Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa
File:                     3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa (raw, json)
Hash identifier:          eZkw7NUk4SEzfinmrf2CFzIfaDcJhDdEaGiPdWwikWU=
Subject key identifier:   A5:11:0D:87:D6:7F:A0:BB:A5:92:B9:C0:72:E0:12:CA:74:B7:D9:2E
Certificate issuer:       /CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
Certificate serial:       53C8496281862F038F777D85ACDAB4DA649EA242
Authority key identifier: E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa
Signing time:             Thu 07 Dec 2023 11:02:00 +0000
ROA not before:           Thu 07 Dec 2023 10:57:00 +0000
ROA not after:            Thu 05 Dec 2024 11:02:00 +0000
asID:                     149888
IP address blocks:        103.189.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl
                          rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 23:56:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:c8:49:62:81:86:2f:03:8f:77:7d:85:ac:da:b4:da:64:9e:a2:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E2CDAA223BFB6F2B13973EB80353ED211C9F21C9
        Validity
            Not Before: Dec  7 10:57:00 2023 GMT
            Not After : Dec  5 11:02:00 2024 GMT
        Subject: CN=A5110D87D67FA0BBA592B9C072E012CA74B7D92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:51:1d:42:16:c8:e9:45:55:0b:91:23:41:28:
                    3e:4d:74:06:59:c5:4f:22:17:c5:7b:70:5a:1e:84:
                    27:ed:07:2f:97:b7:62:c5:9b:9d:0a:f8:5a:04:e4:
                    4b:cc:34:2d:59:b3:b3:17:5e:d5:90:4c:aa:1e:12:
                    80:ec:3f:e2:3d:06:48:03:01:45:06:16:7e:89:02:
                    98:94:d6:fe:ac:c2:42:f3:f8:f7:3c:42:34:ff:07:
                    80:b6:cd:17:d2:24:44:f1:49:81:95:b1:73:b3:7c:
                    0e:aa:66:41:71:2d:89:c3:91:74:a6:34:01:cb:2d:
                    7d:22:20:95:71:88:b5:9f:b3:af:c4:6e:4f:7e:a0:
                    63:fd:cc:ca:46:57:5d:d7:e4:2f:65:82:e8:81:40:
                    11:4d:5c:ce:c5:26:0c:67:93:76:f8:ae:44:98:1e:
                    9a:9b:f7:e9:80:93:88:e4:a4:16:02:e9:c5:83:bb:
                    ee:fd:c9:2d:f7:fb:84:eb:a5:be:2b:1b:de:f6:8b:
                    87:d0:2e:cc:18:93:90:c6:fc:1f:68:cc:0d:26:c7:
                    17:ac:0d:0d:f2:f0:e8:03:8c:96:16:37:08:62:12:
                    74:f7:61:54:2d:7a:06:8b:b7:ce:a2:37:3b:52:28:
                    49:3a:61:d9:6b:af:73:0a:6b:3a:36:85:80:7c:d3:
                    40:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:11:0D:87:D6:7F:A0:BB:A5:92:B9:C0:72:E0:12:CA:74:B7:D9:2E
            X509v3 Authority Key Identifier:
                keyid:E2:CD:AA:22:3B:FB:6F:2B:13:97:3E:B8:03:53:ED:21:1C:9F:21:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E2CDAA223BFB6F2B13973EB80353ED211C9F21C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1df4164e-74e5-40d6-9a30-b372a4d2a454/0/3130332e3138392e3234382e302f32342d3234203d3e20313439383838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:4b:aa:52:5d:c1:40:03:fe:23:2f:c9:e6:9f:5a:6d:fe:51:
         ce:7a:22:f9:28:d4:7d:de:50:74:2e:3d:f1:e4:a4:8a:19:46:
         e0:9d:3c:3c:4f:84:8e:b9:1f:19:cf:33:36:4c:f7:82:04:7b:
         d5:8c:63:25:fc:dc:c9:82:4f:2b:62:c8:05:3d:73:ae:7e:37:
         96:52:3b:7a:31:7e:db:77:c7:05:1d:6b:00:a1:7a:25:97:90:
         4d:f7:b5:dd:62:21:50:c9:7d:dd:3f:3d:67:f3:06:53:eb:88:
         7f:aa:1e:90:ab:a8:e4:d9:a3:0e:74:5b:56:88:ae:a8:7b:b4:
         2e:7c:f3:4d:a8:1c:c9:bd:61:09:37:4d:36:1a:4f:66:68:aa:
         6e:20:1a:cf:38:7e:15:9e:05:c8:1c:eb:92:9d:86:a7:d8:c2:
         2e:de:75:77:f6:b7:d1:5d:ea:75:cb:62:81:c4:e8:ca:f3:9d:
         f8:ba:93:e7:f9:85:75:71:54:ec:0d:cd:b5:b2:30:02:64:12:
         28:cc:ef:c2:1f:9f:01:fb:55:72:1d:fb:f7:61:b9:2a:b5:22:
         6c:f2:97:c2:9b:7c:c7:13:36:70:ea:1a:16:f4:d0:ef:80:d7:
         aa:c4:7f:9f:00:e6:dc:d5:ad:39:d8:6b:de:92:67:f6:10:0f:
         8c:58:58:0b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUU8hJYoGGLwOPd32FrNq02mSeokIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjEx
QzlGMjFDOTAeFw0yMzEyMDcxMDU3MDBaFw0yNDEyMDUxMTAyMDBaMDMxMTAvBgNV
BAMTKEE1MTEwRDg3RDY3RkEwQkJBNTkyQjlDMDcyRTAxMkNBNzRCN0Q5MkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTUR1CFsjpRVULkSNBKD5NdAZZ
xU8iF8V7cFoehCftBy+Xt2LFm50K+FoE5EvMNC1Zs7MXXtWQTKoeEoDsP+I9BkgD
AUUGFn6JApiU1v6swkLz+Pc8QjT/B4C2zRfSJETxSYGVsXOzfA6qZkFxLYnDkXSm
NAHLLX0iIJVxiLWfs6/Ebk9+oGP9zMpGV13X5C9lguiBQBFNXM7FJgxnk3b4rkSY
Hpqb9+mAk4jkpBYC6cWDu+79yS33+4Trpb4rG972i4fQLswYk5DG/B9ozA0mxxes
DQ3y8OgDjJYWNwhiEnT3YVQtegaLt86iNztSKEk6Ydlrr3MKazo2hYB800BnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpRENh9Z/oLulkrnAcuASynS32S4wHwYDVR0j
BBgwFoAU4s2qIjv7bysTlz64A1PtIRyfIckwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZGY0MTY0ZS03NGU1LTQwZDYtOWEzMC1iMzcyYTRkMmE0NTQvMC9FMkNEQUEyMjNC
RkI2RjJCMTM5NzNFQjgwMzUzRUQyMTFDOUYyMUM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTJDREFBMjIzQkZCNkYyQjEzOTczRUI4MDM1M0VEMjExQzlG
MjFDOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFkZjQxNjRlLTc0ZTUtNDBkNi05
YTMwLWIzNzJhNGQyYTQ1NC8wLzMxMzAzMzJlMzEzODM5MmUzMjM0MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzODM4Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnvfgwDQYJ
KoZIhvcNAQELBQADggEBAKZLqlJdwUAD/iMvyeafWm3+Uc56Ivko1H3eUHQuPfHk
pIoZRuCdPDxPhI65HxnPMzZM94IEe9WMYyX83MmCTytiyAU9c65+N5ZSO3oxftt3
xwUdawCheiWXkE33td1iIVDJfd0/PWfzBlPriH+qHpCrqOTZow50W1aIrqh7tC58
802oHMm9YQk3TTYaT2Zoqm4gGs84fhWeBcgc65KdhqfYwi7edXf2t9Fd6nXLYoHE
6Mrznfi6k+f5hXVxVOwNzbWyMAJkEijM78IfnwH7VXId+/dhuSq1Imzyl8KbfMcT
NnDqGhb00O+A16rEf58A5tzVrTnYa96SZ/YQD4xYWAs=
-----END CERTIFICATE-----
Generated at Sat Jun 22 00:59:37 2024 by rpki-client on console-fra.rpki-client.org