Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa
File:                     3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          bJEKkejlqt+hB3Cbh5H6Rl3dLl7/zpkXPOpBZMtb0nw=
Subject key identifier:   F9:D8:B6:7C:7A:17:30:FA:D2:20:34:D3:3B:77:85:5B:B4:AE:A8:D1
Certificate issuer:       /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
Certificate serial:       6013032A332CBFDBA7EEA39CC9D80DC99046B109
Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 03 Nov 2023 07:00:00 +0000
ROA not before:           Fri 03 Nov 2023 06:55:00 +0000
ROA not after:            Fri 01 Nov 2024 07:00:00 +0000
asID:                     9341
IP address blocks:        103.35.152.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl
                          rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 07:01:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:13:03:2a:33:2c:bf:db:a7:ee:a3:9c:c9:d8:0d:c9:90:46:b1:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804
        Validity
            Not Before: Nov  3 06:55:00 2023 GMT
            Not After : Nov  1 07:00:00 2024 GMT
        Subject: CN=F9D8B67C7A1730FAD22034D33B77855BB4AEA8D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:eb:d4:90:0d:da:f9:63:ed:44:df:90:15:3d:
                    e0:51:66:33:52:3b:7e:75:41:16:d0:74:34:d6:81:
                    f6:aa:ae:38:1e:9a:10:b6:ef:d1:3e:ab:4e:7b:ab:
                    f1:25:2e:13:07:07:9e:5f:2b:5d:6d:b7:20:55:51:
                    b6:0e:2c:38:0f:25:1e:1f:6c:e2:d5:b6:1b:75:43:
                    f1:ad:fe:61:e3:f8:ba:1c:12:33:ee:76:23:6f:51:
                    9d:52:86:4f:04:aa:9f:6a:c8:0c:c1:e1:25:35:3f:
                    ef:9c:a8:d0:35:ba:b7:38:7a:16:b3:49:a8:be:24:
                    df:69:24:e8:4d:82:fe:3d:14:93:d1:02:fc:8a:cc:
                    e9:f8:e9:86:a7:22:5f:7d:bf:44:c4:95:24:6a:58:
                    41:a3:c9:dd:f3:a5:0b:f1:c0:04:61:26:7b:9d:ea:
                    20:da:5b:84:f3:92:9b:f4:6e:cf:7e:9c:3a:c3:31:
                    73:a8:8d:59:33:f1:c2:00:06:53:9a:b2:ab:1e:e7:
                    1d:fd:a1:fb:53:e5:0c:5a:8a:d2:c7:ea:44:11:bf:
                    1b:3d:91:2a:51:80:3b:3f:2c:ca:cd:1b:f6:64:be:
                    4a:6d:bf:21:a7:9b:0c:11:0d:8c:55:c4:8f:43:ea:
                    5f:b1:c8:7e:c3:c1:34:7c:f0:48:f4:26:ce:b4:9a:
                    ee:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D8:B6:7C:7A:17:30:FA:D2:20:34:D3:3B:77:85:5B:B4:AE:A8:D1
            X509v3 Authority Key Identifier:
                keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/3130332e33352e3135322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.35.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:ba:2a:54:72:6a:5c:a4:14:75:c2:f4:d3:db:ab:58:0e:48:
         eb:52:60:6c:d6:75:85:8a:ad:30:f8:c8:a8:ea:f0:50:bb:84:
         f9:38:c0:7e:bd:dd:17:7c:93:5d:83:9c:bb:75:15:43:51:55:
         c9:bb:34:79:4f:2e:ba:1f:a8:a6:af:9e:1e:a9:dc:1c:03:15:
         84:e4:e1:d8:9f:29:87:99:96:f8:e0:cf:cd:73:8d:56:94:f8:
         1d:07:94:a2:17:6b:0b:da:10:5c:2b:13:a6:56:6a:37:6b:94:
         81:36:2a:7e:a8:33:e8:3f:ba:e1:c9:7f:be:74:aa:5d:6c:59:
         04:f1:d4:e1:cb:da:92:26:54:70:83:29:41:32:72:50:8f:27:
         9d:2a:da:98:6b:d3:7c:17:b8:55:3b:93:23:63:89:0a:36:9f:
         30:32:06:23:9a:1e:1b:07:26:dd:c8:78:f5:7e:14:41:be:7c:
         b5:e5:a5:d4:f4:0e:38:0d:c4:6e:d3:71:79:df:f6:94:10:bd:
         51:4c:0e:88:4a:f1:1e:27:98:d9:73:e4:23:3f:fc:d0:81:e6:
         c8:c3:36:49:0d:8c:9c:7f:0c:f0:85:50:ef:d2:f7:be:36:85:
         54:00:b2:b5:3b:4d:05:d2:91:fd:ab:01:42:a8:1f:45:38:10:
         b1:4a:54:b8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUYBMDKjMsv9un7qOcydgNyZBGsQkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE
MEE1NzgwNDAeFw0yMzExMDMwNjU1MDBaFw0yNDExMDEwNzAwMDBaMDMxMTAvBgNV
BAMTKEY5RDhCNjdDN0ExNzMwRkFEMjIwMzREMzNCNzc4NTVCQjRBRUE4RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh69SQDdr5Y+1E35AVPeBRZjNS
O351QRbQdDTWgfaqrjgemhC279E+q057q/ElLhMHB55fK11ttyBVUbYOLDgPJR4f
bOLVtht1Q/Gt/mHj+LocEjPudiNvUZ1Shk8Eqp9qyAzB4SU1P++cqNA1urc4ehaz
Sai+JN9pJOhNgv49FJPRAvyKzOn46YanIl99v0TElSRqWEGjyd3zpQvxwARhJnud
6iDaW4Tzkpv0bs9+nDrDMXOojVkz8cIABlOasqse5x39oftT5QxaitLH6kQRvxs9
kSpRgDs/LMrNG/ZkvkptvyGnmwwRDYxVxI9D6l+xyH7DwTR88Ej0Js60mu7HAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+di2fHoXMPrSIDTTO3eFW7SuqNEwHwYDVR0j
BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0
RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1
NzgwNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0ODg1NTI1LWNiMGYtNDZhMC04
MjUzLTA0MmQ3ZDdhZmYzOC8wLzMxMzAzMzJlMzMzNTJlMzEzNTMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnI5gwDQYJKoZIhvcN
AQELBQADggEBAIq6KlRyalykFHXC9NPbq1gOSOtSYGzWdYWKrTD4yKjq8FC7hPk4
wH693Rd8k12DnLt1FUNRVcm7NHlPLrofqKavnh6p3BwDFYTk4difKYeZlvjgz81z
jVaU+B0HlKIXawvaEFwrE6ZWajdrlIE2Kn6oM+g/uuHJf750ql1sWQTx1OHL2pIm
VHCDKUEyclCPJ50q2phr03wXuFU7kyNjiQo2nzAyBiOaHhsHJt3IePV+FEG+fLXl
pdT0DjgNxG7TcXnf9pQQvVFMDohK8R4nmNlz5CM//NCB5sjDNkkNjJx/DPCFUO/S
9742hVQAsrU7TQXSkf2rAUKoH0U4ELFKVLg=
-----END CERTIFICATE-----
Generated at Thu Jun 20 03:03:17 2024 by rpki-client on console-ams.rpki-client.org