Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232322e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          ZPi+JZqMM8ZilEO1UdhpjL1kpie3JMIqiKeJGeN+nJU=
Subject key identifier:   33:A0:A7:E3:6F:9B:2B:05:BE:FC:18:31:73:B5:2F:58:35:A3:EE:E2
Certificate issuer:       /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial:       47330BAF6183B0364D4D92492D2C158FDE06EBFE
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa
Signing time:             Wed 16 Oct 2024 04:02:04 +0000
ROA not before:           Wed 16 Oct 2024 03:57:04 +0000
ROA not after:            Wed 15 Oct 2025 04:02:04 +0000
asID:                     38148
IP address blocks:        103.30.222.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
                          rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:33:0b:af:61:83:b0:36:4d:4d:92:49:2d:2c:15:8f:de:06:eb:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
        Validity
            Not Before: Oct 16 03:57:04 2024 GMT
            Not After : Oct 15 04:02:04 2025 GMT
        Subject: CN=33A0A7E36F9B2B05BEFC183173B52F5835A3EEE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f3:79:19:af:d0:8b:fd:97:fd:11:62:8a:ed:
                    35:3d:61:64:ab:63:d6:95:3c:ee:83:7d:b7:66:75:
                    0c:78:62:3d:6b:0b:3b:3b:4c:84:02:b9:40:48:43:
                    27:23:72:10:2b:4a:31:1f:f0:c5:09:7d:ac:e7:d8:
                    fd:0a:e7:d9:cc:be:49:e4:25:4b:13:17:11:fe:4a:
                    7d:6f:e4:39:77:d1:34:d8:ea:ef:f8:89:b8:58:b3:
                    59:47:66:b1:a1:de:ca:fe:17:f1:7a:8a:0b:2b:4a:
                    29:ef:1e:aa:cf:92:5a:9f:09:f1:1e:71:63:46:27:
                    64:9f:1b:83:2e:d7:af:7f:0a:fd:0f:fe:f1:8b:d1:
                    a1:48:b1:5f:f1:b2:54:fc:76:ad:67:00:cc:ea:72:
                    2b:ab:02:39:3a:80:9a:3a:a0:1e:2c:18:22:7a:86:
                    07:e6:82:d1:00:af:37:18:c4:b6:aa:2b:9f:82:62:
                    17:b2:80:15:3d:f0:fa:aa:44:7a:16:77:5d:5c:e8:
                    9c:e2:56:5f:ed:7a:5c:4d:03:a3:b8:e2:74:3b:04:
                    0b:91:aa:9a:59:98:fa:84:cf:ec:c6:64:50:f2:5d:
                    16:b2:2a:c9:a0:76:4f:27:21:4f:4a:5e:80:7d:e4:
                    8b:e1:ec:07:aa:14:3a:43:e0:bb:4b:55:40:1f:1e:
                    12:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:A0:A7:E3:6F:9B:2B:05:BE:FC:18:31:73:B5:2F:58:35:A3:EE:E2
            X509v3 Authority Key Identifier:
                keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232322e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:ac:55:99:d7:9b:65:7e:b6:1b:f5:ea:de:f8:cb:1c:bc:fe:
         b5:e0:de:2e:67:4a:c0:bb:01:00:86:6f:e6:6b:8f:33:52:2e:
         ab:3d:b3:cd:b8:ba:ee:16:5e:a2:75:93:f0:b9:fd:86:ff:ea:
         15:11:5d:b2:49:f0:8a:1b:6f:17:e2:19:2f:be:1d:94:97:50:
         bb:cc:48:8c:ce:f2:92:ee:09:f4:77:1d:be:0e:60:e2:aa:5b:
         57:b5:ac:3d:a3:2d:8b:f2:d7:45:19:f3:65:b0:37:06:21:76:
         c7:bb:bb:cd:b7:b8:11:35:c7:fa:19:a2:73:a4:2e:6b:60:bd:
         d0:a7:ca:f4:96:ab:f8:9f:50:3c:23:e9:1a:f2:b7:80:bb:d9:
         b5:9b:06:f9:f7:fc:d1:eb:3a:dc:23:27:3a:23:78:29:e9:f4:
         09:e6:3f:a2:8a:b6:a8:b0:f7:79:4f:fa:88:05:3e:6f:9f:69:
         1d:0f:f6:76:93:da:ce:0b:9a:21:ff:10:df:79:79:47:58:1f:
         39:e2:b5:71:fd:d2:44:23:19:6c:2d:82:7d:ca:cf:5c:6b:07:
         57:fe:7c:0a:92:fa:3b:24:7f:a2:62:54:59:42:96:7b:62:da:
         84:86:95:1c:e1:ee:77:14:f3:77:fc:da:64:58:31:6a:ff:b4:
         96:ad:10:83
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURzMLr2GDsDZNTZJJLSwVj94G6/4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw
RUIzODRFMTAeFw0yNDEwMTYwMzU3MDRaFw0yNTEwMTUwNDAyMDRaMDMxMTAvBgNV
BAMTKDMzQTBBN0UzNkY5QjJCMDVCRUZDMTgzMTczQjUyRjU4MzVBM0VFRTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV83kZr9CL/Zf9EWKK7TU9YWSr
Y9aVPO6DfbdmdQx4Yj1rCzs7TIQCuUBIQycjchArSjEf8MUJfazn2P0K59nMvknk
JUsTFxH+Sn1v5Dl30TTY6u/4ibhYs1lHZrGh3sr+F/F6igsrSinvHqrPklqfCfEe
cWNGJ2SfG4Mu169/Cv0P/vGL0aFIsV/xslT8dq1nAMzqciurAjk6gJo6oB4sGCJ6
hgfmgtEArzcYxLaqK5+CYheygBU98PqqRHoWd11c6JziVl/telxNA6O44nQ7BAuR
qppZmPqEz+zGZFDyXRayKsmgdk8nIU9KXoB95Ivh7AeqFDpD4LtLVUAfHhL7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUM6Cn42+bKwW+/Bgxc7UvWDWj7uIwHwYDVR0j
BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4
NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz
ODRFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1OTJjMjc0LTExZGItNDEyNy1i
YWJiLWFlYWU5OTI4NGIwMC8wLzMxMzAzMzJlMzMzMDJlMzIzMjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGce3jANBgkqhkiG
9w0BAQsFAAOCAQEAa6xVmdebZX62G/Xq3vjLHLz+teDeLmdKwLsBAIZv5muPM1Iu
qz2zzbi67hZeonWT8Ln9hv/qFRFdsknwihtvF+IZL74dlJdQu8xIjM7yku4J9Hcd
vg5g4qpbV7WsPaMti/LXRRnzZbA3BiF2x7u7zbe4ETXH+hmic6Qua2C90KfK9Jar
+J9QPCPpGvK3gLvZtZsG+ff80es63CMnOiN4Ken0CeY/ooq2qLD3eU/6iAU+b59p
HQ/2dpPazguaIf8Q33l5R1gfOeK1cf3SRCMZbC2CfcrPXGsHV/58CpL6OyR/omJU
WUKWe2LahIaVHOHudxTzd/zaZFgxav+0lq0Qgw==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:31 2024 by rpki-client on console-fra.rpki-client.org