Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
File:                     3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa (raw, json)
Hash identifier:          aArO+RgBY1VTgWcAL20XNLFsY07JTQS3Odu1vxSUhr4=
Subject key identifier:   35:05:03:C5:17:B3:02:F3:82:C7:82:A4:1E:91:65:06:95:2B:AC:9B
Certificate issuer:       /CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
Certificate serial:       287EAD8058EFCE790F73C1FEA7A4B1E2D363BE4B
Authority key identifier: B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa
Signing time:             Tue 16 Apr 2024 16:00:00 +0000
ROA not before:           Tue 16 Apr 2024 15:55:00 +0000
ROA not after:            Tue 15 Apr 2025 16:00:00 +0000
asID:                     149344
IP address blocks:        103.176.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl
                          rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:7e:ad:80:58:ef:ce:79:0f:73:c1:fe:a7:a4:b1:e2:d3:63:be:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B247FB55BE5739FCE4EBBD20B84542267C15D192
        Validity
            Not Before: Apr 16 15:55:00 2024 GMT
            Not After : Apr 15 16:00:00 2025 GMT
        Subject: CN=350503C517B302F382C782A41E916506952BAC9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:1d:ef:34:73:c6:d6:04:bb:cb:17:db:e7:
                    ba:0a:56:56:9e:b2:ea:ec:bb:e0:40:9c:f5:b2:71:
                    13:0a:88:48:17:42:9f:84:3d:56:df:32:af:ca:13:
                    de:ba:ae:1b:f1:1f:70:2c:33:b0:ae:5e:c6:3c:89:
                    20:62:81:60:69:66:07:e8:e4:b0:73:ac:e6:af:61:
                    85:34:67:4b:25:f1:61:07:f7:33:cb:13:09:8b:5a:
                    91:29:1d:e5:67:27:88:8a:98:45:d0:12:43:6a:bb:
                    79:d7:65:9e:54:ee:3e:0d:30:7d:18:8f:67:b5:29:
                    a4:8d:84:cd:ec:3c:40:fe:79:5e:1d:85:ca:aa:a5:
                    69:8d:83:fc:02:5b:1e:17:c3:77:72:36:e3:d7:8d:
                    c6:42:d2:02:51:25:8b:e8:79:e0:af:cb:b3:24:1f:
                    57:cf:15:3a:56:66:be:6b:6f:66:f3:d4:12:a6:34:
                    25:9f:99:98:d1:76:a2:49:da:10:46:39:ea:a3:a2:
                    23:f8:83:39:38:6b:a3:da:b8:bf:c6:a1:81:e9:ac:
                    e9:86:57:a5:32:10:f6:36:ce:42:c6:ec:9a:b1:33:
                    cf:94:b0:01:0a:88:48:71:38:2b:36:7c:0d:ff:a9:
                    ba:5b:55:64:cd:57:d1:07:4b:77:fc:a4:fd:8a:7b:
                    2f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:05:03:C5:17:B3:02:F3:82:C7:82:A4:1E:91:65:06:95:2B:AC:9B
            X509v3 Authority Key Identifier:
                keyid:B2:47:FB:55:BE:57:39:FC:E4:EB:BD:20:B8:45:42:26:7C:15:D1:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/B247FB55BE5739FCE4EBBD20B84542267C15D192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B247FB55BE5739FCE4EBBD20B84542267C15D192.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17216425-6aa3-4429-b175-86901bb0cb1f/0/3130332e3137362e39392e302f32342d3234203d3e20313439333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         e2:b6:49:aa:1d:dd:c9:98:6f:b0:67:35:a3:55:30:ba:6d:44:
