Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa
File:                     3130332e39302e32352e302f32342d3234203d3e203633343937.roa (raw, json)
Hash identifier:          iiV39b4zGfd/FfVIBx3iGtG9jUqrW2Fn3rb5sHdNatA=
Subject key identifier:   66:01:1C:CE:26:F1:A0:BC:E1:F9:73:A6:95:12:F6:25:84:BD:A8:CE
Certificate issuer:       /CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
Certificate serial:       4AEA6C3B818066C065B1D00F936B2CEE0F693167
Authority key identifier: 03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa
Signing time:             Mon 31 Jul 2023 00:08:11 +0000
ROA not before:           Mon 31 Jul 2023 00:03:11 +0000
ROA not after:            Mon 29 Jul 2024 00:08:11 +0000
asID:                     63497
IP address blocks:        103.90.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl
                          rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 23:22:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ea:6c:3b:81:80:66:c0:65:b1:d0:0f:93:6b:2c:ee:0f:69:31:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0321984F98230A4F94667E82C0A3DEB1151C5EDB
        Validity
            Not Before: Jul 31 00:03:11 2023 GMT
            Not After : Jul 29 00:08:11 2024 GMT
        Subject: CN=66011CCE26F1A0BCE1F973A69512F62584BDA8CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:bc:91:30:48:12:29:60:90:a4:a7:51:40:91:
                    61:8f:96:70:01:73:7c:d9:4a:42:e5:4c:8a:12:50:
                    c8:b8:96:7e:32:e5:4d:4e:ab:29:47:13:7a:0d:26:
                    1b:b9:45:f6:16:c8:06:c5:77:c1:8d:e3:54:c5:e2:
                    20:17:e5:d3:4a:a5:4b:d8:b9:8e:eb:d0:18:17:6a:
                    dc:d1:29:cd:98:c6:6f:7e:96:3d:a1:ea:4b:f7:b5:
                    4e:98:5a:95:5d:34:2f:a2:67:fb:19:e9:05:c9:93:
                    85:56:a3:d0:8c:1c:48:73:54:44:70:51:64:99:22:
                    1f:f1:4d:c5:1b:3e:05:21:ff:99:9b:d5:28:f0:fc:
                    e8:80:e0:eb:00:f9:67:d1:e6:59:d5:0e:e2:7a:56:
                    2b:28:fd:3a:57:76:03:d4:e0:18:e7:e2:c7:a5:2d:
                    5c:e1:28:4a:a0:49:21:9d:bb:b5:bb:e2:0d:e6:76:
                    4a:e2:1c:a8:62:02:41:ec:fc:b1:77:ef:f1:b8:26:
                    50:0c:46:af:5b:c4:21:60:07:9a:75:07:9e:be:3b:
                    48:6d:9e:8e:ab:28:4f:3a:60:b1:cb:06:de:10:c9:
                    8e:22:b0:d8:ea:cc:13:8f:70:66:c1:cf:27:39:9c:
                    8c:39:e2:50:81:41:85:09:8a:c0:8c:90:46:ca:24:
                    a1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:01:1C:CE:26:F1:A0:BC:E1:F9:73:A6:95:12:F6:25:84:BD:A8:CE
            X509v3 Authority Key Identifier:
                keyid:03:21:98:4F:98:23:0A:4F:94:66:7E:82:C0:A3:DE:B1:15:1C:5E:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/0321984F98230A4F94667E82C0A3DEB1151C5EDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0321984F98230A4F94667E82C0A3DEB1151C5EDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a1633b8e-0df9-44ac-9cae-d6f6765a52c9/0/3130332e39302e32352e302f32342d3234203d3e203633343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:6b:34:e5:ff:af:ad:b6:4d:68:bd:91:27:ba:41:f7:e2:58:
