not After : Jul 29 00:03:56 2024 GMT
        Subject: CN=A33BB825BF24800B045149D6907CB05CE9298D6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:24:1a:2e:91:79:62:96:d7:a3:d8:5e:0e:f5:
                    4a:d0:61:e3:61:6c:8e:83:89:1f:6a:a3:8a:72:f6:
                    0c:9e:54:7f:e7:af:c1:e7:81:06:56:c0:2b:09:8b:
                    51:9b:12:41:f1:44:09:7b:2d:ee:eb:ab:f5:d2:81:
                    e6:28:96:8f:42:c0:05:e6:ee:3e:c8:5f:d5:a6:ca:
                    a9:28:5f:d1:3e:a8:1e:13:c9:e4:c2:3d:ef:b2:fd:
                    b8:1d:a2:3d:c1:ca:9a:f3:91:97:66:f4:3e:83:db:
                    33:c0:a7:80:8a:4e:3b:3d:ea:70:7c:3c:24:d1:b6:
                    83:f2:85:47:fa:4c:cf:ab:08:17:ee:37:04:ff:37:
                    45:af:39:ba:7b:eb:2e:6b:66:79:03:8b:37:e9:99:
                    83:66:01:66:18:86:9e:89:4c:cc:61:8a:ec:be:41:
                    30:30:69:12:1b:26:e7:65:d0:7b:82:26:7e:e9:0e:
                    c1:b8:04:35:ae:9d:28:12:7b:d1:8c:57:4c:4c:22:
                    ce:fd:56:04:e1:d9:fa:1e:71:7e:d0:e5:6d:16:c2:
                    8f:16:19:fd:1c:5b:ae:c7:86:97:1c:35:7c:e5:3a:
                    a9:84:28:ee:22:18:e5:37:99:b1:11:5f:8f:d1:17:
                    05:b5:fc:23:15:8b:61:b3:d7:12:ba:35:89:15:e4:
                    17:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3B:B8:25:BF:24:80:0B:04:51:49:D6:90:7C:B0:5C:E9:29:8D:6A
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e32382e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.28.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:bc:40:09:a0:0f:c6:5d:6c:b6:35:44:43:3a:bf:a3:5c:66:
         46:10:d3:53:5a:ee:e7:91:5e:8d:78:23:73:49:4f:7c:85:4a:
         49:44:11:11:9c:92:50:63:0f:0e:be:c9:cb:63:0c:55:c3:98:
         37:00:ee:0d:7c:cd:91:cf:f9:a5:0c:72:29:90:f5:4b:54:e4:
         27:07:52:71:4f:b9:a4:dc:ec:df:0f:db:52:db:0a:f2:a4:26:
         5c:83:28:21:1a:05:51:09:e7:68:3d:f4:d3:8f:aa:e1:ad:28:
         f9:b2:aa:0f:0d:c3:f7:65:21:4b:8d:53:97:b5:c0:a0:26:fe:
         49:ba:aa:97:8a:33:e0:d9:23:fa:78:13:47:7a:60:94:73:9a:
         a9:45:c2:63:be:f8:a3:a0:b4:90:ae:63:57:cf:73:f5:45:d7:
         ad:ff:d1:e4:bd:be:ce:89:e7:42:49:1d:20:fa:a3:46:3d:5c:
         8e:ca:11:71:a1:96:23:e0:ab:2a:0d:9d:3f:08:b9:05:29:0a:
         6d:1b:36:d8:94:3a:2d:58:ab:f5:8a:9a:c5:df:69:03:fa:f8:
         02:3f:72:05:33:2f:45:f9:da:48:0b:35:51:04:0a:f0:32:da:
         57:11:20:58:d5:ec:8e:bc:07:6f:5b:d1:2e:55:05:00:3a:ee:
         6d:33:2d:88
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTNkEE6DvJPOUhml68qltVohNboUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FF
NEQ1RkRFNjAeFw0yMzA3MzAyMzU4NTZaFw0yNDA3MjkwMDAzNTZaMDMxMTAvBgNV
BAMTKEEzM0JCODI1QkYyNDgwMEIwNDUxNDlENjkwN0NCMDVDRTkyOThENkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdJBoukXliltej2F4O9UrQYeNh
bI6DiR9qo4py9gyeVH/nr8HngQZWwCsJi1GbEkHxRAl7Le7rq/XSgeYolo9CwAXm
7j7IX9WmyqkoX9E+qB4TyeTCPe+y/bgdoj3ByprzkZdm9D6D2zPAp4CKTjs96nB8
PCTRtoPyhUf6TM+rCBfuNwT/N0WvObp76y5rZnkDizfpmYNmAWYYhp6JTMxhiuy+
QTAwaRIbJudl0HuCJn7pDsG4BDWunSgSe9GMV0xMIs79VgTh2foecX7Q5W0Wwo8W
Gf0cW67HhpccNXzlOqmEKO4iGOU3mbERX4/RFwW1/CMVi2Gz1xK6NYkV5BddAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUozu4Jb8kgAsEUUnWkHywXOkpjWowHwYDVR0j
BBgwFoAUr0tY1LFlMLn2kZ2/T1PcOuTV/eYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZDIyN2RiZS00YTFjLTQwYjAtOTRhNi03OTNiZGJkYTM3NzcvMC9BRjRCNThENEIx
NjUzMEI5RjY5MTlEQkY0RjUzREMzQUU0RDVGREU2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUY0QjU4RDRCMTY1MzBCOUY2OTE5REJGNEY1M0RDM0FFNEQ1
RkRFNi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVkMjI3ZGJlLTRhMWMtNDBiMC05
NGE2LTc5M2JkYmRhMzc3Ny8wLzMxMzAzMzJlMzEzMTJlMzIzODJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzgzNTM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCxwwDQYJKoZIhvcN
AQELBQADggEBADK8QAmgD8ZdbLY1REM6v6NcZkYQ01Na7ueRXo14I3NJT3yFSklE
ERGcklBjDw6+yctjDFXDmDcA7g18zZHP+aUMcimQ9UtU5CcHUnFPuaTc7N8P21Lb
CvKkJlyDKCEaBVEJ52g99NOPquGtKPmyqg8Nw/dlIUuNU5e1wKAm/km6qpeKM+DZ
I/p4E0d6YJRzmqlFwmO++KOgtJCuY1fPc/VF163/0eS9vs6J50JJHSD6o0Y9XI7K
EXGhliPgqyoNnT8IuQUpCm0bNtiUOi1Yq/WKmsXfaQP6+AI/cgUzL0X52kgLNVEE
CvAy2lcRIFjV7I68B29b0S5VBQA67m0zLYg=
-----END CERTIFICATE-----
Generated at Tue Apr 23 22:55:04 2024 by rpki-client on console-ams.rpki-client.org