Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa
File:                     3130332e3133302e372e302f32342d3234203d3e20313338303933.roa (raw, json)
Hash identifier:          oILNw0t7YduTDxoFYij92q0o3oVsvP66ba4xKqFRNP4=
Subject key identifier:   34:A9:C6:E2:EE:04:CD:74:BD:D9:89:62:3F:00:92:35:E4:12:4B:29
Certificate issuer:       /CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
Certificate serial:       31502DEC692AF3B63B4057C38FA533A3F3235548
Authority key identifier: 55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa
Signing time:             Fri 18 Aug 2023 14:00:01 +0000
ROA not before:           Fri 18 Aug 2023 13:55:01 +0000
ROA not after:            Fri 16 Aug 2024 14:00:01 +0000
asID:                     138093
IP address blocks:        103.130.7.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl
                          rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 May 2024 13:54:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:50:2d:ec:69:2a:f3:b6:3b:40:57:c3:8f:a5:33:a3:f3:23:55:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55C7A5D56CEC1316CFE660C79C02C16FCE38102A
        Validity
            Not Before: Aug 18 13:55:01 2023 GMT
            Not After : Aug 16 14:00:01 2024 GMT
        Subject: CN=34A9C6E2EE04CD74BDD989623F009235E4124B29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:2d:f7:f3:11:78:86:ec:05:3c:5a:13:17:
                    bc:37:ec:fa:9e:93:cb:92:4c:17:85:b2:bd:f3:5d:
                    ff:4b:15:d4:a7:c6:40:5b:28:32:a4:5c:ec:33:b6:
                    b6:39:ff:ec:39:91:6c:e4:aa:ac:e0:14:5f:eb:b7:
                    99:da:a3:a9:7d:89:40:2c:cc:30:5f:e7:b3:3d:ea:
                    e0:30:bf:8a:de:d9:1c:bd:17:bf:58:ea:2c:bd:87:
                    05:46:b3:3f:88:ae:07:55:4c:58:f1:fe:db:98:09:
                    2f:06:61:45:4d:ac:7d:f4:5c:09:29:45:b7:da:21:
                    bc:c2:75:44:22:7a:14:23:66:3b:c1:31:f6:d9:cf:
                    12:0f:9e:13:b8:1d:fb:7b:79:55:6d:55:01:95:8b:
                    d9:7c:4b:5e:5e:8b:49:66:65:29:00:c3:24:3e:24:
                    bb:d1:7c:56:ab:4c:1f:d8:85:e9:af:66:6d:b7:24:
                    a5:9a:04:11:cb:c8:f2:78:ce:10:8f:a2:fc:b1:c9:
                    21:f4:65:6a:7c:ff:9e:3a:1f:d1:3a:7d:35:5f:55:
                    6e:64:11:6d:58:36:0d:2c:89:73:b8:71:28:c1:f4:
                    c3:4e:4c:37:c3:fa:4a:1f:2c:6c:0d:e3:93:06:13:
                    17:fe:1a:4f:ee:66:ef:61:3a:ae:b2:32:48:c4:4f:
                    c2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A9:C6:E2:EE:04:CD:74:BD:D9:89:62:3F:00:92:35:E4:12:4B:29
            X509v3 Authority Key Identifier:
                keyid:55:C7:A5:D5:6C:EC:13:16:CF:E6:60:C7:9C:02:C1:6F:CE:38:10:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55C7A5D56CEC1316CFE660C79C02C16FCE38102A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c29e0636-1fe2-4d3b-8c38-2dbb9914e913/0/3130332e3133302e372e302f32342d3234203d3e20313338303933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:3f:72:5d:08:88:4c:2b:9b:e7:63:be:fd:2d:64:ad:57:06:
