Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          +2NTwuGyML6oGEBUaXntTc+SXaNlVscVHGmTTPJ2p+E=
Subject key identifier:   25:41:7D:6D:6A:AC:02:AA:87:97:D8:88:7A:D0:85:1C:1D:23:EF:A4
Certificate issuer:       /CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C
Certificate serial:       5302413BB68A42D420E98ADBCBEB7088EC854105
Authority key identifier: 28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 10:00:56 +0000
ROA not before:           Fri 01 Sep 2023 09:55:56 +0000
ROA not after:            Fri 30 Aug 2024 10:00:56 +0000
asID:                     17995
IP address blocks:        103.167.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl
                          rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:02:41:3b:b6:8a:42:d4:20:e9:8a:db:cb:eb:70:88:ec:85:41:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28907A6B3D4FB187F3A15BF7457D948A12903D7C
        Validity
            Not Before: Sep  1 09:55:56 2023 GMT
            Not After : Aug 30 10:00:56 2024 GMT
        Subject: CN=25417D6D6AAC02AA8797D8887AD0851C1D23EFA4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bf:9c:d7:67:f7:43:02:59:88:29:ad:b4:70:
                    c0:28:e3:5b:e6:1d:b3:4f:79:e9:9e:7d:3a:42:9a:
                    3b:72:18:9f:6c:fb:21:19:0f:37:d4:0f:3b:c2:98:
                    4b:13:79:19:60:f2:63:44:e3:f4:b0:c4:e5:b8:0a:
                    61:e4:38:9b:c3:c4:2e:fc:53:b0:fc:cf:1c:9a:18:
                    20:fb:8d:f9:62:07:93:1c:a2:75:d0:7f:f9:26:5e:
                    78:e4:5d:cd:16:fc:4c:14:c1:da:ef:bc:14:04:06:
                    62:1a:30:f6:4a:a2:7b:64:87:64:a6:a8:49:77:61:
                    dc:c1:6b:85:b6:6d:da:69:f6:70:f9:57:a8:61:40:
                    fc:61:4d:84:76:ad:f1:27:78:25:dc:b8:13:f6:22:
                    d9:13:7d:69:54:86:47:07:44:24:b3:f4:ac:48:a9:
                    18:d8:a5:9a:fd:d9:d5:1a:fc:65:2f:d4:19:d4:6e:
                    1b:09:53:83:91:18:03:d3:91:5e:91:44:6a:c6:b9:
                    8d:af:a8:4c:91:d6:72:d9:26:8a:b8:a3:d4:e5:91:
                    26:13:95:5f:ee:81:bc:c3:4e:ec:70:03:0d:e3:0e:
                    77:3d:c2:b5:4b:f2:ee:ba:3b:04:14:cb:8b:fd:ba:
                    41:32:db:f3:a4:da:14:ae:9e:39:a0:6e:8e:c8:5b:
                    0b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:41:7D:6D:6A:AC:02:AA:87:97:D8:88:7A:D0:85:1C:1D:23:EF:A4
            X509v3 Authority Key Identifier:
                keyid:28:90:7A:6B:3D:4F:B1:87:F3:A1:5B:F7:45:7D:94:8A:12:90:3D:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/28907A6B3D4FB187F3A15BF7457D948A12903D7C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28907A6B3D4FB187F3A15BF7457D948A12903D7C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60c14b99-4ee7-422a-b064-dca3236d6756/0/3130332e3136372e342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ba:15:ef:af:93:fe:be:f6:63:22:22:54:e0:82:2b:5f:47:7c:
