Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa
File:                     3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa (raw, json)
Hash identifier:          e/KKhvFmvYxcyyRUwa5oszGO2DUQXQjN7hgMop2nbmg=
Subject key identifier:   9E:26:B5:C9:7F:60:62:21:0E:39:A8:37:BD:62:0F:BC:DA:57:E3:51
Certificate issuer:       /CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
Certificate serial:       4E0F296C8EAAC1435B2FD660151AE7FBE96CA4CB
Authority key identifier: 65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa
Signing time:             Thu 10 Aug 2023 14:00:00 +0000
ROA not before:           Thu 10 Aug 2023 13:55:00 +0000
ROA not after:            Thu 08 Aug 2024 14:00:00 +0000
asID:                     138860
IP address blocks:        103.139.26.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl
                          rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:0f:29:6c:8e:aa:c1:43:5b:2f:d6:60:15:1a:e7:fb:e9:6c:a4:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=658C0D8617C2D05CE720427E1DF72FDE12C9CB9F
        Validity
            Not Before: Aug 10 13:55:00 2023 GMT
            Not After : Aug  8 14:00:00 2024 GMT
        Subject: CN=9E26B5C97F6062210E39A837BD620FBCDA57E351
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:20:b8:62:85:7f:9d:5d:60:63:bc:f1:21:c6:
                    10:b4:ba:05:4e:53:97:65:0a:f9:1c:9d:43:e4:cf:
                    e5:c1:82:b3:41:a4:15:28:7d:d5:bf:1c:ce:86:32:
                    f1:80:f5:de:d4:0b:8b:cb:2a:56:2b:ae:6b:97:6a:
                    93:42:aa:42:f0:5c:89:6e:95:71:8e:30:1f:81:d9:
                    f7:7a:ff:eb:42:ae:85:72:05:ee:40:a4:5c:71:f3:
                    25:96:06:33:5b:b0:26:24:ac:13:5d:6f:d5:36:64:
                    88:fd:68:13:cc:c6:8e:28:45:dd:1d:ae:51:b2:d6:
                    94:4f:ee:da:db:eb:80:3d:d2:d9:17:d0:cd:ff:3f:
                    28:98:55:2f:57:dd:5c:ba:40:16:11:fb:00:77:af:
                    ef:0d:e3:dd:d8:c0:7a:b8:66:fa:ed:49:d6:a1:3e:
                    cf:77:0f:c6:ee:dc:55:dc:40:df:09:d9:54:cc:47:
                    cf:27:d4:86:9e:ee:36:24:fb:96:88:f0:fe:1e:d8:
                    71:3e:58:6f:45:3f:97:3f:59:0c:a9:5c:96:91:0f:
                    e9:58:2c:f5:5f:ac:3b:93:74:6e:58:09:30:5a:c9:
                    29:02:ec:bc:71:72:c1:37:6e:06:2f:92:ba:a5:db:
                    bf:c1:c9:b6:ea:23:2f:fa:ea:5b:ca:b6:01:75:45:
                    7e:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:26:B5:C9:7F:60:62:21:0E:39:A8:37:BD:62:0F:BC:DA:57:E3:51
            X509v3 Authority Key Identifier:
                keyid:65:8C:0D:86:17:C2:D0:5C:E7:20:42:7E:1D:F7:2F:DE:12:C9:CB:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/658C0D8617C2D05CE720427E1DF72FDE12C9CB9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/165d88f1-b9c0-485e-916e-59b7e3698da1/0/3130332e3133392e32362e302f32332d3234203d3e20313338383630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.139.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         45:4c:cb:e1:cd:4a:64:21:d6:c9:e7:fd:ea:7a:6d:dd:68:b9:
