Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
File:                     3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa (raw, json)
Hash identifier:          XM3WuUevmXXsy3VjqlZ+/JnK9ah0RUCWHph1p0t8E6o=
Subject key identifier:   27:3C:37:D3:18:00:C9:62:40:66:54:D1:A9:3E:0B:A4:55:01:2E:C9
Certificate issuer:       /CN=1B42B2BB5674F23468744614CDF9B0B00D510190
Certificate serial:       41320F488D734A8620568199C33220537E86CBF3
Authority key identifier: 1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa
Signing time:             Tue 17 Oct 2023 12:00:01 +0000
ROA not before:           Tue 17 Oct 2023 11:55:01 +0000
ROA not after:            Tue 15 Oct 2024 12:00:01 +0000
asID:                     150234
IP address blocks:        103.19.157.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl
                          rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 21:44:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:32:0f:48:8d:73:4a:86:20:56:81:99:c3:32:20:53:7e:86:cb:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B42B2BB5674F23468744614CDF9B0B00D510190
        Validity
            Not Before: Oct 17 11:55:01 2023 GMT
            Not After : Oct 15 12:00:01 2024 GMT
        Subject: CN=273C37D31800C962406654D1A93E0BA455012EC9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4a:ce:07:b2:c6:cd:5d:c1:4f:18:74:ab:0f:
                    1a:6e:61:2f:2b:92:f8:92:7a:3b:52:c8:27:3f:6c:
                    67:17:39:32:f4:e2:7d:8c:05:cd:f5:b4:ac:c0:f9:
                    cd:ed:3e:24:93:6c:66:c3:67:f7:29:96:25:a5:b7:
                    01:e1:01:d9:11:83:7d:86:db:fa:33:09:51:83:4e:
                    00:ff:72:a4:47:27:91:21:0c:5c:74:c2:82:37:75:
                    aa:6e:72:28:33:e9:4c:d0:c5:3e:83:ed:b8:8e:7b:
                    4f:44:c9:d9:1d:d9:00:83:b9:1e:11:19:66:9a:4a:
                    09:d5:4f:0c:8c:d8:eb:c3:f7:f4:fc:6f:48:c7:de:
                    90:db:49:2b:25:c5:4c:02:a2:2d:17:78:f0:c7:0c:
                    72:59:ff:5c:d4:dd:0f:88:d7:92:77:79:5b:72:39:
                    12:32:86:ac:67:b4:7f:ca:44:db:75:71:6b:ed:b6:
                    f7:c0:92:f2:1c:3d:b8:9c:e8:18:f3:df:e7:02:d2:
                    ae:48:ff:10:af:f5:61:d6:1f:c4:7c:96:99:ca:32:
                    a0:7d:8d:11:50:2f:08:a6:dd:e5:ab:37:70:fe:eb:
                    2d:02:ea:d9:27:b8:22:e6:08:13:c8:c8:f5:61:3e:
                    93:bb:8f:24:a5:80:02:84:c4:65:22:5a:a8:39:0b:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:3C:37:D3:18:00:C9:62:40:66:54:D1:A9:3E:0B:A4:55:01:2E:C9
            X509v3 Authority Key Identifier:
