Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa
File:                     3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          /jVhuhRg6dIf6XOC0U7MNvw21kXzsJMzw+jgLo7le34=
Subject key identifier:   6F:35:05:F0:F3:15:B5:82:DE:29:78:C7:27:CA:8F:19:13:5D:E6:3A
Certificate issuer:       /CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
Certificate serial:       408971A309919DEE6E1B53CE32C21364D3E86708
Authority key identifier: 84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa
Signing time:             Sat 10 Feb 2024 08:00:00 +0000
ROA not before:           Sat 10 Feb 2024 07:55:00 +0000
ROA not after:            Sat 08 Feb 2025 08:00:00 +0000
asID:                     56242
IP address blocks:        103.228.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl
                          rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:89:71:a3:09:91:9d:ee:6e:1b:53:ce:32:c2:13:64:d3:e8:67:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8469874AE268E2CD4E9A137EDD5599C748530E9E
        Validity
            Not Before: Feb 10 07:55:00 2024 GMT
            Not After : Feb  8 08:00:00 2025 GMT
        Subject: CN=6F3505F0F315B582DE2978C727CA8F19135DE63A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:14:c5:a1:60:a7:f1:08:75:2d:e2:22:b8:d6:
                    ac:69:c4:1e:3f:51:6f:de:9a:67:c9:6d:01:91:73:
                    b6:f3:51:1c:cf:63:35:0a:dd:56:e2:1e:ec:07:37:
                    fa:10:b1:c0:e3:19:a4:38:4a:a3:d3:6d:ee:a5:64:
                    7d:36:d5:aa:3f:fc:5e:9f:75:0b:90:a8:ae:c0:95:
                    a5:6c:32:9f:b3:ca:26:29:cb:ab:2a:16:4f:85:e1:
                    61:5e:38:87:8e:6f:4e:1d:b0:4f:cf:51:d6:cd:90:
                    93:5e:91:1d:82:95:28:10:a5:51:03:5a:de:b4:bf:
                    b0:95:05:ae:33:d3:be:01:fa:1f:a3:e4:f9:8f:55:
                    1e:aa:b7:20:3f:82:54:a0:98:82:d4:db:d6:fa:29:
                    88:aa:b3:05:b1:00:d2:e1:18:f9:ac:1c:f7:d2:d4:
                    7e:44:1d:bc:71:47:72:d6:6a:2a:62:3f:e4:5b:91:
                    70:a2:2b:24:a4:ef:42:99:be:38:e5:61:93:1c:1c:
                    1a:9e:22:8b:b6:e7:5b:35:88:9a:72:41:54:61:d7:
                    b7:b3:14:4f:02:1c:94:07:66:eb:93:5d:25:6f:cc:
                    aa:b5:89:85:a8:dd:c4:c4:77:fe:fc:a7:a2:87:57:
                    49:b7:6b:9c:1d:7a:ae:90:8a:c8:e4:85:89:43:d0:
                    47:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:35:05:F0:F3:15:B5:82:DE:29:78:C7:27:CA:8F:19:13:5D:E6:3A
            X509v3 Authority Key Identifier:
                keyid:84:69:87:4A:E2:68:E2:CD:4E:9A:13:7E:DD:55:99:C7:48:53:0E:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/8469874AE268E2CD4E9A137EDD5599C748530E9E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8469874AE268E2CD4E9A137EDD5599C748530E9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17a2d25b-cb18-45be-9fa1-154ca1579223/0/3130332e3232382e3131362e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.228.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:79:04:68:7f:e6:14:f4:a8:2b:4f:8f:36:b9:f8:7c:a1:10:
