Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
File:                     3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (raw, json)
Hash identifier:          2coPKVs6UYgvaRhALb3U6qftTnGIwKrxHvCONmCCP9c=
Subject key identifier:   61:3A:9E:90:17:36:A0:D5:B0:5B:CC:FB:9A:3E:8B:49:BB:80:92:4A
Certificate issuer:       /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
Certificate serial:       2D7B86E7430E4AC48A1CE4D6C3DDF435ECB15B9A
Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa
Signing time:             Thu 01 Feb 2024 06:00:02 +0000
ROA not before:           Thu 01 Feb 2024 05:55:02 +0000
ROA not after:            Thu 30 Jan 2025 06:00:02 +0000
asID:                     150539
IP address blocks:        103.75.63.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl
                          rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:7b:86:e7:43:0e:4a:c4:8a:1c:e4:d6:c3:dd:f4:35:ec:b1:5b:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA
        Validity
            Not Before: Feb  1 05:55:02 2024 GMT
            Not After : Jan 30 06:00:02 2025 GMT
        Subject: CN=613A9E901736A0D5B05BCCFB9A3E8B49BB80924A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:e7:4d:57:b4:9b:8c:e1:a2:9f:de:48:9c:65:
                    0c:60:68:6a:07:a6:37:07:da:e5:aa:22:3b:ba:ef:
                    df:a1:d7:57:2e:40:72:78:0a:40:3c:72:db:cf:22:
                    83:71:55:83:38:ae:02:94:a0:0b:c5:78:77:ee:8b:
                    4b:97:dd:5e:b3:7c:fe:28:ea:7e:b4:96:88:28:a8:
                    46:c7:46:65:df:5e:81:6f:13:bb:b9:2f:39:9f:e6:
                    dd:c5:71:ec:f7:4e:77:1b:25:7b:8b:6c:4b:9c:96:
                    c3:2d:5e:70:39:83:22:cf:de:bc:81:e2:11:14:73:
                    8d:5f:85:6e:fa:06:53:46:c1:2d:f8:52:51:81:60:
                    e3:05:93:72:9f:4a:ea:8c:fd:f6:59:96:08:99:a8:
                    cb:35:fe:f6:ac:3c:02:90:2c:67:32:f1:a0:41:bd:
                    99:a3:9d:ce:d9:76:d6:99:a3:4d:9e:72:29:a5:5c:
                    51:0b:f9:8c:36:ba:22:b8:51:ca:90:7c:42:9e:af:
                    ae:b5:5b:6c:2f:8d:07:d2:c9:2f:40:d3:7c:11:43:
                    ea:6b:9d:11:88:d8:ff:e0:59:b4:3d:80:ce:48:05:
                    80:44:c4:0f:e8:49:9a:16:60:10:80:0b:bb:e5:7e:
                    6d:97:61:b1:42:af:10:c9:2b:6a:87:58:dc:65:00:
                    ad:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3A:9E:90:17:36:A0:D5:B0:5B:CC:FB:9A:3E:8B:49:BB:80:92:4A
            X509v3 Authority Key Identifier:
                keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/3130332e37352e36332e302f32342d3234203d3e20313530353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:f6:1e:dc:66:ae:8c:72:c6:a6:c1:93:ba:e0:ac:13:67:a5:
         b9:5e:52:70:93:c5:2c:ee:8c:1c:54:35:a7:e1:d4:29:df:00:
         da:7e:ea:36:43:38:86:39:16:34:35:06:f0:44:30:1d:a9:a7:
         20:1c:bb:a4:6c:05:d1:29:6f:e2:de:eb:c9:29:fd:49:ad:73:
         cc:48:17:64:85:8d:39:48:b0:94:2e:ad:ca:c1:be:9b:a2:21:
         b6:7b:c0:73:2d:7f:f3:61:ae:79:c0:c1:37:43:bd:45:8a:a6:
         c8:5c:8d:27:13:b8:6c:22:5f:b3:a6:bf:aa:8a:e1:23:94:af:
         71:9b:de:e9:11:c3:8c:4a:85:f5:60:52:69:f2:18:5f:45:f1:
         55:c4:d6:94:2f:54:dc:4b:1f:37:c8:60:6f:4b:e9:21:79:ef:
         40:ea:1b:e5:e9:ef:dc:3b:c5:c9:4c:9e:a4:e4:ff:9f:35:03:
         69:7a:f5:50:95:67:db:63:4e:12:a7:4b:82:4a:87:dc:f9:8f:
         61:13:22:8e:db:d9:18:49:34:38:f5:58:89:57:9a:44:c7:fb:
         d8:eb:c8:99:3c:ba:f9:49:0f:38:c3:25:5a:17:2a:99:bb:40:
         a3:bf:81:82:48:58:0b:36:b8:a9:a2:16:fe:c9:a5:62:f8:1a:
         6a:47:f5:c1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULXuG50MOSsSKHOTWw930NeyxW5owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2
RTM0MjlGQTAeFw0yNDAyMDEwNTU1MDJaFw0yNTAxMzAwNjAwMDJaMDMxMTAvBgNV
BAMTKDYxM0E5RTkwMTczNkEwRDVCMDVCQ0NGQjlBM0U4QjQ5QkI4MDkyNEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/501XtJuM4aKf3kicZQxgaGoH
pjcH2uWqIju679+h11cuQHJ4CkA8ctvPIoNxVYM4rgKUoAvFeHfui0uX3V6zfP4o
6n60logoqEbHRmXfXoFvE7u5Lzmf5t3Fcez3TncbJXuLbEuclsMtXnA5gyLP3ryB
4hEUc41fhW76BlNGwS34UlGBYOMFk3KfSuqM/fZZlgiZqMs1/vasPAKQLGcy8aBB
vZmjnc7ZdtaZo02ecimlXFEL+Yw2uiK4UcqQfEKer661W2wvjQfSyS9A03wRQ+pr
nRGI2P/gWbQ9gM5IBYBExA/oSZoWYBCAC7vlfm2XYbFCrxDJK2qHWNxlAK05AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUYTqekBc2oNWwW8z7mj6LSbuAkkowHwYDVR0j
BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3
MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0
MjlGQS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA3YzhhMGMzLTM3ZjUtNDY2Ny1h
NDMwLTZmYTExMWQzNDNhYS8wLzMxMzAzMzJlMzczNTJlMzYzMzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzMzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdLPzANBgkqhkiG
9w0BAQsFAAOCAQEATPYe3GaujHLGpsGTuuCsE2eluV5ScJPFLO6MHFQ1p+HUKd8A
2n7qNkM4hjkWNDUG8EQwHamnIBy7pGwF0Slv4t7rySn9Sa1zzEgXZIWNOUiwlC6t
ysG+m6IhtnvAcy1/82GuecDBN0O9RYqmyFyNJxO4bCJfs6a/qorhI5SvcZve6RHD
jEqF9WBSafIYX0XxVcTWlC9U3EsfN8hgb0vpIXnvQOob5env3DvFyUyepOT/nzUD
aXr1UJVn22NOEqdLgkqH3PmPYRMijtvZGEk0OPVYiVeaRMf72OvImTy6+UkPOMMl
WhcqmbtAo7+BgkhYCza4qaIW/smlYvgaakf1wQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org