         34:ae:a4:93:f2:1b:e3:1a:b1:33:ef:95:ad:a4:a3:d4:76:80:
         a7:a3:cf:ff:9b:b0:2b:66:65:33:e0:6d:52:1b:82:4c:11:b0:
         a4:fe:7c:8c:a6:86:7c:91:7a:3c:76:2a:08:60:1a:17:3f:16:
         3c:53:51:92:1f:3d:58:8d:d4:6c:f1:de:7d:28:14:b8:4f:98:
         4a:d9:6c:c1:4c:34:b0:db:c2:42:e7:57:d8:da:cc:3a:80:01:
         97:9a:8a:40:d4:7e:9e:5b:1b:7e:3a:a2:20:e7:b2:fa:a0:0f:
         74:5e:8b:6f:3a:72:44:0b:79:6e:92:2c:1c:92:7f:a7:50:11:
         82:92:52:1d:49:27:6f:33:58:fa:0a:3a:16:2c:24:d5:fe:3d:
         d0:be:82:4c:e3:8c:7f:07:be:7a:c6:13:db:be:b5:c8:ec:a2:
         be:2f:b0:38:56:4f:cc:25:80:bb:89:47:e4:f9:d8:83:55:fb:
         0a:f2:75:9f:c7:aa:3b:5a:79:5a:8e:44:e8:11:9d:12:68:27:
         83:c9:dd:64:4d:5d:c5:2d:d4:3b:34:bd:e3:5e:4c:3f:7d:32:
         f0:f2:b0:9e:4c:d1:fb:98:7d:5c:a8:90:54:1c:9f:0f:ea:a4:
         c0:a5:d4:7a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMVAt7Gkq87Y7QFfDj6Uzo/MjVUgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZD
RTM4MTAyQTAeFw0yMzA4MTgxMzU1MDFaFw0yNDA4MTYxNDAwMDFaMDMxMTAvBgNV
BAMTKDM0QTlDNkUyRUUwNENENzRCREQ5ODk2MjNGMDA5MjM1RTQxMjRCMjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCswC338xF4huwFPFoTF7w37Pqe
k8uSTBeFsr3zXf9LFdSnxkBbKDKkXOwztrY5/+w5kWzkqqzgFF/rt5nao6l9iUAs
zDBf57M96uAwv4re2Ry9F79Y6iy9hwVGsz+IrgdVTFjx/tuYCS8GYUVNrH30XAkp
RbfaIbzCdUQiehQjZjvBMfbZzxIPnhO4Hft7eVVtVQGVi9l8S15ei0lmZSkAwyQ+
JLvRfFarTB/YhemvZm23JKWaBBHLyPJ4zhCPovyxySH0ZWp8/546H9E6fTVfVW5k
EW1YNg0siXO4cSjB9MNOTDfD+kofLGwN45MGExf+Gk/uZu9hOq6yMkjET8L3AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUNKnG4u4EzXS92YliPwCSNeQSSykwHwYDVR0j
BBgwFoAUVcel1WzsExbP5mDHnALBb844ECowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MjllMDYzNi0xZmUyLTRkM2ItOGMzOC0yZGJiOTkxNGU5MTMvMC81NUM3QTVENTZD
RUMxMzE2Q0ZFNjYwQzc5QzAyQzE2RkNFMzgxMDJBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTVDN0E1RDU2Q0VDMTMxNkNGRTY2MEM3OUMwMkMxNkZDRTM4
MTAyQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MyOWUwNjM2LTFmZTItNGQzYi04
YzM4LTJkYmI5OTE0ZTkxMy8wLzMxMzAzMzJlMzEzMzMwMmUzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzODMwMzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeCBzANBgkqhkiG
9w0BAQsFAAOCAQEAVT9yXQiITCub52O+/S1krVcGNK6kk/Ib4xqxM++VraSj1HaA
p6PP/5uwK2ZlM+BtUhuCTBGwpP58jKaGfJF6PHYqCGAaFz8WPFNRkh89WI3UbPHe
fSgUuE+YStlswUw0sNvCQudX2NrMOoABl5qKQNR+nlsbfjqiIOey+qAPdF6Lbzpy
RAt5bpIsHJJ/p1ARgpJSHUknbzNY+go6Fiwk1f490L6CTOOMfwe+esYT2761yOyi
vi+wOFZPzCWAu4lH5PnYg1X7CvJ1n8eqO1p5Wo5E6BGdEmgng8ndZE1dxS3UOzS9
415MP30y8PKwnkzR+5h9XKiQVByfD+qkwKXUeg==
-----END CERTIFICATE-----
Generated at Tue Apr 30 15:50:32 2024 by rpki-client on console-fra.rpki-client.org