Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa
File:                     3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa (raw, json)
Hash identifier:          PkNxj3i2Eaa1nMA7FIwPOEHYb6n3jhQ7wAmjqKpkgPQ=
Subject key identifier:   E8:62:C5:5C:F9:AE:30:97:89:E1:68:6B:1C:8F:75:34:A0:0B:8E:82
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       51B2B38929A5EEEF1BFD26E5C91A7F661095868A
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa
Signing time:             Thu 22 Jun 2023 04:23:23 +0000
ROA not before:           Thu 22 Jun 2023 04:18:23 +0000
ROA not after:            Thu 20 Jun 2024 04:23:23 +0000
asID:                     59282
IP address blocks:        103.161.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 15:34:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b2:b3:89:29:a5:ee:ef:1b:fd:26:e5:c9:1a:7f:66:10:95:86:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: Jun 22 04:18:23 2023 GMT
            Not After : Jun 20 04:23:23 2024 GMT
        Subject: CN=E862C55CF9AE309789E1686B1C8F7534A00B8E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:bd:8f:13:6b:5b:f3:d3:14:f0:af:b9:42:85:
                    6b:9a:90:e0:10:81:e0:00:90:6a:0a:3b:21:97:2c:
                    90:97:bb:33:87:9a:c1:ee:88:02:f8:d5:a6:e2:29:
                    5e:bb:f5:8c:c5:d2:61:25:72:65:17:f0:72:63:71:
                    e7:ac:2a:e9:ba:de:a3:c4:a4:2d:43:01:0c:06:75:
                    20:9c:83:3d:7f:71:df:87:51:9b:f1:0e:85:4f:f3:
                    90:7b:cf:d6:7f:10:84:0b:38:a9:5d:9d:be:c2:13:
                    db:20:3b:05:db:b4:60:ed:d2:e2:d8:d8:16:b6:08:
                    c8:08:0b:0e:64:e5:01:79:87:a7:ea:49:57:e6:8e:
                    9f:2e:21:39:27:82:b5:c1:61:17:43:ee:f7:36:61:
                    26:5e:82:c3:2f:2f:a8:c9:43:e7:54:63:3c:a9:77:
                    44:60:dd:23:fb:f3:c1:ab:fc:c2:35:03:fc:d2:81:
                    ee:d4:e6:b4:03:fb:77:aa:9f:ee:05:8e:8a:1f:c9:
                    72:9b:df:38:67:6a:1c:c0:31:df:68:22:9b:74:e6:
                    39:8d:f4:9f:4a:da:65:de:5a:8f:f9:12:d7:6a:d9:
                    bb:25:a0:b2:ac:d5:a5:60:dd:e2:95:f6:e1:1e:93:
                    aa:c8:62:6f:9c:3f:c7:8d:f9:d8:8e:54:76:5f:71:
                    52:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:62:C5:5C:F9:AE:30:97:89:E1:68:6B:1C:8F:75:34:A0:0B:8E:82
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32332d3233203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:68:03:9a:35:38:4b:0a:e6:53:36:48:ab:1f:ee:ed:b2:0b:
         08:d9:84:4d:19:d0:fb:35:2a:c4:d5:22:25:87:39:3c:d4:87:
         1c:46:05:b9:e2:ad:58:60:f4:e5:eb:b4:c6:1e:ca:50:d9:25:
         10:f7:6a:c7:dd:ae:28:68:e2:df:ec:74:9d:cf:1c:bb:ce:dc:
         3a:00:08:48:0d:2b:49:e6:da:04:65:52:56:35:58:a1:1f:7f:
         11:e7:4f:ce:84:96:ce:09:3f:40:1c:4b:c5:9b:7d:82:ef:b6:
         99:87:cc:e7:6a:8a:47:a2:82:39:fe:5a:89:58:ed:42:d1:a2:
         66:ec:61:20:ea:28:4b:5d:f3:26:6f:08:4c:1f:30:3d:a2:1f:
         54:2e:48:84:99:1a:b0:07:a7:22:7a:84:a6:03:63:09:e1:bf:
         18:3d:0b:ca:f5:cd:4e:34:8b:9c:d2:ef:44:2c:66:9f:69:00:
         7d:1b:a7:fa:00:94:1c:93:de:92:d3:6b:38:63:5a:30:a4:47:
         4f:3f:2c:98:28:4f:98:8b:3a:d8:de:48:82:60:b1:b9:63:4a:
         f2:50:70:89:cf:7d:cd:1a:57:07:a9:5d:a0:d1:fe:61:2b:d9:
         90:01:e9:a2:a5:e6:e7:70:fc:cc:8b:27:21:d8:35:35:eb:50:
         11:be:28:d6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUUbKziSml7u8b/SblyRp/ZhCVhoowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB
RkRCMTI0ODAeFw0yMzA2MjIwNDE4MjNaFw0yNDA2MjAwNDIzMjNaMDMxMTAvBgNV
BAMTKEU4NjJDNTVDRjlBRTMwOTc4OUUxNjg2QjFDOEY3NTM0QTAwQjhFODIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNvY8Ta1vz0xTwr7lChWuakOAQ
geAAkGoKOyGXLJCXuzOHmsHuiAL41abiKV679YzF0mElcmUX8HJjceesKum63qPE
pC1DAQwGdSCcgz1/cd+HUZvxDoVP85B7z9Z/EIQLOKldnb7CE9sgOwXbtGDt0uLY
2Ba2CMgICw5k5QF5h6fqSVfmjp8uITkngrXBYRdD7vc2YSZegsMvL6jJQ+dUYzyp
d0Rg3SP788Gr/MI1A/zSge7U5rQD+3eqn+4FjoofyXKb3zhnahzAMd9oIpt05jmN
9J9K2mXeWo/5Etdq2bsloLKs1aVg3eKV9uEek6rIYm+cP8eN+diOVHZfcVKZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6GLFXPmuMJeJ4WhrHI91NKALjoIwHwYDVR0j
BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz
MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC
MTI0OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04
ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6GGMA0GCSqG
SIb3DQEBCwUAA4IBAQAoaAOaNThLCuZTNkirH+7tsgsI2YRNGdD7NSrE1SIlhzk8
1IccRgW54q1YYPTl67TGHspQ2SUQ92rH3a4oaOLf7HSdzxy7ztw6AAhIDStJ5toE
ZVJWNVihH38R50/OhJbOCT9AHEvFm32C77aZh8znaopHooI5/lqJWO1C0aJm7GEg
6ihLXfMmbwhMHzA9oh9ULkiEmRqwB6cieoSmA2MJ4b8YPQvK9c1ONIuc0u9ELGaf
aQB9G6f6AJQck96S02s4Y1owpEdPPyyYKE+YizrY3kiCYLG5Y0ryUHCJz33NGlcH
qV2g0f5hK9mQAemipebncPzMiych2DU161ARvijW
-----END CERTIFICATE-----
Generated at Wed May 1 16:08:23 2024 by rpki-client on console-fra.rpki-client.org