Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          3rQ/F76ByaysAKaUiNC11yN8lb+OkqlurvNNqtHfwsY=
Subject key identifier:   BB:09:F9:12:47:A6:03:1F:52:70:EB:A3:5A:58:6F:4C:AB:90:CE:C2
Certificate issuer:       /CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
Certificate serial:       34D59321F4A456FD9DAAA4045425756C9BC78B50
Authority key identifier: 03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 18 Feb 2024 16:00:01 +0000
ROA not before:           Sun 18 Feb 2024 15:55:01 +0000
ROA not after:            Sun 16 Feb 2025 16:00:01 +0000
asID:                     139952
IP address blocks:        103.162.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl
                          rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:d5:93:21:f4:a4:56:fd:9d:aa:a4:04:54:25:75:6c:9b:c7:8b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=030BE557286D3A4FE6E9AA70636EC79D178ACE1F
        Validity
            Not Before: Feb 18 15:55:01 2024 GMT
            Not After : Feb 16 16:00:01 2025 GMT
        Subject: CN=BB09F91247A6031F5270EBA35A586F4CAB90CEC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:91:f8:9b:35:e0:0a:db:c4:c8:cf:9d:81:7a:
                    94:16:95:21:17:f3:82:b5:0a:e6:93:b3:8e:50:60:
                    b1:70:b3:1f:cd:75:b3:0c:17:e8:4a:0a:e8:71:91:
                    38:40:47:ac:b4:71:3d:83:ba:e6:3a:ae:71:e5:c8:
                    dc:0e:f9:4e:3f:88:36:72:c8:75:92:c1:ce:cd:82:
                    ef:1a:2a:8d:85:20:8e:40:fe:74:d4:0c:c5:e3:32:
                    6b:c9:36:c6:0f:ca:94:e5:33:f8:ef:e7:13:72:bf:
                    50:5c:fa:35:ef:78:cc:fe:d3:80:0d:42:3c:24:f0:
                    8a:4c:d1:c6:69:e2:d5:4d:21:dd:e1:1b:22:f7:08:
                    96:1f:0f:1a:f6:f6:cd:60:9c:59:3d:34:d8:c6:fb:
                    73:67:2c:4b:09:f4:0e:d2:b2:ba:71:7f:66:1e:90:
                    b7:98:fe:8a:51:af:9c:79:a6:1b:e1:e3:54:a7:7c:
                    90:be:39:74:0d:ba:f6:8f:c2:9f:0a:62:d0:aa:a4:
                    ea:fe:41:83:46:aa:43:93:78:0a:ee:ff:fd:51:0a:
                    c6:64:a2:b4:0f:c0:ad:7f:4a:78:69:be:4d:97:d1:
                    b1:fc:7d:e4:5a:b7:18:35:06:cf:81:f3:42:0c:9d:
                    2b:c7:66:35:93:aa:03:8c:f1:30:1e:13:46:43:28:
                    44:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:09:F9:12:47:A6:03:1F:52:70:EB:A3:5A:58:6F:4C:AB:90:CE:C2
            X509v3 Authority Key Identifier:
                keyid:03:0B:E5:57:28:6D:3A:4F:E6:E9:AA:70:63:6E:C7:9D:17:8A:CE:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/030BE557286D3A4FE6E9AA70636EC79D178ACE1F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/358c8f9f-4213-4a2a-85c3-b24b0d0b5107/0/3130332e3136322e3232302e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b0:17:55:2d:88:13:7b:00:f7:72:1d:2b:8b:55:2b:a1:78:
