Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa
File:                     3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa (raw, json)
Hash identifier:          fv32lhwqvpCcZ+U9NmeSugfXR8K/CXSMbNdOPrmf7OA=
Subject key identifier:   E0:11:07:02:CD:92:D9:06:E7:6C:2C:61:78:0C:41:07:1D:BC:4F:CB
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       050591FD539C0F1DDECCA0499C502B6F39847594
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa
Signing time:             Sat 10 Feb 2024 08:00:00 +0000
ROA not before:           Sat 10 Feb 2024 07:55:00 +0000
ROA not after:            Sat 08 Feb 2025 08:00:00 +0000
asID:                     56242
IP address blocks:        103.228.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 06:31:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:05:91:fd:53:9c:0f:1d:de:cc:a0:49:9c:50:2b:6f:39:84:75:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Feb 10 07:55:00 2024 GMT
            Not After : Feb  8 08:00:00 2025 GMT
        Subject: CN=E0110702CD92D906E76C2C61780C41071DBC4FCB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:d5:e3:e6:f5:e3:3b:24:76:50:43:6b:a7:
                    f5:24:41:07:ad:44:47:7b:7b:53:73:54:83:ff:27:
                    8a:4f:87:d2:64:c2:d0:15:3c:33:cc:57:4c:0d:60:
                    77:47:70:fb:dd:dc:0a:a9:c2:e7:a8:a2:d1:b4:8c:
                    b8:c2:ad:a9:c1:18:e7:6f:f2:60:d8:e2:30:7f:95:
                    6b:25:1b:53:b0:0f:11:6a:86:47:e6:a0:92:cc:ea:
                    a9:91:fc:a4:ad:5a:e5:ab:ae:45:e9:3d:ef:e2:60:
                    2d:00:3d:cd:3e:33:5b:00:86:ea:f7:e9:3b:7a:b8:
                    b9:dd:d2:a4:8c:9a:a3:da:4a:ca:58:5e:4b:47:2e:
                    68:f7:fe:53:24:ee:de:a0:9f:04:af:ea:d0:4e:b1:
                    b9:01:41:3e:ef:ae:f4:c6:be:49:6f:1b:d3:2a:9b:
                    b1:f6:e9:8c:4e:cb:8a:ea:98:1e:3c:43:90:73:f4:
                    96:f3:49:50:cc:e1:29:72:b9:04:25:ba:6a:39:c3:
                    57:e0:5d:1f:92:d5:02:2d:cd:02:d3:cc:86:d8:09:
                    45:97:47:f1:66:8a:e0:ac:2b:b1:7c:38:af:01:21:
                    ed:ae:78:5a:e8:4b:a0:51:1c:51:62:05:cf:4f:d9:
                    e2:05:1d:45:95:67:1b:8a:12:81:bd:fa:17:6f:a6:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:11:07:02:CD:92:D9:06:E7:6C:2C:61:78:0C:41:07:1D:BC:4F:CB
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3232203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:fa:8a:db:27:15:16:26:ef:de:d9:3f:30:9b:4f:19:c2:
         be:1a:b0:25:d0:e6:43:38:4f:bd:45:bb:b7:be:47:9b:86:9a:
         e0:b4:5f:bb:a8:d4:b9:8b:5d:ea:6b:7b:bf:6a:37:a2:bc:99:
         a3:fc:d1:70:e8:dc:34:0a:0e:e0:b3:d3:9d:45:fc:ea:95:6d:
         cc:9d:81:84:13:ce:ba:14:79:c8:00:ef:f9:66:d4:cf:95:a2:
         fa:d3:56:64:21:9b:74:56:d8:99:ff:cf:7f:a2:a9:1a:8a:83:
         f2:70:41:78:55:c3:f9:26:f5:a4:97:76:bc:71:f3:ba:36:55:
         95:fc:0b:83:61:4e:b9:d0:6b:fb:e6:dd:14:aa:af:14:67:72:
         da:31:5f:c2:5a:5c:62:bd:b0:6f:a9:f8:07:df:8c:5e:9d:35:
         f1:4d:44:f8:d3:74:49:30:10:8d:30:c2:bd:3b:35:4a:70:2e:
         2d:30:6c:36:3c:cc:60:c6:d4:53:f5:9b:6e:82:80:75:cc:30:
         8d:63:60:52:bb:8b:71:e1:6d:10:34:03:21:bf:b4:20:ae:55:
         70:af:f2:d4:d0:30:d5:7f:b8:05:d4:11:10:db:3e:13:18:9e:
         fa:c4:6b:ac:56:21:71:4d:50:f4:ca:3b:27:1d:5b:97:d0:53:
         d0:e2:51:9b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBQWR/VOcDx3ezKBJnFArbzmEdZQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNDAyMTAwNzU1MDBaFw0yNTAyMDgwODAwMDBaMDMxMTAvBgNV
BAMTKEUwMTEwNzAyQ0Q5MkQ5MDZFNzZDMkM2MTc4MEM0MTA3MURCQzRGQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxC9Xj5vXjOyR2UENrp/UkQQet
REd7e1NzVIP/J4pPh9JkwtAVPDPMV0wNYHdHcPvd3AqpwueootG0jLjCranBGOdv
8mDY4jB/lWslG1OwDxFqhkfmoJLM6qmR/KStWuWrrkXpPe/iYC0APc0+M1sAhur3
6Tt6uLnd0qSMmqPaSspYXktHLmj3/lMk7t6gnwSv6tBOsbkBQT7vrvTGvklvG9Mq
m7H26YxOy4rqmB48Q5Bz9JbzSVDM4SlyuQQlumo5w1fgXR+S1QItzQLTzIbYCUWX
R/FmiuCsK7F8OK8BIe2ueFroS6BRHFFiBc9P2eIFHUWVZxuKEoG9+hdvpmKrAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4BEHAs2S2QbnbCxheAxBBx28T8swHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05
ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzYyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzNTM2MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+R0MA0GCSqG
SIb3DQEBCwUAA4IBAQB/WfqK2ycVFibv3tk/MJtPGcK+GrAl0OZDOE+9Rbu3vkeb
hprgtF+7qNS5i13qa3u/ajeivJmj/NFw6Nw0Cg7gs9OdRfzqlW3MnYGEE866FHnI
AO/5ZtTPlaL601ZkIZt0VtiZ/89/oqkaioPycEF4VcP5JvWkl3a8cfO6NlWV/AuD
YU650Gv75t0Uqq8UZ3LaMV/CWlxivbBvqfgH34xenTXxTUT403RJMBCNMMK9OzVK
cC4tMGw2PMxgxtRT9ZtugoB1zDCNY2BSu4tx4W0QNAMhv7QgrlVwr/LU0DDVf7gF
1BEQ2z4TGJ76xGusViFxTVD0yjsnHVuX0FPQ4lGb
-----END CERTIFICATE-----
Generated at Wed May 1 02:06:09 2024 by rpki-client on console-fra.rpki-client.org