Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
File:                     3130332e3136322e312e302f32342d3234203d3e2036393339.roa (raw, json)
Hash identifier:          aV3ZPEDkk9pkPeRsaffKFxqQrrWxvO7+4mI9TdYcewg=
Subject key identifier:   01:5B:22:FB:D1:BF:A5:6D:03:C5:55:AE:DC:59:DD:40:CA:47:B1:D6
Certificate issuer:       /CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
Certificate serial:       68804F14055547DC59D0602F54D43DEE1D04FF22
Authority key identifier: 20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa
Signing time:             Fri 19 Apr 2024 19:00:01 +0000
ROA not before:           Fri 19 Apr 2024 18:55:01 +0000
ROA not after:            Fri 18 Apr 2025 19:00:01 +0000
asID:                     6939
IP address blocks:        103.162.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl
                          rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 08 May 2024 10:05:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:80:4f:14:05:55:47:dc:59:d0:60:2f:54:d4:3d:ee:1d:04:ff:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20B15C95FA3351402D60E968AD1D9ECD289ABFF9
        Validity
            Not Before: Apr 19 18:55:01 2024 GMT
            Not After : Apr 18 19:00:01 2025 GMT
        Subject: CN=015B22FBD1BFA56D03C555AEDC59DD40CA47B1D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:2d:bd:b4:ba:42:fb:bc:f7:dc:32:e9:9a:19:
                    a0:55:41:e4:b2:a8:59:0b:fe:a9:05:73:92:ef:5d:
                    1a:b9:69:11:02:e0:f2:35:06:23:22:1f:84:43:15:
                    e5:ca:7b:55:b4:22:ca:84:f5:10:d8:c4:57:ef:08:
                    2a:2c:28:a7:c3:db:8e:26:cb:68:8a:e5:50:62:72:
                    d9:f4:1b:76:e7:3c:98:d1:ca:5b:26:5b:c3:52:df:
                    2d:dc:bb:ff:d8:c3:2d:fe:22:01:44:dc:b5:b9:c4:
                    2c:22:0e:62:41:9e:0e:21:b0:c8:b0:24:46:13:18:
                    3c:c7:32:ed:39:63:90:f5:e8:3d:1b:cf:3a:82:96:
                    59:5d:fb:2d:86:6a:d7:78:fc:55:a6:1c:62:11:14:
                    d8:42:f6:d8:f7:57:67:ec:94:33:12:5b:75:f4:cc:
                    87:eb:40:94:73:21:ba:1d:d8:ad:5d:71:4e:0a:38:
                    89:e2:54:c3:3a:31:33:15:b6:9d:a1:68:32:53:ff:
                    90:a1:0b:83:e8:02:2c:2d:19:18:38:63:07:2f:e1:
                    73:b9:59:8f:11:75:19:ea:de:68:97:fe:ca:7d:08:
                    8a:15:e6:c5:f6:92:76:48:9b:76:af:a2:8a:3c:40:
                    b0:31:e4:e9:d5:38:6f:c5:60:6f:42:50:c0:48:21:
                    ae:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5B:22:FB:D1:BF:A5:6D:03:C5:55:AE:DC:59:DD:40:CA:47:B1:D6
            X509v3 Authority Key Identifier:
                keyid:20:B1:5C:95:FA:33:51:40:2D:60:E9:68:AD:1D:9E:CD:28:9A:BF:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/20B15C95FA3351402D60E968AD1D9ECD289ABFF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d14193c4-4abd-4e2c-a1d0-1b5ce32e420b/0/3130332e3136322e312e302f32342d3234203d3e2036393339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:39:1f:f4:11:9d:04:dc:8b:50:9c:d5:57:a2:57:d6:2c:8b:
         29:68:97:6b:fa:27:f2:1f:37:a8:8b:81:14:86:f2:6f:b0:77:
         f3:95:df:8f:3d:f5:59:66:69:97:d2:8e:68:6b:f6:4a:93:25:
         85:7a:e9:a7:00:64:39:78:1b:91:08:fa:18:4f:50:85:d6:79:
         ab:60:d4:07:e5:43:00:90:b4:42:c8:f4:f8:f0:ff:2a:0f:05:
         08:4c:98:5b:d7:24:18:9a:88:26:c2:cb:24:d5:be:bc:a9:fc:
         79:09:46:bd:b8:8c:d1:93:c5:97:a7:35:dc:57:0d:fe:99:81:
         9c:51:28:d0:04:25:35:42:9c:10:29:a0:ef:29:dc:d2:3d:7e:
         fd:5e:d9:f3:cf:57:69:ce:ca:07:d0:2d:bd:98:d7:ac:54:ca:
         ca:ce:9e:40:56:eb:fb:2f:b5:45:f4:56:32:18:4b:ed:bb:b0:
         36:a6:21:70:7d:f1:a0:23:15:2a:36:d9:14:9f:6c:a1:c2:d8:
         1c:a7:12:d0:62:a9:c2:46:89:4e:eb:43:79:19:30:62:90:af:
         4d:14:4c:ea:cf:76:5f:2d:38:96:d2:a9:c5:a3:95:12:ee:8c:
         1f:42:71:1a:4c:df:5b:84:5f:b6:55:9d:0a:e4:7f:88:63:42:
         80:ab:81:b8
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUaIBPFAVVR9xZ0GAvVNQ97h0E/yIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0Qy
ODlBQkZGOTAeFw0yNDA0MTkxODU1MDFaFw0yNTA0MTgxOTAwMDFaMDMxMTAvBgNV
BAMTKDAxNUIyMkZCRDFCRkE1NkQwM0M1NTVBRURDNTlERDQwQ0E0N0IxRDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3Lb20ukL7vPfcMumaGaBVQeSy
qFkL/qkFc5LvXRq5aREC4PI1BiMiH4RDFeXKe1W0IsqE9RDYxFfvCCosKKfD244m
y2iK5VBictn0G3bnPJjRylsmW8NS3y3cu//Ywy3+IgFE3LW5xCwiDmJBng4hsMiw
JEYTGDzHMu05Y5D16D0bzzqCllld+y2Gatd4/FWmHGIRFNhC9tj3V2fslDMSW3X0
zIfrQJRzIbod2K1dcU4KOIniVMM6MTMVtp2haDJT/5ChC4PoAiwtGRg4Ywcv4XO5
WY8RdRnq3miX/sp9CIoV5sX2knZIm3avooo8QLAx5OnVOG/FYG9CUMBIIa53AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUAVsi+9G/pW0DxVWu3FndQMpHsdYwHwYDVR0j
BBgwFoAUILFclfozUUAtYOlorR2ezSiav/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MTQxOTNjNC00YWJkLTRlMmMtYTFkMC0xYjVjZTMyZTQyMGIvMC8yMEIxNUM5NUZB
MzM1MTQwMkQ2MEU5NjhBRDFEOUVDRDI4OUFCRkY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjBCMTVDOTVGQTMzNTE0MDJENjBFOTY4QUQxRDlFQ0QyODlB
QkZGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDE0MTkzYzQtNGFiZC00ZTJjLWEx
ZDAtMWI1Y2UzMmU0MjBiLzAvMzEzMDMzMmUzMTM2MzIyZTMxMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzYzOTMzMzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnogEwDQYJKoZIhvcNAQEL
BQADggEBAG45H/QRnQTci1Cc1VeiV9Ysiylol2v6J/IfN6iLgRSG8m+wd/OV3489
9VlmaZfSjmhr9kqTJYV66acAZDl4G5EI+hhPUIXWeatg1AflQwCQtELI9Pjw/yoP
BQhMmFvXJBiaiCbCyyTVvryp/HkJRr24jNGTxZenNdxXDf6ZgZxRKNAEJTVCnBAp
oO8p3NI9fv1e2fPPV2nOygfQLb2Y16xUysrOnkBW6/svtUX0VjIYS+27sDamIXB9
8aAjFSo22RSfbKHC2BynEtBiqcJGiU7rQ3kZMGKQr00UTOrPdl8tOJbSqcWjlRLu
jB9CcRpM31uEX7ZVnQrkf4hjQoCrgbg=
-----END CERTIFICATE-----
Generated at Sun May 5 06:13:01 2024 by rpki-client on console-ams.rpki-client.org