Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa
File:                     3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa (raw, json)
Hash identifier:          4JXj46iKmw4h3hZsCYylUdIsawboCU0eI7P3iy2Um3s=
Subject key identifier:   F1:FE:0F:F6:28:8A:42:EF:E6:C4:51:53:C4:23:E9:1A:38:A6:EF:55
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       4779C1B80FB1BADE50786C2A6EB61F61A746E845
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa
Signing time:             Fri 26 Jan 2024 09:31:59 +0000
ROA not before:           Fri 26 Jan 2024 09:26:59 +0000
ROA not after:            Fri 24 Jan 2025 09:31:59 +0000
asID:                     59281
IP address blocks:        103.228.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:79:c1:b8:0f:b1:ba:de:50:78:6c:2a:6e:b6:1f:61:a7:46:e8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Jan 26 09:26:59 2024 GMT
            Not After : Jan 24 09:31:59 2025 GMT
        Subject: CN=F1FE0FF6288A42EFE6C45153C423E91A38A6EF55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:9d:02:9f:37:06:76:d2:02:66:95:14:8d:
                    f3:05:ed:97:26:df:79:e9:ab:d1:56:35:8b:91:fc:
                    5c:26:c2:d3:7a:3a:1a:0d:52:2d:4d:b4:ba:54:f9:
                    d2:4b:19:cb:db:b6:bc:0e:af:8f:f3:a8:6f:d5:9f:
                    c9:37:da:f5:b2:14:3f:35:7a:7c:49:4f:8b:f2:57:
                    bc:94:e6:a4:3b:ad:b9:f6:6d:85:63:32:b0:c9:b7:
                    7b:10:e7:41:5b:16:e9:3f:3b:40:82:5d:5d:41:1c:
                    19:74:72:11:2f:56:42:0a:f8:38:af:42:b3:66:59:
                    89:04:41:19:3e:85:60:cc:a0:a8:35:e0:d2:ae:06:
                    9e:49:18:97:5b:c5:76:6e:bc:c6:4d:32:f4:56:f2:
                    6e:df:2c:db:b2:07:32:4d:18:14:8c:73:bc:67:23:
                    4b:a3:ff:f9:c3:ce:ce:48:cb:17:5f:8c:9d:42:6f:
                    1e:dd:ee:99:c2:49:70:52:37:dd:18:44:17:c1:9d:
                    1b:38:95:b1:ad:ae:51:22:22:4b:98:97:f3:94:74:
                    b0:5a:b2:5a:04:f2:b7:dd:6f:53:73:09:dd:de:e8:
                    4d:01:6e:d5:5d:f8:ac:f4:36:43:b8:af:51:4d:43:
                    be:91:a7:12:fa:f9:40:26:00:bb:b0:9a:0a:79:91:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FE:0F:F6:28:8A:42:EF:E6:C4:51:53:C4:23:E9:1A:38:A6:EF:55
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32322d3234203d3e203539323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:66:d7:24:a7:5a:c0:40:6b:c3:14:cd:39:3d:52:f0:8f:49:
         52:17:8e:69:d5:1e:91:9c:20:bf:f9:a7:4d:4d:e7:90:73:69:
         c2:27:d8:ff:fc:9f:02:c6:8c:c9:c7:b1:42:c8:5e:8a:f6:fc:
         9f:b7:a3:a5:2c:39:58:7d:d7:19:bd:94:6f:ab:55:56:ab:fc:
         66:f6:9d:ca:a7:5e:0d:19:8e:ac:74:21:27:19:a0:05:ff:94:
         3b:85:f2:0f:57:25:bc:54:c2:5b:89:db:05:77:13:63:b4:87:
         16:64:1d:d9:10:1a:23:08:68:12:fe:76:f4:67:70:b1:58:e3:
         a4:7f:89:27:00:65:31:33:cb:f0:94:f5:fd:39:51:1e:5a:41:
         da:aa:2f:f4:e9:7c:74:51:25:cd:b8:bf:b9:e5:16:5c:7a:00:
         82:2d:84:e5:ad:92:17:1f:14:fb:1a:78:82:e4:b1:fa:76:0c:
         fc:24:ca:85:4f:f9:99:dd:57:09:51:a6:23:af:fc:3d:49:5f:
         59:b4:ac:62:a8:65:d1:46:ee:8c:97:19:e0:6d:8a:2b:9b:ed:
         3f:c0:a1:05:a6:d5:56:ad:3b:b5:62:87:39:a4:ec:af:f4:a3:
         98:83:4e:cc:ee:7b:18:cb:02:4b:74:d3:79:8f:27:f3:e3:87:
         d9:b5:ca:64
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUR3nBuA+xut5QeGwqbrYfYadG6EUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNDAxMjYwOTI2NTlaFw0yNTAxMjQwOTMxNTlaMDMxMTAvBgNV
BAMTKEYxRkUwRkY2Mjg4QTQyRUZFNkM0NTE1M0M0MjNFOTFBMzhBNkVGNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCRp0CnzcGdtICZpUUjfMF7Zcm
33npq9FWNYuR/FwmwtN6OhoNUi1NtLpU+dJLGcvbtrwOr4/zqG/Vn8k32vWyFD81
enxJT4vyV7yU5qQ7rbn2bYVjMrDJt3sQ50FbFuk/O0CCXV1BHBl0chEvVkIK+Div
QrNmWYkEQRk+hWDMoKg14NKuBp5JGJdbxXZuvMZNMvRW8m7fLNuyBzJNGBSMc7xn
I0uj//nDzs5IyxdfjJ1Cbx7d7pnCSXBSN90YRBfBnRs4lbGtrlEiIkuYl/OUdLBa
sloE8rfdb1NzCd3e6E0BbtVd+Kz0NkO4r1FNQ76RpxL6+UAmALuwmgp5keczAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU8f4P9iiKQu/mxFFTxCPpGjim71UwHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05
ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzYyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzNTM5MzIzODMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZ+R0MA0GCSqG
SIb3DQEBCwUAA4IBAQCQZtckp1rAQGvDFM05PVLwj0lSF45p1R6RnCC/+adNTeeQ
c2nCJ9j//J8CxozJx7FCyF6K9vyft6OlLDlYfdcZvZRvq1VWq/xm9p3Kp14NGY6s
dCEnGaAF/5Q7hfIPVyW8VMJbidsFdxNjtIcWZB3ZEBojCGgS/nb0Z3CxWOOkf4kn
AGUxM8vwlPX9OVEeWkHaqi/06Xx0USXNuL+55RZcegCCLYTlrZIXHxT7GniC5LH6
dgz8JMqFT/mZ3VcJUaYjr/w9SV9ZtKxiqGXRRu6MlxngbYorm+0/wKEFptVWrTu1
Yoc5pOyv9KOYg07M7nsYywJLdNN5jyfz44fZtcpk
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org