         d1:0d:16:fd:52:44:e1:d8:9d:83:59:3f:68:82:da:87:c2:ce:
         38:db:9e:5f:74:e2:73:38:07:f8:d9:78:00:96:77:c4:ae:02:
         90:34:8e:a8:8f:d7:3d:53:bb:64:04:67:4a:a2:44:09:4e:70:
         6b:fa:0b:42:e1:15:34:99:67:90:c3:eb:88:b0:3a:28:67:b7:
         3a:bc:8d:d7:b1:b6:18:9a:2e:d9:2f:b9:1d:be:fd:a7:f5:bd:
         b2:c6:bf:59:93:1b:68:ff:68:1b:04:4e:c5:43:da:4e:67:76:
         50:cf:d1:ca:7d:a2:37:c8:14:f0:10:cf:92:ce:6b:21:c6:52:
         7a:c4:d3:9f:09:90:ab:6f:36:be:08:27:fd:62:27:b6:3c:08:
         ab:8c:33:9a:81:87:5c:60:0e:12:27:ce:25:19:c7:eb:8b:9e:
         13:4f:87:d8:5d:d3:0e:6c:10:80:ae:cc:f1:d4:3c:13:11:f3:
         32:e1:d4:6c:8f:4d:63:a8:e7:be:73:f8:8e:94:3c:b7:38:4e:
         08:37:82:8b:81:89:f9:96:c8:b8:af:97:85:8c:55:ab:91:06:
         9e:5a:11:26:09:ba:d8:13:1b:6b:44:9a:0d:7f:6e:b2:7c:30:
         79:10:91:9d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUUwJBO7aKQtQg6Yrby+twiOyFQQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEEx
MjkwM0Q3QzAeFw0yMzA5MDEwOTU1NTZaFw0yNDA4MzAxMDAwNTZaMDMxMTAvBgNV
BAMTKDI1NDE3RDZENkFBQzAyQUE4Nzk3RDg4ODdBRDA4NTFDMUQyM0VGQTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJv5zXZ/dDAlmIKa20cMAo41vm
HbNPeemefTpCmjtyGJ9s+yEZDzfUDzvCmEsTeRlg8mNE4/SwxOW4CmHkOJvDxC78
U7D8zxyaGCD7jfliB5MconXQf/kmXnjkXc0W/EwUwdrvvBQEBmIaMPZKontkh2Sm
qEl3YdzBa4W2bdpp9nD5V6hhQPxhTYR2rfEneCXcuBP2ItkTfWlUhkcHRCSz9KxI
qRjYpZr92dUa/GUv1BnUbhsJU4ORGAPTkV6RRGrGuY2vqEyR1nLZJoq4o9TlkSYT
lV/ugbzDTuxwAw3jDnc9wrVL8u66OwQUy4v9ukEy2/Ok2hSunjmgbo7IWws5AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUJUF9bWqsAqqHl9iIetCFHB0j76QwHwYDVR0j
BBgwFoAUKJB6az1PsYfzoVv3RX2UihKQPXwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MGMxNGI5OS00ZWU3LTQyMmEtYjA2NC1kY2EzMjM2ZDY3NTYvMC8yODkwN0E2QjNE
NEZCMTg3RjNBMTVCRjc0NTdEOTQ4QTEyOTAzRDdDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg5MDdBNkIzRDRGQjE4N0YzQTE1QkY3NDU3RDk0OEExMjkw
M0Q3Qy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwYzE0Yjk5LTRlZTctNDIyYS1i
MDY0LWRjYTMyMzZkNjc1Ni8wLzMxMzAzMzJlMzEzNjM3MmUzNDJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpwQwDQYJKoZIhvcN
AQELBQADggEBALoV76+T/r72YyIiVOCCK19HfNENFv1SROHYnYNZP2iC2ofCzjjb
nl904nM4B/jZeACWd8SuApA0jqiP1z1Tu2QEZ0qiRAlOcGv6C0LhFTSZZ5DD64iw
Oihntzq8jdexthiaLtkvuR2+/af1vbLGv1mTG2j/aBsETsVD2k5ndlDP0cp9ojfI
FPAQz5LOayHGUnrE058JkKtvNr4IJ/1iJ7Y8CKuMM5qBh1xgDhInziUZx+uLnhNP
h9hd0w5sEICuzPHUPBMR8zLh1GyPTWOo575z+I6UPLc4Tgg3gouBifmWyLivl4WM
VauRBp5aESYJutgTG2tEmg1/brJ8MHkQkZ0=
-----END CERTIFICATE-----
Generated at Thu Apr 25 16:38:54 2024 by rpki-client on console-ams.rpki-client.org