Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa
File:                     3130332e33312e3233342e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier:          uIzkm//IsqjoqzOTCc42AI2epiHC9da7vyBg8nEUGUw=
Subject key identifier:   EE:1C:1F:CE:C5:9D:F2:E4:80:4C:0A:F9:85:D3:93:5E:9D:04:4F:F9
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       1C20C2D08C61E66964600748522222D6C46C714B
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa
Signing time:             Mon 31 Jul 2023 00:13:40 +0000
ROA not before:           Mon 31 Jul 2023 00:08:40 +0000
ROA not after:            Mon 29 Jul 2024 00:13:40 +0000
asID:                     55701
IP address blocks:        103.31.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:31:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:20:c2:d0:8c:61:e6:69:64:60:07:48:52:22:22:d6:c4:6c:71:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jul 31 00:08:40 2023 GMT
            Not After : Jul 29 00:13:40 2024 GMT
        Subject: CN=EE1C1FCEC59DF2E4804C0AF985D3935E9D044FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:20:15:43:86:30:d9:9d:a9:2b:49:6a:d4:da:
                    2e:1e:a4:7e:e5:36:12:74:7d:44:ee:a0:30:15:f0:
                    1e:ef:42:83:5e:56:20:64:41:55:4a:0f:ca:fc:0b:
                    02:df:96:ff:57:c1:f0:19:3d:3c:3c:a5:19:b7:88:
                    7c:9d:49:be:cf:2f:19:3d:5e:0d:1f:43:7d:90:fb:
                    d9:6f:27:e6:46:02:71:a7:ff:b6:21:b3:af:23:1f:
                    e2:f7:54:b9:11:a0:8f:92:28:c8:3c:49:96:39:b3:
                    db:1b:68:16:ac:ae:ed:bc:13:7d:97:3c:07:e0:e2:
                    4d:f0:e5:b9:dd:cb:1c:fd:ac:bf:84:7c:a4:8d:a6:
                    ad:18:74:01:88:6b:8e:b8:4f:3f:a2:0a:66:ed:5a:
                    3b:07:ab:08:4c:a9:98:90:0a:df:26:b6:01:aa:7a:
                    b0:8f:91:fc:da:c2:a8:8b:6e:49:41:44:01:f8:01:
                    68:81:84:dd:03:98:83:c9:b7:47:14:55:ff:35:6f:
                    b8:08:03:8d:43:44:35:5c:70:a1:58:26:55:99:f0:
                    88:a5:1f:2f:17:54:3a:87:71:32:94:55:16:4a:ed:
                    52:89:96:78:1a:52:49:9f:9d:02:69:13:bd:b7:85:
                    38:4e:b1:b5:1f:5a:2c:5c:1d:7a:3b:c0:46:64:f9:
                    6f:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1C:1F:CE:C5:9D:F2:E4:80:4C:0A:F9:85:D3:93:5E:9D:04:4F:F9
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:80:4f:40:7b:f1:fd:de:12:e9:a6:25:aa:87:70:36:45:43:
         97:7c:45:fd:9c:74:de:2e:d4:29:cf:7e:9a:fb:8a:51:95:64:
         06:d2:9f:34:a9:2c:1e:52:c8:80:a4:f0:7e:85:ec:4d:66:da:
         3d:a2:f8:cb:76:72:8d:d8:8a:5a:6d:52:64:62:1f:42:7e:d7:
         0c:ea:d3:c2:af:46:50:4c:56:5c:7d:ce:d6:b9:3c:2b:43:ca:
         0f:da:b1:c3:29:15:c8:b4:0e:6f:57:0f:e5:1f:93:2b:bf:1d:
         a1:0d:7b:eb:5e:35:86:9f:0e:93:49:b0:a5:cc:45:65:ba:5f:
         bc:69:f8:62:46:54:0c:cd:40:3d:53:84:20:a6:eb:06:fd:36:
         0d:e2:59:f4:af:12:9e:3f:47:8c:2c:af:2b:5b:51:9c:4b:8a:
         3d:d4:44:a7:6c:06:5a:65:9f:47:2a:4c:2a:8a:48:e9:1f:34:
         47:d9:7a:6a:c0:07:f5:76:bf:cc:ab:ee:99:20:85:6e:d9:de:
         ba:8a:7a:76:cb:82:da:d8:48:e8:89:5b:5c:f6:16:59:14:22:
         99:2b:18:3c:b0:7b:6e:38:41:1b:ae:ed:da:ab:9d:f5:85:3e:
         6b:6d:7a:53:d5:46:45:b8:e0:d4:a1:18:01:27:98:1c:23:f6:
         44:4c:27:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHCDC0Ixh5mlkYAdIUiIi1sRscUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4
QkY1MEY2QTAeFw0yMzA3MzEwMDA4NDBaFw0yNDA3MjkwMDEzNDBaMDMxMTAvBgNV
BAMTKEVFMUMxRkNFQzU5REYyRTQ4MDRDMEFGOTg1RDM5MzVFOUQwNDRGRjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGIBVDhjDZnakrSWrU2i4epH7l
NhJ0fUTuoDAV8B7vQoNeViBkQVVKD8r8CwLflv9XwfAZPTw8pRm3iHydSb7PLxk9
Xg0fQ32Q+9lvJ+ZGAnGn/7Yhs68jH+L3VLkRoI+SKMg8SZY5s9sbaBasru28E32X
PAfg4k3w5bndyxz9rL+EfKSNpq0YdAGIa464Tz+iCmbtWjsHqwhMqZiQCt8mtgGq
erCPkfzawqiLbklBRAH4AWiBhN0DmIPJt0cUVf81b7gIA41DRDVccKFYJlWZ8Iil
Hy8XVDqHcTKUVRZK7VKJlngaUkmfnQJpE723hThOsbUfWixcHXo7wEZk+W/VAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU7hwfzsWd8uSATAr5hdOTXp0ET/kwHwYDVR0j
BBgwFoAUj4TW/ur4xdPF0T8QG8cLdYv1D2owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
N2Q5Zjg1MS03ZTczLTQzODQtOTUwZS04YmU4ZTE1ZmQzZWUvMC84Rjg0RDZGRUVB
RjhDNUQzQzVEMTNGMTAxQkM3MEI3NThCRjUwRjZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEY4NEQ2RkVFQUY4QzVEM0M1RDEzRjEwMUJDNzBCNzU4QkY1
MEY2QS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI3ZDlmODUxLTdlNzMtNDM4NC05
NTBlLThiZThlMTVmZDNlZS8wLzMxMzAzMzJlMzMzMTJlMzIzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM3MzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcf6jANBgkqhkiG
9w0BAQsFAAOCAQEAKYBPQHvx/d4S6aYlqodwNkVDl3xF/Zx03i7UKc9+mvuKUZVk
BtKfNKksHlLIgKTwfoXsTWbaPaL4y3ZyjdiKWm1SZGIfQn7XDOrTwq9GUExWXH3O
1rk8K0PKD9qxwykVyLQOb1cP5R+TK78doQ176141hp8Ok0mwpcxFZbpfvGn4YkZU
DM1APVOEIKbrBv02DeJZ9K8Snj9HjCyvK1tRnEuKPdREp2wGWmWfRypMKopI6R80
R9l6asAH9Xa/zKvumSCFbtneuop6dsuC2thI6IlbXPYWWRQimSsYPLB7bjhBG67t
2qud9YU+a216U9VGRbjg1KEYASeYHCP2REwnbw==
-----END CERTIFICATE-----
Generated at Tue May 7 03:10:17 2024 by rpki-client on console-fra.rpki-client.org