Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa
File:                     3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa (raw, json)
Hash identifier:          7jb8hiNVlFfdXRF9wAR3yJz3UbQ1w7Exs3/5o/ragQM=
Subject key identifier:   9E:EF:77:47:1F:18:78:C2:C8:09:05:82:EA:2A:52:7D:3D:B9:7F:E8
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       16C4F5D5C71DD70A9DA3D21F86CBD13ACC3C4217
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa
Signing time:             Fri 21 Jun 2024 02:02:11 +0000
ROA not before:           Fri 21 Jun 2024 01:57:11 +0000
ROA not after:            Fri 20 Jun 2025 02:02:11 +0000
asID:                     151506
IP address blocks:        103.234.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:c4:f5:d5:c7:1d:d7:0a:9d:a3:d2:1f:86:cb:d1:3a:cc:3c:42:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Jun 21 01:57:11 2024 GMT
            Not After : Jun 20 02:02:11 2025 GMT
        Subject: CN=9EEF77471F1878C2C8090582EA2A527D3DB97FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:50:31:b6:38:34:34:3a:ec:37:43:23:54:56:
                    d4:28:76:1e:81:85:c2:6e:c1:7a:10:34:3a:39:1c:
                    ae:3a:10:dd:3b:6e:26:86:cf:32:1a:06:62:88:ca:
                    82:d5:1e:c4:a4:90:d3:b8:ef:4e:2b:85:06:43:20:
                    8a:21:cc:5a:46:a2:a7:b4:60:ac:bc:bb:56:bb:4a:
                    df:2b:ac:77:91:0e:52:43:17:a7:f1:85:c8:20:10:
                    16:53:1b:9a:1a:a6:57:cb:ec:18:16:37:d4:54:57:
                    cf:e7:02:d9:ce:22:bc:8c:d3:c9:4d:e8:de:14:21:
                    ee:05:c9:02:aa:4b:1b:cc:a4:51:fc:17:ce:0b:79:
                    72:42:ed:ce:cf:48:13:13:44:98:73:df:4a:5d:ec:
                    87:66:f9:75:08:a4:44:3e:47:1f:2d:f3:10:38:3b:
                    21:74:0f:ef:66:b9:1f:ab:ec:7f:85:b2:c0:c8:5c:
                    0c:70:7d:11:ab:85:73:21:2b:fb:0e:b6:36:92:34:
                    66:2d:7a:2c:53:fa:74:44:e3:b6:ac:76:a6:bd:d3:
                    77:ed:05:08:12:44:5c:00:64:c2:83:66:4f:5d:9f:
                    ef:d3:20:22:10:61:f2:6d:45:47:e6:ae:a7:d3:40:
                    ca:ab:9d:a5:03:a5:45:b5:4a:2d:67:5c:4c:52:02:
                    d6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:EF:77:47:1F:18:78:C2:C8:09:05:82:EA:2A:52:7D:3D:B9:7F:E8
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31392e302f32342d3234203d3e20313531353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a3:ea:69:ca:5a:7a:b0:7f:45:fd:b8:f6:42:20:0f:26:a7:
         6b:8f:4b:4d:fb:5d:46:c0:b6:c9:83:96:e2:f6:df:5f:3e:6c:
         20:c9:61:0a:7d:ea:f7:09:ad:6e:18:3a:b5:d9:55:be:20:9d:
         d8:3b:e5:f5:16:63:3e:d4:d0:9e:9e:68:96:9f:1b:c3:0b:95:
         67:e2:d1:49:2a:9d:ad:c1:5f:3c:3c:b4:35:8e:9c:4c:84:72:
         92:8d:8d:78:6f:58:27:47:a1:16:fe:83:d4:96:75:28:7e:5b:
         49:20:45:7e:8a:67:ab:85:05:d3:3e:8e:5b:7a:aa:f7:be:16:
         96:e1:67:d1:5b:76:33:6b:1a:97:55:4b:89:c1:3e:c3:22:37:
         34:3e:af:f8:29:9b:eb:66:bd:5c:b2:91:38:f3:cd:9c:ac:aa:
         cb:54:bc:c3:e0:d2:d5:65:65:62:47:f1:3e:21:65:dc:8c:94:
         97:7a:bc:bb:f5:32:bd:b0:92:b4:68:3a:10:36:ab:06:fe:3b:
         96:f5:66:2f:93:04:b6:eb:40:49:e0:2d:ce:73:0b:30:10:0b:
         ec:02:be:58:4a:e6:d5:cf:82:9a:5c:b7:19:d2:8f:ae:d4:f6:
         b0:99:b5:c2:b6:48:90:6a:79:01:2f:9c:5b:59:8c:94:dd:e2:
         3f:c4:4f:6a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFsT11ccd1wqdo9IfhsvROsw8QhcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5
NjJBNkMyNjAeFw0yNDA2MjEwMTU3MTFaFw0yNTA2MjAwMjAyMTFaMDMxMTAvBgNV
BAMTKDlFRUY3NzQ3MUYxODc4QzJDODA5MDU4MkVBMkE1MjdEM0RCOTdGRTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUDG2ODQ0Ouw3QyNUVtQodh6B
hcJuwXoQNDo5HK46EN07biaGzzIaBmKIyoLVHsSkkNO4704rhQZDIIohzFpGoqe0
YKy8u1a7St8rrHeRDlJDF6fxhcggEBZTG5oaplfL7BgWN9RUV8/nAtnOIryM08lN
6N4UIe4FyQKqSxvMpFH8F84LeXJC7c7PSBMTRJhz30pd7Idm+XUIpEQ+Rx8t8xA4
OyF0D+9muR+r7H+FssDIXAxwfRGrhXMhK/sOtjaSNGYteixT+nRE47asdqa903ft
BQgSRFwAZMKDZk9dn+/TICIQYfJtRUfmrqfTQMqrnaUDpUW1Si1nXExSAtbJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnu93Rx8YeMLICQWC6ipSfT25f+gwHwYDVR0j
BBgwFoAUc2XVsa4wxbZFCv3emLojH5YqbCYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
ODgzMjljYS1lOGY3LTRkM2QtYWNlNC04MDdmOGFhNThhZTAvMC83MzY1RDVCMUFF
MzBDNUI2NDUwQUZEREU5OEJBMjMxRjk2MkE2QzI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM2NUQ1QjFBRTMwQzVCNjQ1MEFGRERFOThCQTIzMUY5NjJB
NkMyNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM4ODMyOWNhLWU4ZjctNGQzZC1h
Y2U0LTgwN2Y4YWE1OGFlMC8wLzMxMzAzMzJlMzIzMzM0MmUzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+oTMA0GCSqG
SIb3DQEBCwUAA4IBAQAQo+ppylp6sH9F/bj2QiAPJqdrj0tN+11GwLbJg5bi9t9f
PmwgyWEKfer3Ca1uGDq12VW+IJ3YO+X1FmM+1NCenmiWnxvDC5Vn4tFJKp2twV88
PLQ1jpxMhHKSjY14b1gnR6EW/oPUlnUofltJIEV+imerhQXTPo5beqr3vhaW4WfR
W3YzaxqXVUuJwT7DIjc0Pq/4KZvrZr1cspE4882crKrLVLzD4NLVZWViR/E+IWXc
jJSXery79TK9sJK0aDoQNqsG/juW9WYvkwS260BJ4C3OcwswEAvsAr5YSubVz4Ka
XLcZ0o+u1PawmbXCtkiQankBL5xbWYyU3eI/xE9q
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:29:42 2024 by rpki-client on console-fra.rpki-client.org