Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
File:                     3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (raw, json)
Hash identifier:          xUxJdchOxp1Wsc8+++SE6nZX6WuIfKRPpSzBgw3nmqM=
Subject key identifier:   D3:BA:20:77:45:71:80:C1:6B:99:42:AE:2F:3E:1B:FE:29:8C:34:08
Certificate issuer:       /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
Certificate serial:       123ADDB24ECD1DD3D9B5EB0F069A1C7C39A7E57F
Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa
Signing time:             Fri 29 Sep 2023 07:33:30 +0000
ROA not before:           Fri 29 Sep 2023 07:28:30 +0000
ROA not after:            Fri 27 Sep 2024 07:33:30 +0000
asID:                     138115
IP address blocks:        103.191.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl
                          rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:3a:dd:b2:4e:cd:1d:d3:d9:b5:eb:0f:06:9a:1c:7c:39:a7:e5:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39
        Validity
            Not Before: Sep 29 07:28:30 2023 GMT
            Not After : Sep 27 07:33:30 2024 GMT
        Subject: CN=D3BA2077457180C16B9942AE2F3E1BFE298C3408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:b7:e4:68:9d:e1:77:88:eb:01:8e:b3:78:
                    d0:66:88:e0:3a:48:68:b2:cf:a9:df:43:ef:03:b5:
                    f7:f0:1a:45:86:09:62:b8:37:85:8a:82:d7:c7:4b:
                    1b:bd:d5:ee:d5:be:55:be:27:37:35:bd:1d:47:33:
                    16:5f:d6:cb:43:68:63:99:c4:bb:bf:d1:2f:a0:66:
                    7e:c5:77:4d:8a:a2:97:a8:fc:98:7f:08:88:14:8c:
                    9e:0d:1c:22:a1:71:9f:55:76:fb:87:34:db:64:ec:
                    ce:ef:b2:55:e2:e2:85:7b:78:26:78:5f:49:0c:a5:
                    1c:50:c4:9e:f6:91:f4:08:9c:d1:4b:6c:ca:7a:da:
                    40:96:b4:0c:62:35:da:cf:95:b0:93:98:d0:96:3f:
                    28:22:57:87:fe:19:ea:2f:e3:c9:ba:3b:ea:e3:01:
                    ca:1a:67:02:20:cf:5e:0b:d7:e5:e3:d9:01:84:54:
                    e4:81:3e:f5:74:97:ba:ff:08:ba:51:03:ef:c5:3c:
                    ac:f4:d3:0f:56:45:cb:bd:8b:94:1b:ab:63:67:a7:
                    65:1c:ef:3e:28:4e:90:0b:f4:aa:99:40:4f:48:f3:
                    3c:46:06:3f:da:d7:35:ea:d1:91:39:28:a1:d4:5a:
                    aa:6b:49:4c:d0:4e:2e:5e:2c:5c:0d:d7:28:39:88:
                    59:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:BA:20:77:45:71:80:C1:6B:99:42:AE:2F:3E:1B:FE:29:8C:34:08
            X509v3 Authority Key Identifier:
                keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:1d:d1:35:d3:bf:1b:b6:ee:49:bf:78:ba:1c:9c:60:3c:95:
         a5:f0:3c:fd:f4:4c:aa:29:93:39:19:81:84:ac:d6:4a:a8:23:
         18:67:19:0e:3d:4d:96:95:3e:9e:5c:e7:0b:7d:41:5b:99:dc:
         63:04:ea:c8:0e:de:71:a6:b7:9e:39:bc:98:50:b7:00:7f:b1:
         9d:0b:30:9f:03:b4:be:fd:f6:99:ec:bd:cb:72:d2:ca:83:f4:
         14:d1:9d:a3:1b:75:46:1b:87:ac:82:f8:4e:89:d4:f3:2d:f4:
         db:b1:a8:da:e2:ca:2c:e2:9c:12:e4:ab:5c:c7:87:10:6b:a9:
         f4:60:7d:97:62:da:91:e2:de:95:85:87:8a:dd:04:c2:0b:4a:
         a2:db:72:ce:86:73:8a:78:a1:27:61:f4:92:62:06:72:01:43:
         6f:08:fc:7e:2c:63:2e:f4:92:8e:3a:45:d6:fc:7f:9f:6d:6c:
         fd:7e:2d:d3:29:cf:86:50:a9:d8:00:e1:4d:ba:97:b8:d9:df:
         b2:67:ac:80:d8:94:15:01:65:04:d9:64:a7:2a:3a:47:70:ab:
         b5:ff:c2:fb:ad:7f:12:51:9b:ec:2c:cf:cc:da:63:40:06:f1:
         61:28:16:d1:12:e2:ce:41:ff:4b:02:10:ff:6a:56:07:12:d4:
         28:23:25:8f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUEjrdsk7NHdPZtesPBpocfDmn5X8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF
RTA2NEIzOTAeFw0yMzA5MjkwNzI4MzBaFw0yNDA5MjcwNzMzMzBaMDMxMTAvBgNV
BAMTKEQzQkEyMDc3NDU3MTgwQzE2Qjk5NDJBRTJGM0UxQkZFMjk4QzM0MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjtbfkaJ3hd4jrAY6zeNBmiOA6
SGiyz6nfQ+8DtffwGkWGCWK4N4WKgtfHSxu91e7VvlW+Jzc1vR1HMxZf1stDaGOZ
xLu/0S+gZn7Fd02Kopeo/Jh/CIgUjJ4NHCKhcZ9VdvuHNNtk7M7vslXi4oV7eCZ4
X0kMpRxQxJ72kfQInNFLbMp62kCWtAxiNdrPlbCTmNCWPygiV4f+Geov48m6O+rj
AcoaZwIgz14L1+Xj2QGEVOSBPvV0l7r/CLpRA+/FPKz00w9WRcu9i5Qbq2Nnp2Uc
7z4oTpAL9KqZQE9I8zxGBj/a1zXq0ZE5KKHUWqprSUzQTi5eLFwN1yg5iFn5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU07ogd0VxgMFrmUKuLz4b/imMNAgwHwYDVR0j
BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF
QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2
NEIzOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2IzMzI3ZmZkLTFlMmUtNGM1Mi05
NzE3LTY1Zjg1ZTYzNTllNS8wLzMxMzAzMzJlMzEzOTMxMmUzNjMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ78/MA0GCSqG
SIb3DQEBCwUAA4IBAQBzHdE1078btu5Jv3i6HJxgPJWl8Dz99EyqKZM5GYGErNZK
qCMYZxkOPU2WlT6eXOcLfUFbmdxjBOrIDt5xpreeObyYULcAf7GdCzCfA7S+/faZ
7L3LctLKg/QU0Z2jG3VGG4esgvhOidTzLfTbsaja4sos4pwS5Ktcx4cQa6n0YH2X
YtqR4t6VhYeK3QTCC0qi23LOhnOKeKEnYfSSYgZyAUNvCPx+LGMu9JKOOkXW/H+f
bWz9fi3TKc+GUKnYAOFNupe42d+yZ6yA2JQVAWUE2WSnKjpHcKu1/8L7rX8SUZvs
LM/M2mNABvFhKBbREuLOQf9LAhD/alYHEtQoIyWP
-----END CERTIFICATE-----
Generated at Fri May 3 23:56:02 2024 by rpki-client on console-fra.rpki-client.org