Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          fcRl8I1ItQAE/fUcfmQ+AeVrVg5HpP8eZShl+h9aFKU=
Subject key identifier:   8C:BC:12:20:35:2C:E3:F6:3E:62:25:AA:A4:AF:FA:B6:F2:80:C3:93
Certificate issuer:       /CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
Certificate serial:       088D249A88B95029513089C413984EA36D6918C7
Authority key identifier: 8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa
Signing time:             Wed 19 Jul 2023 08:00:02 +0000
ROA not before:           Wed 19 Jul 2023 07:55:02 +0000
ROA not after:            Wed 17 Jul 2024 08:00:02 +0000
asID:                     131111
IP address blocks:        103.159.202.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl
                          rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 17 Apr 2024 00:41:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:8d:24:9a:88:b9:50:29:51:30:89:c4:13:98:4e:a3:6d:69:18:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0
        Validity
            Not Before: Jul 19 07:55:02 2023 GMT
            Not After : Jul 17 08:00:02 2024 GMT
        Subject: CN=8CBC1220352CE3F63E6225AAA4AFFAB6F280C393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:07:26:12:2c:bd:c5:bb:d9:57:0a:8e:a6:e4:
                    f7:ab:7b:01:f9:50:af:1f:a4:9e:f6:87:d4:02:d4:
                    a5:bd:97:34:4a:7d:28:8c:e7:b4:55:cb:c6:01:6d:
                    7b:61:90:d0:18:59:79:b1:e0:10:c9:a4:95:74:91:
                    90:92:ea:02:bd:ee:8d:6e:69:8b:09:6a:64:a0:6b:
                    ff:c4:e7:5d:dd:8a:9e:e3:10:bc:81:f2:15:c1:c7:
                    aa:9c:9b:1d:24:1f:bd:25:50:8e:2f:fe:bc:27:b8:
                    6c:03:b0:a1:9f:20:68:79:a3:80:26:74:06:5c:64:
                    fc:d6:9a:f7:92:0d:98:38:47:ec:a6:2d:c8:53:93:
                    4b:f7:6c:bc:6d:16:c5:e0:00:14:51:db:29:08:fb:
                    bd:24:a6:8f:dc:e8:27:49:60:f3:80:01:55:a7:3a:
                    f8:4d:77:10:eb:61:25:c3:c3:34:a8:34:b6:4b:b0:
                    3f:7a:f6:ae:f7:9f:fa:7f:90:4f:9a:10:55:2b:88:
                    e9:97:2b:ab:04:47:9d:e9:3c:ec:60:21:b6:b5:85:
                    a7:ee:ad:67:e0:92:c6:16:e5:e0:73:76:bf:95:42:
                    b9:ee:f2:dd:62:78:76:58:00:a9:9f:b3:f8:40:cc:
                    6f:69:5a:19:44:dc:95:7d:3d:34:75:e9:f6:9d:c9:
                    02:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:BC:12:20:35:2C:E3:F6:3E:62:25:AA:A4:AF:FA:B6:F2:80:C3:93
            X509v3 Authority Key Identifier:
                keyid:8C:57:C5:86:0B:F9:38:BB:57:E0:B7:ED:0F:89:0D:70:BF:EE:55:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C57C5860BF938BB57E0B7ED0F890D70BFEE55A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/02913fa1-33ae-4e33-bbe2-81bd9f03c84b/0/3130332e3135392e3230322e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.159.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:12:61:b9:8e:a4:b9:5e:23:8d:cd:99:68:92:1c:58:30:12:
