Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/3130332e36362e35352e302f32342d3234203d3e20313335343537.roa
File:                     3130332e36362e35352e302f32342d3234203d3e20313335343537.roa (raw, json)
Hash identifier:          ONsBPExlFbykItHijaoPrdUzlUXFNHLKUsxMHqiRNDY=
Subject key identifier:   57:48:60:24:E8:C7:A3:A4:F4:C8:4E:35:95:03:9E:B8:C2:04:1A:10
Certificate issuer:       /CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
Certificate serial:       6E5644B28DE8EDDF4090353C96A977CD0F76DE24
Authority key identifier: 4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/3130332e36362e35352e302f32342d3234203d3e20313335343537.roa
Signing time:             Wed 18 Oct 2023 05:01:15 +0000
ROA not before:           Wed 18 Oct 2023 04:56:15 +0000
ROA not after:            Wed 16 Oct 2024 05:01:15 +0000
asID:                     135457
IP address blocks:        103.66.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl
                          rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 05:07:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:56:44:b2:8d:e8:ed:df:40:90:35:3c:96:a9:77:cd:0f:76:de:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DD0C95B43B8B653601FED39AB010E1DD0DC17F2
        Validity
            Not Before: Oct 18 04:56:15 2023 GMT
            Not After : Oct 16 05:01:15 2024 GMT
        Subject: CN=57486024E8C7A3A4F4C84E3595039EB8C2041A10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4a:ba:13:1e:8b:f2:f3:e1:fd:4a:7f:f6:a8:
                    05:85:86:48:f2:fa:4d:f7:da:6e:bf:6b:68:61:8a:
                    e9:03:7f:44:ea:d2:a7:75:c0:b6:80:71:aa:08:57:
                    e2:4c:ff:e7:2c:7e:d0:dd:06:52:58:85:06:78:85:
                    7b:43:31:3b:48:7e:95:1b:2f:05:2b:9c:28:d1:85:
                    4f:08:d7:a7:bd:09:82:9b:84:b7:cf:8d:67:92:65:
                    53:7b:ee:f5:96:0e:49:82:b7:bc:22:47:b6:cc:f1:
                    b3:12:c5:05:b0:8c:96:3a:bb:fc:28:bf:fb:89:75:
                    f1:bd:9a:2f:30:95:37:95:17:24:21:cc:16:06:32:
                    b5:4d:9e:30:5f:e9:f7:d6:e8:bd:e1:af:e7:41:8a:
                    98:4c:d8:3f:3a:06:49:bf:9d:7c:40:b2:2f:a2:df:
                    bf:de:27:a8:2d:c2:ae:cc:46:e6:aa:7d:73:a9:1d:
                    09:6b:34:8d:a8:e6:64:27:a0:14:71:90:e9:49:b0:
                    7b:e5:ce:66:05:54:41:0f:82:72:74:2a:82:23:5f:
                    94:4a:38:06:82:d1:da:52:91:02:43:f2:7e:e1:89:
                    8a:af:65:bf:90:34:ae:f1:53:29:55:15:3c:05:25:
                    07:5c:fc:d7:2a:b6:e0:50:0e:66:26:35:2f:ea:19:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:48:60:24:E8:C7:A3:A4:F4:C8:4E:35:95:03:9E:B8:C2:04:1A:10
            X509v3 Authority Key Identifier:
                keyid:4D:D0:C9:5B:43:B8:B6:53:60:1F:ED:39:AB:01:0E:1D:D0:DC:17:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DD0C95B43B8B653601FED39AB010E1DD0DC17F2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82780f85-ef2f-4cf8-a4b8-5225c45b96a1/0/3130332e36362e35352e302f32342d3234203d3e20313335343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.66.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:04:b5:34:1a:16:58:f7:02:72:d0:94:b9:b2:10:31:65:37:
         e9:90:bd:0b:ec:2e:1e:67:0a:4d:8d:27:f9:1d:0b:92:a8:cf:
         89:75:53:7f:41:c4:fa:3b:25:c6:ba:16:ea:40:90:5e:a8:5b:
         d6:1a:39:ae:48:ea:5f:94:5d:f6:24:ed:3d:25:24:17:8b:46:
         be:14:41:6b:11:21:c0:05:52:5a:4e:7b:24:33:02:4d:8c:b6:
         de:ab:5c:1d:75:45:6e:78:8b:b4:f6:1a:68:f9:a8:a0:a0:13:
         c4:83:52:21:16:bd:f3:10:88:ee:db:ff:67:ab:ac:f8:c6:e5:
         82:2c:e4:55:22:9e:1f:68:8a:09:5a:51:17:4d:da:3d:83:1e:
         5b:27:70:54:47:92:b9:a4:08:dd:82:e4:6f:81:00:68:ab:81:
         80:57:5d:91:c5:ce:82:a3:9d:1e:a6:36:bd:39:80:64:83:cc:
         36:43:87:bc:dd:d9:74:9e:fd:a8:f0:64:53:e2:8b:d1:8d:9d:
         28:7c:99:2c:88:30:87:4b:fc:8b:9b:24:d2:13:be:a5:4e:a9:
         9b:b1:c9:ca:4a:0b:ee:cb:bc:9c:b0:4c:25:29:2b:e5:3b:d6:
         3d:16:9e:d1:91:48:d9:3f:69:62:0e:89:d0:1c:57:ec:12:18:
         53:ff:cf:f4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUblZEso3o7d9AkDU8lql3zQ923iQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMURE
MERDMTdGMjAeFw0yMzEwMTgwNDU2MTVaFw0yNDEwMTYwNTAxMTVaMDMxMTAvBgNV
BAMTKDU3NDg2MDI0RThDN0EzQTRGNEM4NEUzNTk1MDM5RUI4QzIwNDFBMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFSroTHovy8+H9Sn/2qAWFhkjy
+k332m6/a2hhiukDf0Tq0qd1wLaAcaoIV+JM/+csftDdBlJYhQZ4hXtDMTtIfpUb
LwUrnCjRhU8I16e9CYKbhLfPjWeSZVN77vWWDkmCt7wiR7bM8bMSxQWwjJY6u/wo
v/uJdfG9mi8wlTeVFyQhzBYGMrVNnjBf6ffW6L3hr+dBiphM2D86Bkm/nXxAsi+i
37/eJ6gtwq7MRuaqfXOpHQlrNI2o5mQnoBRxkOlJsHvlzmYFVEEPgnJ0KoIjX5RK
OAaC0dpSkQJD8n7hiYqvZb+QNK7xUylVFTwFJQdc/NcqtuBQDmYmNS/qGWKRAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV0hgJOjHo6T0yE41lQOeuMIEGhAwHwYDVR0j
BBgwFoAUTdDJW0O4tlNgH+05qwEOHdDcF/IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Mjc4MGY4NS1lZjJmLTRjZjgtYTRiOC01MjI1YzQ1Yjk2YTEvMC80REQwQzk1QjQz
QjhCNjUzNjAxRkVEMzlBQjAxMEUxREQwREMxN0YyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEREMEM5NUI0M0I4QjY1MzYwMUZFRDM5QUIwMTBFMUREMERD
MTdGMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyNzgwZjg1LWVmMmYtNGNmOC1h
NGI4LTUyMjVjNDViOTZhMS8wLzMxMzAzMzJlMzYzNjJlMzUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdCNzANBgkqhkiG
9w0BAQsFAAOCAQEAjQS1NBoWWPcCctCUubIQMWU36ZC9C+wuHmcKTY0n+R0LkqjP
iXVTf0HE+jslxroW6kCQXqhb1ho5rkjqX5Rd9iTtPSUkF4tGvhRBaxEhwAVSWk57
JDMCTYy23qtcHXVFbniLtPYaaPmooKATxINSIRa98xCI7tv/Z6us+MblgizkVSKe
H2iKCVpRF03aPYMeWydwVEeSuaQI3YLkb4EAaKuBgFddkcXOgqOdHqY2vTmAZIPM
NkOHvN3ZdJ79qPBkU+KL0Y2dKHyZLIgwh0v8i5sk0hO+pU6pm7HJykoL7su8nLBM
JSkr5TvWPRae0ZFI2T9pYg6J0BxX7BIYU//P9A==
-----END CERTIFICATE-----
Generated at Sat May 18 04:52:51 2024 by rpki-client on console-ams.rpki-client.org