Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa
File:                     3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa (raw, json)
Hash identifier:          ztXhRRN4sqRlmctM//ZkJIgrxKZVbXiXbXV1qaWPkUQ=
Subject key identifier:   E7:55:70:E5:9C:FA:D7:AE:26:4E:3C:B7:0B:21:F0:79:D2:AE:13:7A
Certificate issuer:       /CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
Certificate serial:       24FADB64B13A98188B5AC42CF118386912D34201
Authority key identifier: C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa
Signing time:             Thu 25 Jul 2024 05:02:17 +0000
ROA not before:           Thu 25 Jul 2024 04:57:17 +0000
ROA not after:            Thu 24 Jul 2025 05:02:17 +0000
asID:                     150479
IP address blocks:        103.184.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl
                          rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:fa:db:64:b1:3a:98:18:8b:5a:c4:2c:f1:18:38:69:12:d3:42:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C37B0700A782E6CCEE7D187B10AAF240353AB253
        Validity
            Not Before: Jul 25 04:57:17 2024 GMT
            Not After : Jul 24 05:02:17 2025 GMT
        Subject: CN=E75570E59CFAD7AE264E3CB70B21F079D2AE137A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:46:e6:18:7d:22:58:f7:22:da:4f:43:6b:23:
                    4e:28:f7:cb:78:31:8b:15:89:69:38:f3:14:fa:61:
                    6b:ef:34:86:df:d4:43:e9:2a:b9:76:8c:e6:c0:1e:
                    c2:69:ab:e7:c5:90:73:e4:73:9e:ad:d1:9b:a1:c6:
                    5a:0a:c7:da:58:77:41:04:e2:e1:01:24:42:dd:7f:
                    da:e4:83:3d:f6:7b:7c:8c:84:39:16:7d:d0:85:69:
                    50:96:65:72:a2:9b:5c:45:a7:7a:12:79:ff:b9:7c:
                    3f:0c:b8:e0:76:09:0f:49:38:fd:32:74:7a:cc:ce:
                    03:1a:ac:d1:53:ad:b0:d9:76:09:97:af:64:03:99:
                    b7:43:c6:a7:8b:3d:f0:47:84:8c:92:23:1c:8c:25:
                    13:5d:0f:b4:11:96:93:92:2b:46:65:28:80:e6:53:
                    d5:cb:11:48:c5:99:44:e5:a2:15:1c:80:d3:f4:ef:
                    03:6d:b5:0c:22:ff:c1:2c:3d:4f:b6:f6:a0:1a:13:
                    3c:b3:fd:1a:1a:2f:91:0e:b6:33:9b:a2:04:26:c5:
                    7d:71:68:e5:72:1c:ae:b5:b5:4a:3a:89:f7:e9:d0:
                    c0:bd:80:e8:2f:9b:3e:df:fa:ba:e3:10:ff:72:4e:
                    d9:91:af:f9:c6:83:78:36:13:ca:78:3c:92:30:09:
                    17:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:55:70:E5:9C:FA:D7:AE:26:4E:3C:B7:0B:21:F0:79:D2:AE:13:7A
            X509v3 Authority Key Identifier:
                keyid:C3:7B:07:00:A7:82:E6:CC:EE:7D:18:7B:10:AA:F2:40:35:3A:B2:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/C37B0700A782E6CCEE7D187B10AAF240353AB253.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C37B0700A782E6CCEE7D187B10AAF240353AB253.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25d38b42-b7c2-42b6-a2fc-675da254c776/0/3130332e3138342e31372e302f32342d3234203d3e20313530343739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:a3:b8:16:6f:65:df:ac:27:ab:03:a1:12:8a:03:5f:6c:17:
         d5:04:2d:64:ce:41:ab:57:ed:4c:8f:4e:f8:34:74:71:1b:68:
         3b:55:a6:0a:76:8f:77:79:17:9f:27:b9:90:aa:24:4e:ce:fa:
         76:a9:d3:f2:4c:cc:c4:69:8c:87:cf:95:80:c8:d5:21:bc:e6:
         13:e2:e8:b2:9d:0d:4a:5e:57:d4:53:7c:4a:dd:85:b4:f0:ae:
         89:50:6e:ba:1f:30:91:75:35:97:ff:2c:90:ad:fb:6d:2b:42:
         db:fa:00:dd:3b:8b:da:a1:ba:fc:0c:6e:17:0e:a1:2c:a3:89:
         69:63:f1:68:3f:8c:00:1a:29:79:78:2e:64:c6:8f:79:56:29:
         12:4f:6d:08:3d:ec:a5:49:bf:04:eb:33:6b:72:d1:4b:9d:e7:
         92:af:93:7a:de:1b:ad:26:d5:1d:1f:39:6e:f6:2a:6a:0f:03:
         cb:4b:2f:57:6b:91:7e:93:f9:1d:b3:6e:e3:21:1b:ee:2a:bf:
         ca:dc:20:b4:50:29:26:9d:ef:25:48:23:40:6f:bc:d4:43:71:
         0c:71:e4:c9:48:51:f3:0a:a0:8f:02:1d:af:7c:6e:75:7a:48:
         02:a9:61:eb:54:0f:2c:88:0c:bd:1e:5d:b9:15:e0:97:7d:34:
         6f:1a:86:b3
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJPrbZLE6mBiLWsQs8Rg4aRLTQgEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAz
NTNBQjI1MzAeFw0yNDA3MjUwNDU3MTdaFw0yNTA3MjQwNTAyMTdaMDMxMTAvBgNV
BAMTKEU3NTU3MEU1OUNGQUQ3QUUyNjRFM0NCNzBCMjFGMDc5RDJBRTEzN0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RuYYfSJY9yLaT0NrI04o98t4
MYsViWk48xT6YWvvNIbf1EPpKrl2jObAHsJpq+fFkHPkc56t0ZuhxloKx9pYd0EE
4uEBJELdf9rkgz32e3yMhDkWfdCFaVCWZXKim1xFp3oSef+5fD8MuOB2CQ9JOP0y
dHrMzgMarNFTrbDZdgmXr2QDmbdDxqeLPfBHhIySIxyMJRNdD7QRlpOSK0ZlKIDm
U9XLEUjFmUTlohUcgNP07wNttQwi/8EsPU+29qAaEzyz/RoaL5EOtjObogQmxX1x
aOVyHK61tUo6iffp0MC9gOgvmz7f+rrjEP9yTtmRr/nGg3g2E8p4PJIwCRe1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU51Vw5Zz6164mTjy3CyHwedKuE3owHwYDVR0j
BBgwFoAUw3sHAKeC5szufRh7EKryQDU6slMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NWQzOGI0Mi1iN2MyLTQyYjYtYTJmYy02NzVkYTI1NGM3NzYvMC9DMzdCMDcwMEE3
ODJFNkNDRUU3RDE4N0IxMEFBRjI0MDM1M0FCMjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzM3QjA3MDBBNzgyRTZDQ0VFN0QxODdCMTBBQUYyNDAzNTNB
QjI1My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI1ZDM4YjQyLWI3YzItNDJiNi1h
MmZjLTY3NWRhMjU0Yzc3Ni8wLzMxMzAzMzJlMzEzODM0MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7gRMA0GCSqG
SIb3DQEBCwUAA4IBAQCko7gWb2XfrCerA6ESigNfbBfVBC1kzkGrV+1Mj074NHRx
G2g7VaYKdo93eRefJ7mQqiROzvp2qdPyTMzEaYyHz5WAyNUhvOYT4uiynQ1KXlfU
U3xK3YW08K6JUG66HzCRdTWX/yyQrfttK0Lb+gDdO4vaobr8DG4XDqEso4lpY/Fo
P4wAGil5eC5kxo95VikST20IPeylSb8E6zNrctFLneeSr5N63hutJtUdHzlu9ipq
DwPLSy9Xa5F+k/kds27jIRvuKr/K3CC0UCkmne8lSCNAb7zUQ3EMceTJSFHzCqCP
Ah2vfG51ekgCqWHrVA8siAy9Hl25FeCXfTRvGoaz
-----END CERTIFICATE-----
Generated at Sun Nov 24 22:10:12 2024 by rpki-client on console-fra.rpki-client.org