Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          dvdUssi0GYF+nu0bzgaccucJ6IsLa1FRw2pzBTZE3GU=
Subject key identifier:   C8:C3:3E:34:53:2B:71:F3:42:16:32:BB:16:3C:BB:7A:19:27:D1:88
Certificate issuer:       /CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
Certificate serial:       0C84FD30F7462D202F3DDA062BE1AD9878DC837E
Authority key identifier: 5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa
Signing time:             Wed 12 Jun 2024 07:00:01 +0000
ROA not before:           Wed 12 Jun 2024 06:55:01 +0000
ROA not after:            Wed 11 Jun 2025 07:00:01 +0000
asID:                     141909
IP address blocks:        103.164.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl
                          rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:84:fd:30:f7:46:2d:20:2f:3d:da:06:2b:e1:ad:98:78:dc:83:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F
        Validity
            Not Before: Jun 12 06:55:01 2024 GMT
            Not After : Jun 11 07:00:01 2025 GMT
        Subject: CN=C8C33E34532B71F3421632BB163CBB7A1927D188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:69:6a:f2:b6:8a:6a:13:89:c7:f6:dc:f5:6f:
                    1b:ca:81:d7:41:a7:a0:8d:ce:72:12:df:a7:9a:2f:
                    b8:62:5b:89:82:d9:3b:c8:c9:34:1d:78:b4:d5:29:
                    ee:4c:ac:08:4f:ef:73:67:dc:82:a0:ac:52:7e:9f:
                    e7:b9:61:c3:61:ac:46:52:8c:f4:93:6e:c2:52:f3:
                    20:ee:61:50:98:ae:99:92:65:8d:14:eb:3a:df:56:
                    18:b6:d2:aa:7b:fe:4d:8d:c0:4f:33:2d:9f:36:a5:
                    69:dd:fd:81:ea:d4:6f:f2:14:8f:0a:46:4d:f3:a7:
                    df:68:fa:36:6e:c3:05:39:68:51:0c:52:19:12:2c:
                    b4:f2:eb:e1:41:52:37:60:87:06:dc:70:e6:d1:5b:
                    75:4d:ec:91:2d:11:d2:df:f3:fa:47:25:78:12:15:
                    e2:a3:a9:af:e3:26:5d:b6:79:e7:2b:e6:a7:82:95:
                    1d:89:2e:04:dc:fb:e3:5a:f8:e2:f9:cc:c4:61:ac:
                    3d:4d:50:04:5b:07:ec:b9:e6:35:a0:e2:ff:ca:41:
                    c0:c1:8a:77:21:99:d8:fc:e5:0f:08:60:2f:73:10:
                    27:20:66:23:87:58:b3:47:2f:61:4b:b2:8a:3f:e3:
                    7c:b4:cf:e6:18:09:68:b0:9f:fa:38:e5:44:0c:cb:
                    df:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:C3:3E:34:53:2B:71:F3:42:16:32:BB:16:3C:BB:7A:19:27:D1:88
            X509v3 Authority Key Identifier:
                keyid:5C:1D:C7:E8:74:57:A9:1F:35:91:5A:F1:DE:3F:BB:CC:2E:6B:3D:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C1DC7E87457A91F35915AF1DE3FBBCC2E6B3D8F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3c88442b-c48e-4ba0-8ad7-58e1263c6dc7/0/3130332e3136342e3135302e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:d0:0b:2e:c0:b1:30:45:78:ec:b1:ae:33:d8:5a:3e:e3:
         f9:c8:62:91:54:7d:74:b0:02:62:eb:7b:7e:95:fa:5d:43:c1:
         ed:e1:bf:91:b1:bc:61:0b:6a:ff:f2:35:f9:0c:d4:6f:db:c6:
         4d:87:f2:f7:17:0e:f9:ab:2d:ac:9d:49:ba:db:0c:77:53:11:
         cb:d5:93:04:e9:0c:26:bf:88:15:c3:f1:8c:59:f9:a7:77:45:
         82:dd:c9:fb:ba:7c:c4:3d:16:a5:36:f5:d8:77:0d:f6:9f:d2:
         80:27:e0:f8:f9:7b:33:b2:c1:5d:7a:bb:31:17:31:75:b5:2a:
         18:e4:2c:c8:6d:d6:1d:bd:d7:e5:74:b4:21:f0:b2:a4:36:1e:
         92:e7:93:fb:6a:39:d5:8a:03:98:44:c5:88:3f:c2:08:68:f2:
         50:de:8b:f3:ba:ca:24:de:6a:17:c4:91:e1:15:f5:1a:88:e9:
         ca:9f:3b:3c:e4:d3:db:0e:c1:e0:78:5e:31:0c:1a:cb:b1:9b:
         91:fe:17:24:53:3a:5c:ea:74:79:2f:57:60:21:71:da:39:13:
         45:06:ca:6d:d1:ed:ed:6e:47:dc:62:dc:c7:27:ca:8b:95:19:
         51:00:1a:58:a7:53:e2:bb:ae:86:9b:3b:70:83:e5:f0:ef:4a:
         2c:c3:4d:be
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUDIT9MPdGLSAvPdoGK+GtmHjcg34wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0My
RTZCM0Q4RjAeFw0yNDA2MTIwNjU1MDFaFw0yNTA2MTEwNzAwMDFaMDMxMTAvBgNV
BAMTKEM4QzMzRTM0NTMyQjcxRjM0MjE2MzJCQjE2M0NCQjdBMTkyN0QxODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhaWrytopqE4nH9tz1bxvKgddB
p6CNznIS36eaL7hiW4mC2TvIyTQdeLTVKe5MrAhP73Nn3IKgrFJ+n+e5YcNhrEZS
jPSTbsJS8yDuYVCYrpmSZY0U6zrfVhi20qp7/k2NwE8zLZ82pWnd/YHq1G/yFI8K
Rk3zp99o+jZuwwU5aFEMUhkSLLTy6+FBUjdghwbccObRW3VN7JEtEdLf8/pHJXgS
FeKjqa/jJl22eecr5qeClR2JLgTc++Na+OL5zMRhrD1NUARbB+y55jWg4v/KQcDB
inchmdj85Q8IYC9zECcgZiOHWLNHL2FLsoo/43y0z+YYCWiwn/o45UQMy9/JAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyMM+NFMrcfNCFjK7Fjy7ehkn0YgwHwYDVR0j
BBgwFoAUXB3H6HRXqR81kVrx3j+7zC5rPY8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
Yzg4NDQyYi1jNDhlLTRiYTAtOGFkNy01OGUxMjYzYzZkYzcvMC81QzFEQzdFODc0
NTdBOTFGMzU5MTVBRjFERTNGQkJDQzJFNkIzRDhGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUMxREM3RTg3NDU3QTkxRjM1OTE1QUYxREUzRkJCQ0MyRTZC
M0Q4Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNjODg0NDJiLWM0OGUtNGJhMC04
YWQ3LTU4ZTEyNjNjNmRjNy8wLzMxMzAzMzJlMzEzNjM0MmUzMTM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpJYwDQYJ
KoZIhvcNAQELBQADggEBALOS0AsuwLEwRXjssa4z2Fo+4/nIYpFUfXSwAmLre36V
+l1Dwe3hv5GxvGELav/yNfkM1G/bxk2H8vcXDvmrLaydSbrbDHdTEcvVkwTpDCa/
iBXD8YxZ+ad3RYLdyfu6fMQ9FqU29dh3Dfaf0oAn4Pj5ezOywV16uzEXMXW1Khjk
LMht1h291+V0tCHwsqQ2HpLnk/tqOdWKA5hExYg/wgho8lDei/O6yiTeahfEkeEV
9RqI6cqfOzzk09sOweB4XjEMGsuxm5H+FyRTOlzqdHkvV2Ahcdo5E0UGym3R7e1u
R9xi3McnyouVGVEAGlinU+K7roabO3CD5fDvSizDTb4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:46 2024 by rpki-client on console-ams.rpki-client.org