Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa
File:                     3130332e39372e352e302f32342d3234203d3e20313336313237.roa (raw, json)
Hash identifier:          cqTyGMrVXV3krfj6ahd0XiybL7qMxOankc/x3Ztfrtk=
Subject key identifier:   53:9D:75:E0:A4:64:B2:C7:AA:B0:E9:F6:25:66:84:D1:26:2A:15:D4
Certificate issuer:       /CN=8C888E996588527BC5EF8ABD293676C3463A1A22
Certificate serial:       64AC10AF9D5305C504830F0B2C4A810EAF6D0BF1
Authority key identifier: 8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa
Signing time:             Fri 18 Oct 2024 03:00:02 +0000
ROA not before:           Fri 18 Oct 2024 02:55:02 +0000
ROA not after:            Fri 17 Oct 2025 03:00:02 +0000
asID:                     136127
IP address blocks:        103.97.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl
                          rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:ac:10:af:9d:53:05:c5:04:83:0f:0b:2c:4a:81:0e:af:6d:0b:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C888E996588527BC5EF8ABD293676C3463A1A22
        Validity
            Not Before: Oct 18 02:55:02 2024 GMT
            Not After : Oct 17 03:00:02 2025 GMT
        Subject: CN=539D75E0A464B2C7AAB0E9F6256684D1262A15D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6c:5d:f2:88:55:a1:38:a1:78:26:10:0b:8c:
                    83:d0:72:87:d4:70:9e:79:37:c3:97:f6:5f:5c:69:
                    38:32:e4:eb:d9:8b:0f:c6:41:4f:a2:d9:cc:62:af:
                    19:4d:2e:fd:b7:54:12:84:ae:39:fc:92:ed:75:32:
                    26:53:1b:5f:58:12:8b:cf:03:c0:f7:02:9e:92:98:
                    9b:80:49:be:e4:07:81:43:78:df:2f:bc:f0:51:ec:
                    30:5b:f3:e0:ca:90:49:6c:79:d6:b3:0e:82:b8:e4:
                    23:e4:54:75:97:43:02:48:56:c0:f3:89:3a:10:b9:
                    88:f0:51:cf:29:f0:b2:2c:0e:6b:a6:af:11:25:71:
                    b6:dc:87:5c:dd:af:cf:93:57:db:69:9c:22:c5:20:
                    7c:33:e7:68:1d:67:88:c8:4d:ca:6f:13:64:3f:13:
                    66:3d:e3:a4:d2:aa:b2:3e:36:f4:3c:5b:c7:2d:93:
                    a0:80:df:ba:3d:3d:6d:e4:bd:cf:c4:e6:07:8e:43:
                    ac:cb:d9:0c:31:3f:1c:10:76:71:59:fa:0c:46:74:
                    e9:3c:52:61:29:19:de:d3:c7:57:c3:b5:cb:e2:a3:
                    e6:14:68:15:b7:35:35:43:db:66:7b:de:24:dd:d1:
                    89:e6:c6:a6:77:63:ac:73:e7:e1:88:24:12:6b:3a:
                    ce:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:9D:75:E0:A4:64:B2:C7:AA:B0:E9:F6:25:66:84:D1:26:2A:15:D4
            X509v3 Authority Key Identifier:
                keyid:8C:88:8E:99:65:88:52:7B:C5:EF:8A:BD:29:36:76:C3:46:3A:1A:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/8C888E996588527BC5EF8ABD293676C3463A1A22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C888E996588527BC5EF8ABD293676C3463A1A22.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44b27303-9e3d-4d42-af25-6a0f11808f27/0/3130332e39372e352e302f32342d3234203d3e20313336313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:a8:3c:84:e6:40:c1:d2:19:e6:53:c1:c2:27:fb:a6:89:d7:
         d5:c8:cb:90:91:fa:89:f8:35:15:1b:af:36:f7:8e:72:4f:d0:
         14:8f:9e:ad:1a:30:7f:1a:77:0c:c2:8f:35:8c:67:35:5e:7a:
         e8:8e:be:38:33:59:48:06:38:b9:0d:e8:89:3c:37:05:f8:86:
         89:a3:66:8e:4f:68:a9:44:2c:3b:d9:fb:60:45:c9:01:63:12:
         7d:95:95:d8:cb:2a:54:e3:4f:fa:61:f9:db:2f:71:da:cc:62:
         50:b6:06:6b:72:a2:70:41:a8:d7:7d:83:41:d7:f0:9f:19:5e:
         f3:c9:95:98:b2:dc:51:e8:3b:e9:97:11:2b:18:86:c5:0c:9d:
         66:81:98:53:ad:60:20:4e:bc:20:78:47:ff:1a:92:e2:8f:7a:
         52:59:64:e0:29:b1:1d:ab:ff:8c:47:03:d3:aa:67:8f:af:60:
         58:65:30:db:7f:65:10:a4:14:c1:10:03:27:30:07:1f:6b:2f:
         65:85:9d:cb:da:ec:4d:2e:0e:aa:ff:14:69:a9:7c:5f:d0:95:
         35:59:0a:dd:f0:b8:e5:08:86:ed:48:e0:f6:4c:73:d0:b0:6a:
         04:0a:06:0f:f0:91:44:f8:7a:c6:00:c3:ea:40:c9:80:1a:ce:
         66:e5:7e:b2
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUZKwQr51TBcUEgw8LLEqBDq9tC/EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0
NjNBMUEyMjAeFw0yNDEwMTgwMjU1MDJaFw0yNTEwMTcwMzAwMDJaMDMxMTAvBgNV
BAMTKDUzOUQ3NUUwQTQ2NEIyQzdBQUIwRTlGNjI1NjY4NEQxMjYyQTE1RDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQbF3yiFWhOKF4JhALjIPQcofU
cJ55N8OX9l9caTgy5OvZiw/GQU+i2cxirxlNLv23VBKErjn8ku11MiZTG19YEovP
A8D3Ap6SmJuASb7kB4FDeN8vvPBR7DBb8+DKkElsedazDoK45CPkVHWXQwJIVsDz
iToQuYjwUc8p8LIsDmumrxElcbbch1zdr8+TV9tpnCLFIHwz52gdZ4jITcpvE2Q/
E2Y946TSqrI+NvQ8W8ctk6CA37o9PW3kvc/E5geOQ6zL2QwxPxwQdnFZ+gxGdOk8
UmEpGd7Tx1fDtcvio+YUaBW3NTVD22Z73iTd0YnmxqZ3Y6xz5+GIJBJrOs6LAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUU5114KRksseqsOn2JWaE0SYqFdQwHwYDVR0j
BBgwFoAUjIiOmWWIUnvF74q9KTZ2w0Y6GiIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NGIyNzMwMy05ZTNkLTRkNDItYWYyNS02YTBmMTE4MDhmMjcvMC84Qzg4OEU5OTY1
ODg1MjdCQzVFRjhBQkQyOTM2NzZDMzQ2M0ExQTIyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEM4ODhFOTk2NTg4NTI3QkM1RUY4QUJEMjkzNjc2QzM0NjNB
MUEyMi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ0YjI3MzAzLTllM2QtNGQ0Mi1h
ZjI1LTZhMGYxMTgwOGYyNy8wLzMxMzAzMzJlMzkzNzJlMzUyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzYzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnYQUwDQYJKoZIhvcN
AQELBQADggEBAIqoPITmQMHSGeZTwcIn+6aJ19XIy5CR+on4NRUbrzb3jnJP0BSP
nq0aMH8adwzCjzWMZzVeeuiOvjgzWUgGOLkN6Ik8NwX4homjZo5PaKlELDvZ+2BF
yQFjEn2VldjLKlTjT/ph+dsvcdrMYlC2BmtyonBBqNd9g0HX8J8ZXvPJlZiy3FHo
O+mXESsYhsUMnWaBmFOtYCBOvCB4R/8akuKPelJZZOApsR2r/4xHA9OqZ4+vYFhl
MNt/ZRCkFMEQAycwBx9rL2WFncva7E0uDqr/FGmpfF/QlTVZCt3wuOUIhu1I4PZM
c9CwagQKBg/wkUT4esYAw+pAyYAazmblfrI=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:32 2024 by rpki-client on console-fra.rpki-client.org