         a2:f2:d8:2c:a9:a4:62:b3:48:69:ac:57:d5:52:48:13:08:2d:
         fb:53:86:84:cc:c5:9b:0e:9a:84:42:4d:aa:06:12:9f:85:8f:
         63:09:22:ea:10:f0:61:0f:e0:e1:a4:bc:72:86:b4:87:28:c7:
         45:42:e5:e2:9d:c7:9b:c2:86:fe:4c:bc:7a:63:3e:bb:ce:4c:
         8e:d2:aa:8d:f3:a9:ba:1c:5b:06:f3:eb:8e:4d:c0:18:a1:46:
         93:a3:e5:4f:ac:48:ec:f3:59:78:cd:59:00:26:39:73:15:9a:
         65:f1:86:e0:b1:57:66:b1:da:e8:17:62:a0:6b:d6:a6:34:31:
         39:68:5e:4e:8c:8a:1b:cd:99:f5:b8:e3:00:46:41:71:65:61:
         4b:13:8e:df:33:58:a2:f3:95:ce:53:c8:b8:65:52:07:d9:f0:
         a0:f7:c6:85:f6:41:c3:95:97:70:9f:24:0a:dd:8f:55:44:dd:
         ff:de:bc:56:01:2a:f2:b4:8d:47:67:75:5e:d8:ee:db:93:ce:
         86:44:58:be:11:10:74:b0:5f:c1:06:50:4a:6b:57:26:94:3e:
         a7:e9:f9:e5:85:d6:d4:e1:a6:d0:71:f2:fa:d5:dd:b4:40:40:
         4a:bd:c5:8b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKH6tgFjvznkPc8H+p6Sx4tNjvkswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3
QzE1RDE5MjAeFw0yNDA0MTYxNTU1MDBaFw0yNTA0MTUxNjAwMDBaMDMxMTAvBgNV
BAMTKDM1MDUwM0M1MTdCMzAyRjM4MkM3ODJBNDFFOTE2NTA2OTUyQkFDOUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjAx3vNHPG1gS7yxfb57oKVlae
sursu+BAnPWycRMKiEgXQp+EPVbfMq/KE966rhvxH3AsM7CuXsY8iSBigWBpZgfo
5LBzrOavYYU0Z0sl8WEH9zPLEwmLWpEpHeVnJ4iKmEXQEkNqu3nXZZ5U7j4NMH0Y
j2e1KaSNhM3sPED+eV4dhcqqpWmNg/wCWx4Xw3dyNuPXjcZC0gJRJYvoeeCvy7Mk
H1fPFTpWZr5rb2bz1BKmNCWfmZjRdqJJ2hBGOeqjoiP4gzk4a6PauL/GoYHprOmG
V6UyEPY2zkLG7JqxM8+UsAEKiEhxOCs2fA3/qbpbVWTNV9EHS3f8pP2Key8LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUNQUDxRezAvOCx4KkHpFlBpUrrJswHwYDVR0j
BBgwFoAUskf7Vb5XOfzk670guEVCJnwV0ZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NzIxNjQyNS02YWEzLTQ0MjktYjE3NS04NjkwMWJiMGNiMWYvMC9CMjQ3RkI1NUJF
NTczOUZDRTRFQkJEMjBCODQ1NDIyNjdDMTVEMTkyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjI0N0ZCNTVCRTU3MzlGQ0U0RUJCRDIwQjg0NTQyMjY3QzE1
RDE5Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3MjE2NDI1LTZhYTMtNDQyOS1i
MTc1LTg2OTAxYmIwY2IxZi8wLzMxMzAzMzJlMzEzNzM2MmUzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzNDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7BjMA0GCSqG
SIb3DQEBCwUAA4IBAQDitkmqHd3JmG+wZzWjVTC6bUSi8tgsqaRis0hprFfVUkgT
CC37U4aEzMWbDpqEQk2qBhKfhY9jCSLqEPBhD+DhpLxyhrSHKMdFQuXincebwob+
TLx6Yz67zkyO0qqN86m6HFsG8+uOTcAYoUaTo+VPrEjs81l4zVkAJjlzFZpl8Ybg
sVdmsdroF2Kga9amNDE5aF5OjIobzZn1uOMARkFxZWFLE47fM1ii85XOU8i4ZVIH
2fCg98aF9kHDlZdwnyQK3Y9VRN3/3rxWASrytI1HZ3Ve2O7bk86GRFi+ERB0sF/B
BlBKa1cmlD6n6fnlhdbU4abQcfL61d20QEBKvcWL
-----END CERTIFICATE-----
Generated at Sat Nov 23 22:30:28 2024 by rpki-client on console-ams.rpki-client.org