Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
File:                     3130332e38302e39302e302f32342d3234203d3e20313337333033.roa (raw, json)
Hash identifier:          FIN6+nGIkSiIrcV086SH0K+rB5B/J+yZXF/Or4Gzx/A=
Subject key identifier:   00:6B:2D:5F:23:35:0D:08:75:E1:05:8F:38:DC:F5:9B:C8:61:99:1B
Certificate issuer:       /CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
Certificate serial:       5F527413249958777C561CB6CEB0B677C7CA5D05
Authority key identifier: 38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa
Signing time:             Thu 05 Oct 2023 06:00:01 +0000
ROA not before:           Thu 05 Oct 2023 05:55:01 +0000
ROA not after:            Thu 03 Oct 2024 06:00:01 +0000
asID:                     137303
IP address blocks:        103.80.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl
                          rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 May 2024 20:36:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:52:74:13:24:99:58:77:7c:56:1c:b6:ce:b0:b6:77:c7:ca:5d:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=389E7C13CF6344AEB93001CD4C5AC79401252A5C
        Validity
            Not Before: Oct  5 05:55:01 2023 GMT
            Not After : Oct  3 06:00:01 2024 GMT
        Subject: CN=006B2D5F23350D0875E1058F38DCF59BC861991B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d0:ef:52:b8:c5:8a:f1:82:5a:5d:fe:b8:69:
                    2b:b3:a2:dc:b5:43:5a:4c:9c:1f:82:b0:97:f1:8f:
                    a9:15:65:1d:24:8b:30:fb:f7:87:79:a2:a9:02:89:
                    e4:d7:96:74:0c:1a:69:e3:ab:c8:69:17:b6:70:c4:
                    2e:bd:b8:1d:74:6b:fb:5c:ce:48:f2:45:8a:30:19:
                    d5:28:5f:96:8a:dd:91:aa:fb:36:e4:0a:58:04:bd:
                    36:4f:5f:6a:17:53:d2:37:b0:a6:58:b8:12:7d:8d:
                    7f:42:a0:1c:ea:e7:04:d8:45:d9:59:d4:ba:ad:9b:
                    78:ca:17:55:a7:ab:f3:cf:a3:c9:9c:50:2a:7b:b8:
                    3d:ac:91:77:26:1d:91:a1:84:b7:ed:96:10:f9:83:
                    82:33:b8:d0:3e:b0:cf:39:9c:76:57:48:22:71:fb:
                    d8:dc:3e:54:93:2e:33:3e:5e:c4:01:82:81:30:0b:
                    8f:e5:ba:53:24:d2:a4:69:00:81:43:e2:e9:65:3b:
                    81:8a:74:68:bc:73:77:b1:ee:98:8c:73:77:c5:97:
                    85:9b:88:18:77:ea:e2:09:5d:6a:3b:cb:8a:a3:17:
                    2c:0f:f1:df:ea:93:e8:60:6d:c1:32:09:bd:dc:f2:
                    fb:0e:4e:c3:75:d9:40:cc:04:2e:04:a5:5d:fe:5c:
                    39:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6B:2D:5F:23:35:0D:08:75:E1:05:8F:38:DC:F5:9B:C8:61:99:1B
            X509v3 Authority Key Identifier:
                keyid:38:9E:7C:13:CF:63:44:AE:B9:30:01:CD:4C:5A:C7:94:01:25:2A:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/389E7C13CF6344AEB93001CD4C5AC79401252A5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/389E7C13CF6344AEB93001CD4C5AC79401252A5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82032bc9-605a-4253-a4cd-62f124126eac/0/3130332e38302e39302e302f32342d3234203d3e20313337333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:3d:f5:41:b5:72:4d:75:f2:c1:49:14:d2:d1:6e:0d:fc:ba:
         11:3d:a2:f1:45:b9:e6:e1:a8:6f:a5:5a:be:ee:c8:90:13:f6:
         d8:e6:7e:85:92:1a:7d:9c:68:a5:86:11:5a:44:94:bf:57:51:
         d6:df:90:d3:b3:86:b2:dd:a7:48:38:a8:d8:a1:8d:cb:9f:0e:
         3b:b2:57:38:74:c7:db:15:cf:10:18:03:51:4b:74:73:d5:fe:
         5a:01:74:01:7f:b5:95:5b:5e:1a:2f:56:1b:ac:d5:fa:94:b8:
         ec:e4:7f:08:a5:9c:cc:83:1a:46:50:9e:13:f9:a3:34:6f:a0:
         99:90:a3:a1:f7:85:95:65:9f:aa:0b:a4:1e:92:05:3b:54:af:
         de:f7:b6:24:9e:0b:b9:bc:28:f9:32:3b:f2:05:ad:d7:47:5e:
         66:e6:25:25:21:bc:87:db:53:8e:48:5b:fa:6c:fc:fd:61:ad:
         92:5f:d1:55:2a:5e:5b:1e:c6:51:cd:59:c6:40:c4:88:77:e8:
         0c:63:a8:e9:fe:57:5a:d8:db:aa:6f:62:b3:2f:a6:5d:1d:00:
         d3:59:42:32:47:73:b7:03:04:02:94:88:77:b4:a4:df:15:bc:
         a5:b9:a3:7a:1f:fb:a2:df:1a:fd:7e:d0:76:61:82:02:c0:25:
         12:7e:df:95
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUX1J0EySZWHd8Vhy2zrC2d8fKXQUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQw
MTI1MkE1QzAeFw0yMzEwMDUwNTU1MDFaFw0yNDEwMDMwNjAwMDFaMDMxMTAvBgNV
BAMTKDAwNkIyRDVGMjMzNTBEMDg3NUUxMDU4RjM4RENGNTlCQzg2MTk5MUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0O9SuMWK8YJaXf64aSuzoty1
Q1pMnB+CsJfxj6kVZR0kizD794d5oqkCieTXlnQMGmnjq8hpF7ZwxC69uB10a/tc
zkjyRYowGdUoX5aK3ZGq+zbkClgEvTZPX2oXU9I3sKZYuBJ9jX9CoBzq5wTYRdlZ
1Lqtm3jKF1Wnq/PPo8mcUCp7uD2skXcmHZGhhLftlhD5g4IzuNA+sM85nHZXSCJx
+9jcPlSTLjM+XsQBgoEwC4/lulMk0qRpAIFD4ullO4GKdGi8c3ex7piMc3fFl4Wb
iBh36uIJXWo7y4qjFywP8d/qk+hgbcEyCb3c8vsOTsN12UDMBC4EpV3+XDn5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUAGstXyM1DQh14QWPONz1m8hhmRswHwYDVR0j
BBgwFoAUOJ58E89jRK65MAHNTFrHlAElKlwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjAzMmJjOS02MDVhLTQyNTMtYTRjZC02MmYxMjQxMjZlYWMvMC8zODlFN0MxM0NG
NjM0NEFFQjkzMDAxQ0Q0QzVBQzc5NDAxMjUyQTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg5RTdDMTNDRjYzNDRBRUI5MzAwMUNENEM1QUM3OTQwMTI1
MkE1Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMDMyYmM5LTYwNWEtNDI1My1h
NGNkLTYyZjEyNDEyNmVhYy8wLzMxMzAzMzJlMzgzMDJlMzkzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNzMzMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdQWjANBgkqhkiG
9w0BAQsFAAOCAQEAyT31QbVyTXXywUkU0tFuDfy6ET2i8UW55uGob6Vavu7IkBP2
2OZ+hZIafZxopYYRWkSUv1dR1t+Q07OGst2nSDio2KGNy58OO7JXOHTH2xXPEBgD
UUt0c9X+WgF0AX+1lVteGi9WG6zV+pS47OR/CKWczIMaRlCeE/mjNG+gmZCjofeF
lWWfqgukHpIFO1Sv3ve2JJ4Lubwo+TI78gWt10deZuYlJSG8h9tTjkhb+mz8/WGt
kl/RVSpeWx7GUc1ZxkDEiHfoDGOo6f5XWtjbqm9isy+mXR0A01lCMkdztwMEApSI
d7Sk3xW8pbmjeh/7ot8a/X7QdmGCAsAlEn7flQ==
-----END CERTIFICATE-----
Generated at Sat May 25 01:22:54 2024 by rpki-client on console-fra.rpki-client.org