Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
File:                     3130332e34372e31302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          TGpOaetU04apgOr5ghPllTNkf/PulExVfopuWkZAHM4=
Subject key identifier:   3E:B4:CF:F1:C8:27:24:A5:82:F6:4F:45:BA:C4:C5:EB:38:8E:99:05
Certificate issuer:       /CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
Certificate serial:       1837D3A461EB43B93EBF0A4DC89259739134749B
Authority key identifier: E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa
Signing time:             Fri 17 Nov 2023 17:00:01 +0000
ROA not before:           Fri 17 Nov 2023 16:55:01 +0000
ROA not after:            Fri 15 Nov 2024 17:00:01 +0000
asID:                     59273
IP address blocks:        103.47.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl
                          rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:37:d3:a4:61:eb:43:b9:3e:bf:0a:4d:c8:92:59:73:91:34:74:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E91D51E54A89C0DDBD57F00A13E96E36FA29AB27
        Validity
            Not Before: Nov 17 16:55:01 2023 GMT
            Not After : Nov 15 17:00:01 2024 GMT
        Subject: CN=3EB4CFF1C82724A582F64F45BAC4C5EB388E9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2d:e2:a9:e3:67:14:15:7c:c1:ac:fb:af:24:
                    21:ec:be:ec:4b:c1:44:20:00:54:16:fc:a0:b4:72:
                    f1:26:39:38:51:e0:b0:e7:7a:7e:01:46:ae:f6:e7:
                    07:d1:ca:44:17:8b:83:3d:f2:82:09:1b:84:8d:5d:
                    6f:ad:33:04:84:f1:58:62:26:7f:9b:dc:54:b7:48:
                    68:da:da:a4:d7:cc:03:29:b8:e9:b9:d4:05:8d:44:
                    16:a4:c7:a4:46:82:21:01:77:10:0e:af:b5:db:73:
                    36:41:72:50:74:8a:83:02:04:94:d7:ef:30:5b:47:
                    43:2e:e3:c6:0a:09:b6:52:dd:32:c0:3c:af:16:59:
                    38:ea:bc:c2:1e:66:a2:d2:ed:18:cd:27:fc:72:7f:
                    17:7e:bd:a4:8e:9b:c2:a5:f7:0d:6e:9f:f7:1f:38:
                    cd:11:99:0a:7a:5c:18:67:35:d4:51:c6:e3:34:ca:
                    e3:db:a9:57:23:1e:dd:24:f0:17:0a:3c:6c:88:a7:
                    c0:a5:62:b7:1f:b3:a0:ee:dc:a8:76:0f:4b:6c:1b:
                    5c:f4:45:8b:c0:80:1d:9b:e1:88:e3:4e:cb:ac:39:
                    b8:22:09:cb:90:ff:0d:0c:2d:ea:12:93:34:2a:7d:
                    e6:6e:a0:ca:9d:38:15:6d:cc:2f:08:0d:d2:a9:5a:
                    96:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:B4:CF:F1:C8:27:24:A5:82:F6:4F:45:BA:C4:C5:EB:38:8E:99:05
            X509v3 Authority Key Identifier:
                keyid:E9:1D:51:E5:4A:89:C0:DD:BD:57:F0:0A:13:E9:6E:36:FA:29:AB:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E91D51E54A89C0DDBD57F00A13E96E36FA29AB27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25a72eb9-8e53-4472-a35a-fee8bf0af46f/0/3130332e34372e31302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b1:59:8a:6e:ec:f2:4d:4d:69:77:ed:80:1c:74:e9:72:3c:
         db:ba:9e:db:74:d0:5b:c9:28:50:ef:44:68:ba:27:72:03:e2:
         eb:6b:fa:62:28:f5:01:c4:50:c1:9f:f7:fe:87:4e:c6:2d:f3:
         c6:37:4e:17:ac:71:dc:cb:b5:7d:2c:a6:2d:c0:d8:fd:f8:de:
         bd:6e:43:8b:ed:d1:b5:d6:86:ef:8c:d2:bb:a2:fc:b6:a0:0a:
         a0:25:75:7b:8e:54:14:42:01:5d:a0:a8:1e:68:8a:1d:1d:98:
         c7:60:69:31:6d:fa:8f:0c:49:24:83:eb:ae:f6:b0:31:ce:29:
         c5:80:bf:bd:4a:26:4a:e4:b7:bd:18:f7:6c:24:db:20:95:66:
         b4:11:c2:74:73:fd:ec:b1:f8:46:37:d0:e2:89:68:05:f9:c9:
         33:1d:ca:72:2d:41:14:0b:1f:3a:6b:8f:e3:a7:bf:a9:ae:1e:
         af:33:aa:73:fa:b2:01:b1:be:d2:4e:68:9b:4a:82:99:22:cc:
         23:47:37:79:f0:d5:7a:19:98:12:8f:1b:25:2d:30:a8:0e:8f:
         ae:cf:8a:06:59:6a:de:04:b9:90:b0:cb:17:c9:b0:d9:9f:ea:
         76:fa:b2:df:9c:f8:00:3d:83:91:96:aa:9b:f7:2f:ee:68:0e:
         26:1b:f5:05
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGDfTpGHrQ7k+vwpNyJJZc5E0dJswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZG
QTI5QUIyNzAeFw0yMzExMTcxNjU1MDFaFw0yNDExMTUxNzAwMDFaMDMxMTAvBgNV
BAMTKDNFQjRDRkYxQzgyNzI0QTU4MkY2NEY0NUJBQzRDNUVCMzg4RTk5MDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPLeKp42cUFXzBrPuvJCHsvuxL
wUQgAFQW/KC0cvEmOThR4LDnen4BRq725wfRykQXi4M98oIJG4SNXW+tMwSE8Vhi
Jn+b3FS3SGja2qTXzAMpuOm51AWNRBakx6RGgiEBdxAOr7XbczZBclB0ioMCBJTX
7zBbR0Mu48YKCbZS3TLAPK8WWTjqvMIeZqLS7RjNJ/xyfxd+vaSOm8Kl9w1un/cf
OM0RmQp6XBhnNdRRxuM0yuPbqVcjHt0k8BcKPGyIp8ClYrcfs6Du3Kh2D0tsG1z0
RYvAgB2b4YjjTsusObgiCcuQ/w0MLeoSkzQqfeZuoMqdOBVtzC8IDdKpWpabAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUPrTP8cgnJKWC9k9FusTF6ziOmQUwHwYDVR0j
BBgwFoAU6R1R5UqJwN29V/AKE+luNvopqycwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NWE3MmViOS04ZTUzLTQ0NzItYTM1YS1mZWU4YmYwYWY0NmYvMC9FOTFENTFFNTRB
ODlDMEREQkQ1N0YwMEExM0U5NkUzNkZBMjlBQjI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTkxRDUxRTU0QTg5QzBEREJENTdGMDBBMTNFOTZFMzZGQTI5
QUIyNy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1YTcyZWI5LThlNTMtNDQ3Mi1h
MzVhLWZlZThiZjBhZjQ2Zi8wLzMxMzAzMzJlMzQzNzJlMzEzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM1MzkzMjM3MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnLwowDQYJKoZIhvcN
AQELBQADggEBAIqxWYpu7PJNTWl37YAcdOlyPNu6ntt00FvJKFDvRGi6J3ID4utr
+mIo9QHEUMGf9/6HTsYt88Y3ThescdzLtX0spi3A2P343r1uQ4vt0bXWhu+M0rui
/LagCqAldXuOVBRCAV2gqB5oih0dmMdgaTFt+o8MSSSD6672sDHOKcWAv71KJkrk
t70Y92wk2yCVZrQRwnRz/eyx+EY30OKJaAX5yTMdynItQRQLHzprj+Onv6muHq8z
qnP6sgGxvtJOaJtKgpkizCNHN3nw1XoZmBKPGyUtMKgOj67PigZZat4EuZCwyxfJ
sNmf6nb6st+c+AA9g5GWqpv3L+5oDiYb9QU=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:55 2024 by rpki-client on console-ams.rpki-client.org