         9e:62:a1:57:5e:7a:06:53:1d:45:87:fb:76:8f:f5:41:9f:86:
         17:62:e1:6c:fe:2c:58:64:bb:8f:39:22:54:48:77:44:27:3b:
         9f:b0:a8:d0:03:25:b4:28:52:fd:37:ad:4e:38:53:8d:d8:2e:
         d6:d9:40:fd:53:37:3b:29:53:43:05:cf:b4:9a:d4:78:1e:3c:
         22:2b:83:dc:d6:6b:38:44:f8:21:80:aa:49:c7:60:03:a8:3e:
         38:20:7f:ea:aa:2a:67:27:ae:1f:f5:54:56:5a:be:46:0a:a8:
         0d:b5:c8:7e:51:f4:a4:6e:d0:f5:8e:a6:f3:ff:f1:83:23:5a:
         0e:25:f9:2f:27:74:79:e8:67:ca:38:e7:f2:c9:e6:eb:46:df:
         e1:d5:8f:0b:f0:64:70:52:19:00:ba:f3:c4:c2:11:0c:26:7e:
         71:f3:63:3c:b8:36:03:4d:91:e8:43:71:d0:51:e6:45:50:cf:
         db:6d:5c:1d:b2:8a:52:d8:04:87:70:dd:04:41:82:66:98:e3:
         e1:20:86:e4:72:34:38:11:d3:45:90:71:38:77:76:83:cd:7e:
         a9:a2:b1:a1:e1:34:23:f7:69:3a:62:aa:12:32:3a:26:fa:69:
         6b:aa:77:07
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUSupsO4GAZsBlsdAPk2ss7g9pMWcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjEx
NTFDNUVEQjAeFw0yMzA3MzEwMDAzMTFaFw0yNDA3MjkwMDA4MTFaMDMxMTAvBgNV
BAMTKDY2MDExQ0NFMjZGMUEwQkNFMUY5NzNBNjk1MTJGNjI1ODRCREE4Q0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDavJEwSBIpYJCkp1FAkWGPlnAB
c3zZSkLlTIoSUMi4ln4y5U1OqylHE3oNJhu5RfYWyAbFd8GN41TF4iAX5dNKpUvY
uY7r0BgXatzRKc2Yxm9+lj2h6kv3tU6YWpVdNC+iZ/sZ6QXJk4VWo9CMHEhzVERw
UWSZIh/xTcUbPgUh/5mb1Sjw/OiA4OsA+WfR5lnVDuJ6Viso/TpXdgPU4Bjn4sel
LVzhKEqgSSGdu7W74g3mdkriHKhiAkHs/LF37/G4JlAMRq9bxCFgB5p1B56+O0ht
no6rKE86YLHLBt4QyY4isNjqzBOPcGbBzyc5nIw54lCBQYUJisCMkEbKJKH7AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUZgEczibxoLzh+XOmlRL2JYS9qM4wHwYDVR0j
BBgwFoAUAyGYT5gjCk+UZn6CwKPesRUcXtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTYzM2I4ZS0wZGY5LTQ0YWMtOWNhZS1kNmY2NzY1YTUyYzkvMC8wMzIxOTg0Rjk4
MjMwQTRGOTQ2NjdFODJDMEEzREVCMTE1MUM1RURCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMyMTk4NEY5ODIzMEE0Rjk0NjY3RTgyQzBBM0RFQjExNTFD
NUVEQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExNjMzYjhlLTBkZjktNDRhYy05
Y2FlLWQ2ZjY3NjVhNTJjOS8wLzMxMzAzMzJlMzkzMDJlMzIzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzNDM5Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnWhkwDQYJKoZIhvcN
AQELBQADggEBAG1rNOX/r622TWi9kSe6QffiWJ5ioVdeegZTHUWH+3aP9UGfhhdi
4Wz+LFhku485IlRId0QnO5+wqNADJbQoUv03rU44U43YLtbZQP1TNzspU0MFz7Sa
1HgePCIrg9zWazhE+CGAqknHYAOoPjggf+qqKmcnrh/1VFZavkYKqA21yH5R9KRu
0PWOpvP/8YMjWg4l+S8ndHnoZ8o45/LJ5utG3+HVjwvwZHBSGQC688TCEQwmfnHz
Yzy4NgNNkehDcdBR5kVQz9ttXB2yilLYBIdw3QRBgmaY4+EghuRyNDgR00WQcTh3
doPNfqmisaHhNCP3aTpiqhIyOib6aWuqdwc=
-----END CERTIFICATE-----
Generated at Fri Apr 19 20:20:13 2024 by rpki-client on console-fra.rpki-client.org