Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          E/dDE9znr6spBFw0CMAp5cKv1QdACzRKODuCuhjw/6o=
Subject key identifier:   9B:4E:CF:E5:A4:8C:17:E5:4A:89:25:32:52:84:D3:D9:AB:DE:52:BD
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       19594BA490C23FAB78FB6D219F6DD3C57CC09C62
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
Signing time:             Tue 08 Aug 2023 10:00:00 +0000
ROA not before:           Tue 08 Aug 2023 09:55:00 +0000
ROA not after:            Tue 06 Aug 2024 10:00:00 +0000
asID:                     141621
IP address blocks:        103.161.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:59:4b:a4:90:c2:3f:ab:78:fb:6d:21:9f:6d:d3:c5:7c:c0:9c:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Aug  8 09:55:00 2023 GMT
            Not After : Aug  6 10:00:00 2024 GMT
        Subject: CN=9B4ECFE5A48C17E54A8925325284D3D9ABDE52BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9c:8d:c5:8c:73:5e:ba:04:5b:e1:8e:93:b7:
                    d9:a7:30:7b:d6:51:f2:e0:b0:ff:3b:19:54:80:d6:
                    b9:9a:a4:43:95:65:3d:f5:11:19:03:29:a8:21:9d:
                    40:ce:cb:e8:bd:ee:4a:b0:f8:e4:53:45:c9:0c:41:
                    7c:0f:af:1a:da:56:ae:9b:e5:ef:dc:28:e1:b3:d8:
                    a9:ec:ad:36:2c:ab:17:8e:4a:56:68:05:da:df:b1:
                    99:f8:74:69:41:f2:7b:42:a1:51:dc:60:28:eb:a4:
                    dd:ec:fb:c1:1d:98:0f:5d:71:6a:92:6a:b4:91:e4:
                    76:a7:c9:06:f2:fa:df:ec:bd:97:23:7c:ef:2e:36:
                    00:d0:86:8b:09:67:e5:be:05:fb:43:d2:43:f4:db:
                    0d:a9:49:f0:f1:39:78:68:24:ed:29:ee:31:0b:0f:
                    06:9d:37:5c:4d:f0:c5:f5:7f:32:b0:96:a9:5a:87:
                    3b:82:b5:03:2e:55:44:ad:3c:d7:31:0c:cb:7f:e8:
                    14:8a:4e:27:b8:88:e8:fd:13:50:09:a6:26:f6:21:
                    67:c7:5d:d3:cc:0f:c7:4f:fd:7c:94:7a:dd:85:ff:
                    d0:ef:5a:fa:81:ee:24:51:a8:6f:c8:5f:6d:b6:66:
                    ee:59:67:bb:40:a3:63:24:53:ef:ef:0b:18:ec:15:
                    7c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:CF:E5:A4:8C:17:E5:4A:89:25:32:52:84:D3:D9:AB:DE:52:BD
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:cd:22:fb:25:3a:3a:41:32:77:13:00:a4:a1:78:98:b6:25:
         a2:b4:d7:1d:12:d4:d4:cb:85:ef:a3:fe:3f:6c:98:9b:9e:55:
         53:54:4f:79:cb:3e:c6:0c:06:2f:b1:cb:b4:49:af:6d:41:bf:
         a9:e2:ec:a0:b2:d4:d7:9e:cb:7f:3a:62:e7:76:f0:b5:96:08:
         61:3e:8f:8a:b6:c8:69:9c:8c:d1:6f:4b:c5:77:9b:b3:6c:55:
         34:55:36:71:a0:3b:e1:d5:84:2c:57:d3:19:d8:f5:1e:93:97:
         31:3a:2d:b7:18:58:b1:db:f6:63:29:bd:ec:10:67:b1:96:ff:
         4c:3a:7c:a3:0b:df:88:cf:be:78:b0:7c:fc:4a:9f:e6:c7:6a:
         71:aa:80:95:13:a7:09:02:3c:b1:84:83:55:62:1e:b1:c1:dd:
         4e:37:26:a2:a4:4f:ee:bd:70:81:85:f4:da:09:2f:b4:43:e1:
         fe:53:8a:76:f5:63:8c:81:c3:a1:ce:c7:63:76:37:91:38:be:
         e0:15:5c:9f:5c:a6:6b:2f:b8:46:9d:d9:40:d4:4a:6a:9e:d4:
         a1:3b:f6:0b:09:50:97:8c:50:74:5b:ba:e6:e4:04:f9:ce:33:
         b0:e2:e9:94:44:23:5c:e6:cf:d1:51:04:f5:66:30:6d:9b:94:
         f9:30:73:cc
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGVlLpJDCP6t4+20hn23TxXzAnGIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz
OTE3OTJFQTAeFw0yMzA4MDgwOTU1MDBaFw0yNDA4MDYxMDAwMDBaMDMxMTAvBgNV
BAMTKDlCNEVDRkU1QTQ4QzE3RTU0QTg5MjUzMjUyODREM0Q5QUJERTUyQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6nI3FjHNeugRb4Y6Tt9mnMHvW
UfLgsP87GVSA1rmapEOVZT31ERkDKaghnUDOy+i97kqw+ORTRckMQXwPrxraVq6b
5e/cKOGz2KnsrTYsqxeOSlZoBdrfsZn4dGlB8ntCoVHcYCjrpN3s+8EdmA9dcWqS
arSR5HanyQby+t/svZcjfO8uNgDQhosJZ+W+BftD0kP02w2pSfDxOXhoJO0p7jEL
DwadN1xN8MX1fzKwlqlahzuCtQMuVUStPNcxDMt/6BSKTie4iOj9E1AJpib2IWfH
XdPMD8dP/XyUet2F/9DvWvqB7iRRqG/IX222Zu5ZZ7tAo2MkU+/vCxjsFXxLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUm07P5aSMF+VKiSUyUoTT2aveUr0wHwYDVR0j
BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0
N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3
OTJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaQwDQYJ
KoZIhvcNAQELBQADggEBAB7NIvslOjpBMncTAKSheJi2JaK01x0S1NTLhe+j/j9s
mJueVVNUT3nLPsYMBi+xy7RJr21Bv6ni7KCy1Neey386Yud28LWWCGE+j4q2yGmc
jNFvS8V3m7NsVTRVNnGgO+HVhCxX0xnY9R6TlzE6LbcYWLHb9mMpvewQZ7GW/0w6
fKML34jPvniwfPxKn+bHanGqgJUTpwkCPLGEg1ViHrHB3U43JqKkT+69cIGF9NoJ
L7RD4f5Tinb1Y4yBw6HOx2N2N5E4vuAVXJ9cpmsvuEad2UDUSmqe1KE79gsJUJeM
UHRbuubkBPnOM7Di6ZREI1zmz9FRBPVmMG2blPkwc8w=
-----END CERTIFICATE-----
Generated at Fri May 3 06:27:18 2024 by rpki-client on console-fra.rpki-client.org