         0d:41:57:b0:1f:90:8b:2f:ba:8c:71:ff:a5:91:15:41:bf:56:
         45:ea:bc:ac:b6:0f:be:84:fe:98:60:09:b2:97:e3:91:91:12:
         6e:a7:ef:61:6c:c7:6a:56:b7:4a:b6:36:84:23:aa:b4:47:14:
         a7:9a:77:7d:36:b7:cd:6a:a7:07:a4:c5:76:8e:1e:07:cb:b2:
         63:99:1f:6a:4f:88:f2:c4:eb:6e:cd:02:8b:89:ff:ef:b4:7a:
         8b:f9:54:d7:57:c9:71:20:62:e2:8e:79:05:65:15:d5:5a:cb:
         a0:b3:5f:e2:a1:15:05:7d:4a:9e:1d:75:c5:10:75:d6:bf:3f:
         3a:59:a8:0d:e4:af:dd:38:4a:70:c8:ac:83:2e:13:f1:bb:88:
         70:9b:93:3c:53:cf:0d:2b:13:26:c4:fa:cf:95:ad:ab:e7:10:
         dd:f9:61:d0:53:33:6f:a5:73:7a:d0:dc:bc:d4:3b:1b:07:e1:
         02:87:51:0c:dd:f6:3d:a3:8a:c0:3e:7d:7d:72:48:9e:f7:36:
         a8:ee:4c:1d:75:80:1c:45:2e:9b:5a:5c:19:05:4d:4b:d3:5f:
         26:e7:f6:66:17:2e:dd:6d:c8:82:24:e1:98:62:9c:f7:8e:d7:
         fd:0c:45:48
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNNWTIfSkVv2dqqQEVCV1bJvHi1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQx
NzhBQ0UxRjAeFw0yNDAyMTgxNTU1MDFaFw0yNTAyMTYxNjAwMDFaMDMxMTAvBgNV
BAMTKEJCMDlGOTEyNDdBNjAzMUY1MjcwRUJBMzVBNTg2RjRDQUI5MENFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjkfibNeAK28TIz52BepQWlSEX
84K1CuaTs45QYLFwsx/NdbMMF+hKCuhxkThAR6y0cT2DuuY6rnHlyNwO+U4/iDZy
yHWSwc7Ngu8aKo2FII5A/nTUDMXjMmvJNsYPypTlM/jv5xNyv1Bc+jXveMz+04AN
Qjwk8IpM0cZp4tVNId3hGyL3CJYfDxr29s1gnFk9NNjG+3NnLEsJ9A7Ssrpxf2Ye
kLeY/opRr5x5phvh41SnfJC+OXQNuvaPwp8KYtCqpOr+QYNGqkOTeAru//1RCsZk
orQPwK1/Snhpvk2X0bH8feRatxg1Bs+B80IMnSvHZjWTqgOM8TAeE0ZDKES7AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUuwn5EkemAx9ScOujWlhvTKuQzsIwHwYDVR0j
BBgwFoAUAwvlVyhtOk/m6apwY27HnReKzh8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NThjOGY5Zi00MjEzLTRhMmEtODVjMy1iMjRiMGQwYjUxMDcvMC8wMzBCRTU1NzI4
NkQzQTRGRTZFOUFBNzA2MzZFQzc5RDE3OEFDRTFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDMwQkU1NTcyODZEM0E0RkU2RTlBQTcwNjM2RUM3OUQxNzhB
Q0UxRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1OGM4ZjlmLTQyMTMtNGEyYS04
NWMzLWIyNGIwZDBiNTEwNy8wLzMxMzAzMzJlMzEzNjMyMmUzMjMyMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM1MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnotwwDQYJ
KoZIhvcNAQELBQADggEBAGOwF1UtiBN7APdyHSuLVSuheA1BV7AfkIsvuoxx/6WR
FUG/VkXqvKy2D76E/phgCbKX45GREm6n72Fsx2pWt0q2NoQjqrRHFKead302t81q
pwekxXaOHgfLsmOZH2pPiPLE627NAouJ/++0eov5VNdXyXEgYuKOeQVlFdVay6Cz
X+KhFQV9Sp4ddcUQdda/PzpZqA3kr904SnDIrIMuE/G7iHCbkzxTzw0rEybE+s+V
ravnEN35YdBTM2+lc3rQ3LzUOxsH4QKHUQzd9j2jisA+fX1ySJ73NqjuTB11gBxF
LptaXBkFTUvTXybn9mYXLt1tyIIk4ZhinPeO1/0MRUg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org