Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
File:                     3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa (raw, json)
Hash identifier:          yL/Qdm4v9k16NDTzNwOWeKXdHvmgrGfDk4CHsHFxzD8=
Subject key identifier:   84:5C:B1:00:53:32:1D:54:00:99:C9:4C:3B:D3:D0:B9:55:F5:4F:83
Certificate issuer:       /CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
Certificate serial:       6D76721CBDC1A78D0530E86BB9172048DBFD6800
Authority key identifier: 09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa
Signing time:             Mon 01 Jul 2024 01:05:26 +0000
ROA not before:           Mon 01 Jul 2024 01:00:26 +0000
ROA not after:            Mon 30 Jun 2025 01:05:26 +0000
asID:                     138083
IP address blocks:        103.130.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl
                          rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:76:72:1c:bd:c1:a7:8d:05:30:e8:6b:b9:17:20:48:db:fd:68:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4
        Validity
            Not Before: Jul  1 01:00:26 2024 GMT
            Not After : Jun 30 01:05:26 2025 GMT
        Subject: CN=845CB10053321D540099C94C3BD3D0B955F54F83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ed:eb:1e:30:cc:21:b4:c0:93:0a:12:b1:e1:
                    67:07:d6:06:ae:eb:36:20:04:b4:96:33:05:42:c5:
                    87:93:89:b0:09:1b:9c:d6:79:b3:b3:d9:77:fa:30:
                    c6:9b:e9:59:3b:81:8b:1c:6f:49:3d:3f:87:ec:32:
                    1f:d1:13:63:7c:04:8f:e4:12:0e:6d:dd:9d:f5:6e:
                    47:a7:fa:a0:15:dc:b8:2e:7c:00:a8:ed:19:aa:c0:
                    33:41:4c:35:dd:10:d9:b7:f2:26:13:d1:fb:89:00:
                    0a:fb:40:64:e6:18:74:a9:cd:49:3d:bf:a1:dc:43:
                    3b:8d:af:fb:51:42:d0:82:d0:46:64:ab:cf:d7:f2:
                    43:8b:cb:7f:dc:29:a7:f4:87:8e:e5:dc:56:64:9e:
                    fe:24:e8:8e:8b:58:a5:1e:39:6b:83:c1:8f:51:b5:
                    09:1b:58:4f:a8:9c:76:1c:e4:d3:6e:92:2f:d6:22:
                    d7:08:bf:e4:bb:65:d7:1b:56:18:29:ee:6b:5b:cb:
                    0f:b7:e6:96:a2:35:d9:ee:29:80:47:cb:bd:f4:2f:
                    ca:d5:3e:6b:c9:d6:98:5e:8e:9b:ff:78:71:56:9a:
                    23:fd:f0:09:66:a4:40:d8:2b:d0:56:2b:a9:2f:1c:
                    d7:34:33:1d:74:2f:3d:5d:b0:e0:be:8b:47:18:11:
                    8e:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5C:B1:00:53:32:1D:54:00:99:C9:4C:3B:D3:D0:B9:55:F5:4F:83
            X509v3 Authority Key Identifier:
                keyid:09:12:BC:2A:8D:2E:8B:F2:55:3D:71:06:FF:6E:62:22:8E:03:C1:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0912BC2A8D2E8BF2553D7106FF6E62228E03C1E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05669807-050e-43ae-8708-b46b8817842c/0/3130332e3133302e3138322e302f32332d3233203d3e20313338303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         77:1b:6e:7f:82:e1:6a:1e:85:f2:15:aa:5c:2a:25:f3:69:7a:
         d6:bb:85:d7:89:3c:ff:d1:47:4f:99:49:4c:f5:e5:9d:06:67:
         b4:fa:ce:ee:9c:e2:0c:e5:b7:cd:6a:bb:01:22:e5:69:94:28:
         93:3c:41:77:89:0b:01:e6:66:cd:54:1f:d8:8b:7e:2f:fd:b2:
         0c:21:2b:4d:6f:96:60:a2:94:09:00:91:7b:7e:8d:46:b5:3a:
         21:18:38:b8:26:d0:26:43:88:14:73:3c:85:71:39:0f:7c:14:
         dd:f8:69:2a:c9:79:cf:e2:c0:33:fb:dc:43:53:55:99:a6:60:
         6e:a9:94:dc:24:75:0c:25:87:6e:f5:db:7c:c3:f1:fe:db:4e:
         6e:9c:7e:a7:a0:f1:6d:cd:4c:d8:96:18:0d:fe:4d:ee:05:28:
         89:24:9a:fc:76:8b:3c:b2:5f:6c:c2:8f:54:7a:29:33:c9:78:
         8c:f7:8e:2a:75:50:a9:af:1f:e8:0d:08:aa:46:43:04:c5:dd:
         8d:8b:fe:33:38:f3:b1:62:9d:ee:0c:ae:a1:e8:f8:f1:08:ac:
         22:73:19:7d:e9:7a:51:95:f2:34:2c:8c:83:25:c5:40:55:6c:
         d6:2c:d4:76:20:f3:41:99:e9:96:58:fc:eb:17:eb:2e:8e:94:
         04:9f:06:60
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbXZyHL3Bp40FMOhruRcgSNv9aAAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4
RTAzQzFFNDAeFw0yNDA3MDEwMTAwMjZaFw0yNTA2MzAwMTA1MjZaMDMxMTAvBgNV
BAMTKDg0NUNCMTAwNTMzMjFENTQwMDk5Qzk0QzNCRDNEMEI5NTVGNTRGODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb7eseMMwhtMCTChKx4WcH1gau
6zYgBLSWMwVCxYeTibAJG5zWebOz2Xf6MMab6Vk7gYscb0k9P4fsMh/RE2N8BI/k
Eg5t3Z31bken+qAV3LgufACo7RmqwDNBTDXdENm38iYT0fuJAAr7QGTmGHSpzUk9
v6HcQzuNr/tRQtCC0EZkq8/X8kOLy3/cKaf0h47l3FZknv4k6I6LWKUeOWuDwY9R
tQkbWE+onHYc5NNuki/WItcIv+S7ZdcbVhgp7mtbyw+35paiNdnuKYBHy730L8rV
PmvJ1phejpv/eHFWmiP98AlmpEDYK9BWK6kvHNc0Mx10Lz1dsOC+i0cYEY6bAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUhFyxAFMyHVQAmclMO9PQuVX1T4MwHwYDVR0j
BBgwFoAUCRK8Ko0ui/JVPXEG/25iIo4DweQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NTY2OTgwNy0wNTBlLTQzYWUtODcwOC1iNDZiODgxNzg0MmMvMC8wOTEyQkMyQThE
MkU4QkYyNTUzRDcxMDZGRjZFNjIyMjhFMDNDMUU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDkxMkJDMkE4RDJFOEJGMjU1M0Q3MTA2RkY2RTYyMjI4RTAz
QzFFNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA1NjY5ODA3LTA1MGUtNDNhZS04
NzA4LWI0NmI4ODE3ODQyYy8wLzMxMzAzMzJlMzEzMzMwMmUzMTM4MzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzgzMDM4MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFngrYwDQYJ
KoZIhvcNAQELBQADggEBAHcbbn+C4WoehfIVqlwqJfNpeta7hdeJPP/RR0+ZSUz1
5Z0GZ7T6zu6c4gzlt81quwEi5WmUKJM8QXeJCwHmZs1UH9iLfi/9sgwhK01vlmCi
lAkAkXt+jUa1OiEYOLgm0CZDiBRzPIVxOQ98FN34aSrJec/iwDP73ENTVZmmYG6p
lNwkdQwlh27123zD8f7bTm6cfqeg8W3NTNiWGA3+Te4FKIkkmvx2izyyX2zCj1R6
KTPJeIz3jip1UKmvH+gNCKpGQwTF3Y2L/jM487Fine4MrqHo+PEIrCJzGX3pelGV
8jQsjIMlxUBVbNYs1HYg80GZ6ZZY/OsX6y6OlASfBmA=
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:40 2024 by rpki-client on console-fra.rpki-client.org