Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
File:                     3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier:          ez2LC1r6bTj24Wy82rHkZPj1l/qpP3UX6fekdhBojt4=
Subject key identifier:   58:15:2D:45:77:25:C1:DD:49:C2:C2:D9:59:F8:10:FD:E3:36:7F:2B
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       45833B7371ADE59800A8CB541CA52C58023B9673
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa
Signing time:             Thu 13 Jun 2024 17:00:00 +0000
ROA not before:           Thu 13 Jun 2024 16:55:00 +0000
ROA not after:            Thu 12 Jun 2025 17:00:00 +0000
asID:                     150284
IP address blocks:        103.43.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:83:3b:73:71:ad:e5:98:00:a8:cb:54:1c:a5:2c:58:02:3b:96:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Jun 13 16:55:00 2024 GMT
            Not After : Jun 12 17:00:00 2025 GMT
        Subject: CN=58152D457725C1DD49C2C2D959F810FDE3367F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:20:92:41:fe:38:fd:1e:88:1b:00:95:db:
                    33:40:3d:63:4a:81:3c:24:26:db:31:2b:3b:78:31:
                    20:2b:78:56:5f:36:0d:2e:7c:c7:ee:d2:6e:29:86:
                    fc:36:69:b2:c3:98:1a:ca:9f:4f:7c:86:3a:50:1b:
                    db:32:80:3f:3a:97:2d:1a:9f:20:68:08:25:65:bf:
                    45:40:b6:28:53:d2:94:59:5b:db:14:3f:b1:49:9b:
                    a6:ff:a0:ea:fe:4e:d3:26:28:fd:8f:a2:75:f8:5b:
                    4e:71:95:aa:a2:a8:24:9c:5d:af:71:51:b4:9f:69:
                    67:a8:9b:45:9d:4d:20:1d:af:29:14:47:77:7c:b1:
                    7b:34:10:99:7f:ce:f2:4d:f5:55:84:53:46:50:43:
                    86:be:a6:24:65:9e:50:f1:02:18:52:8a:53:88:77:
                    ba:b5:89:82:f4:2c:24:dc:4c:bc:13:fe:cc:19:da:
                    d5:02:f8:5f:b4:e3:fe:80:a4:93:2a:94:47:53:ea:
                    e0:f7:d6:77:69:d4:a3:a8:da:89:75:44:fc:ec:3d:
                    c7:37:33:88:67:76:7a:4c:c0:2f:06:71:c7:7c:3c:
                    2c:bc:4a:82:20:40:d3:64:cd:e8:0e:74:67:a0:c1:
                    b6:e8:68:59:b5:a1:ee:71:36:dd:bb:ee:62:82:7f:
                    65:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:15:2D:45:77:25:C1:DD:49:C2:C2:D9:59:F8:10:FD:E3:36:7F:2B
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136352e302f32342d3234203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:9b:76:c4:10:cf:5b:76:ad:41:0e:aa:cf:51:32:ac:c5:87:
         d6:b6:0b:ad:71:c3:39:a2:6b:47:9c:0c:ef:b3:46:2d:92:56:
         0a:8c:82:7b:ac:d1:47:05:16:a7:e6:92:2c:de:df:b4:fd:21:
         74:a3:c8:35:c1:e9:f6:0e:71:df:78:6f:be:9a:8b:a4:ad:1a:
         18:b5:8d:02:2b:3f:b5:70:b3:a7:de:a9:80:a0:a7:8e:e3:32:
         ed:8c:33:32:5d:99:83:64:97:e0:24:1e:75:1a:b8:3e:b6:de:
         68:e7:8b:d0:36:ca:69:5d:d1:05:b6:54:fb:3e:c8:0d:3a:34:
         2e:8f:79:4f:c1:12:7b:df:f2:86:ce:55:17:55:6c:a2:a9:99:
         e9:09:08:01:98:6a:a8:dd:fe:56:3e:53:47:38:4a:41:1b:8d:
         0e:d3:71:55:7e:4e:13:05:61:5b:46:e5:22:b8:5e:fe:06:9e:
         36:e3:37:99:17:f1:ad:fb:c4:b9:23:fb:53:a4:da:9b:fb:ba:
         3a:12:d8:bb:cb:46:f4:33:e2:81:5e:4b:8b:48:d4:92:06:c1:
         7e:a1:df:42:0f:2f:51:0d:bd:62:9b:b1:16:e8:01:70:28:60:
         9d:ac:36:4a:de:d1:5f:a8:14:68:ab:74:5e:26:14:7d:9e:53:
         d0:e8:7e:59
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURYM7c3Gt5ZgAqMtUHKUsWAI7lnMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdB
MEI4RDNCMzAeFw0yNDA2MTMxNjU1MDBaFw0yNTA2MTIxNzAwMDBaMDMxMTAvBgNV
BAMTKDU4MTUyRDQ1NzcyNUMxREQ0OUMyQzJEOTU5RjgxMEZERTMzNjdGMkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpXiCSQf44/R6IGwCV2zNAPWNK
gTwkJtsxKzt4MSAreFZfNg0ufMfu0m4phvw2abLDmBrKn098hjpQG9sygD86ly0a
nyBoCCVlv0VAtihT0pRZW9sUP7FJm6b/oOr+TtMmKP2PonX4W05xlaqiqCScXa9x
UbSfaWeom0WdTSAdrykUR3d8sXs0EJl/zvJN9VWEU0ZQQ4a+piRlnlDxAhhSilOI
d7q1iYL0LCTcTLwT/swZ2tUC+F+04/6ApJMqlEdT6uD31ndp1KOo2ol1RPzsPcc3
M4hndnpMwC8Gccd8PCy8SoIgQNNkzegOdGegwbboaFm1oe5xNt277mKCf2XdAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWBUtRXclwd1JwsLZWfgQ/eM2fyswHwYDVR0j
BBgwFoAURCIbPRRfzBdzT3xSM1PLZ6C407MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NjJiYWNjOS1kMjVkLTQ2MTAtYWVlNC02NTVhMTRlYTJmZDYvMC80NDIyMUIzRDE0
NUZDQzE3NzM0RjdDNTIzMzUzQ0I2N0EwQjhEM0IzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDQyMjFCM0QxNDVGQ0MxNzczNEY3QzUyMzM1M0NCNjdBMEI4
RDNCMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM2MmJhY2M5LWQyNWQtNDYxMC1h
ZWU0LTY1NWExNGVhMmZkNi8wLzMxMzAzMzJlMzQzMzJlMzEzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzODM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZyulMA0GCSqG
SIb3DQEBCwUAA4IBAQBBm3bEEM9bdq1BDqrPUTKsxYfWtgutccM5omtHnAzvs0Yt
klYKjIJ7rNFHBRan5pIs3t+0/SF0o8g1wen2DnHfeG++moukrRoYtY0CKz+1cLOn
3qmAoKeO4zLtjDMyXZmDZJfgJB51Grg+tt5o54vQNsppXdEFtlT7PsgNOjQuj3lP
wRJ73/KGzlUXVWyiqZnpCQgBmGqo3f5WPlNHOEpBG40O03FVfk4TBWFbRuUiuF7+
Bp424zeZF/Gt+8S5I/tTpNqb+7o6Eti7y0b0M+KBXkuLSNSSBsF+od9CDy9RDb1i
m7EW6AFwKGCdrDZK3tFfqBRoq3ReJhR9nlPQ6H5Z
-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:15 2024 by rpki-client on console-ams.rpki-client.org