Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa
File:                     3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa (raw, json)
Hash identifier:          zZakuOmqTaPYvlnDGqieXdb5+PUOtUVcUy3BMfF3gIo=
Subject key identifier:   55:DC:F1:9D:8D:8F:2C:A6:EF:3C:BD:6F:FD:36:F1:7E:47:A6:06:10
Certificate issuer:       /CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
Certificate serial:       3AE14433AF1FBFA8C90DF240AB5E82F8BEC23A59
Authority key identifier: B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa
Signing time:             Wed 20 Nov 2024 09:00:03 +0000
ROA not before:           Wed 20 Nov 2024 08:55:03 +0000
ROA not after:            Wed 19 Nov 2025 09:00:03 +0000
asID:                     58487
IP address blocks:        103.253.214.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl
                          rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:29:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:e1:44:33:af:1f:bf:a8:c9:0d:f2:40:ab:5e:82:f8:be:c2:3a:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B6F1322321412EFD041A6C2C0B297A1092AABE6E
        Validity
            Not Before: Nov 20 08:55:03 2024 GMT
            Not After : Nov 19 09:00:03 2025 GMT
        Subject: CN=55DCF19D8D8F2CA6EF3CBD6FFD36F17E47A60610
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:8d:33:04:bb:c2:4d:41:86:03:02:69:39:
                    86:10:5b:58:91:6f:65:1d:cd:0c:c6:14:92:a6:a6:
                    ad:dc:d4:da:d2:f0:98:4b:9b:65:04:c4:e3:d0:b5:
                    80:64:05:c8:92:c0:d3:bc:6d:ae:90:f3:d1:f3:39:
                    e5:8f:fe:d0:55:e8:16:c9:24:25:c8:fb:8f:60:16:
                    34:80:28:4b:97:04:d4:07:32:c3:64:32:9e:cd:a8:
                    51:53:ca:67:87:49:50:9c:c3:bd:97:cb:35:15:11:
                    f7:4c:cc:0e:32:86:88:8a:d9:b0:1a:0d:57:9b:26:
                    f8:d6:3d:8e:e8:42:0b:b4:d7:43:f3:06:db:cf:7b:
                    73:71:13:52:e2:ee:79:79:8f:48:e2:54:31:5d:af:
                    61:74:57:4e:56:3e:24:61:22:a2:d2:f8:1c:8e:4c:
                    d0:df:24:0e:65:fa:8f:92:55:8d:f3:2c:44:38:b6:
                    4d:e4:63:99:a3:82:13:cb:f1:5d:91:21:58:47:8a:
                    50:62:26:ea:b0:9b:06:59:43:67:3d:ec:4b:f1:d5:
                    16:d9:08:80:3c:9a:78:a7:e4:91:bc:e6:5c:dc:63:
                    d8:70:6b:25:12:cc:a5:62:5f:b6:0e:2b:6e:1f:dd:
                    b3:bf:ec:00:5e:3c:63:94:f4:5b:11:b1:73:98:85:
                    9e:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:DC:F1:9D:8D:8F:2C:A6:EF:3C:BD:6F:FD:36:F1:7E:47:A6:06:10
            X509v3 Authority Key Identifier:
