Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa
File:                     3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          HM8hdQzu9QQSPatOZc6AiLkLCY/2L1e3FWeeBVJb8+U=
Subject key identifier:   7F:2E:FF:62:47:CD:4E:B7:66:33:EB:FA:9B:F7:7A:C2:87:E9:3C:9A
Certificate issuer:       /CN=1678828C849BDE3472FE846308767F54ED7F8232
Certificate serial:       837FE5B19368B0A8C04884D5426903E384D9DE
Authority key identifier: 16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa
Signing time:             Tue 17 Oct 2023 07:52:41 +0000
ROA not before:           Tue 17 Oct 2023 07:47:41 +0000
ROA not after:            Tue 15 Oct 2024 07:52:41 +0000
asID:                     45305
IP address blocks:        103.184.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl
                          rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 20 May 2024 19:27:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            83:7f:e5:b1:93:68:b0:a8:c0:48:84:d5:42:69:03:e3:84:d9:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1678828C849BDE3472FE846308767F54ED7F8232
        Validity
            Not Before: Oct 17 07:47:41 2023 GMT
            Not After : Oct 15 07:52:41 2024 GMT
        Subject: CN=7F2EFF6247CD4EB76633EBFA9BF77AC287E93C9A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e9:39:8a:91:9f:69:66:aa:11:04:0f:2a:bd:
                    a4:89:a1:8b:e1:86:bd:f8:7e:22:56:96:cc:2d:8f:
                    af:75:3f:f4:e3:34:95:16:d7:b1:56:dc:e6:87:7f:
                    9a:e7:26:2c:de:8f:92:a5:07:34:89:b0:29:98:21:
                    b5:28:a9:d5:74:b3:01:cd:25:55:70:d2:cb:c6:64:
                    b9:60:d8:50:12:58:60:9a:02:90:80:b5:2b:88:0d:
                    ac:f8:0a:d1:aa:71:72:07:ef:0b:0c:66:42:1d:11:
                    a0:06:0a:1f:55:ea:5f:05:3d:04:44:5d:30:a0:1b:
                    65:7d:49:95:5c:42:bf:04:8e:66:c2:19:47:55:f1:
                    b4:c7:5d:4e:27:1d:5c:67:74:2d:26:c4:49:44:60:
                    8b:63:52:83:b0:00:df:cd:74:66:13:4c:5a:37:7a:
                    2d:12:03:48:e1:22:a2:04:7f:99:fa:d2:6f:42:f4:
                    44:7e:c3:1e:f7:c7:f7:d9:98:96:1e:a3:b2:84:78:
                    94:2a:d3:87:df:dc:49:6c:1e:42:80:70:95:fd:71:
                    fd:01:75:40:39:53:d8:fb:14:80:0b:f6:42:b1:09:
                    46:eb:5e:91:33:79:34:d9:0e:0e:50:cb:e4:88:4d:
                    1c:82:ce:c2:74:14:fc:1c:d9:93:5a:55:3a:f4:40:
                    51:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:2E:FF:62:47:CD:4E:B7:66:33:EB:FA:9B:F7:7A:C2:87:E9:3C:9A
            X509v3 Authority Key Identifier:
                keyid:16:78:82:8C:84:9B:DE:34:72:FE:84:63:08:76:7F:54:ED:7F:82:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/1678828C849BDE3472FE846308767F54ED7F8232.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678828C849BDE3472FE846308767F54ED7F8232.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e57991a-156d-4b55-90cb-79b876cf6a4a/0/3130332e3138342e3138312e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ed:6c:a0:12:18:af:75:d7:0b:33:44:be:02:b2:d8:c8:dc:4d:
         92:5d:fa:25:e0:3d:41:c7:71:d2:52:be:85:a4:b4:02:46:8d:
         01:91:b0:38:18:ec:3a:80:1a:8e:5f:4d:b7:87:7f:5b:1a:06:
         0e:e5:de:2f:50:3c:b2:15:16:f0:7c:cf:d7:5d:e7:fe:38:18:
         9b:80:9b:16:45:af:3c:c7:b8:7c:6e:99:18:1d:e6:fd:6f:8e:
         62:82:2f:b9:67:07:d3:f1:70:77:60:67:2d:23:74:a1:39:35:
         d6:a7:5e:a9:b0:19:6f:bc:15:f7:6f:f1:a0:25:a7:a9:3c:10:
         3a:a2:5c:5e:e9:59:0d:a8:5d:23:61:30:d2:f4:7d:ec:a5:a4:
         4f:c2:ca:78:74:5b:12:3e:09:3a:12:29:53:52:47:ef:08:c7:
         03:c1:c5:33:c6:6e:f7:52:2a:6c:8f:a2:88:50:27:53:c7:f6:
         b7:81:3c:f3:83:14:5e:29:22:fb:1b:83:77:b9:c5:a8:21:67:
         d8:be:bb:24:34:b9:8e:e5:ee:c7:29:b0:23:9b:e3:48:e3:42:
         f9:7b:dc:44:6b:a3:77:49:c6:96:fa:9d:25:94:32:e7:2a:34:
         e8:d8:21:d0:dd:6a:b1:c8:00:80:63:66:96:28:fa:64:7f:b2:
         01:ed:75:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAIN/5bGTaLCowEiE1UJpA+OE2d4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRF
RDdGODIzMjAeFw0yMzEwMTcwNzQ3NDFaFw0yNDEwMTUwNzUyNDFaMDMxMTAvBgNV
BAMTKDdGMkVGRjYyNDdDRDRFQjc2NjMzRUJGQTlCRjc3QUMyODdFOTNDOUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDb6TmKkZ9pZqoRBA8qvaSJoYvh
hr34fiJWlswtj691P/TjNJUW17FW3OaHf5rnJizej5KlBzSJsCmYIbUoqdV0swHN
JVVw0svGZLlg2FASWGCaApCAtSuIDaz4CtGqcXIH7wsMZkIdEaAGCh9V6l8FPQRE
XTCgG2V9SZVcQr8EjmbCGUdV8bTHXU4nHVxndC0mxElEYItjUoOwAN/NdGYTTFo3
ei0SA0jhIqIEf5n60m9C9ER+wx73x/fZmJYeo7KEeJQq04ff3ElsHkKAcJX9cf0B
dUA5U9j7FIAL9kKxCUbrXpEzeTTZDg5Qy+SITRyCzsJ0FPwc2ZNaVTr0QFHzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfy7/YkfNTrdmM+v6m/d6wofpPJowHwYDVR0j
BBgwFoAUFniCjISb3jRy/oRjCHZ/VO1/gjIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTU3OTkxYS0xNTZkLTRiNTUtOTBjYi03OWI4NzZjZjZhNGEvMC8xNjc4ODI4Qzg0
OUJERTM0NzJGRTg0NjMwODc2N0Y1NEVEN0Y4MjMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTY3ODgyOEM4NDlCREUzNDcyRkU4NDYzMDg3NjdGNTRFRDdG
ODIzMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlNTc5OTFhLTE1NmQtNGI1NS05
MGNiLTc5Yjg3NmNmNmE0YS8wLzMxMzAzMzJlMzEzODM0MmUzMTM4MzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNDM1MzMzMDM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7i1MA0GCSqG
SIb3DQEBCwUAA4IBAQDtbKASGK911wszRL4CstjI3E2SXfol4D1Bx3HSUr6FpLQC
Ro0BkbA4GOw6gBqOX023h39bGgYO5d4vUDyyFRbwfM/XXef+OBibgJsWRa88x7h8
bpkYHeb9b45igi+5ZwfT8XB3YGctI3ShOTXWp16psBlvvBX3b/GgJaepPBA6olxe
6VkNqF0jYTDS9H3spaRPwsp4dFsSPgk6EilTUkfvCMcDwcUzxm73Uipsj6KIUCdT
x/a3gTzzgxReKSL7G4N3ucWoIWfYvrskNLmO5e7HKbAjm+NI40L5e9xEa6N3ScaW
+p0llDLnKjTo2CHQ3WqxyACAY2aWKPpkf7IB7XWg
-----END CERTIFICATE-----
Generated at Fri May 17 15:21:31 2024 by rpki-client on console-ams.rpki-client.org