Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          RJm2bouKDdL1i6hrPsReYBYmbxs1G/+CTWtFQHsaBMg=
Subject key identifier:   12:39:F4:96:DF:08:6F:EC:49:41:72:63:27:80:3B:6B:52:35:EF:13
Certificate issuer:       /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial:       35A601673AA534CC3F71EAD5BCB3A48B0299027B
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa
Signing time:             Thu 24 Aug 2023 09:00:01 +0000
ROA not before:           Thu 24 Aug 2023 08:55:01 +0000
ROA not after:            Thu 22 Aug 2024 09:00:01 +0000
asID:                     141674
IP address blocks:        103.177.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl
                          rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:a6:01:67:3a:a5:34:cc:3f:71:ea:d5:bc:b3:a4:8b:02:99:02:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
        Validity
            Not Before: Aug 24 08:55:01 2023 GMT
            Not After : Aug 22 09:00:01 2024 GMT
        Subject: CN=1239F496DF086FEC4941726327803B6B5235EF13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:82:a5:a1:b1:a3:11:b4:9e:3e:d3:a0:ed:
                    04:9d:d1:f6:f1:0c:85:8c:8d:09:0f:ce:4e:d0:c1:
                    a5:70:88:15:a3:24:6b:b7:be:b6:32:b0:59:22:09:
                    61:93:9d:7a:a6:20:41:f3:8d:02:ef:7f:f9:fe:e9:
                    a3:df:8e:e7:66:b1:e1:38:91:f5:2f:e5:b0:53:15:
                    84:18:e4:4f:d9:fa:cf:f3:19:af:6e:80:e7:fd:e8:
                    2b:3c:6b:93:81:90:58:8f:7e:b3:85:d8:89:70:82:
                    2e:fb:a9:38:0f:bd:e7:87:bb:42:73:d7:6e:e7:55:
                    22:06:cf:6f:11:8a:58:57:5b:57:31:27:cd:d0:61:
                    5d:ea:da:d7:0f:cc:30:6a:c1:c8:af:a1:be:76:b7:
                    13:e5:45:59:df:5d:77:da:b2:8d:8b:91:56:31:29:
                    41:c5:52:2c:63:e0:cc:26:64:2a:f6:9d:8f:84:83:
                    80:fe:dc:32:28:29:2c:5b:a2:95:67:39:f2:a0:e3:
                    f4:75:89:b2:83:eb:7f:c9:23:cf:f4:3b:66:a3:86:
                    fe:c7:56:43:e1:e3:af:e4:c2:f1:33:2f:d2:9a:02:
                    a1:ed:d9:12:7f:d4:e4:b6:19:ee:21:88:03:68:0c:
                    71:f9:07:f8:d0:0e:c8:cf:89:00:75:29:3d:1c:c0:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:39:F4:96:DF:08:6F:EC:49:41:72:63:27:80:3B:6B:52:35:EF:13
            X509v3 Authority Key Identifier:
                keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130362e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:a5:04:04:2e:a9:9f:ee:4d:35:4a:0c:f5:2b:6a:80:6b:59:
         3a:c5:21:3a:49:1b:13:e6:06:95:9f:19:f9:33:db:98:d1:7a:
         9e:5f:7f:2b:64:46:d0:08:02:b9:f9:53:88:f3:78:22:3c:70:
         09:3b:7f:ad:22:f9:63:d3:05:a5:3f:61:2e:de:c0:8e:24:1b:
         52:7b:41:04:2a:b1:58:9b:7c:fd:a9:b0:e2:f1:6c:32:eb:e9:
         07:da:a0:6e:cb:33:21:25:9a:74:d0:04:09:13:3e:61:54:d8:
         32:2b:d0:da:30:8b:ba:85:bc:5c:6e:af:4c:a6:e1:71:66:85:
         b4:e2:0d:b2:09:9d:ea:d8:a9:1e:22:da:23:63:1c:ac:a7:55:
         a0:b6:19:a5:22:b4:43:82:ec:a5:62:4a:0e:f7:26:be:50:7e:
         8b:1e:8f:2a:05:04:95:d5:f2:b7:2e:a0:d8:9c:34:e7:bb:f3:
         89:a6:57:39:52:cc:96:6b:54:04:0b:7e:b6:3a:15:16:2b:48:
         1d:1e:0a:79:f9:e0:6a:0f:f4:07:8b:ca:7e:27:a8:f2:0c:b2:
         f8:ce:e9:2a:19:d4:c5:d0:b5:f8:91:4e:a2:00:b2:cd:55:fb:
         1e:70:69:41:08:39:9e:42:3a:b6:93:8a:c5:3f:72:33:98:fe:
         8e:bb:ec:33
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNaYBZzqlNMw/cerVvLOkiwKZAnswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0
NzBCNDFGMzAeFw0yMzA4MjQwODU1MDFaFw0yNDA4MjIwOTAwMDFaMDMxMTAvBgNV
BAMTKDEyMzlGNDk2REYwODZGRUM0OTQxNzI2MzI3ODAzQjZCNTIzNUVGMTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcuYKlobGjEbSePtOg7QSd0fbx
DIWMjQkPzk7QwaVwiBWjJGu3vrYysFkiCWGTnXqmIEHzjQLvf/n+6aPfjudmseE4
kfUv5bBTFYQY5E/Z+s/zGa9ugOf96Cs8a5OBkFiPfrOF2Ilwgi77qTgPveeHu0Jz
127nVSIGz28RilhXW1cxJ83QYV3q2tcPzDBqwcivob52txPlRVnfXXfaso2LkVYx
KUHFUixj4MwmZCr2nY+Eg4D+3DIoKSxbopVnOfKg4/R1ibKD63/JI8/0O2ajhv7H
VkPh46/kwvEzL9KaAqHt2RJ/1OS2Ge4hiANoDHH5B/jQDsjPiQB1KT0cwEgRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUEjn0lt8Ib+xJQXJjJ4A7a1I17xMwHwYDVR0j
BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw
OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC
NDFGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0Y2M2OWU5LWVmNzQtNGI4MS05
MWY0LTdiZmRmOTNmN2JhYS8wLzMxMzAzMzJlMzEzNzM3MmUzMTMwMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsWowDQYJ
KoZIhvcNAQELBQADggEBAHilBAQuqZ/uTTVKDPUraoBrWTrFITpJGxPmBpWfGfkz
25jRep5ffytkRtAIArn5U4jzeCI8cAk7f60i+WPTBaU/YS7ewI4kG1J7QQQqsVib
fP2psOLxbDLr6QfaoG7LMyElmnTQBAkTPmFU2DIr0Nowi7qFvFxur0ym4XFmhbTi
DbIJnerYqR4i2iNjHKynVaC2GaUitEOC7KViSg73Jr5QfosejyoFBJXV8rcuoNic
NOe784mmVzlSzJZrVAQLfrY6FRYrSB0eCnn54GoP9AeLyn4nqPIMsvjO6SoZ1MXQ
tfiRTqIAss1V+x5waUEIOZ5COraTisU/cjOY/o677DM=
-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:08 2024 by rpki-client on console-ams.rpki-client.org