Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          PKvdnHJo0w/I3SOIfuL6dPlkd3hkgtLlXuuvH7e9eJU=
Subject key identifier:   DE:A5:E7:09:51:68:FA:C8:2C:C4:F3:BB:74:07:F7:D5:67:62:82:96
Certificate issuer:       /CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
Certificate serial:       569B4535A800BD5635E95F5B04F0883D60F37E61
Authority key identifier: EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 05:02:02 +0000
ROA not before:           Wed 03 Jan 2024 04:57:02 +0000
ROA not after:            Wed 01 Jan 2025 05:02:02 +0000
asID:                     135478
IP address blocks:        103.121.102.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl
                          rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 22:45:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:9b:45:35:a8:00:bd:56:35:e9:5f:5b:04:f0:88:3d:60:f3:7e:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EA364B048B6B5A81F887F07FDB60499024CE8C94
        Validity
            Not Before: Jan  3 04:57:02 2024 GMT
            Not After : Jan  1 05:02:02 2025 GMT
        Subject: CN=DEA5E7095168FAC82CC4F3BB7407F7D567628296
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:73:e1:de:05:cf:f5:06:ea:be:54:7f:81:
                    0e:b6:2b:ce:46:a4:f5:14:5f:d7:0c:1e:31:0a:68:
                    c1:53:5a:4b:09:02:0a:fc:c0:a6:96:a9:26:e4:53:
                    5a:16:77:18:12:94:07:c8:81:d9:90:97:bd:b8:3c:
                    79:d5:9a:f6:2a:45:5b:9c:d0:cd:63:11:9f:74:a8:
                    e9:9b:c5:7f:e6:ae:61:7b:2e:5f:bb:cc:ba:6b:3a:
                    e3:9a:ba:9f:44:72:09:79:50:1b:0c:07:64:59:1d:
                    d6:84:79:00:97:82:e5:ba:95:cf:a8:d8:69:f7:cf:
                    b9:42:f3:69:14:f7:ca:1e:3e:85:a2:62:05:74:54:
                    3f:70:3e:08:3a:d7:04:3e:db:c9:b8:25:3d:74:90:
                    48:95:f2:00:77:3d:75:63:a7:ce:fb:2d:6b:6d:69:
                    57:a2:18:1f:19:5d:15:d2:8b:58:83:5f:54:14:5f:
                    21:69:20:af:3e:4c:44:bf:5d:af:ab:bc:48:7b:3f:
                    37:3a:f6:0d:ce:c7:de:d4:02:18:20:8b:eb:9d:2d:
                    58:06:2f:8a:a7:ae:95:c5:71:de:ed:11:e9:87:d5:
                    a2:b2:bb:60:ae:92:5c:fe:4f:cf:20:a9:56:69:39:
                    65:d9:45:ce:64:3c:39:54:f7:b8:97:04:17:a6:ea:
                    bd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:A5:E7:09:51:68:FA:C8:2C:C4:F3:BB:74:07:F7:D5:67:62:82:96
            X509v3 Authority Key Identifier:
                keyid:EA:36:4B:04:8B:6B:5A:81:F8:87:F0:7F:DB:60:49:90:24:CE:8C:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/EA364B048B6B5A81F887F07FDB60499024CE8C94.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EA364B048B6B5A81F887F07FDB60499024CE8C94.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1132497-5963-47aa-9de1-6c8496a36eb6/0/3130332e3132312e3130322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.102.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:15:eb:dd:7f:b2:19:e5:8d:9e:a0:4c:a1:99:a1:f5:5a:d6:
         18:57:db:4e:14:f9:f4:20:05:ed:ab:f5:59:de:5e:db:6e:52:
         88:47:6a:c9:1f:82:6f:4c:af:c7:9a:39:fb:71:92:be:16:cd:
         45:fc:91:b9:b4:67:7b:50:ed:ca:04:45:e8:3f:25:65:99:1d:
         7b:16:37:6e:70:fb:2b:56:39:be:47:19:36:b9:a0:ca:af:b4:
         99:45:79:84:9e:85:1f:3f:5e:c2:80:7a:a8:dc:ca:fc:de:0f:
         37:9c:c5:2d:d3:7c:4b:7f:82:9b:0d:7e:c9:ed:63:d8:c8:4c:
         24:eb:c4:c2:49:e3:59:f1:6f:18:6b:7d:c0:80:9d:82:47:73:
         e9:59:99:e8:14:8e:42:c5:77:50:1f:f4:00:b6:a3:24:f1:f8:
         b6:d0:23:40:d7:f4:f3:08:a6:da:f9:a7:9c:97:6e:c4:7f:bd:
         bd:70:f3:07:a2:c8:01:51:ce:c3:2e:f8:4b:8c:33:a5:2d:d5:
         04:b4:94:99:cf:07:8b:b6:66:3d:a0:43:09:0b:b7:7d:2f:fe:
         7b:c1:b2:26:43:c3:06:ed:10:c2:6d:d4:5e:cb:0b:e9:62:e3:
         0a:29:5e:92:3c:f5:b8:20:18:e1:81:2c:ba:4b:d5:1c:b0:a0:
         9b:32:81:af
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVptFNagAvVY16V9bBPCIPWDzfmEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUEzNjRCMDQ4QjZCNUE4MUY4ODdGMDdGREI2MDQ5OTAy
NENFOEM5NDAeFw0yNDAxMDMwNDU3MDJaFw0yNTAxMDEwNTAyMDJaMDMxMTAvBgNV
BAMTKERFQTVFNzA5NTE2OEZBQzgyQ0M0RjNCQjc0MDdGN0Q1Njc2MjgyOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4mXPh3gXP9QbqvlR/gQ62K85G
pPUUX9cMHjEKaMFTWksJAgr8wKaWqSbkU1oWdxgSlAfIgdmQl724PHnVmvYqRVuc
0M1jEZ90qOmbxX/mrmF7Ll+7zLprOuOaup9Ecgl5UBsMB2RZHdaEeQCXguW6lc+o
2Gn3z7lC82kU98oePoWiYgV0VD9wPgg61wQ+28m4JT10kEiV8gB3PXVjp877LWtt
aVeiGB8ZXRXSi1iDX1QUXyFpIK8+TES/Xa+rvEh7Pzc69g3Ox97UAhggi+udLVgG
L4qnrpXFcd7tEemH1aKyu2Cuklz+T88gqVZpOWXZRc5kPDlU97iXBBem6r17AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3qXnCVFo+sgsxPO7dAf31WdigpYwHwYDVR0j
BBgwFoAU6jZLBItrWoH4h/B/22BJkCTOjJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTEzMjQ5Ny01OTYzLTQ3YWEtOWRlMS02Yzg0OTZhMzZlYjYvMC9FQTM2NEIwNDhC
NkI1QTgxRjg4N0YwN0ZEQjYwNDk5MDI0Q0U4Qzk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUEzNjRCMDQ4QjZCNUE4MUY4ODdGMDdGREI2MDQ5OTAyNENF
OEM5NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxMTMyNDk3LTU5NjMtNDdhYS05
ZGUxLTZjODQ5NmEzNmViNi8wLzMxMzAzMzJlMzEzMjMxMmUzMTMwMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFneWYwDQYJ
KoZIhvcNAQELBQADggEBAAgV691/shnljZ6gTKGZofVa1hhX204U+fQgBe2r9Vne
XttuUohHaskfgm9Mr8eaOftxkr4WzUX8kbm0Z3tQ7coEReg/JWWZHXsWN25w+ytW
Ob5HGTa5oMqvtJlFeYSehR8/XsKAeqjcyvzeDzecxS3TfEt/gpsNfsntY9jITCTr
xMJJ41nxbxhrfcCAnYJHc+lZmegUjkLFd1Af9AC2oyTx+LbQI0DX9PMIptr5p5yX
bsR/vb1w8weiyAFRzsMu+EuMM6Ut1QS0lJnPB4u2Zj2gQwkLt30v/nvBsiZDwwbt
EMJt1F7LC+li4wopXpI89bggGOGBLLpL1RywoJsyga8=
-----END CERTIFICATE-----
Generated at Thu May 2 01:04:47 2024 by rpki-client on console-fra.rpki-client.org