Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa
File:                     3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa (raw, json)
Hash identifier:          Q4bEPXGITMYlEUkogoBHUQw6aD1GENfQinOJ9BlkZrU=
Subject key identifier:   6E:2D:23:D6:B8:54:64:DD:CD:EA:37:76:35:99:12:4A:E6:63:F3:4E
Certificate issuer:       /CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
Certificate serial:       01BAB3CFECD735E158210AAAC70D220D50F3B5B5
Authority key identifier: EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa
Signing time:             Sat 24 Aug 2024 07:58:48 +0000
ROA not before:           Sat 24 Aug 2024 07:53:48 +0000
ROA not after:            Sat 23 Aug 2025 07:58:48 +0000
asID:                     150941
IP address blocks:        103.101.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl
                          rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:ba:b3:cf:ec:d7:35:e1:58:21:0a:aa:c7:0d:22:0d:50:f3:b5:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F
        Validity
            Not Before: Aug 24 07:53:48 2024 GMT
            Not After : Aug 23 07:58:48 2025 GMT
        Subject: CN=6E2D23D6B85464DDCDEA37763599124AE663F34E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:2b:65:eb:60:d1:a5:33:00:c7:2b:98:7a:6b:
                    c6:c7:48:0e:b8:f9:a8:17:b3:81:c3:4f:7b:d1:94:
                    e2:e6:84:ad:0a:a5:07:ee:5f:ac:45:a7:ed:8e:72:
                    ca:ec:cd:99:42:6c:d4:84:f1:a6:24:d9:9b:6f:a2:
                    d4:3d:a3:31:45:80:e2:fa:d8:67:72:76:35:7e:c9:
                    6f:83:c5:61:13:e8:37:c4:37:a9:30:0a:16:d8:22:
                    9a:1a:2a:3f:19:fe:99:4f:79:65:d8:e2:52:a6:9b:
                    c7:a0:51:96:db:29:04:60:67:4f:82:c4:3a:25:08:
                    6b:4d:72:6b:8c:97:d8:c9:2e:65:37:e9:cd:fc:02:
                    25:dd:50:c3:1a:c1:18:67:48:09:3f:b1:f8:2f:44:
                    fe:f1:cc:cf:03:38:eb:05:c7:eb:e2:46:d3:12:45:
                    f8:fc:c2:4d:19:dc:cf:d3:2a:e4:a3:05:b1:7e:b1:
                    52:ac:54:7c:b4:13:8a:a0:99:64:a4:22:fa:b5:59:
                    97:f2:88:27:00:22:31:92:60:78:54:e3:42:aa:8e:
                    a9:4e:26:08:1c:2a:c7:0a:a7:f9:60:31:31:79:3d:
                    f4:cb:3f:d7:d7:50:1f:44:e9:39:c8:b7:97:69:70:
                    29:9c:94:5e:7a:00:36:87:4b:ad:bc:b5:05:79:78:
                    c2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:23:D6:B8:54:64:DD:CD:EA:37:76:35:99:12:4A:E6:63:F3:4E
            X509v3 Authority Key Identifier:
                keyid:EB:78:21:4F:24:8E:FE:08:B4:E4:62:FD:AF:D4:E7:0B:C3:D0:5A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB78214F248EFE08B4E462FDAFD4E70BC3D05A2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a1f3971-3a47-455d-ab30-e7c23b61b9f2/0/3130332e3130312e3231362e302f32342d3234203d3e20313530393431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:42:c8:5e:c3:2d:74:0a:ba:02:c3:04:92:e3:09:88:a1:c9:
         d5:63:4d:a2:42:47:2e:91:46:20:30:3d:6c:72:f2:25:d8:87:
         a9:5d:e2:05:39:02:82:aa:16:26:f5:ed:80:f8:10:51:1a:01:
         45:4c:e5:46:b4:7a:93:20:36:a9:83:48:ab:a6:ad:dd:8e:b6:
         75:6a:7e:b1:93:c3:c3:d6:5b:63:5d:80:77:0a:bf:9a:26:46:
         07:96:dd:90:91:67:29:3e:cf:82:f0:1b:32:b8:1b:9f:96:d8:
         49:f6:c3:e1:28:16:00:86:75:a4:93:b6:ec:1a:b9:96:91:2a:
         54:ea:8f:49:14:9b:a0:a2:ff:70:7c:94:b4:fa:8a:be:e4:25:
         62:d8:46:28:b9:67:91:f5:a5:6e:34:2b:2f:9f:e8:12:12:c0:
         1f:34:e5:55:c4:27:f2:3f:51:43:a4:2f:a6:cf:4d:a8:a5:df:
         50:55:a4:60:b6:68:18:5a:83:f3:50:88:ee:c2:38:9a:c6:59:
         de:1b:ef:ea:62:86:5d:47:b2:0e:83:6a:e1:8f:46:22:ee:42:
         a5:5f:1e:49:ee:df:9e:7d:6a:df:c0:32:d4:99:81:70:36:d5:
         d6:2d:fe:78:a2:90:21:7d:01:a1:2e:a1:bb:1e:3e:ae:dc:10:
         00:a1:49:88
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUAbqzz+zXNeFYIQqqxw0iDVDztbUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJD
M0QwNUEyRjAeFw0yNDA4MjQwNzUzNDhaFw0yNTA4MjMwNzU4NDhaMDMxMTAvBgNV
BAMTKDZFMkQyM0Q2Qjg1NDY0RERDREVBMzc3NjM1OTkxMjRBRTY2M0YzNEUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8K2XrYNGlMwDHK5h6a8bHSA64
+agXs4HDT3vRlOLmhK0KpQfuX6xFp+2OcsrszZlCbNSE8aYk2ZtvotQ9ozFFgOL6
2GdydjV+yW+DxWET6DfEN6kwChbYIpoaKj8Z/plPeWXY4lKmm8egUZbbKQRgZ0+C
xDolCGtNcmuMl9jJLmU36c38AiXdUMMawRhnSAk/sfgvRP7xzM8DOOsFx+viRtMS
Rfj8wk0Z3M/TKuSjBbF+sVKsVHy0E4qgmWSkIvq1WZfyiCcAIjGSYHhU40KqjqlO
JggcKscKp/lgMTF5PfTLP9fXUB9E6TnIt5dpcCmclF56ADaHS628tQV5eMKlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbi0j1rhUZN3N6jd2NZkSSuZj804wHwYDVR0j
BBgwFoAU63ghTySO/gi05GL9r9TnC8PQWi8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YTFmMzk3MS0zYTQ3LTQ1NWQtYWIzMC1lN2MyM2I2MWI5ZjIvMC9FQjc4MjE0RjI0
OEVGRTA4QjRFNDYyRkRBRkQ0RTcwQkMzRDA1QTJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUI3ODIxNEYyNDhFRkUwOEI0RTQ2MkZEQUZENEU3MEJDM0Qw
NUEyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBhMWYzOTcxLTNhNDctNDU1ZC1h
YjMwLWU3YzIzYjYxYjlmMi8wLzMxMzAzMzJlMzEzMDMxMmUzMjMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzAzOTM0MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnZdgwDQYJ
KoZIhvcNAQELBQADggEBAHpCyF7DLXQKugLDBJLjCYihydVjTaJCRy6RRiAwPWxy
8iXYh6ld4gU5AoKqFib17YD4EFEaAUVM5Ua0epMgNqmDSKumrd2OtnVqfrGTw8PW
W2NdgHcKv5omRgeW3ZCRZyk+z4LwGzK4G5+W2En2w+EoFgCGdaSTtuwauZaRKlTq
j0kUm6Ci/3B8lLT6ir7kJWLYRii5Z5H1pW40Ky+f6BISwB805VXEJ/I/UUOkL6bP
Tail31BVpGC2aBhag/NQiO7COJrGWd4b7+pihl1Hsg6DauGPRiLuQqVfHknu3559
at/AMtSZgXA21dYt/niikCF9AaEuobsePq7cEAChSYg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:37 2024 by rpki-client on console-ams.rpki-client.org