                keyid:B6:F1:32:23:21:41:2E:FD:04:1A:6C:2C:0B:29:7A:10:92:AA:BE:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/B6F1322321412EFD041A6C2C0B297A1092AABE6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B6F1322321412EFD041A6C2C0B297A1092AABE6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d8f060f-e4b3-4a4e-97fd-f61ab17deeed/0/3130332e3235332e3231342e302f32342d3234203d3e203538343837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:77:ba:b6:a9:34:b7:ab:61:ce:86:90:af:3a:36:38:da:cd:
         f5:73:51:49:62:cb:15:31:f6:6b:cd:a9:a5:86:1a:88:7d:5e:
         a3:37:8e:b9:2a:c9:51:bd:44:9b:cf:f8:7b:85:a6:52:db:cc:
         9a:e3:47:ae:9a:09:78:89:2f:d9:73:4c:00:ad:23:df:48:6a:
         53:12:03:00:0c:19:53:2d:83:66:bc:2e:0f:36:d7:40:5b:7c:
         8f:11:67:ca:12:01:78:ff:8e:33:be:24:f0:4f:73:00:ac:c2:
         b7:5c:58:4a:cc:73:fb:19:72:88:a9:6e:55:b2:2b:3e:98:3f:
         33:53:fe:ca:61:86:cf:b5:8e:c5:13:a8:bb:fc:38:69:db:88:
         bc:8d:f9:03:eb:11:c0:42:eb:e5:18:7a:17:40:84:16:6c:ab:
         e3:d6:84:d9:d8:1a:7c:09:e5:8c:89:46:f6:d2:33:22:96:0e:
         4d:3b:c9:30:57:08:aa:68:bb:cb:f3:40:c6:99:33:9d:d6:5f:
         2f:ec:2d:d6:3c:2b:f1:20:4a:43:85:0c:18:89:e9:bc:22:70:
         43:4a:50:e3:39:3f:f6:93:75:9d:c8:6c:13:16:46:2d:17:4e:
         13:1a:39:20:c9:30:e6:44:3b:ea:df:3b:80:76:6a:92:a7:66:
         71:e8:55:b5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOuFEM68fv6jJDfJAq16C+L7COlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5
MkFBQkU2RTAeFw0yNDExMjAwODU1MDNaFw0yNTExMTkwOTAwMDNaMDMxMTAvBgNV
BAMTKDU1RENGMTlEOEQ4RjJDQTZFRjNDQkQ2RkZEMzZGMTdFNDdBNjA2MTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB7Y0zBLvCTUGGAwJpOYYQW1iR
b2UdzQzGFJKmpq3c1NrS8JhLm2UExOPQtYBkBciSwNO8ba6Q89HzOeWP/tBV6BbJ
JCXI+49gFjSAKEuXBNQHMsNkMp7NqFFTymeHSVCcw72XyzUVEfdMzA4yhoiK2bAa
DVebJvjWPY7oQgu010PzBtvPe3NxE1Li7nl5j0jiVDFdr2F0V05WPiRhIqLS+ByO
TNDfJA5l+o+SVY3zLEQ4tk3kY5mjghPL8V2RIVhHilBiJuqwmwZZQ2c97Evx1RbZ
CIA8mnin5JG85lzcY9hwayUSzKViX7YOK24f3bO/7ABePGOU9FsRsXOYhZ6FAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUVdzxnY2PLKbvPL1v/TbxfkemBhAwHwYDVR0j
BBgwFoAUtvEyIyFBLv0EGmwsCyl6EJKqvm4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZDhmMDYwZi1lNGIzLTRhNGUtOTdmZC1mNjFhYjE3ZGVlZWQvMC9CNkYxMzIyMzIx
NDEyRUZEMDQxQTZDMkMwQjI5N0ExMDkyQUFCRTZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjZGMTMyMjMyMTQxMkVGRDA0MUE2QzJDMEIyOTdBMTA5MkFB
QkU2RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkOGYwNjBmLWU0YjMtNGE0ZS05
N2ZkLWY2MWFiMTdkZWVlZC8wLzMxMzAzMzJlMzIzNTMzMmUzMjMxMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzQzODM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ/3WMA0GCSqG
SIb3DQEBCwUAA4IBAQCld7q2qTS3q2HOhpCvOjY42s31c1FJYssVMfZrzamlhhqI
fV6jN465KslRvUSbz/h7haZS28ya40eumgl4iS/Zc0wArSPfSGpTEgMADBlTLYNm
vC4PNtdAW3yPEWfKEgF4/44zviTwT3MArMK3XFhKzHP7GXKIqW5Vsis+mD8zU/7K
YYbPtY7FE6i7/Dhp24i8jfkD6xHAQuvlGHoXQIQWbKvj1oTZ2Bp8CeWMiUb20jMi
lg5NO8kwVwiqaLvL80DGmTOd1l8v7C3WPCvxIEpDhQwYiem8InBDSlDjOT/2k3Wd
yGwTFkYtF04TGjkgyTDmRDvq3zuAdmqSp2Zx6FW1
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org