Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa
File:                     3130332e31312e32322e302f32332d3234203d3e203538333930.roa (raw, json)
Hash identifier:          tVtzWV9xQdQdujTpUNPVESbMmNTldbwtSWCPYYTsWTs=
Subject key identifier:   A6:B4:DC:83:A1:0A:23:29:C8:3C:C3:04:61:37:10:A5:12:85:07:08
Certificate issuer:       /CN=E4B72563B465301EE966885E5BE212EE92B97305
Certificate serial:       03855267CD6826938E3525DE381F03EE055D42E4
Authority key identifier: E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa
Signing time:             Mon 05 Feb 2024 08:00:01 +0000
ROA not before:           Mon 05 Feb 2024 07:55:01 +0000
ROA not after:            Mon 03 Feb 2025 08:00:01 +0000
asID:                     58390
IP address blocks:        103.11.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl
                          rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:31:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:85:52:67:cd:68:26:93:8e:35:25:de:38:1f:03:ee:05:5d:42:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E4B72563B465301EE966885E5BE212EE92B97305
        Validity
            Not Before: Feb  5 07:55:01 2024 GMT
            Not After : Feb  3 08:00:01 2025 GMT
        Subject: CN=A6B4DC83A10A2329C83CC304613710A512850708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9f:36:fc:6e:54:53:0a:38:c2:11:3b:f9:e5:
                    ee:ca:41:5c:cf:4b:20:12:94:f5:37:94:16:9e:b6:
                    14:09:5d:d2:28:aa:a1:f4:14:98:0e:31:53:b7:6e:
                    56:e2:5b:3c:af:b6:31:2e:31:96:a0:ed:ea:24:5f:
                    25:11:b0:ef:d5:fb:32:b8:ac:77:eb:eb:2a:8a:61:
                    4f:ba:10:b7:25:8e:15:1d:42:06:cc:16:3d:40:fa:
                    4e:d2:7b:76:fd:a9:5b:32:fe:63:a3:aa:18:df:a8:
                    09:e2:cd:4d:6c:b7:4b:1b:46:23:06:be:49:c0:83:
                    0e:bc:d9:b1:6b:97:46:12:b3:68:16:ef:2b:b2:2e:
                    25:1d:cf:82:ec:a4:2a:fe:68:df:72:09:40:cd:ae:
                    7e:66:5a:3b:d8:97:20:c4:54:46:ba:28:c3:30:bf:
                    ad:ab:cd:b3:85:50:e8:f6:03:99:5b:11:02:b7:f4:
                    a7:4e:e3:d2:65:68:6c:b2:98:5d:94:f7:39:a4:4e:
                    81:b0:4d:0a:2c:dc:9b:c4:24:1f:f1:a9:25:9d:c9:
                    d9:5d:5a:9f:fb:8b:9b:62:c6:97:6e:6d:77:83:95:
                    f8:0e:d2:68:1d:95:3b:40:0c:c4:1b:89:49:d5:91:
                    34:41:06:55:6b:60:3f:4a:5d:57:a2:8a:f9:f1:28:
                    04:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:DC:83:A1:0A:23:29:C8:3C:C3:04:61:37:10:A5:12:85:07:08
            X509v3 Authority Key Identifier:
                keyid:E4:B7:25:63:B4:65:30:1E:E9:66:88:5E:5B:E2:12:EE:92:B9:73:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/E4B72563B465301EE966885E5BE212EE92B97305.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E4B72563B465301EE966885E5BE212EE92B97305.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/187ade9f-6b79-4723-9949-96de7e41db70/0/3130332e31312e32322e302f32332d3234203d3e203538333930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:16:fe:3e:ad:aa:c6:d6:5d:8c:f7:f1:ab:97:db:c2:a9:9c:
         4a:65:0f:0b:51:07:32:ec:bb:d9:fc:ae:08:10:6b:91:bf:44:
         dd:f0:83:e8:e4:99:8f:57:7d:cc:f1:34:62:24:99:b0:aa:d3:
         a2:50:bb:09:ce:5c:00:b1:52:75:f8:56:41:18:01:f8:79:89:
         2f:c1:36:99:1c:a1:33:0f:46:16:48:33:5d:29:90:74:a9:c8:
         6c:3f:43:91:be:1c:2e:ac:76:71:c9:54:6d:15:f5:8b:4b:2c:
         ac:04:5c:84:d5:1d:51:e5:06:0a:fb:23:c5:d6:1f:a8:6a:5a:
         a1:51:f2:16:f4:5b:79:06:59:05:d7:37:d6:b8:ee:5c:81:fd:
         4c:9e:03:42:3b:ce:42:04:67:13:9d:54:10:b2:6d:45:d8:84:
         9c:dd:7a:7c:68:e9:d1:7e:dc:1e:7d:c5:8f:89:a5:b5:44:92:
         13:c9:7d:ab:43:05:e2:29:f0:19:85:77:3f:76:ed:5b:c3:a9:
         cf:28:b9:33:e8:9b:16:1c:cc:79:8e:3b:9e:3c:9f:73:1c:0a:
         bd:f9:c2:ff:90:96:9b:81:b4:8f:ba:72:fc:48:db:c6:41:2d:
         55:65:69:1d:2c:c7:cc:62:c5:07:0a:8c:fb:82:40:8e:0b:1a:
         09:59:36:40
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUA4VSZ81oJpOONSXeOB8D7gVdQuQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5
MkI5NzMwNTAeFw0yNDAyMDUwNzU1MDFaFw0yNTAyMDMwODAwMDFaMDMxMTAvBgNV
BAMTKEE2QjREQzgzQTEwQTIzMjlDODNDQzMwNDYxMzcxMEE1MTI4NTA3MDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxnzb8blRTCjjCETv55e7KQVzP
SyASlPU3lBaethQJXdIoqqH0FJgOMVO3blbiWzyvtjEuMZag7eokXyURsO/V+zK4
rHfr6yqKYU+6ELcljhUdQgbMFj1A+k7Se3b9qVsy/mOjqhjfqAnizU1st0sbRiMG
vknAgw682bFrl0YSs2gW7yuyLiUdz4LspCr+aN9yCUDNrn5mWjvYlyDEVEa6KMMw
v62rzbOFUOj2A5lbEQK39KdO49JlaGyymF2U9zmkToGwTQos3JvEJB/xqSWdydld
Wp/7i5tixpdubXeDlfgO0mgdlTtADMQbiUnVkTRBBlVrYD9KXVeiivnxKAQBAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUprTcg6EKIynIPMMEYTcQpRKFBwgwHwYDVR0j
BBgwFoAU5LclY7RlMB7pZoheW+IS7pK5cwUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ODdhZGU5Zi02Yjc5LTQ3MjMtOTk0OS05NmRlN2U0MWRiNzAvMC9FNEI3MjU2M0I0
NjUzMDFFRTk2Njg4NUU1QkUyMTJFRTkyQjk3MzA1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTRCNzI1NjNCNDY1MzAxRUU5NjY4ODVFNUJFMjEyRUU5MkI5
NzMwNS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE4N2FkZTlmLTZiNzktNDcyMy05
OTQ5LTk2ZGU3ZTQxZGI3MC8wLzMxMzAzMzJlMzEzMTJlMzIzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDM1MzgzMzM5MzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnCxYwDQYJKoZIhvcN
AQELBQADggEBAGEW/j6tqsbWXYz38auX28KpnEplDwtRBzLsu9n8rggQa5G/RN3w
g+jkmY9XfczxNGIkmbCq06JQuwnOXACxUnX4VkEYAfh5iS/BNpkcoTMPRhZIM10p
kHSpyGw/Q5G+HC6sdnHJVG0V9YtLLKwEXITVHVHlBgr7I8XWH6hqWqFR8hb0W3kG
WQXXN9a47lyB/UyeA0I7zkIEZxOdVBCybUXYhJzdenxo6dF+3B59xY+JpbVEkhPJ
fatDBeIp8BmFdz927VvDqc8ouTPomxYczHmOO548n3McCr35wv+QlpuBtI+6cvxI
28ZBLVVlaR0sx8xixQcKjPuCQI4LGglZNkA=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:11 2024 by rpki-client on console-fra.rpki-client.org