                keyid:1B:42:B2:BB:56:74:F2:34:68:74:46:14:CD:F9:B0:B0:0D:51:01:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/1B42B2BB5674F23468744614CDF9B0B00D510190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1B42B2BB5674F23468744614CDF9B0B00D510190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2144252b-d30e-4bdc-832f-b38b05c7a035/0/3130332e31392e3135372e302f32342d3234203d3e20313530323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:e6:4b:e2:bf:45:38:4f:68:e5:66:3c:8d:15:4b:5d:9d:74:
         e9:b4:90:c1:73:5f:be:ec:7a:83:72:1d:e2:57:34:72:4e:51:
         c2:75:61:1b:4a:b6:0b:12:95:e7:e4:7f:a1:31:45:1e:a0:36:
         72:6a:ac:a3:05:a4:41:97:37:2c:27:d3:d4:df:3a:7f:73:af:
         0d:6b:e4:e6:90:0c:db:e4:2e:4c:af:84:17:99:e4:42:0e:7a:
         67:6b:c2:47:f5:fd:2a:2b:f1:e0:a7:2a:34:3c:a0:53:be:36:
         12:82:a6:72:09:f7:b9:87:45:56:7f:62:4c:71:5a:1d:fd:52:
         33:ae:96:c7:ba:ff:55:c4:96:2b:ac:b5:e9:5c:3b:98:21:56:
         d0:51:03:49:b1:bc:52:58:7f:9c:06:57:28:a4:b3:67:fe:2e:
         73:5f:3d:c9:55:45:51:6d:50:2b:13:e6:27:0e:86:d0:69:3f:
         a6:aa:78:ff:46:42:65:c2:38:96:56:54:8e:b5:32:96:6b:20:
         fb:1a:4d:e4:b2:e7:01:a5:5e:fd:4b:cd:1a:c4:bf:56:38:ff:
         fb:9d:1c:7f:eb:c0:5c:11:e4:33:71:58:80:a9:e4:ab:dd:cf:
         4d:d7:98:19:d2:e5:8c:95:d2:65:5e:c4:9b:db:5d:46:9e:2e:
         26:0d:05:8f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQTIPSI1zSoYgVoGZwzIgU36Gy/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAw
RDUxMDE5MDAeFw0yMzEwMTcxMTU1MDFaFw0yNDEwMTUxMjAwMDFaMDMxMTAvBgNV
BAMTKDI3M0MzN0QzMTgwMEM5NjI0MDY2NTREMUE5M0UwQkE0NTUwMTJFQzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqSs4HssbNXcFPGHSrDxpuYS8r
kviSejtSyCc/bGcXOTL04n2MBc31tKzA+c3tPiSTbGbDZ/cpliWltwHhAdkRg32G
2/ozCVGDTgD/cqRHJ5EhDFx0woI3dapucigz6UzQxT6D7biOe09Eydkd2QCDuR4R
GWaaSgnVTwyM2OvD9/T8b0jH3pDbSSslxUwCoi0XePDHDHJZ/1zU3Q+I15J3eVty
ORIyhqxntH/KRNt1cWvttvfAkvIcPbic6Bjz3+cC0q5I/xCv9WHWH8R8lpnKMqB9
jRFQLwim3eWrN3D+6y0C6tknuCLmCBPIyPVhPpO7jySlgAKExGUiWqg5C1brAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUJzw30xgAyWJAZlTRqT4LpFUBLskwHwYDVR0j
BBgwFoAUG0Kyu1Z08jRodEYUzfmwsA1RAZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MTQ0MjUyYi1kMzBlLTRiZGMtODMyZi1iMzhiMDVjN2EwMzUvMC8xQjQyQjJCQjU2
NzRGMjM0Njg3NDQ2MTRDREY5QjBCMDBENTEwMTkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUI0MkIyQkI1Njc0RjIzNDY4NzQ0NjE0Q0RGOUIwQjAwRDUx
MDE5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIxNDQyNTJiLWQzMGUtNGJkYy04
MzJmLWIzOGIwNWM3YTAzNS8wLzMxMzAzMzJlMzEzOTJlMzEzNTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxOdMA0GCSqG
SIb3DQEBCwUAA4IBAQCe5kviv0U4T2jlZjyNFUtdnXTptJDBc1++7HqDch3iVzRy
TlHCdWEbSrYLEpXn5H+hMUUeoDZyaqyjBaRBlzcsJ9PU3zp/c68Na+TmkAzb5C5M
r4QXmeRCDnpna8JH9f0qK/Hgpyo0PKBTvjYSgqZyCfe5h0VWf2JMcVod/VIzrpbH
uv9VxJYrrLXpXDuYIVbQUQNJsbxSWH+cBlcopLNn/i5zXz3JVUVRbVArE+YnDobQ
aT+mqnj/RkJlwjiWVlSOtTKWayD7Gk3ksucBpV79S80axL9WOP/7nRx/68BcEeQz
cViAqeSr3c9N15gZ0uWMldJlXsSb211Gni4mDQWP
-----END CERTIFICATE-----
Generated at Thu Jun 20 15:24:33 2024 by rpki-client on console-fra.rpki-client.org