Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa
File:                     3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (raw, json)
Hash identifier:          toRDYePEusqqMy+Tuvc1VNNrTsAFudxq9bPx/dVypjA=
Subject key identifier:   C3:49:6C:CC:72:38:F4:A1:55:C8:59:24:06:D9:8D:8F:C3:AC:6C:42
Certificate issuer:       /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Certificate serial:       100FE43A2276BE0692F448854A9F7206447A5451
Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa
Signing time:             Mon 31 Jul 2023 00:03:18 +0000
ROA not before:           Sun 30 Jul 2023 23:58:18 +0000
ROA not after:            Mon 29 Jul 2024 00:03:18 +0000
asID:                     140401
IP address blocks:        103.150.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl
                          rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 08:46:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:0f:e4:3a:22:76:be:06:92:f4:48:85:4a:9f:72:06:44:7a:54:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
        Validity
            Not Before: Jul 30 23:58:18 2023 GMT
            Not After : Jul 29 00:03:18 2024 GMT
        Subject: CN=C3496CCC7238F4A155C8592406D98D8FC3AC6C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:77:d9:cb:27:44:d8:c1:b7:9c:1a:2c:e7:88:
                    21:5d:6c:ba:2a:c4:19:62:a1:08:0a:a7:95:8b:35:
                    d3:10:c8:c0:1e:87:92:b4:63:35:d9:f9:bc:20:c6:
                    7d:7e:37:1d:38:09:86:f3:d4:0b:df:aa:14:12:39:
                    2c:64:66:13:fb:c2:e4:c1:87:24:01:db:66:83:a2:
                    df:99:5b:75:86:53:2f:c3:bf:4d:8a:f6:16:3e:39:
                    17:02:fa:09:a9:cf:03:31:66:9b:42:0d:1c:16:f9:
                    42:b9:ed:83:f4:86:46:74:38:4f:7e:58:20:83:b7:
                    e5:a6:19:7f:00:3d:5c:9c:b9:4c:ef:47:a6:8d:6a:
                    f4:85:35:17:a6:8a:68:fb:d6:7e:06:db:21:2c:f3:
                    1e:54:1e:20:ce:88:33:f8:e1:49:a4:82:b3:fe:8c:
                    cc:34:cc:fc:73:9e:d3:c7:8d:f5:97:ab:eb:92:56:
                    b3:04:b2:69:36:0c:e0:4b:aa:c5:a3:e3:10:1a:44:
                    68:24:cd:8a:eb:24:10:06:f4:d8:de:c2:e7:3c:cc:
                    82:43:b8:c1:f0:d8:38:5d:4b:1c:25:4a:23:c1:1c:
                    a9:c5:ed:1a:84:d3:12:42:bd:5e:2d:1d:61:2a:3f:
                    d6:51:28:1d:f6:5a:d5:4f:c8:98:7b:e2:38:ea:94:
                    4b:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:49:6C:CC:72:38:F4:A1:55:C8:59:24:06:D9:8D:8F:C3:AC:6C:42
            X509v3 Authority Key Identifier:
                keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:64:b8:2c:be:de:9b:f7:61:18:ec:b0:a9:e1:c8:98:b5:6e:
         d8:c4:c6:c3:af:33:19:80:5e:b5:73:38:8e:26:3f:85:62:8a:
         47:17:76:5b:ab:80:fa:00:3c:db:80:1e:6f:73:f7:87:d8:f6:
         ea:0e:f7:50:9f:25:75:ed:f0:0f:af:23:a9:ee:e8:cb:54:4b:
         01:ea:4b:d2:17:5e:4a:d4:24:dc:4e:32:ee:84:91:b4:fe:07:
         60:a2:0f:25:b7:64:ee:87:60:2b:6e:6c:a4:ac:f1:88:07:ec:
         07:06:a3:fb:d7:76:98:8c:bf:59:1a:c3:0f:68:97:eb:d4:2c:
         25:bf:64:f9:33:44:b6:fc:71:8b:a3:fc:2c:b2:7d:1e:b5:9a:
         02:a8:4e:2f:bc:6d:48:20:f1:7d:38:ae:1a:cb:f9:38:39:a3:
         f5:8d:29:84:39:f9:49:c5:4f:7a:16:49:e0:1e:a8:0d:9e:90:
         17:5c:6b:2a:96:31:1e:d6:5c:fe:db:f0:d5:c4:2b:92:9f:20:
         3f:5c:42:98:5f:ae:97:4f:26:08:4b:71:ba:f5:19:7e:10:55:
         71:97:e5:0b:1d:ca:17:22:42:03:af:df:90:9f:80:75:25:7c:
         78:32:e3:b5:ca:c2:38:1d:f2:d1:cc:9d:4a:f2:91:c0:37:68:
         a8:a6:88:99
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUEA/kOiJ2vgaS9EiFSp9yBkR6VFEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB
RUYwNjdDNTAeFw0yMzA3MzAyMzU4MThaFw0yNDA3MjkwMDAzMThaMDMxMTAvBgNV
BAMTKEMzNDk2Q0NDNzIzOEY0QTE1NUM4NTkyNDA2RDk4RDhGQzNBQzZDNDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsd9nLJ0TYwbecGizniCFdbLoq
xBlioQgKp5WLNdMQyMAeh5K0YzXZ+bwgxn1+Nx04CYbz1AvfqhQSOSxkZhP7wuTB
hyQB22aDot+ZW3WGUy/Dv02K9hY+ORcC+gmpzwMxZptCDRwW+UK57YP0hkZ0OE9+
WCCDt+WmGX8APVycuUzvR6aNavSFNRemimj71n4G2yEs8x5UHiDOiDP44UmkgrP+
jMw0zPxzntPHjfWXq+uSVrMEsmk2DOBLqsWj4xAaRGgkzYrrJBAG9Njewuc8zIJD
uMHw2DhdSxwlSiPBHKnF7RqE0xJCvV4tHWEqP9ZRKB32WtVPyJh74jjqlEvXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUw0lszHI49KFVyFkkBtmNj8OsbEIwHwYDVR0j
BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy
RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw
NjdDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWQ3MmYzLTJkYjItNGJjYy05
Zjc3LWQxNDQyYjYzMmQwNC8wLzMxMzAzMzJlMzEzNTMwMmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnltswDQYJ
KoZIhvcNAQELBQADggEBAJFkuCy+3pv3YRjssKnhyJi1btjExsOvMxmAXrVzOI4m
P4ViikcXdlurgPoAPNuAHm9z94fY9uoO91CfJXXt8A+vI6nu6MtUSwHqS9IXXkrU
JNxOMu6EkbT+B2CiDyW3ZO6HYCtubKSs8YgH7AcGo/vXdpiMv1kaww9ol+vULCW/
ZPkzRLb8cYuj/CyyfR61mgKoTi+8bUgg8X04rhrL+Tg5o/WNKYQ5+UnFT3oWSeAe
qA2ekBdcayqWMR7WXP7b8NXEK5KfID9cQphfrpdPJghLcbr1GX4QVXGX5Qsdyhci
QgOv35CfgHUlfHgy47XKwjgd8tHMnUrykcA3aKimiJk=
-----END CERTIFICATE-----
Generated at Fri Apr 26 10:57:40 2024 by rpki-client on console-ams.rpki-client.org