Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa
File:                     3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa (raw, json)
Hash identifier:          1ijvclpULPgdCfBDissNP0l83v/riKHy/8gjcp65S8Y=
Subject key identifier:   52:8C:84:05:71:FC:F0:28:E9:F4:CC:7F:3D:7B:3F:27:45:2B:1C:E7
Certificate issuer:       /CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
Certificate serial:       26BD838B50308A7C544B906FE833F4EA68E68645
Authority key identifier: FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa
Signing time:             Wed 24 Jul 2024 15:02:17 +0000
ROA not before:           Wed 24 Jul 2024 14:57:17 +0000
ROA not after:            Wed 23 Jul 2025 15:02:17 +0000
asID:                     46055
IP address blocks:        103.198.122.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl
                          rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:bd:83:8b:50:30:8a:7c:54:4b:90:6f:e8:33:f4:ea:68:e6:86:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91
        Validity
            Not Before: Jul 24 14:57:17 2024 GMT
            Not After : Jul 23 15:02:17 2025 GMT
        Subject: CN=528C840571FCF028E9F4CC7F3D7B3F27452B1CE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:66:00:5a:c3:23:5a:79:ba:3b:26:00:d0:f9:
                    f4:06:af:4f:55:5d:3c:7d:9d:7e:44:77:98:51:a2:
                    6b:f3:1b:3b:06:e0:1c:15:bb:9d:1f:8d:13:ea:e0:
                    4e:1c:95:cb:86:54:23:fe:2d:1a:89:14:32:3b:35:
                    8d:77:69:4b:ce:72:b1:40:9a:fb:45:79:68:48:f0:
                    d2:4c:ac:4c:65:d2:29:62:8b:da:d2:db:c8:bf:bd:
                    1f:39:76:ae:44:32:93:19:08:12:8b:50:eb:ab:0e:
                    d8:32:b2:54:75:2d:52:90:f1:f9:2d:75:f1:4a:96:
                    3f:d8:67:0e:da:b8:3a:73:0d:1d:cd:44:20:dc:c1:
                    d3:6a:61:40:b2:3e:ea:53:4a:be:bb:81:eb:72:8a:
                    77:bd:2b:cc:34:eb:2f:73:a0:db:5e:dc:b7:23:fa:
                    33:10:d6:a7:44:4e:17:b8:3e:27:88:ef:89:08:8e:
                    66:c0:98:60:f0:76:6d:d9:7f:c9:e4:86:51:e3:cf:
                    af:1c:41:3a:fc:c6:c2:2a:71:52:05:27:1f:c9:b8:
                    ec:93:92:c4:bf:a1:50:d0:53:45:3c:3a:44:42:13:
                    d8:70:fa:3c:ca:3c:db:8b:d3:2a:e5:28:14:4c:01:
                    be:66:c4:bc:2a:42:3e:1e:f0:86:85:ef:01:0e:ea:
                    8a:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:8C:84:05:71:FC:F0:28:E9:F4:CC:7F:3D:7B:3F:27:45:2B:1C:E7
            X509v3 Authority Key Identifier:
                keyid:FB:D3:B2:8C:90:75:52:9D:EE:81:51:C4:E4:4B:0C:BC:13:FF:DA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FBD3B28C9075529DEE8151C4E44B0CBC13FFDA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/083977f4-8c2d-4eb1-b4cd-35b49216e073/0/3130332e3139382e3132322e302f32332d3234203d3e203436303535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.198.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:a1:82:ea:fd:e0:ef:43:a7:e8:97:df:61:89:8e:53:f0:86:
         08:dc:39:61:d4:20:e7:5e:ff:84:3f:6b:57:85:0d:27:1e:2b:
         3c:51:5f:59:3b:9f:6d:61:c7:80:47:3b:6e:9a:b7:5f:6a:ac:
         75:94:03:f6:62:68:0f:68:8f:43:f7:ff:f4:77:c8:89:4d:5d:
         b5:a1:bf:4a:07:9f:99:7c:8a:52:59:a3:8d:71:7d:96:da:7a:
         3c:5d:fd:b5:8b:fb:2d:0b:f5:c0:0b:f4:09:61:65:e7:14:71:
         7c:07:1d:a8:e3:f4:82:2b:1e:97:6c:0f:f7:4a:9a:0d:55:9e:
         2d:16:56:79:f9:b8:d0:86:13:98:f5:4c:88:01:dc:e9:ae:79:
         b0:e9:51:e4:6b:56:5c:2b:af:b3:35:78:fd:c8:e3:d5:ac:c2:
         03:48:3b:cc:69:13:10:ee:72:03:b8:bd:e9:bd:0a:20:48:4e:
         8c:03:d3:bd:cb:2f:c7:d1:47:4b:77:b8:40:f5:52:8f:16:00:
         82:27:e0:01:58:4f:69:1f:6d:10:7b:28:c8:d4:0e:95:22:ac:
         3c:7a:f2:f8:7a:0d:a8:23:46:1a:ae:88:99:15:d2:10:08:90:
         60:41:27:01:1e:4b:f2:d5:c5:e3:c7:20:3a:73:88:b0:7f:ef:
         89:15:ac:30
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJr2Di1AwinxUS5Bv6DP06mjmhkUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMx
M0ZGREE5MTAeFw0yNDA3MjQxNDU3MTdaFw0yNTA3MjMxNTAyMTdaMDMxMTAvBgNV
BAMTKDUyOEM4NDA1NzFGQ0YwMjhFOUY0Q0M3RjNEN0IzRjI3NDUyQjFDRTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6ZgBawyNaebo7JgDQ+fQGr09V
XTx9nX5Ed5hRomvzGzsG4BwVu50fjRPq4E4clcuGVCP+LRqJFDI7NY13aUvOcrFA
mvtFeWhI8NJMrExl0ilii9rS28i/vR85dq5EMpMZCBKLUOurDtgyslR1LVKQ8fkt
dfFKlj/YZw7auDpzDR3NRCDcwdNqYUCyPupTSr67getyine9K8w06y9zoNte3Lcj
+jMQ1qdEThe4PieI74kIjmbAmGDwdm3Zf8nkhlHjz68cQTr8xsIqcVIFJx/JuOyT
ksS/oVDQU0U8OkRCE9hw+jzKPNuL0yrlKBRMAb5mxLwqQj4e8IaF7wEO6oqPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUoyEBXH88Cjp9Mx/PXs/J0UrHOcwHwYDVR0j
BBgwFoAU+9OyjJB1Up3ugVHE5EsMvBP/2pEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ODM5NzdmNC04YzJkLTRlYjEtYjRjZC0zNWI0OTIxNmUwNzMvMC9GQkQzQjI4Qzkw
NzU1MjlERUU4MTUxQzRFNDRCMENCQzEzRkZEQTkxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkJEM0IyOEM5MDc1NTI5REVFODE1MUM0RTQ0QjBDQkMxM0ZG
REE5MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA4Mzk3N2Y0LThjMmQtNGViMS1i
NGNkLTM1YjQ5MjE2ZTA3My8wLzMxMzAzMzJlMzEzOTM4MmUzMTMyMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNDM2MzAzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ8Z6MA0GCSqG
SIb3DQEBCwUAA4IBAQALoYLq/eDvQ6fol99hiY5T8IYI3Dlh1CDnXv+EP2tXhQ0n
His8UV9ZO59tYceARztumrdfaqx1lAP2YmgPaI9D9//0d8iJTV21ob9KB5+ZfIpS
WaONcX2W2no8Xf21i/stC/XAC/QJYWXnFHF8Bx2o4/SCKx6XbA/3SpoNVZ4tFlZ5
+bjQhhOY9UyIAdzprnmw6VHka1ZcK6+zNXj9yOPVrMIDSDvMaRMQ7nIDuL3pvQog
SE6MA9O9yy/H0UdLd7hA9VKPFgCCJ+ABWE9pH20QeyjI1A6VIqw8evL4eg2oI0Ya
roiZFdIQCJBgQScBHkvy1cXjxyA6c4iwf++JFaww
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:03:32 2024 by rpki-client on console-fra.rpki-client.org