Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136362e362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          E7O5MGSAXZTCefSeFMICE1iHqKkmO3VLWrxq/dbTzoI=
Subject key identifier:   59:D7:96:0B:BB:52:E5:95:07:7C:05:C3:5E:1A:4A:24:FC:7C:D3:26
Certificate issuer:       /CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318
Certificate serial:       054509D7E9FD5EE7C6D3A288DC96CF370C747FC1
Authority key identifier: AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa
Signing time:             Fri 01 Sep 2023 10:01:53 +0000
ROA not before:           Fri 01 Sep 2023 09:56:53 +0000
ROA not after:            Fri 30 Aug 2024 10:01:53 +0000
asID:                     17995
IP address blocks:        103.166.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl
                          rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 19:52:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:45:09:d7:e9:fd:5e:e7:c6:d3:a2:88:dc:96:cf:37:0c:74:7f:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AAE029EAD3C6E5CB19BC9CE141DB7679A423D318
        Validity
            Not Before: Sep  1 09:56:53 2023 GMT
            Not After : Aug 30 10:01:53 2024 GMT
        Subject: CN=59D7960BBB52E595077C05C35E1A4A24FC7CD326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ba:c8:e4:e6:54:9a:f9:43:7f:4f:3e:80:7b:
                    e0:c1:7c:41:6e:59:17:bf:5d:4e:a7:b9:51:4b:76:
                    f8:b7:61:87:19:d6:62:a2:9f:ef:73:c0:17:2b:a5:
                    15:25:43:9c:92:70:e6:14:27:8a:76:c7:29:a1:a6:
                    44:45:6a:52:57:f5:d2:61:a4:23:c9:c3:92:de:e6:
                    e2:c5:5e:bb:f5:cc:92:28:98:7d:93:02:88:ba:97:
                    91:10:3f:1f:1d:cf:2f:26:22:87:32:3f:6f:80:68:
                    2f:a1:63:c1:be:a4:56:2a:28:c1:53:89:55:07:12:
                    99:21:42:1a:f8:cb:70:a6:06:36:42:b1:05:77:4c:
                    3a:81:92:02:88:30:ef:dc:f5:a1:19:ad:69:59:1d:
                    95:cf:2a:64:ee:4a:82:be:82:74:02:f7:82:2c:93:
                    15:e1:93:e6:07:08:15:74:ad:d1:3b:42:6f:3e:93:
                    1d:b2:ce:e4:28:d3:f4:b1:87:0c:2d:cc:62:35:29:
                    47:08:cb:be:e1:49:9b:2a:92:66:3e:c2:87:01:9e:
                    fd:f1:3c:01:82:55:7f:03:03:ea:c7:b0:5e:1e:b8:
                    cc:64:d2:a4:63:d7:a9:e0:ef:20:83:ea:1a:9a:59:
                    4b:7d:92:94:3e:06:46:60:20:aa:65:2d:0c:b3:f6:
                    43:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D7:96:0B:BB:52:E5:95:07:7C:05:C3:5E:1A:4A:24:FC:7C:D3:26
            X509v3 Authority Key Identifier:
                keyid:AA:E0:29:EA:D3:C6:E5:CB:19:BC:9C:E1:41:DB:76:79:A4:23:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AAE029EAD3C6E5CB19BC9CE141DB7679A423D318.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ddb92e89-92d5-4064-9511-067e353679ce/0/3130332e3136362e362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         df:fc:9d:d4:d0:90:c4:37:ac:7b:e4:9b:61:af:d4:89:fe:61:
         30:88:29:ab:d8:37:ef:12:c9:51:d9:80:d0:ea:60:1f:2d:5e:
         76:c0:c1:02:d9:4e:8b:10:a9:4a:02:47:22:9d:12:a9:80:2a:
         2a:eb:57:b9:1d:ad:d8:8a:0d:96:f2:00:a6:47:c0:02:d6:26:
         ce:e0:c5:2e:a4:39:c0:d5:a8:a1:7c:c5:96:25:cd:da:3d:71:
         55:3f:22:10:0a:ba:37:b8:e2:0a:2b:70:92:cb:26:0d:4a:9c:
         03:5f:db:f7:97:52:d9:31:1e:c4:c6:82:37:c3:d0:dc:43:8e:
         28:78:44:8b:9f:35:fc:3d:99:8e:7e:c0:31:95:df:ec:34:4d:
         fd:0f:45:ac:3e:b7:e8:a8:9d:f1:98:aa:ad:fb:1e:94:db:87:
         7a:61:5a:f7:ad:12:da:21:44:35:93:70:e9:07:77:8e:02:17:
         6c:fa:11:4a:0e:de:31:23:cb:60:55:e8:3a:35:7b:6d:3a:f3:
         16:e2:cf:24:bd:cc:e8:82:cb:28:90:85:0e:d3:17:fc:5d:ef:
         b1:a4:b0:67:af:d2:65:74:bb:11:09:a8:9d:67:5f:f1:f9:a9:
         3c:97:96:39:4c:84:b8:f7:06:da:37:85:c7:9c:f4:7d:b9:68:
         51:8a:f6:ce
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUBUUJ1+n9XufG06KI3JbPNwx0f8EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlB
NDIzRDMxODAeFw0yMzA5MDEwOTU2NTNaFw0yNDA4MzAxMDAxNTNaMDMxMTAvBgNV
BAMTKDU5RDc5NjBCQkI1MkU1OTUwNzdDMDVDMzVFMUE0QTI0RkM3Q0QzMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjusjk5lSa+UN/Tz6Ae+DBfEFu
WRe/XU6nuVFLdvi3YYcZ1mKin+9zwBcrpRUlQ5yScOYUJ4p2xymhpkRFalJX9dJh
pCPJw5Le5uLFXrv1zJIomH2TAoi6l5EQPx8dzy8mIocyP2+AaC+hY8G+pFYqKMFT
iVUHEpkhQhr4y3CmBjZCsQV3TDqBkgKIMO/c9aEZrWlZHZXPKmTuSoK+gnQC94Is
kxXhk+YHCBV0rdE7Qm8+kx2yzuQo0/SxhwwtzGI1KUcIy77hSZsqkmY+wocBnv3x
PAGCVX8DA+rHsF4euMxk0qRj16ng7yCD6hqaWUt9kpQ+BkZgIKplLQyz9kMBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUWdeWC7tS5ZUHfAXDXhpKJPx80yYwHwYDVR0j
BBgwFoAUquAp6tPG5csZvJzhQdt2eaQj0xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZGI5MmU4OS05MmQ1LTQwNjQtOTUxMS0wNjdlMzUzNjc5Y2UvMC9BQUUwMjlFQUQz
QzZFNUNCMTlCQzlDRTE0MURCNzY3OUE0MjNEMzE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUFFMDI5RUFEM0M2RTVDQjE5QkM5Q0UxNDFEQjc2NzlBNDIz
RDMxOC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RkYjkyZTg5LTkyZDUtNDA2NC05
NTExLTA2N2UzNTM2NzljZS8wLzMxMzAzMzJlMzEzNjM2MmUzNjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzczOTM5MzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnpgYwDQYJKoZIhvcN
AQELBQADggEBAN/8ndTQkMQ3rHvkm2Gv1In+YTCIKavYN+8SyVHZgNDqYB8tXnbA
wQLZTosQqUoCRyKdEqmAKirrV7kdrdiKDZbyAKZHwALWJs7gxS6kOcDVqKF8xZYl
zdo9cVU/IhAKuje44gorcJLLJg1KnANf2/eXUtkxHsTGgjfD0NxDjih4RIufNfw9
mY5+wDGV3+w0Tf0PRaw+t+ionfGYqq37HpTbh3phWvetEtohRDWTcOkHd44CF2z6
EUoO3jEjy2BV6Do1e2068xbizyS9zOiCyyiQhQ7TF/xd77GksGev0mV0uxEJqJ1n
X/H5qTyXljlMhLj3Bto3hcec9H25aFGK9s4=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:23 2024 by rpki-client on console-ams.rpki-client.org