Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
File:                     3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa (raw, json)
Hash identifier:          jNblYOWXGZ9xpdk1D93yOMfg4jMrdJm4XYm7AukDLjw=
Subject key identifier:   BB:2C:DF:0C:F5:76:9F:01:42:B6:40:F3:89:B0:62:27:E9:78:57:BC
Certificate issuer:       /CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
Certificate serial:       1BCD1711DCC3C7C012D0814B10241762F2C4AE5C
Authority key identifier: 0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa
Signing time:             Mon 01 Jul 2024 01:05:16 +0000
ROA not before:           Mon 01 Jul 2024 01:00:16 +0000
ROA not after:            Mon 30 Jun 2025 01:05:16 +0000
asID:                     131778
IP address blocks:        103.246.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl
                          rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:cd:17:11:dc:c3:c7:c0:12:d0:81:4b:10:24:17:62:f2:c4:ae:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E
        Validity
            Not Before: Jul  1 01:00:16 2024 GMT
            Not After : Jun 30 01:05:16 2025 GMT
        Subject: CN=BB2CDF0CF5769F0142B640F389B06227E97857BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:57:3b:77:00:7b:c8:4b:f2:d7:2e:1f:40:49:
                    68:32:f8:a7:f0:b6:fa:fc:ba:67:17:41:4e:4e:58:
                    a6:50:76:63:54:60:5d:ef:f4:31:6f:f4:2c:82:68:
                    e1:fb:e4:da:7b:49:81:73:d5:91:2a:ac:52:05:ce:
                    88:44:68:b1:4d:17:94:a6:5b:01:9f:31:85:00:fb:
                    b7:05:85:cb:bd:fb:e5:72:4a:fd:ca:fa:39:a7:fd:
                    95:37:a6:55:ed:c9:be:5b:01:c9:c6:73:96:f7:dc:
                    a0:9e:c8:13:6d:51:2f:0e:6f:72:de:75:92:8d:b7:
                    ae:34:51:aa:a0:80:57:10:2a:38:db:3d:7b:62:d3:
                    16:fc:e7:5e:1e:de:e6:58:60:3e:e6:12:4d:9d:b0:
                    7c:35:67:e9:c7:b3:5a:c3:0d:0b:95:d0:c5:04:5d:
                    20:8d:cd:c0:c0:38:26:9a:0a:56:73:2c:35:83:8b:
                    c6:9a:f2:15:93:bd:7e:e1:56:97:a1:b2:d9:27:44:
                    3c:76:c9:54:fb:fb:ba:49:67:1e:83:a1:07:8c:5e:
                    07:9a:51:7e:84:39:e5:f3:47:06:12:0a:84:36:aa:
                    39:69:34:e9:7e:19:51:0f:20:a9:7f:6f:26:13:10:
                    43:07:b9:60:21:be:40:28:ff:fa:ea:20:7c:91:76:
                    ab:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2C:DF:0C:F5:76:9F:01:42:B6:40:F3:89:B0:62:27:E9:78:57:BC
            X509v3 Authority Key Identifier:
                keyid:0F:FE:5F:19:FB:EB:54:89:FF:CC:DF:37:FE:FE:0A:0C:6A:B5:69:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FFE5F19FBEB5489FFCCDF37FEFE0A0C6AB5695E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1bae58ac-5917-4069-9a6c-83dc1ba32126/0/3130332e3234362e3130372e302f32342d3234203d3e20313331373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.246.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:2e:5a:d8:72:63:90:c2:70:fa:f8:1b:95:a6:1f:c0:bc:90:
         56:25:43:75:66:d2:be:b1:0e:fe:75:62:5c:c2:53:0d:4b:eb:
         0c:73:80:ab:e7:47:03:8a:3e:99:4b:6f:c7:2c:0a:02:22:96:
         7a:4e:4e:7c:6f:2d:2d:43:f1:35:77:06:e6:a0:66:4a:0f:b2:
         2d:95:01:13:ed:b1:49:cc:b2:9d:d1:6c:2c:8c:39:d9:6b:ad:
         51:63:31:02:6d:c9:85:e8:03:1e:eb:f3:b2:70:0b:6d:66:d1:
         2b:f0:17:78:38:9f:45:25:31:51:e3:40:5b:3b:3e:2d:b0:43:
         32:6e:e8:f9:02:42:df:a2:0b:e4:cb:f1:b9:49:33:32:bc:a7:
         95:ab:c9:d8:f8:a2:00:f9:dd:bd:93:0f:6d:5b:19:c5:73:f9:
         44:28:ed:10:ba:d4:9b:aa:86:8d:b7:c5:2c:33:0a:25:bf:05:
         8b:b6:f5:68:02:ab:fd:30:11:17:e5:55:d2:77:0c:2c:09:5f:
         c6:eb:5c:07:0e:6d:60:a8:cc:29:f6:69:dd:0e:68:38:5a:cb:
         95:e9:d1:6d:8c:0a:12:25:47:71:40:07:b4:bf:c6:ee:99:78:
         95:94:8d:a7:89:e1:a3:1d:9f:88:d6:2d:e2:a9:d9:5e:a9:76:
         9b:9e:f1:0e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUG80XEdzDx8AS0IFLECQXYvLErlwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2
QUI1Njk1RTAeFw0yNDA3MDEwMTAwMTZaFw0yNTA2MzAwMTA1MTZaMDMxMTAvBgNV
BAMTKEJCMkNERjBDRjU3NjlGMDE0MkI2NDBGMzg5QjA2MjI3RTk3ODU3QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsVzt3AHvIS/LXLh9ASWgy+Kfw
tvr8umcXQU5OWKZQdmNUYF3v9DFv9CyCaOH75Np7SYFz1ZEqrFIFzohEaLFNF5Sm
WwGfMYUA+7cFhcu9++VySv3K+jmn/ZU3plXtyb5bAcnGc5b33KCeyBNtUS8Ob3Le
dZKNt640UaqggFcQKjjbPXti0xb8514e3uZYYD7mEk2dsHw1Z+nHs1rDDQuV0MUE
XSCNzcDAOCaaClZzLDWDi8aa8hWTvX7hVpehstknRDx2yVT7+7pJZx6DoQeMXgea
UX6EOeXzRwYSCoQ2qjlpNOl+GVEPIKl/byYTEEMHuWAhvkAo//rqIHyRdqvBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUuyzfDPV2nwFCtkDzibBiJ+l4V7wwHwYDVR0j
BBgwFoAUD/5fGfvrVIn/zN83/v4KDGq1aV4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YmFlNThhYy01OTE3LTQwNjktOWE2Yy04M2RjMWJhMzIxMjYvMC8wRkZFNUYxOUZC
RUI1NDg5RkZDQ0RGMzdGRUZFMEEwQzZBQjU2OTVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZGRTVGMTlGQkVCNTQ4OUZGQ0NERjM3RkVGRTBBMEM2QUI1
Njk1RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiYWU1OGFjLTU5MTctNDA2OS05
YTZjLTgzZGMxYmEzMjEyNi8wLzMxMzAzMzJlMzIzNDM2MmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn9mswDQYJ
KoZIhvcNAQELBQADggEBAGkuWthyY5DCcPr4G5WmH8C8kFYlQ3Vm0r6xDv51YlzC
Uw1L6wxzgKvnRwOKPplLb8csCgIilnpOTnxvLS1D8TV3BuagZkoPsi2VARPtsUnM
sp3RbCyMOdlrrVFjMQJtyYXoAx7r87JwC21m0SvwF3g4n0UlMVHjQFs7Pi2wQzJu
6PkCQt+iC+TL8blJMzK8p5Wrydj4ogD53b2TD21bGcVz+UQo7RC61Juqho23xSwz
CiW/BYu29WgCq/0wERflVdJ3DCwJX8brXAcObWCozCn2ad0OaDhay5Xp0W2MChIl
R3FAB7S/xu6ZeJWUjaeJ4aMdn4jWLeKp2V6pdpue8Q4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org