Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
File:                     3130332e3231352e32342e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Q1Rz82jyF2iXcYlmpIevH3AD1CwKwNbTyROfkzhv/WA=
Subject key identifier:   60:22:EF:9E:3B:D8:8C:30:53:13:B0:A3:52:A4:2C:5A:B8:25:0A:94
Certificate issuer:       /CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
Certificate serial:       5EACB25224B01A1B2A8264DB4B6D97119A584860
Authority key identifier: C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa
Signing time:             Tue 11 Jun 2024 11:00:01 +0000
ROA not before:           Tue 11 Jun 2024 10:55:01 +0000
ROA not after:            Tue 10 Jun 2025 11:00:01 +0000
asID:                     9341
IP address blocks:        103.215.24.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl
                          rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:ac:b2:52:24:b0:1a:1b:2a:82:64:db:4b:6d:97:11:9a:58:48:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3F745EDE7F4C0D8E5674965B52080083B271E3E
        Validity
            Not Before: Jun 11 10:55:01 2024 GMT
            Not After : Jun 10 11:00:01 2025 GMT
        Subject: CN=6022EF9E3BD88C305313B0A352A42C5AB8250A94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4d:23:38:ee:97:21:d5:c8:7d:60:4f:0e:2d:
                    e8:60:de:76:74:65:18:a7:3e:e6:8f:0b:ae:62:5b:
                    92:23:37:06:a4:5f:c9:63:cd:41:5b:d6:8f:53:90:
                    28:ed:f2:81:a5:25:14:26:54:22:71:7b:13:73:10:
                    e4:cf:8d:61:98:aa:d0:54:40:d9:6f:34:92:c0:83:
                    b9:9c:d7:6d:89:41:7e:8a:64:d1:02:c5:99:f3:95:
                    86:55:12:e1:ba:9c:12:07:3f:63:cb:9c:2d:5d:db:
                    a4:b0:8a:20:0e:13:40:56:30:52:e2:20:0c:36:72:
                    ae:0c:10:46:47:e9:1a:f7:6f:30:71:df:90:bd:73:
                    7a:3d:ff:e0:4e:37:b8:7c:31:5d:3e:40:b2:d3:c6:
                    a5:c5:2d:53:80:f1:42:3d:6d:95:61:6d:48:34:96:
                    20:ac:5a:f8:b5:f5:9d:04:01:07:8a:31:85:15:51:
                    ec:76:6e:6f:2e:4f:02:2a:57:8e:7e:4a:1b:df:20:
                    5f:ae:3d:77:13:9d:1c:cc:9e:17:68:c9:6a:ff:2f:
                    1c:a5:72:10:a9:ac:fc:2c:d5:2d:08:ee:5c:a1:80:
                    f8:88:f0:76:f9:60:d9:88:5e:a5:6f:ae:b1:f6:7f:
                    9c:36:60:35:30:00:a1:fc:b9:00:b1:bd:e2:97:98:
                    97:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:22:EF:9E:3B:D8:8C:30:53:13:B0:A3:52:A4:2C:5A:B8:25:0A:94
            X509v3 Authority Key Identifier:
                keyid:C3:F7:45:ED:E7:F4:C0:D8:E5:67:49:65:B5:20:80:08:3B:27:1E:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/C3F745EDE7F4C0D8E5674965B52080083B271E3E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C3F745EDE7F4C0D8E5674965B52080083B271E3E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/009c22b1-1b7b-4671-ab94-5c5e74882547/0/3130332e3231352e32342e302f32322d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.215.24.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a2:43:87:44:ad:d5:67:67:d3:84:9a:18:1a:de:c7:8a:80:3e:
         b7:1a:88:f0:b3:4a:10:12:45:ff:a0:3b:0f:40:6c:f4:d9:f3:
         35:2c:69:d5:df:01:3f:5e:a6:d9:88:a1:a8:14:40:b0:87:be:
         58:63:b7:dd:41:a0:15:db:e3:68:5d:49:1a:db:0b:0b:e6:99:
         9e:ea:a4:10:19:3c:f5:bb:fa:52:ae:db:4f:fa:ba:77:ad:ea:
         fd:5c:a8:52:86:da:53:cc:66:3f:f6:9b:52:a4:2d:fa:85:bd:
         56:55:0a:09:58:8f:1d:2a:02:e4:dc:96:b7:b2:53:5f:75:0d:
         67:80:16:fb:21:c2:a1:5c:3e:b5:d9:59:68:20:1e:6f:ab:9a:
         e1:e9:52:0b:6a:ee:64:12:fd:01:b2:5c:5d:b4:6b:7d:47:1a:
         c3:f4:96:86:9b:16:64:7c:56:c1:37:6f:b1:2d:d0:53:a6:f3:
         4d:e2:35:de:db:ab:31:92:23:fc:ac:37:26:57:2b:1f:6b:0b:
         3a:79:5a:61:a1:5c:35:76:a1:52:5f:3a:7c:20:3d:a2:d8:7a:
         1d:21:f8:f0:df:c0:f5:d2:19:09:d6:35:3a:d4:aa:73:d5:75:
         c0:78:49:f4:4d:1f:cb:ea:ac:65:fe:dc:3d:c9:cb:4b:ea:60:
         24:8c:e3:fe
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXqyyUiSwGhsqgmTbS22XEZpYSGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgz
QjI3MUUzRTAeFw0yNDA2MTExMDU1MDFaFw0yNTA2MTAxMTAwMDFaMDMxMTAvBgNV
BAMTKDYwMjJFRjlFM0JEODhDMzA1MzEzQjBBMzUyQTQyQzVBQjgyNTBBOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2TSM47pch1ch9YE8OLehg3nZ0
ZRinPuaPC65iW5IjNwakX8ljzUFb1o9TkCjt8oGlJRQmVCJxexNzEOTPjWGYqtBU
QNlvNJLAg7mc122JQX6KZNECxZnzlYZVEuG6nBIHP2PLnC1d26SwiiAOE0BWMFLi
IAw2cq4MEEZH6Rr3bzBx35C9c3o9/+BON7h8MV0+QLLTxqXFLVOA8UI9bZVhbUg0
liCsWvi19Z0EAQeKMYUVUex2bm8uTwIqV45+ShvfIF+uPXcTnRzMnhdoyWr/Lxyl
chCprPws1S0I7lyhgPiI8Hb5YNmIXqVvrrH2f5w2YDUwAKH8uQCxveKXmJcLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYCLvnjvYjDBTE7CjUqQsWrglCpQwHwYDVR0j
BBgwFoAUw/dF7ef0wNjlZ0lltSCACDsnHj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MDljMjJiMS0xYjdiLTQ2NzEtYWI5NC01YzVlNzQ4ODI1NDcvMC9DM0Y3NDVFREU3
RjRDMEQ4RTU2NzQ5NjVCNTIwODAwODNCMjcxRTNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzNGNzQ1RURFN0Y0QzBEOEU1Njc0OTY1QjUyMDgwMDgzQjI3
MUUzRS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAwOWMyMmIxLTFiN2ItNDY3MS1h
Yjk0LTVjNWU3NDg4MjU0Ny8wLzMxMzAzMzJlMzIzMTM1MmUzMjM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn1xgwDQYJKoZIhvcN
AQELBQADggEBAKJDh0St1Wdn04SaGBrex4qAPrcaiPCzShASRf+gOw9AbPTZ8zUs
adXfAT9eptmIoagUQLCHvlhjt91BoBXb42hdSRrbCwvmmZ7qpBAZPPW7+lKu20/6
unet6v1cqFKG2lPMZj/2m1KkLfqFvVZVCglYjx0qAuTclreyU191DWeAFvshwqFc
PrXZWWggHm+rmuHpUgtq7mQS/QGyXF20a31HGsP0loabFmR8VsE3b7Et0FOm803i
Nd7bqzGSI/ysNyZXKx9rCzp5WmGhXDV2oVJfOnwgPaLYeh0h+PDfwPXSGQnWNTrU
qnPVdcB4SfRNH8vqrGX+3D3Jy0vqYCSM4/4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org