Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa
File:                     3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa (raw, json)
Hash identifier:          bF3yNWnrobMt6M6WVmO7fz+aU3HM2Cfravonu1UTCBk=
Subject key identifier:   CB:A1:7A:EB:B3:D6:6F:6E:6C:2E:0A:D7:B6:E7:81:5E:8D:23:92:9E
Certificate issuer:       /CN=FED855DD505D24B6FE25BD8656297329F7EF4785
Certificate serial:       6B70504FBF359C0469C58D0D85ED8C506DBE198D
Authority key identifier: FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa
Signing time:             Wed 09 Oct 2024 06:00:02 +0000
ROA not before:           Wed 09 Oct 2024 05:55:02 +0000
ROA not after:            Wed 08 Oct 2025 06:00:02 +0000
asID:                     17727
IP address blocks:        103.105.128.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl
                          rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:29:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:70:50:4f:bf:35:9c:04:69:c5:8d:0d:85:ed:8c:50:6d:be:19:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED855DD505D24B6FE25BD8656297329F7EF4785
        Validity
            Not Before: Oct  9 05:55:02 2024 GMT
            Not After : Oct  8 06:00:02 2025 GMT
        Subject: CN=CBA17AEBB3D66F6E6C2E0AD7B6E7815E8D23929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4d:00:e0:df:54:e6:94:6d:c5:dc:af:54:31:
                    50:1b:ec:9e:dd:80:81:29:da:b7:0c:18:c4:e8:02:
                    d3:d4:2b:3e:2a:f1:61:3b:5a:cc:60:22:aa:24:91:
                    4a:7e:48:e6:59:ef:c6:00:8a:03:bd:9f:57:ac:5f:
                    e9:74:3e:3d:e7:c3:d9:2c:aa:1e:9e:02:32:85:1d:
                    67:25:e4:89:83:01:28:7d:d6:00:b8:43:bf:4e:dc:
                    c3:21:f8:b5:39:0d:53:ad:ab:79:23:c2:75:4a:90:
                    c6:1d:c9:ad:65:ad:84:98:53:a0:0b:34:df:ea:bf:
                    98:1a:c5:26:84:06:51:d4:e6:a0:05:84:c9:bf:a3:
                    48:c6:13:de:7a:27:b1:6f:88:10:dd:72:df:0f:2a:
                    fd:e0:c4:7f:a4:cb:c0:f2:5e:69:5b:a5:98:b6:0c:
                    b2:2c:90:63:e9:85:b3:b0:71:f7:78:fd:41:5e:91:
                    e8:24:e9:37:44:81:a2:75:81:b9:f7:11:39:42:db:
                    60:03:42:7e:6f:ae:9f:ba:9b:bc:f6:91:ed:cd:25:
                    2e:f1:52:61:ab:dd:84:55:1c:15:1f:ad:f2:07:d7:
                    3a:c0:82:51:cb:8d:09:03:f3:fe:8c:50:55:9c:63:
                    2d:53:f1:20:c9:4b:88:af:a2:19:fd:ac:79:49:c1:
                    65:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A1:7A:EB:B3:D6:6F:6E:6C:2E:0A:D7:B6:E7:81:5E:8D:23:92:9E
            X509v3 Authority Key Identifier:
                keyid:FE:D8:55:DD:50:5D:24:B6:FE:25:BD:86:56:29:73:29:F7:EF:47:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/FED855DD505D24B6FE25BD8656297329F7EF4785.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED855DD505D24B6FE25BD8656297329F7EF4785.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0461d7a7-a11e-400b-9170-c797ed88d702/0/3130332e3130352e3132382e302f32322d3232203d3e203137373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.128.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:3d:a6:f8:61:31:f6:8d:17:ce:b0:d4:30:9a:c8:0c:3f:48:
         d4:a4:50:c3:da:0b:3b:9d:ba:e6:1a:ca:8b:5c:20:ab:b6:6c:
         ab:9b:9f:44:46:a8:b5:ea:89:3d:f1:b9:91:9b:b1:b1:b2:11:
         23:aa:94:ef:29:18:77:2b:0d:2d:a7:3d:85:87:7c:df:09:4d:
         a4:1d:bc:4a:56:f6:91:7c:c5:00:49:0f:b2:38:b0:70:1b:9c:
         27:62:a6:20:01:e7:94:0e:85:5b:b3:e2:20:b1:c4:d4:be:62:
         72:46:37:db:81:b4:01:42:cc:20:81:fb:15:30:43:97:33:c3:
         2c:ec:f0:7e:d6:a9:10:27:c3:15:35:ac:63:23:8a:bb:79:94:
         76:a5:b6:c0:63:38:b0:39:2a:21:a7:69:1e:98:9e:96:72:81:
         7b:3e:53:30:fa:41:c5:0d:e9:4a:2d:a4:64:e6:92:1a:e3:06:
         71:43:5c:f7:39:d8:c3:46:e9:f5:ef:b9:2b:10:63:26:c7:3d:
         cc:ba:7f:9c:ee:bb:2b:6f:f6:f5:e6:08:91:cc:73:3d:65:24:
         f2:4e:20:09:a7:47:51:d7:17:b0:ad:ce:cf:60:58:5b:bd:ae:
         0f:19:66:e8:a1:c2:af:3b:2d:3a:d9:78:1b:4c:84:35:2e:fc:
         dd:4f:87:e6
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUa3BQT781nARpxY0Nhe2MUG2+GY0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlG
N0VGNDc4NTAeFw0yNDEwMDkwNTU1MDJaFw0yNTEwMDgwNjAwMDJaMDMxMTAvBgNV
BAMTKENCQTE3QUVCQjNENjZGNkU2QzJFMEFEN0I2RTc4MTVFOEQyMzkyOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATQDg31TmlG3F3K9UMVAb7J7d
gIEp2rcMGMToAtPUKz4q8WE7WsxgIqokkUp+SOZZ78YAigO9n1esX+l0Pj3nw9ks
qh6eAjKFHWcl5ImDASh91gC4Q79O3MMh+LU5DVOtq3kjwnVKkMYdya1lrYSYU6AL
NN/qv5gaxSaEBlHU5qAFhMm/o0jGE956J7FviBDdct8PKv3gxH+ky8DyXmlbpZi2
DLIskGPphbOwcfd4/UFekegk6TdEgaJ1gbn3ETlC22ADQn5vrp+6m7z2ke3NJS7x
UmGr3YRVHBUfrfIH1zrAglHLjQkD8/6MUFWcYy1T8SDJS4ivohn9rHlJwWUHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUy6F667PWb25sLgrXtueBXo0jkp4wHwYDVR0j
BBgwFoAU/thV3VBdJLb+Jb2GVilzKffvR4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDYxZDdhNy1hMTFlLTQwMGItOTE3MC1jNzk3ZWQ4OGQ3MDIvMC9GRUQ4NTVERDUw
NUQyNEI2RkUyNUJEODY1NjI5NzMyOUY3RUY0Nzg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkVEODU1REQ1MDVEMjRCNkZFMjVCRDg2NTYyOTczMjlGN0VG
NDc4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NjFkN2E3LWExMWUtNDAwYi05
MTcwLWM3OTdlZDg4ZDcwMi8wLzMxMzAzMzJlMzEzMDM1MmUzMTMyMzgyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTM3MzczMjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ2mAMA0GCSqG
SIb3DQEBCwUAA4IBAQB1Pab4YTH2jRfOsNQwmsgMP0jUpFDD2gs7nbrmGsqLXCCr
tmyrm59ERqi16ok98bmRm7GxshEjqpTvKRh3Kw0tpz2Fh3zfCU2kHbxKVvaRfMUA
SQ+yOLBwG5wnYqYgAeeUDoVbs+IgscTUvmJyRjfbgbQBQswggfsVMEOXM8Ms7PB+
1qkQJ8MVNaxjI4q7eZR2pbbAYziwOSohp2kemJ6WcoF7PlMw+kHFDelKLaRk5pIa
4wZxQ1z3OdjDRun177krEGMmxz3Mun+c7rsrb/b15giRzHM9ZSTyTiAJp0dR1xew
rc7PYFhbva4PGWboocKvOy062XgbTIQ1LvzdT4fm
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:40 2024 by rpki-client on console-fra.rpki-client.org