Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
File:                     3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa (raw, json)
Hash identifier:          j5dLe4U4oqUporg+5QJA709E7qGKmvlc3Ph5mSsJNAU=
Subject key identifier:   0A:D2:2F:E7:41:2C:7A:35:DD:39:C8:29:91:57:E7:B0:66:C4:FD:A9
Certificate issuer:       /CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
Certificate serial:       6D071864D64A041B845F94C4B3DB5BA9FE03717A
Authority key identifier: B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa
Signing time:             Mon 10 Jun 2024 07:32:55 +0000
ROA not before:           Mon 10 Jun 2024 07:27:55 +0000
ROA not after:            Mon 09 Jun 2025 07:32:55 +0000
asID:                     138123
IP address blocks:        103.132.55.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl
                          rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 18:45:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:07:18:64:d6:4a:04:1b:84:5f:94:c4:b3:db:5b:a9:fe:03:71:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B88116E180F32C03362804A81CB0CF2EB0C261B6
        Validity
            Not Before: Jun 10 07:27:55 2024 GMT
            Not After : Jun  9 07:32:55 2025 GMT
        Subject: CN=0AD22FE7412C7A35DD39C8299157E7B066C4FDA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:81:ac:dc:37:e3:f1:77:94:2d:e4:ec:99:33:
                    80:a1:94:d4:8f:b4:25:a2:69:4a:49:cc:2f:07:77:
                    54:6a:6e:42:3f:0e:ea:bd:22:4c:9b:14:9a:ad:c0:
                    84:fd:49:82:e0:21:7f:ad:e6:e4:72:2b:b3:00:bf:
                    6e:a7:cc:31:64:4e:84:a5:f0:42:e3:e3:2a:34:b7:
                    92:10:10:5b:6a:5c:a8:91:6e:f9:5d:d6:f4:a1:ce:
                    fa:97:c5:42:cd:ba:7b:cc:14:e4:b5:ea:15:cd:0c:
                    4f:d8:5d:9b:4e:25:05:77:e0:12:06:4b:ef:e6:46:
                    a1:7f:56:a2:4b:52:db:1d:1a:38:76:6c:60:8d:84:
                    74:7a:65:87:8a:38:3b:25:61:de:42:28:44:5c:df:
                    7f:cb:e6:20:cd:22:4c:58:99:dd:2c:5a:1e:78:fd:
                    d4:a9:f3:3a:9c:0e:cf:a5:91:38:58:16:f1:53:bf:
                    3a:fe:e4:6a:eb:fd:cc:d3:cf:11:ff:99:69:da:ae:
                    9b:7b:7f:44:77:04:50:d7:9e:77:73:c1:4d:39:f8:
                    ca:b6:78:79:3f:66:95:20:6d:bd:52:ab:ec:39:77:
                    56:04:86:52:fd:8e:0c:4b:89:9d:1a:a7:85:8e:1a:
                    de:4b:9d:ae:34:ee:c0:1f:48:39:5f:74:1f:cd:ca:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:D2:2F:E7:41:2C:7A:35:DD:39:C8:29:91:57:E7:B0:66:C4:FD:A9
            X509v3 Authority Key Identifier:
