Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa
File:                     3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          onjBLzAQP3qGtywntjw2hu45I8q/u7VXMI6kpYiOwFM=
Subject key identifier:   FD:6A:08:53:9B:6E:FC:1C:9D:59:48:9B:91:60:8A:E8:B2:5B:35:41
Certificate issuer:       /CN=5AE57F3F97F40888F93913350A218863E705CD34
Certificate serial:       54102EDB621DAC7513FBC30EE7B7318CBA84EDDE
Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa
Signing time:             Wed 15 Nov 2023 04:00:00 +0000
ROA not before:           Wed 15 Nov 2023 03:55:00 +0000
ROA not after:            Wed 13 Nov 2024 04:00:00 +0000
asID:                     139967
IP address blocks:        103.183.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl
                          rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 21 May 2024 05:59:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:10:2e:db:62:1d:ac:75:13:fb:c3:0e:e7:b7:31:8c:ba:84:ed:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34
        Validity
            Not Before: Nov 15 03:55:00 2023 GMT
            Not After : Nov 13 04:00:00 2024 GMT
        Subject: CN=FD6A08539B6EFC1C9D59489B91608AE8B25B3541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e2:07:16:5a:2b:28:3b:f2:66:49:3d:c7:82:
                    2e:f5:8f:a4:be:c6:2a:a8:49:05:f2:42:86:e9:23:
                    aa:42:da:fb:11:75:7e:dd:4e:e8:1e:db:7a:2a:1f:
                    f9:1d:7d:19:9b:bc:a5:39:5e:33:2e:d5:a5:91:1e:
                    61:12:0e:4d:65:a8:87:6b:5b:d3:72:32:9b:01:25:
                    4c:2c:2a:33:8a:a3:09:07:4f:65:5a:a6:99:cc:d2:
                    2b:01:82:55:71:e5:a5:2b:07:d1:b3:c3:cf:1e:e6:
                    1b:69:ee:13:46:71:a2:79:5d:a8:1c:b2:f9:75:ac:
                    49:e9:ea:80:df:8a:3e:fc:ae:dc:8c:42:b6:a3:69:
                    66:62:c4:1f:4a:7b:f4:79:85:2c:56:9a:1a:90:3f:
                    1b:fe:58:78:3c:c4:dd:8c:a9:6c:17:59:03:83:8b:
                    fa:c0:e6:6b:d8:64:a9:53:5a:97:c2:2b:6c:c9:2f:
                    17:15:cf:1a:74:73:ab:ba:f1:16:4f:50:58:57:c8:
                    50:b0:3a:42:8b:02:e0:6b:12:db:51:d3:b5:7d:e2:
                    c9:db:03:ab:e8:95:81:cb:ce:29:5b:ab:06:9e:27:
                    5f:92:78:47:87:2c:a3:76:2c:f1:6a:a3:2c:bd:b6:
                    04:9c:f7:89:f2:81:e2:f4:7f:4a:74:3e:0a:5c:99:
                    78:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:6A:08:53:9B:6E:FC:1C:9D:59:48:9B:91:60:8A:E8:B2:5B:35:41
            X509v3 Authority Key Identifier:
                keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:1d:3b:33:d9:08:6f:22:1c:36:34:b2:00:f1:9d:d1:c2:e1:
         b3:78:65:ad:d1:51:2d:2a:3d:f5:fe:20:9f:f7:81:96:82:c2:
         72:e3:78:c5:a3:fe:95:85:b8:d6:dd:6d:c3:a8:57:e8:bf:89:
         ff:57:be:b5:20:a9:95:be:c7:0a:2e:e7:35:65:47:de:6c:18:
         49:8c:30:bd:d6:0f:bd:df:a7:a9:3e:53:4e:0e:c6:25:d5:78:
         25:b1:66:c9:73:a0:3b:45:31:c0:06:22:22:c0:7a:7f:33:57:
         66:78:48:90:d1:36:00:e4:39:b4:09:d5:03:f6:a2:b0:57:83:
         4f:ca:17:25:0c:24:95:35:e4:af:4f:49:9c:32:43:53:bb:ab:
         2c:4c:ed:34:99:08:82:51:f0:b5:05:1e:64:3b:de:30:44:26:
         f6:88:a8:6a:92:3a:98:2a:16:66:78:b9:e7:5f:e1:cb:67:ac:
         c0:06:5b:62:b7:43:2f:25:37:91:cb:6a:b0:5c:1f:80:3a:cb:
         f2:5d:f4:9d:0c:70:80:40:f0:1a:bc:20:d6:58:53:75:98:ae:
         32:9b:cf:4c:1c:29:b6:2c:c7:41:97:b8:a4:d3:a0:0d:8a:0a:
         60:1e:d6:25:e8:1c:26:8d:ce:e7:de:6f:a2:7b:fe:58:10:24:
         99:5b:f9:21
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVBAu22IdrHUT+8MO57cxjLqE7d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF
NzA1Q0QzNDAeFw0yMzExMTUwMzU1MDBaFw0yNDExMTMwNDAwMDBaMDMxMTAvBgNV
BAMTKEZENkEwODUzOUI2RUZDMUM5RDU5NDg5QjkxNjA4QUU4QjI1QjM1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO4gcWWisoO/JmST3Hgi71j6S+
xiqoSQXyQobpI6pC2vsRdX7dTuge23oqH/kdfRmbvKU5XjMu1aWRHmESDk1lqIdr
W9NyMpsBJUwsKjOKowkHT2VappnM0isBglVx5aUrB9Gzw88e5htp7hNGcaJ5Xagc
svl1rEnp6oDfij78rtyMQrajaWZixB9Ke/R5hSxWmhqQPxv+WHg8xN2MqWwXWQOD
i/rA5mvYZKlTWpfCK2zJLxcVzxp0c6u68RZPUFhXyFCwOkKLAuBrEttR07V94snb
A6volYHLzilbqwaeJ1+SeEeHLKN2LPFqoyy9tgSc94nygeL0f0p0PgpcmXjZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/WoIU5tu/BydWUibkWCK6LJbNUEwHwYDVR0j
BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3
RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1
Q0QzNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkOGNkZjVhLWI5YTctNDQ2OS1h
NjUzLWM5ZmYyYTAwMzc3My8wLzMxMzAzMzJlMzEzODMzMmUzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7cLMA0GCSqG
SIb3DQEBCwUAA4IBAQAPHTsz2QhvIhw2NLIA8Z3RwuGzeGWt0VEtKj31/iCf94GW
gsJy43jFo/6VhbjW3W3DqFfov4n/V761IKmVvscKLuc1ZUfebBhJjDC91g+936ep
PlNODsYl1XglsWbJc6A7RTHABiIiwHp/M1dmeEiQ0TYA5Dm0CdUD9qKwV4NPyhcl
DCSVNeSvT0mcMkNTu6ssTO00mQiCUfC1BR5kO94wRCb2iKhqkjqYKhZmeLnnX+HL
Z6zABltit0MvJTeRy2qwXB+AOsvyXfSdDHCAQPAavCDWWFN1mK4ym89MHCm2LMdB
l7ik06ANigpgHtYl6Bwmjc7n3m+ie/5YECSZW/kh
-----END CERTIFICATE-----
Generated at Sat May 18 03:47:49 2024 by rpki-client on console-fra.rpki-client.org