         a5:15:d4:26:61:22:bc:6d:c4:32:bc:1e:82:78:0e:1d:9d:55:
         cc:03:b7:42:4d:a2:62:6e:45:f9:8b:7c:7f:7e:67:4e:13:59:
         1d:06:60:e6:8b:57:12:67:72:0b:b4:79:3f:fa:20:f6:4b:c9:
         f9:f8:ce:6c:a8:5f:c2:6a:f0:8e:6f:f3:66:74:0e:e5:7c:90:
         55:08:44:2b:3c:ae:64:35:c8:57:9c:5f:c7:ab:7b:33:68:da:
         ae:2a:b4:4b:62:78:06:19:42:78:95:59:6c:70:18:f9:b2:0b:
         b0:94:9f:66:ea:e3:f5:7e:fe:e1:f8:d7:0b:a9:ab:61:a3:14:
         ad:6e:47:f5:ec:f9:00:57:cd:de:5e:de:b0:b7:3a:b5:a9:55:
         57:3c:d8:53:a1:92:23:af:5a:e9:de:a9:66:4c:3a:89:c3:56:
         c0:54:ae:af:47:e8:93:66:ac:77:da:52:c2:fe:7f:a7:95:e8:
         21:46:01:4c:e2:2a:e2:f0:70:eb:23:13:19:08:60:c9:9a:02:
         b2:b9:2b:5e:ed:bd:75:be:c7:d5:d7:d6:a0:2a:5b:c5:13:f6:
         74:5b:b2:46:19:66:dc:5e:f5:dc:fe:92:07:86:f0:52:ae:cb:
         19:f0:c6:18
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTg8pbI6qwUNbL9ZgFRrn++lspMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUx
MkM5Q0I5RjAeFw0yMzA4MTAxMzU1MDBaFw0yNDA4MDgxNDAwMDBaMDMxMTAvBgNV
BAMTKDlFMjZCNUM5N0Y2MDYyMjEwRTM5QTgzN0JENjIwRkJDREE1N0UzNTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSILhihX+dXWBjvPEhxhC0ugVO
U5dlCvkcnUPkz+XBgrNBpBUofdW/HM6GMvGA9d7UC4vLKlYrrmuXapNCqkLwXIlu
lXGOMB+B2fd6/+tCroVyBe5ApFxx8yWWBjNbsCYkrBNdb9U2ZIj9aBPMxo4oRd0d
rlGy1pRP7trb64A90tkX0M3/PyiYVS9X3Vy6QBYR+wB3r+8N493YwHq4ZvrtSdah
Ps93D8bu3FXcQN8J2VTMR88n1Iae7jYk+5aI8P4e2HE+WG9FP5c/WQypXJaRD+lY
LPVfrDuTdG5YCTBaySkC7LxxcsE3bgYvkrql27/BybbqIy/66lvKtgF1RX4nAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnia1yX9gYiEOOag3vWIPvNpX41EwHwYDVR0j
BBgwFoAUZYwNhhfC0FznIEJ+Hfcv3hLJy58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NjVkODhmMS1iOWMwLTQ4NWUtOTE2ZS01OWI3ZTM2OThkYTEvMC82NThDMEQ4NjE3
QzJEMDVDRTcyMDQyN0UxREY3MkZERTEyQzlDQjlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjU4QzBEODYxN0MyRDA1Q0U3MjA0MjdFMURGNzJGREUxMkM5
Q0I5Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE2NWQ4OGYxLWI5YzAtNDg1ZS05
MTZlLTU5YjdlMzY5OGRhMS8wLzMxMzAzMzJlMzEzMzM5MmUzMjM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM4MzgzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4saMA0GCSqG
SIb3DQEBCwUAA4IBAQBFTMvhzUpkIdbJ5/3qem3daLmlFdQmYSK8bcQyvB6CeA4d
nVXMA7dCTaJibkX5i3x/fmdOE1kdBmDmi1cSZ3ILtHk/+iD2S8n5+M5sqF/CavCO
b/NmdA7lfJBVCEQrPK5kNchXnF/Hq3szaNquKrRLYngGGUJ4lVlscBj5sguwlJ9m
6uP1fv7h+NcLqathoxStbkf17PkAV83eXt6wtzq1qVVXPNhToZIjr1rp3qlmTDqJ
w1bAVK6vR+iTZqx32lLC/n+nleghRgFM4iri8HDrIxMZCGDJmgKyuSte7b11vsfV
19agKlvFE/Z0W7JGGWbcXvXc/pIHhvBSrssZ8MYY
-----END CERTIFICATE-----
Generated at Sun Jun 2 17:59:29 2024 by rpki-client on console-fra.rpki-client.org