                keyid:B8:81:16:E1:80:F3:2C:03:36:28:04:A8:1C:B0:CF:2E:B0:C2:61:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/B88116E180F32C03362804A81CB0CF2EB0C261B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B88116E180F32C03362804A81CB0CF2EB0C261B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e96ed89-2a16-4151-bf83-59dce561460c/0/3130332e3133322e35352e302f32342d3234203d3e20313338313233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.55.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8b:75:ab:09:80:81:f5:24:4b:48:cb:dc:ce:91:13:66:8a:
         cf:f3:32:6b:da:62:d8:5e:f8:74:56:17:09:89:93:cc:e6:3d:
         ff:ba:f2:d2:17:cb:05:37:95:05:50:7d:29:d2:5a:af:72:fc:
         2b:2b:8f:82:26:06:e1:94:d5:b4:2a:c2:1a:40:3d:b2:aa:dc:
         c4:ac:45:b2:36:53:d5:a8:d7:27:0b:ed:99:7d:25:25:d0:8d:
         1c:33:be:10:36:fd:07:72:30:99:52:46:55:e2:0e:83:c4:76:
         bd:a6:c9:a9:9a:2d:14:26:85:91:5e:5f:2d:41:81:2d:10:cb:
         12:73:4c:7c:a5:9b:2f:89:e1:f0:35:fc:db:f0:f4:8a:f2:ef:
         ea:96:1e:db:dc:1f:fc:5a:ce:aa:4e:06:1f:50:38:7c:16:ce:
         b2:5b:5b:4a:51:e7:d7:89:cf:e9:1b:12:94:4b:f8:39:9a:01:
         55:1f:6c:e3:bc:f7:c6:85:af:02:e8:39:14:f6:3b:1a:52:14:
         77:95:bc:d5:6a:39:65:5a:46:26:48:d3:76:e1:51:34:74:7b:
         2b:1e:e2:ff:62:e8:fd:4e:51:20:e8:67:8f:e8:45:06:bc:f0:
         07:dc:8c:84:2b:aa:ef:39:1a:be:55:d7:4e:7a:0b:54:4f:04:
         4f:9e:14:5c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbQcYZNZKBBuEX5TEs9tbqf4DcXowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVC
MEMyNjFCNjAeFw0yNDA2MTAwNzI3NTVaFw0yNTA2MDkwNzMyNTVaMDMxMTAvBgNV
BAMTKDBBRDIyRkU3NDEyQzdBMzVERDM5QzgyOTkxNTdFN0IwNjZDNEZEQTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGgazcN+Pxd5Qt5OyZM4ChlNSP
tCWiaUpJzC8Hd1RqbkI/Duq9IkybFJqtwIT9SYLgIX+t5uRyK7MAv26nzDFkToSl
8ELj4yo0t5IQEFtqXKiRbvld1vShzvqXxULNunvMFOS16hXNDE/YXZtOJQV34BIG
S+/mRqF/VqJLUtsdGjh2bGCNhHR6ZYeKODslYd5CKERc33/L5iDNIkxYmd0sWh54
/dSp8zqcDs+lkThYFvFTvzr+5Grr/czTzxH/mWnarpt7f0R3BFDXnndzwU05+Mq2
eHk/ZpUgbb1Sq+w5d1YEhlL9jgxLiZ0ap4WOGt5Lna407sAfSDlfdB/NyjSPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUCtIv50EsejXdOcgpkVfnsGbE/akwHwYDVR0j
BBgwFoAUuIEW4YDzLAM2KASoHLDPLrDCYbYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
ZTk2ZWQ4OS0yYTE2LTQxNTEtYmY4My01OWRjZTU2MTQ2MGMvMC9CODgxMTZFMTgw
RjMyQzAzMzYyODA0QTgxQ0IwQ0YyRUIwQzI2MUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjg4MTE2RTE4MEYzMkMwMzM2MjgwNEE4MUNCMENGMkVCMEMy
NjFCNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBlOTZlZDg5LTJhMTYtNDE1MS1i
ZjgzLTU5ZGNlNTYxNDYwYy8wLzMxMzAzMzJlMzEzMzMyMmUzNTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4Q3MA0GCSqG
SIb3DQEBCwUAA4IBAQAgi3WrCYCB9SRLSMvczpETZorP8zJr2mLYXvh0VhcJiZPM
5j3/uvLSF8sFN5UFUH0p0lqvcvwrK4+CJgbhlNW0KsIaQD2yqtzErEWyNlPVqNcn
C+2ZfSUl0I0cM74QNv0HcjCZUkZV4g6DxHa9psmpmi0UJoWRXl8tQYEtEMsSc0x8
pZsvieHwNfzb8PSK8u/qlh7b3B/8Ws6qTgYfUDh8Fs6yW1tKUefXic/pGxKUS/g5
mgFVH2zjvPfGha8C6DkU9jsaUhR3lbzVajllWkYmSNN24VE0dHsrHuL/Yuj9TlEg
6GeP6EUGvPAH3IyEK6rvORq+VddOegtUTwRPnhRc
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org