Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa
File:                     3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          Y1vxfNpBEkDUu759owztLKdhxj1gYyNzrkNzIZ6OPcA=
Subject key identifier:   E5:E5:9F:60:4A:99:1B:61:B3:66:48:71:C8:4E:E3:49:C1:7D:B3:9F
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       6A1CA80B0577ACF433491B73B6994063530818E5
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:08:09 +0000
ROA not before:           Mon 31 Jul 2023 00:03:09 +0000
ROA not after:            Mon 29 Jul 2024 00:08:09 +0000
asID:                     63497
IP address blocks:        103.232.243.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
                          rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:1c:a8:0b:05:77:ac:f4:33:49:1b:73:b6:99:40:63:53:08:18:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Jul 31 00:03:09 2023 GMT
            Not After : Jul 29 00:08:09 2024 GMT
        Subject: CN=E5E59F604A991B61B3664871C84EE349C17DB39F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:97:26:bf:2c:d9:8f:4a:1f:48:7c:c5:1b:
                    d6:6f:5f:35:0e:37:46:82:41:d7:67:21:62:9c:f9:
                    04:4c:df:ee:c9:19:16:04:2b:c7:f2:b0:6b:78:c4:
                    69:72:f1:f0:d6:dc:70:0e:f1:f5:9e:12:b0:f2:00:
                    28:b7:33:67:9f:8f:4c:12:14:f9:cc:d1:00:0b:33:
                    d5:3d:ad:a4:6c:a9:bb:95:1b:ed:19:08:45:8c:e7:
                    39:c1:ae:e1:62:ee:26:42:d3:3a:08:fe:19:94:f3:
                    e4:db:e6:3b:f0:05:15:34:03:d6:79:ef:2f:8f:7d:
                    47:2d:ce:1f:70:d3:e1:d0:01:7c:57:e8:c8:99:98:
                    a6:de:42:ee:4e:33:00:54:44:06:8a:b0:08:bf:a0:
                    fd:d4:47:49:54:9d:67:87:d9:dd:46:58:fb:90:b5:
                    fa:ee:ca:ed:a2:3f:4e:bd:5f:f8:35:a8:b8:81:69:
                    f5:c7:bd:42:e3:27:f2:ab:76:93:e0:a1:44:a8:3e:
                    ca:54:bf:c6:a0:4a:9a:59:21:66:c3:ea:07:d2:43:
                    ba:5e:d6:25:de:e4:9f:d9:9a:fe:d5:99:b4:10:85:
                    44:56:69:8e:8d:cd:87:4b:38:63:95:91:c7:bd:3a:
                    31:e3:83:10:d4:73:df:67:6b:14:8e:02:81:56:cc:
                    b0:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:E5:9F:60:4A:99:1B:61:B3:66:48:71:C8:4E:E3:49:C1:7D:B3:9F
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e3233322e3234332e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.232.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:1e:7b:91:8c:27:30:21:6e:6e:22:8f:42:1f:30:dc:e1:53:
         e8:67:6f:f5:0b:e3:37:b4:74:e0:92:70:47:9f:3d:b6:db:05:
         5f:79:71:06:8b:25:6b:e1:9a:48:96:b9:a2:4e:67:81:9c:c3:
         f8:95:22:ce:2d:54:12:a2:2d:51:6e:34:3d:d9:c4:a1:06:f7:
         49:37:e9:60:f9:3a:cd:0e:80:0a:83:65:60:ca:3b:f5:d8:11:
         12:3d:85:5e:5a:79:fb:00:c4:f8:be:39:71:13:00:83:81:24:
         3e:87:ba:ca:3f:c7:7e:33:11:bf:d4:d5:d6:e8:14:6f:92:8e:
         47:ff:41:99:30:f6:cc:30:9f:4a:93:40:4a:6e:4a:f1:78:f1:
         cf:31:57:4b:31:34:f8:62:0a:c5:a3:01:31:57:dc:c6:68:9b:
         89:f4:e8:11:4e:72:28:c5:c8:c3:9b:da:90:10:a5:c0:ff:dc:
         5b:50:48:f2:0a:5b:2b:01:22:12:f7:51:f4:4f:45:f4:8b:6c:
         d7:90:15:92:a7:79:e5:16:dd:d1:6b:d7:2f:bc:08:1a:3d:ff:
         69:94:15:d9:24:73:9f:f9:eb:c0:76:62:d9:8c:00:26:3b:c3:
         b7:2a:31:75:85:67:d6:35:28:f4:20:f5:24:d5:a7:43:f0:3e:
         02:5a:ea:cb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUahyoCwV3rPQzSRtztplAY1MIGOUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx
NTFDNUVEQjAeFw0yMzA3MzEwMDAzMDlaFw0yNDA3MjkwMDA4MDlaMDMxMTAvBgNV
BAMTKEU1RTU5RjYwNEE5OTFCNjFCMzY2NDg3MUM4NEVFMzQ5QzE3REIzOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxVZcmvyzZj0ofSHzFG9ZvXzUO
N0aCQddnIWKc+QRM3+7JGRYEK8fysGt4xGly8fDW3HAO8fWeErDyACi3M2efj0wS
FPnM0QALM9U9raRsqbuVG+0ZCEWM5znBruFi7iZC0zoI/hmU8+Tb5jvwBRU0A9Z5
7y+PfUctzh9w0+HQAXxX6MiZmKbeQu5OMwBURAaKsAi/oP3UR0lUnWeH2d1GWPuQ
tfruyu2iP069X/g1qLiBafXHvULjJ/KrdpPgoUSoPspUv8agSppZIWbD6gfSQ7pe
1iXe5J/Zmv7VmbQQhURWaY6NzYdLOGOVkce9OjHjgxDUc99naxSOAoFWzLDhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5eWfYEqZG2GzZkhxyE7jScF9s58wHwYDVR0j
BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4
MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD
NUVEQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05
Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzIzMzMyMmUzMjM0MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzOTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+jzMA0GCSqG
SIb3DQEBCwUAA4IBAQCQHnuRjCcwIW5uIo9CHzDc4VPoZ2/1C+M3tHTgknBHnz22
2wVfeXEGiyVr4ZpIlrmiTmeBnMP4lSLOLVQSoi1RbjQ92cShBvdJN+lg+TrNDoAK
g2Vgyjv12BESPYVeWnn7AMT4vjlxEwCDgSQ+h7rKP8d+MxG/1NXW6BRvko5H/0GZ
MPbMMJ9Kk0BKbkrxePHPMVdLMTT4YgrFowExV9zGaJuJ9OgRTnIoxcjDm9qQEKXA
/9xbUEjyClsrASIS91H0T0X0i2zXkBWSp3nlFt3Ra9cvvAgaPf9plBXZJHOf+evA
dmLZjAAmO8O3KjF1hWfWNSj0IPUk1adD8D4CWurL
-----END CERTIFICATE-----
Generated at Sat Apr 20 01:06:59 2024 by rpki-client on console-ams.rpki-client.org