         2a:97:e8:b4:5d:b8:25:49:ac:f4:27:eb:56:ed:28:e7:d3:32:
         29:32:8d:68:24:02:27:99:c8:de:40:9b:b3:75:bd:2f:9d:bd:
         ef:6f:8f:95:36:69:0f:dc:56:c5:9e:c3:aa:1b:d0:fa:9c:c0:
         01:77:fa:02:2f:d2:30:3a:fb:46:b5:a3:e3:aa:fa:62:09:f2:
         01:ce:34:88:46:1c:2c:fa:10:7e:7a:8d:13:d5:da:f3:79:a6:
         69:f4:68:1b:a4:4c:62:81:e9:26:a4:45:34:fd:7d:e4:99:94:
         08:f1:47:61:2d:c4:58:51:c8:a5:4b:8e:11:3b:1b:98:ae:b1:
         37:eb:2e:94:c4:eb:b2:39:ab:d7:06:c0:96:d3:f9:46:68:09:
         c0:05:85:82:92:cc:48:e2:79:22:ee:97:02:49:a3:d8:2c:e0:
         4c:7e:d4:66:a2:17:b6:d5:2a:38:bf:53:2c:16:01:b5:9e:40:
         47:68:f3:25:71:b7:9f:b2:e8:7a:82:1b:79:62:e0:05:85:2d:
         63:a6:f2:b8:f4:6a:3f:a9:9a:95:fa:dc:b0:23:08:8d:3c:ad:
         fe:f7:e8:20:7d:79:97:40:4c:21:32:a7:7b:e5:7b:74:c9:53:
         e9:ef:21:67
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQIlxowmRne5uG1POMsITZNPoZwgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0
ODUzMEU5RTAeFw0yNDAyMTAwNzU1MDBaFw0yNTAyMDgwODAwMDBaMDMxMTAvBgNV
BAMTKDZGMzUwNUYwRjMxNUI1ODJERTI5NzhDNzI3Q0E4RjE5MTM1REU2M0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9FMWhYKfxCHUt4iK41qxpxB4/
UW/emmfJbQGRc7bzURzPYzUK3VbiHuwHN/oQscDjGaQ4SqPTbe6lZH021ao//F6f
dQuQqK7AlaVsMp+zyiYpy6sqFk+F4WFeOIeOb04dsE/PUdbNkJNekR2ClSgQpVED
Wt60v7CVBa4z074B+h+j5PmPVR6qtyA/glSgmILU29b6KYiqswWxANLhGPmsHPfS
1H5EHbxxR3LWaipiP+RbkXCiKySk70KZvjjlYZMcHBqeIou251s1iJpyQVRh17ez
FE8CHJQHZuuTXSVvzKq1iYWo3cTEd/78p6KHV0m3a5wdeq6QisjkhYlD0EdBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbzUF8PMVtYLeKXjHJ8qPGRNd5jowHwYDVR0j
BBgwFoAUhGmHSuJo4s1OmhN+3VWZx0hTDp4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
N2EyZDI1Yi1jYjE4LTQ1YmUtOWZhMS0xNTRjYTE1NzkyMjMvMC84NDY5ODc0QUUy
NjhFMkNENEU5QTEzN0VERDU1OTlDNzQ4NTMwRTlFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ2OTg3NEFFMjY4RTJDRDRFOUExMzdFREQ1NTk5Qzc0ODUz
MEU5RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE3YTJkMjViLWNiMTgtNDViZS05
ZmExLTE1NGNhMTU3OTIyMy8wLzMxMzAzMzJlMzIzMjM4MmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM2MzIzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+R0MA0GCSqG
SIb3DQEBCwUAA4IBAQBceQRof+YU9KgrT482ufh8oRAql+i0XbglSaz0J+tW7Sjn
0zIpMo1oJAInmcjeQJuzdb0vnb3vb4+VNmkP3FbFnsOqG9D6nMABd/oCL9IwOvtG
taPjqvpiCfIBzjSIRhws+hB+eo0T1drzeaZp9GgbpExigekmpEU0/X3kmZQI8Udh
LcRYUcilS44ROxuYrrE36y6UxOuyOavXBsCW0/lGaAnABYWCksxI4nki7pcCSaPY
LOBMftRmohe21So4v1MsFgG1nkBHaPMlcbefsuh6ght5YuAFhS1jpvK49Go/qZqV
+tywIwiNPK3+9+ggfXmXQEwhMqd75Xt0yVPp7yFn
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org