Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa
File:                     3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa (raw, json)
Hash identifier:          GM58lZHj+C3AlRkzYVt3K8x88I0KDDlAS8VjQ4kWQUk=
Subject key identifier:   92:0A:E8:45:65:84:12:C5:45:E1:0F:25:6C:20:EE:2F:E3:48:41:A6
Certificate issuer:       /CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
Certificate serial:       5503418BAB105B032A4D2991A9216C63F13CD884
Authority key identifier: 1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa
Signing time:             Mon 01 Jul 2024 01:02:24 +0000
ROA not before:           Mon 01 Jul 2024 00:57:24 +0000
ROA not after:            Mon 30 Jun 2025 01:02:24 +0000
asID:                     139425
IP address blocks:        103.144.90.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl
                          rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:03:41:8b:ab:10:5b:03:2a:4d:29:91:a9:21:6c:63:f1:3c:d8:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE
        Validity
            Not Before: Jul  1 00:57:24 2024 GMT
            Not After : Jun 30 01:02:24 2025 GMT
        Subject: CN=920AE845658412C545E10F256C20EE2FE34841A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:86:31:af:e5:db:11:96:1b:68:6e:c8:b2:81:
                    27:f2:84:48:70:a7:1c:7f:a7:63:67:34:b7:5c:d4:
                    26:e1:ab:ab:dc:b9:1b:7b:ea:8e:77:62:3d:91:0b:
                    dd:c6:43:f2:a8:ba:38:59:fa:1c:2d:6a:cb:92:ba:
                    50:96:7e:10:8e:65:91:01:45:ae:ea:11:00:fd:5b:
                    b9:72:94:1b:e8:32:88:fa:8e:9d:ef:4a:05:e9:2c:
                    a4:da:97:c9:57:2d:17:fa:b6:4c:c8:e4:98:c2:55:
                    a5:be:33:0a:c3:22:e5:23:5e:49:88:19:93:7f:80:
                    16:24:17:f5:0f:25:c2:05:96:00:33:ef:3f:bc:3c:
                    27:43:19:9f:1e:e4:fa:17:dc:b2:15:e7:0a:c7:db:
                    1a:59:03:28:7e:f4:68:1e:f3:b3:ec:f1:94:c7:fe:
                    c2:cf:cd:e0:88:25:87:ec:78:c8:f7:e1:db:30:10:
                    4d:d6:b7:39:34:4e:b8:07:d5:76:df:c6:42:a1:40:
                    c5:22:d9:ac:0e:bb:ff:ee:b9:7d:b1:cd:8d:a9:69:
                    02:c4:f5:c0:2d:37:b5:a0:5b:bc:7d:3f:7d:94:bd:
                    17:66:9e:c2:45:37:61:4f:db:2a:e5:46:bd:48:26:
                    ae:f2:14:1c:5a:d2:78:17:0b:bf:c3:a0:db:32:d9:
                    b2:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:0A:E8:45:65:84:12:C5:45:E1:0F:25:6C:20:EE:2F:E3:48:41:A6
            X509v3 Authority Key Identifier:
                keyid:1E:07:47:65:6C:CC:5D:4B:BB:DB:85:B8:DE:73:5A:6D:F4:4C:72:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E0747656CCC5D4BBBDB85B8DE735A6DF44C72AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26ead2f5-8b65-4829-884b-d7c06dd0f83a/0/3130332e3134342e39302e302f32332d3234203d3e20313339343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:26:90:ef:97:de:d3:4e:e5:e8:a1:b2:81:7f:2e:8a:d1:
         c5:ef:76:01:1c:59:76:f4:93:a7:45:ca:b1:f6:66:49:bb:f3:
         9c:43:27:cb:5a:6d:f3:67:fe:89:18:3b:a1:b0:9e:92:78:ee:
         8a:11:59:48:9f:72:9d:bb:5b:17:8d:07:77:67:4f:72:9c:eb:
         8b:77:51:de:f9:09:a3:43:2a:2c:17:ba:9e:90:8a:fd:ab:75:
         af:ac:bb:73:82:33:6d:1e:48:b6:db:9c:fc:41:9d:3d:45:8b:
         8b:76:e5:fa:54:1c:f9:71:be:c1:da:48:05:92:65:63:3f:90:
         43:91:fc:aa:4a:b4:95:b1:7e:39:e5:7c:12:ae:53:34:93:0f:
         bf:9f:f6:e1:bb:27:e0:33:1a:27:66:39:09:f0:2f:73:b7:e0:
         dd:2d:21:2f:35:9b:de:d0:6f:6b:c6:7c:bb:26:c2:27:04:3e:
         97:72:be:fd:1d:d4:6b:14:a5:b0:56:85:0a:1b:25:7a:b2:18:
         09:b7:43:1f:35:f5:b7:ba:c9:12:dd:30:46:66:8c:ea:58:0e:
         b2:3b:09:3e:6c:d8:ba:53:8a:62:e9:12:b5:87:73:b5:4c:6f:
         58:18:33:2f:5c:d5:f0:8c:b2:c3:2c:08:8c:3f:2a:bd:05:3c:
         ae:4a:31:0f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVQNBi6sQWwMqTSmRqSFsY/E82IQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRG
NDRDNzJBRTAeFw0yNDA3MDEwMDU3MjRaFw0yNTA2MzAwMTAyMjRaMDMxMTAvBgNV
BAMTKDkyMEFFODQ1NjU4NDEyQzU0NUUxMEYyNTZDMjBFRTJGRTM0ODQxQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfhjGv5dsRlhtobsiygSfyhEhw
pxx/p2NnNLdc1Cbhq6vcuRt76o53Yj2RC93GQ/KoujhZ+hwtasuSulCWfhCOZZEB
Ra7qEQD9W7lylBvoMoj6jp3vSgXpLKTal8lXLRf6tkzI5JjCVaW+MwrDIuUjXkmI
GZN/gBYkF/UPJcIFlgAz7z+8PCdDGZ8e5PoX3LIV5wrH2xpZAyh+9Gge87Ps8ZTH
/sLPzeCIJYfseMj34dswEE3Wtzk0TrgH1XbfxkKhQMUi2awOu//uuX2xzY2paQLE
9cAtN7WgW7x9P32UvRdmnsJFN2FP2yrlRr1IJq7yFBxa0ngXC7/DoNsy2bJhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkgroRWWEEsVF4Q8lbCDuL+NIQaYwHwYDVR0j
BBgwFoAUHgdHZWzMXUu724W43nNabfRMcq4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
NmVhZDJmNS04YjY1LTQ4MjktODg0Yi1kN2MwNmRkMGY4M2EvMC8xRTA3NDc2NTZD
Q0M1RDRCQkJEQjg1QjhERTczNUE2REY0NEM3MkFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUUwNzQ3NjU2Q0NDNUQ0QkJCREI4NUI4REU3MzVBNkRGNDRD
NzJBRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI2ZWFkMmY1LThiNjUtNDgyOS04
ODRiLWQ3YzA2ZGQwZjgzYS8wLzMxMzAzMzJlMzEzNDM0MmUzOTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5BaMA0GCSqG
SIb3DQEBCwUAA4IBAQA7ziaQ75fe007l6KGygX8uitHF73YBHFl29JOnRcqx9mZJ
u/OcQyfLWm3zZ/6JGDuhsJ6SeO6KEVlIn3Kdu1sXjQd3Z09ynOuLd1He+QmjQyos
F7qekIr9q3WvrLtzgjNtHki225z8QZ09RYuLduX6VBz5cb7B2kgFkmVjP5BDkfyq
SrSVsX455XwSrlM0kw+/n/bhuyfgMxonZjkJ8C9zt+DdLSEvNZve0G9rxny7JsIn
BD6Xcr79HdRrFKWwVoUKGyV6shgJt0MfNfW3uskS3TBGZozqWA6yOwk+bNi6U4pi
6RK1h3O1TG9YGDMvXNXwjLLDLAiMPyq9BTyuSjEP
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org