         7b:54:73:0a:a1:f4:0e:45:c7:29:a0:ce:d7:ba:45:07:94:be:
         11:db:81:87:a6:12:cd:20:c0:fa:9e:8c:d8:98:9b:aa:4b:18:
         8c:32:8f:2e:52:55:f0:11:2f:30:43:2d:e8:bc:9e:12:1d:da:
         69:b1:f7:80:d9:7d:34:d9:85:8c:8f:87:80:27:7e:4f:53:28:
         1b:46:9a:de:ea:61:fb:d5:02:bc:99:03:7d:1e:7a:94:45:77:
         ef:5d:11:ba:18:c3:c3:25:f1:b0:13:d4:03:a0:6f:30:d3:a1:
         10:a2:5a:0a:af:65:0b:ba:07:14:50:81:1e:8a:2e:4c:a3:53:
         5b:e6:cf:fe:79:f9:b0:99:d4:74:60:53:34:3d:02:f1:31:91:
         b7:63:ed:1c:17:84:65:36:fc:34:df:de:2b:fa:7e:65:f3:2c:
         09:c0:14:86:7b:03:e2:ef:19:37:22:86:34:1b:c6:f6:5c:7f:
         95:5a:dd:15:3d:24:00:33:83:c0:37:e4:41:68:f3:2d:62:37:
         23:9d:33:45:25:68:e0:4e:e6:59:7b:1c:11:32:68:43:20:6e:
         15:02:62:f7:5d:48:05:e0:35:d1:14:21:ec:41:93:9f:c6:2b:
         6e:85:60:af
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUCI0kmoi5UClRMInEE5hOo21pGMcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBC
RkVFNTVBMDAeFw0yMzA3MTkwNzU1MDJaFw0yNDA3MTcwODAwMDJaMDMxMTAvBgNV
BAMTKDhDQkMxMjIwMzUyQ0UzRjYzRTYyMjVBQUE0QUZGQUI2RjI4MEMzOTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChByYSLL3Fu9lXCo6m5PerewH5
UK8fpJ72h9QC1KW9lzRKfSiM57RVy8YBbXthkNAYWXmx4BDJpJV0kZCS6gK97o1u
aYsJamSga//E513dip7jELyB8hXBx6qcmx0kH70lUI4v/rwnuGwDsKGfIGh5o4Am
dAZcZPzWmveSDZg4R+ymLchTk0v3bLxtFsXgABRR2ykI+70kpo/c6CdJYPOAAVWn
OvhNdxDrYSXDwzSoNLZLsD969q73n/p/kE+aEFUriOmXK6sER53pPOxgIba1hafu
rWfgksYW5eBzdr+VQrnu8t1ieHZYAKmfs/hAzG9pWhlE3JV9PTR16fadyQK1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUjLwSIDUs4/Y+YiWqpK/6tvKAw5MwHwYDVR0j
BBgwFoAUjFfFhgv5OLtX4LftD4kNcL/uVaAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
MjkxM2ZhMS0zM2FlLTRlMzMtYmJlMi04MWJkOWYwM2M4NGIvMC84QzU3QzU4NjBC
RjkzOEJCNTdFMEI3RUQwRjg5MEQ3MEJGRUU1NUEwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEM1N0M1ODYwQkY5MzhCQjU3RTBCN0VEMEY4OTBENzBCRkVF
NTVBMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzAyOTEzZmExLTMzYWUtNGUzMy1i
YmUyLTgxYmQ5ZjAzYzg0Yi8wLzMxMzAzMzJlMzEzNTM5MmUzMjMwMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzEzMTMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnn8owDQYJ
KoZIhvcNAQELBQADggEBAI4SYbmOpLleI43NmWiSHFgwEntUcwqh9A5Fxymgzte6
RQeUvhHbgYemEs0gwPqejNiYm6pLGIwyjy5SVfARLzBDLei8nhId2mmx94DZfTTZ
hYyPh4Anfk9TKBtGmt7qYfvVAryZA30eepRFd+9dEboYw8Ml8bAT1AOgbzDToRCi
WgqvZQu6BxRQgR6KLkyjU1vmz/55+bCZ1HRgUzQ9AvExkbdj7RwXhGU2/DTf3iv6
fmXzLAnAFIZ7A+LvGTcihjQbxvZcf5Va3RU9JAAzg8A35EFo8y1iNyOdM0UlaOBO
5ll7HBEyaEMgbhUCYvddSAXgNdEUIexBk5/GK26FYK8=
-----END CERTIFICATE-----
Generated at Sun Apr 14 13:42:37 2024 by rpki-client on console-ams.rpki-client.org