Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa
File:                     3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa (raw, json)
Hash identifier:          xtMMDOKcJRqdrMbIl4bqFudEcqIMJ4lXRgUzoc14eXk=
Subject key identifier:   7E:39:3F:8B:E3:A9:0D:0D:B6:6F:71:C6:B3:05:7B:37:2B:89:83:AF
Certificate issuer:       /CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
Certificate serial:       593CD2F68886C80D32A5DE5CAE9B2F31F373C2B9
Authority key identifier: D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa
Signing time:             Mon 01 Jan 2024 17:00:01 +0000
ROA not before:           Mon 01 Jan 2024 16:55:01 +0000
ROA not after:            Mon 30 Dec 2024 17:00:01 +0000
asID:                     150523
IP address blocks:        103.75.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl
                          rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:3c:d2:f6:88:86:c8:0d:32:a5:de:5c:ae:9b:2f:31:f3:73:c2:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0F79D826E43EAB61A7A834E6A2777C5EC821FFD
        Validity
            Not Before: Jan  1 16:55:01 2024 GMT
            Not After : Dec 30 17:00:01 2024 GMT
        Subject: CN=7E393F8BE3A90D0DB66F71C6B3057B372B8983AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:bb:60:ab:dc:c3:a0:ee:a7:e7:71:0c:51:
                    a0:ce:e6:05:d4:42:dc:81:81:00:27:f8:5c:03:3d:
                    c7:16:5d:2d:3f:96:01:8a:b2:cc:fe:e2:c9:97:6b:
                    9d:49:11:85:d1:48:8d:43:e5:7b:c7:8b:34:f6:28:
                    f4:06:34:28:ce:de:c4:60:6b:4b:5e:8d:19:c5:fb:
                    2f:77:70:6b:71:8a:4e:4a:82:53:d6:5d:b9:a9:88:
                    92:68:36:32:9c:8f:b5:e8:11:67:7b:72:06:23:f8:
                    2c:6e:d6:c0:1e:e4:7f:0b:cf:e5:4e:bc:86:b1:b7:
                    0e:e4:46:22:0a:e3:f6:ff:86:80:fd:4b:44:79:71:
                    9b:3e:b0:bf:46:24:2c:6c:72:4b:e8:b2:d8:cb:4a:
                    4f:0d:12:eb:13:40:5a:69:54:1d:80:73:56:23:e2:
                    52:20:58:c1:48:15:42:6b:0f:4e:08:ce:b9:f7:53:
                    a8:30:87:67:b5:a8:3f:cc:21:ba:95:50:47:e1:16:
                    76:58:97:a7:44:75:20:50:45:6b:25:dd:7c:f6:db:
                    0d:84:61:fa:42:53:65:e9:6a:69:d7:d9:01:8f:51:
                    bd:c9:d4:a5:3d:a4:4d:a7:80:0b:f5:87:c2:8e:c1:
                    f6:e6:1b:c1:20:f0:f1:bd:82:e6:dc:80:14:d9:53:
                    ce:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:39:3F:8B:E3:A9:0D:0D:B6:6F:71:C6:B3:05:7B:37:2B:89:83:AF
            X509v3 Authority Key Identifier:
                keyid:D0:F7:9D:82:6E:43:EA:B6:1A:7A:83:4E:6A:27:77:C5:EC:82:1F:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0F79D826E43EAB61A7A834E6A2777C5EC821FFD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28463285-7c28-435a-82bb-fcc32d58020e/0/3130332e37352e3133372e302f32342d3234203d3e20313530353233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.75.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:8b:a1:c2:4a:34:ee:a6:31:39:09:e0:05:32:85:67:97:c5:
         42:0b:30:7b:7c:dc:90:31:cd:c8:ff:1b:22:8e:11:9f:70:bf:
         66:d4:21:a7:11:5a:75:81:d5:30:08:c9:d1:0c:22:41:72:e6:
         38:ab:cc:22:af:c1:c2:7b:a6:d8:d9:88:7c:17:60:16:00:0f:
         e1:4a:7c:cf:93:3f:61:2e:0f:83:e7:5f:33:10:0b:f8:82:4e:
         3b:e7:bc:25:ef:b7:07:7b:e1:9d:be:6b:c3:b6:fb:73:1a:d0:
         08:85:aa:12:5b:be:8e:19:09:5a:fe:0c:c9:aa:88:a9:33:e2:
         2b:ba:d6:bd:dc:41:52:35:ea:ae:e5:04:9f:77:1e:b8:e7:d8:
         58:f5:5e:78:27:08:bf:66:93:bd:e7:6c:dd:41:63:ce:01:4e:
         a5:ec:ef:a8:59:4a:7f:7d:91:ee:1f:b7:2f:17:5b:86:19:90:
         b8:73:99:27:25:b0:fe:93:60:f9:13:5e:b6:46:9d:ec:e5:20:
         eb:41:52:40:ea:a0:1f:74:12:39:c7:e6:78:cd:2a:f5:55:98:
         c4:b2:91:e7:1d:25:d4:74:10:e8:c0:a4:01:48:2c:90:62:b6:
         22:6d:94:55:6c:b0:f4:4b:7c:6d:eb:5c:31:fa:8e:4e:91:17:
         2c:cd:cc:aa
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWTzS9oiGyA0ypd5crpsvMfNzwrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVF
QzgyMUZGRDAeFw0yNDAxMDExNjU1MDFaFw0yNDEyMzAxNzAwMDFaMDMxMTAvBgNV
BAMTKDdFMzkzRjhCRTNBOTBEMERCNjZGNzFDNkIzMDU3QjM3MkI4OTgzQUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX+btgq9zDoO6n53EMUaDO5gXU
QtyBgQAn+FwDPccWXS0/lgGKssz+4smXa51JEYXRSI1D5XvHizT2KPQGNCjO3sRg
a0tejRnF+y93cGtxik5KglPWXbmpiJJoNjKcj7XoEWd7cgYj+Cxu1sAe5H8Lz+VO
vIaxtw7kRiIK4/b/hoD9S0R5cZs+sL9GJCxsckvostjLSk8NEusTQFppVB2Ac1Yj
4lIgWMFIFUJrD04Izrn3U6gwh2e1qD/MIbqVUEfhFnZYl6dEdSBQRWsl3Xz22w2E
YfpCU2XpamnX2QGPUb3J1KU9pE2ngAv1h8KOwfbmG8Eg8PG9gubcgBTZU845AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfjk/i+OpDQ22b3HGswV7NyuJg68wHwYDVR0j
BBgwFoAU0Pedgm5D6rYaeoNOaid3xeyCH/0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ODQ2MzI4NS03YzI4LTQzNWEtODJiYi1mY2MzMmQ1ODAyMGUvMC9EMEY3OUQ4MjZF
NDNFQUI2MUE3QTgzNEU2QTI3NzdDNUVDODIxRkZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBGNzlEODI2RTQzRUFCNjFBN0E4MzRFNkEyNzc3QzVFQzgy
MUZGRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzI4NDYzMjg1LTdjMjgtNDM1YS04
MmJiLWZjYzMyZDU4MDIwZS8wLzMxMzAzMzJlMzczNTJlMzEzMzM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMjMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0uJMA0GCSqG
SIb3DQEBCwUAA4IBAQCfi6HCSjTupjE5CeAFMoVnl8VCCzB7fNyQMc3I/xsijhGf
cL9m1CGnEVp1gdUwCMnRDCJBcuY4q8wir8HCe6bY2Yh8F2AWAA/hSnzPkz9hLg+D
518zEAv4gk4757wl77cHe+GdvmvDtvtzGtAIhaoSW76OGQla/gzJqoipM+Iruta9
3EFSNequ5QSfdx6459hY9V54Jwi/ZpO952zdQWPOAU6l7O+oWUp/fZHuH7cvF1uG
GZC4c5knJbD+k2D5E162Rp3s5SDrQVJA6qAfdBI5x+Z4zSr1VZjEspHnHSXUdBDo
wKQBSCyQYrYibZRVbLD0S3xt61wx+o5OkRcszcyq
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:41 2024 by rpki-client on console-fra.rpki-client.org