Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
File:                     3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa (raw, json)
Hash identifier:          3tho/NQEZ7clEuLXEou7D6b7IKWMhHVDrU5KgBLQwQM=
Subject key identifier:   66:97:87:D8:C0:DC:83:76:51:F7:15:E0:AE:3D:E1:53:B2:E9:F7:66
Certificate issuer:       /CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
Certificate serial:       71312CB39A5F0BE9B063DE3619D1882059AA3EF7
Authority key identifier: 2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa
Signing time:             Mon 14 Oct 2024 08:00:01 +0000
ROA not before:           Mon 14 Oct 2024 07:55:01 +0000
ROA not after:            Mon 13 Oct 2025 08:00:01 +0000
asID:                     150532
IP address blocks:        103.151.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl
                          rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:31:2c:b3:9a:5f:0b:e9:b0:63:de:36:19:d1:88:20:59:aa:3e:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A06B429F70B869F9E70FB36951674F7D8A4AC4E
        Validity
            Not Before: Oct 14 07:55:01 2024 GMT
            Not After : Oct 13 08:00:01 2025 GMT
        Subject: CN=669787D8C0DC837651F715E0AE3DE153B2E9F766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:88:76:1e:68:09:14:17:ca:63:b1:1c:43:d7:
                    78:4d:b6:9e:55:38:02:b3:ab:0e:c7:6a:14:dd:f5:
                    d9:35:b1:28:2d:0f:5e:9b:39:00:49:58:87:4d:3c:
                    88:60:c4:56:52:71:61:40:c1:c2:6c:e9:86:98:cb:
                    cc:74:96:3a:e0:24:5b:dc:d2:9e:16:8a:b5:ae:c7:
                    3e:03:3e:09:76:f7:cc:b9:83:28:c9:f0:a9:63:59:
                    46:b8:c3:fb:95:e6:d3:bc:6e:01:df:60:87:b7:78:
                    3e:19:78:08:d5:7e:15:71:ff:ac:28:5d:32:91:aa:
                    20:47:0c:5c:6c:cd:67:b8:f9:de:a6:4e:e8:e8:29:
                    92:7f:7a:73:2f:1a:63:67:25:e1:7e:e5:c1:0a:7c:
                    f2:6e:58:60:11:95:1a:89:58:ee:84:38:71:d7:2e:
                    c1:46:df:04:1f:69:15:49:19:06:68:12:ea:12:01:
                    ae:9a:2d:14:1c:cd:45:a2:60:70:ef:21:23:79:8b:
                    a7:6c:72:9b:b5:ab:b5:6d:76:7e:48:ea:17:d1:47:
                    7a:ef:60:85:74:29:3d:83:d3:59:ee:3d:57:8c:c7:
                    09:a3:29:31:59:7b:61:6a:6a:6a:03:13:75:83:50:
                    b3:6b:03:86:f8:f9:12:d0:4f:68:24:10:a5:fb:84:
                    67:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:97:87:D8:C0:DC:83:76:51:F7:15:E0:AE:3D:E1:53:B2:E9:F7:66
            X509v3 Authority Key Identifier:
                keyid:2A:06:B4:29:F7:0B:86:9F:9E:70:FB:36:95:16:74:F7:D8:A4:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2A06B429F70B869F9E70FB36951674F7D8A4AC4E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b5a47b6-5513-4610-94cf-1feec4eeecf3/0/3130332e3135312e32342e302f32342d3234203d3e20313530353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         37:f5:53:d3:0f:ac:ff:87:e8:85:ae:04:87:c2:4f:d8:9c:07:
         34:7e:fc:e4:33:c4:06:8c:f8:9f:29:12:26:53:45:ac:1a:1e:
         27:27:8c:c6:b9:6a:3b:85:5b:a2:e6:7b:0f:6d:0b:45:53:05:
         60:88:19:88:cf:8e:75:f9:4f:df:03:74:f0:d8:59:1a:6a:39:
         07:bf:4e:2d:25:b9:ea:db:d3:e5:84:45:13:50:84:f8:68:22:
         74:99:18:51:1d:5c:e9:3f:19:a9:29:80:cb:b3:73:e7:7f:46:
         7c:d6:94:4e:1b:ee:f0:c7:10:61:8d:ef:d4:08:fa:58:9d:9e:
         cc:82:38:a3:2d:cd:43:99:65:6f:31:ba:59:2e:04:89:73:2d:
         ab:ec:b5:e5:d1:f0:7a:6b:37:2d:ec:90:db:79:82:86:e1:67:
         46:b9:81:2b:f2:12:84:30:8d:2a:69:d6:cd:b1:5c:8d:e5:f3:
         18:e9:32:df:c1:89:8a:64:65:ee:ca:0f:31:36:93:3c:a2:b9:
         c7:01:f3:bb:d8:23:a9:7f:6a:46:9c:48:c8:8d:0f:59:9b:b4:
         17:87:af:19:31:f8:41:e8:fa:4f:e2:8a:68:c4:10:36:37:2b:
         c3:4f:a7:c3:d8:72:a3:55:a8:23:b1:8e:92:b2:c3:1b:8d:04:
         5c:ae:7e:36
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUcTEss5pfC+mwY942GdGIIFmqPvcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdE
OEE0QUM0RTAeFw0yNDEwMTQwNzU1MDFaFw0yNTEwMTMwODAwMDFaMDMxMTAvBgNV
BAMTKDY2OTc4N0Q4QzBEQzgzNzY1MUY3MTVFMEFFM0RFMTUzQjJFOUY3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHiHYeaAkUF8pjsRxD13hNtp5V
OAKzqw7HahTd9dk1sSgtD16bOQBJWIdNPIhgxFZScWFAwcJs6YaYy8x0ljrgJFvc
0p4WirWuxz4DPgl298y5gyjJ8KljWUa4w/uV5tO8bgHfYIe3eD4ZeAjVfhVx/6wo
XTKRqiBHDFxszWe4+d6mTujoKZJ/enMvGmNnJeF+5cEKfPJuWGARlRqJWO6EOHHX
LsFG3wQfaRVJGQZoEuoSAa6aLRQczUWiYHDvISN5i6dscpu1q7Vtdn5I6hfRR3rv
YIV0KT2D01nuPVeMxwmjKTFZe2FqamoDE3WDULNrA4b4+RLQT2gkEKX7hGddAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZpeH2MDcg3ZR9xXgrj3hU7Lp92YwHwYDVR0j
BBgwFoAUKga0KfcLhp+ecPs2lRZ099ikrE4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjVhNDdiNi01NTEzLTQ2MTAtOTRjZi0xZmVlYzRlZWVjZjMvMC8yQTA2QjQyOUY3
MEI4NjlGOUU3MEZCMzY5NTE2NzRGN0Q4QTRBQzRFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkEwNkI0MjlGNzBCODY5RjlFNzBGQjM2OTUxNjc0RjdEOEE0
QUM0RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNWE0N2I2LTU1MTMtNDYxMC05
NGNmLTFmZWVjNGVlZWNmMy8wLzMxMzAzMzJlMzEzNTMxMmUzMjM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5cYMA0GCSqG
SIb3DQEBCwUAA4IBAQA39VPTD6z/h+iFrgSHwk/YnAc0fvzkM8QGjPifKRImU0Ws
Gh4nJ4zGuWo7hVui5nsPbQtFUwVgiBmIz451+U/fA3Tw2FkaajkHv04tJbnq29Pl
hEUTUIT4aCJ0mRhRHVzpPxmpKYDLs3Pnf0Z81pROG+7wxxBhje/UCPpYnZ7Mgjij
Lc1DmWVvMbpZLgSJcy2r7LXl0fB6azct7JDbeYKG4WdGuYEr8hKEMI0qadbNsVyN
5fMY6TLfwYmKZGXuyg8xNpM8ornHAfO72COpf2pGnEjIjQ9Zm7QXh68ZMfhB6PpP
4opoxBA2NyvDT6fD2HKjVagjsY6SssMbjQRcrn42
-----END CERTIFICATE-----
Generated at Sun Nov 24 15:29:09 2024 by rpki-client on console-ams.rpki-client.org