Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa
File:                     3130332e31372e3134322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          hLQPD3MbEwgildQda9wOjE3SYD9HUC8/tR+TH7Mo1TY=
Subject key identifier:   EA:64:94:D9:CF:F0:F6:AD:97:19:AB:8C:04:2C:7A:D3:25:B8:15:8A
Certificate issuer:       /CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
Certificate serial:       2FFC08A4131B97568243FB574C6543B78F63EE9E
Authority key identifier: AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa
Signing time:             Mon 26 Aug 2024 16:00:00 +0000
ROA not before:           Mon 26 Aug 2024 15:55:00 +0000
ROA not after:            Mon 25 Aug 2025 16:00:00 +0000
asID:                     9341
IP address blocks:        103.17.142.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl
                          rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:fc:08:a4:13:1b:97:56:82:43:fb:57:4c:65:43:b7:8f:63:ee:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40
        Validity
            Not Before: Aug 26 15:55:00 2024 GMT
            Not After : Aug 25 16:00:00 2025 GMT
        Subject: CN=EA6494D9CFF0F6AD9719AB8C042C7AD325B8158A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d3:32:d0:28:c8:73:ad:83:ac:50:59:e8:98:
                    0f:a2:22:12:39:2b:34:71:17:5c:64:ef:86:a0:6d:
                    f0:c9:14:99:77:ef:c0:ed:fb:80:92:0c:36:2a:db:
                    0f:85:b7:82:95:cb:42:56:47:52:51:f7:01:81:a1:
                    65:3f:1b:82:3d:fa:83:b2:47:a6:d5:67:3c:e2:45:
                    96:8c:85:86:e0:1b:20:32:d4:89:12:d6:77:60:dd:
                    c8:2f:19:53:26:91:1e:1f:d2:26:8a:4f:69:a8:39:
                    e3:23:e7:05:02:77:66:f9:c6:68:d6:22:b3:8f:e1:
                    1c:46:fe:45:c9:7a:7d:ae:20:31:11:e6:95:de:78:
                    b7:4d:1c:4c:04:12:11:2e:5d:0b:c2:ca:a0:33:77:
                    ee:be:b4:83:59:db:4b:2f:35:51:3d:64:80:12:55:
                    b2:16:6f:69:32:3b:4b:91:7f:fa:bd:d3:37:64:50:
                    32:41:87:47:1b:61:e4:7c:05:3f:e3:e1:f0:b0:0f:
                    61:90:82:b4:c7:e4:41:e0:75:d4:ca:0d:72:af:3d:
                    b0:9c:1f:9f:02:9c:c4:32:2f:59:2c:26:ba:f2:ae:
                    24:97:4e:71:23:8c:3b:10:7f:09:9f:b1:99:28:86:
                    31:cc:cf:24:68:b7:1e:89:c5:26:80:01:ff:8b:51:
                    15:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:64:94:D9:CF:F0:F6:AD:97:19:AB:8C:04:2C:7A:D3:25:B8:15:8A
            X509v3 Authority Key Identifier:
                keyid:AE:DA:3A:68:76:F2:BB:6E:33:C8:1B:B2:8B:08:F9:F3:6C:80:DC:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AEDA3A6876F2BB6E33C81BB28B08F9F36C80DC40.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4759476e-6adb-4f2e-be75-8467259e128f/0/3130332e31372e3134322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.17.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:26:8a:c3:4d:0b:bd:89:aa:6d:49:03:5a:ee:5e:9f:07:79:
         ec:14:36:20:f7:78:0c:80:e6:06:de:18:ee:f3:0c:f8:82:9e:
         fe:85:6e:9a:e7:4e:7b:d3:38:d9:bb:9f:66:20:3c:58:13:8f:
         69:e6:88:31:32:ad:47:c5:53:46:ae:0d:c6:bf:7d:ca:12:0d:
         34:ed:f4:e0:ec:f9:5b:7e:73:43:a3:1c:d1:f2:90:9f:45:2d:
         ec:00:fb:66:ea:a2:22:47:c1:26:32:9a:41:f0:c0:8a:2c:71:
         cf:0b:b4:1d:b0:8a:a5:9b:0c:c5:44:03:a2:37:97:48:a1:99:
         28:ed:45:1f:08:71:83:91:ae:90:21:58:fe:6e:45:f2:8f:e0:
         89:db:6e:9a:e1:5e:e1:38:de:fc:71:fd:06:9f:71:13:a1:21:
         50:93:9f:32:93:ec:a2:8c:28:17:21:c0:02:27:0b:08:d6:fd:
         b1:e9:4b:dd:c1:eb:e7:1a:5b:ee:77:b8:b5:7a:ab:d3:8a:be:
         39:f5:ee:ba:74:cf:fa:e4:99:d9:e9:36:e6:7e:8f:6f:8f:8c:
         d3:d8:6b:35:ef:f8:41:63:bb:c5:d6:9a:5b:7e:38:77:9f:c7:
         ad:6c:c9:c8:95:36:93:9b:36:62:c8:fc:44:38:cf:bb:09:6b:
         9f:fd:44:dd
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUL/wIpBMbl1aCQ/tXTGVDt49j7p4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2
QzgwREM0MDAeFw0yNDA4MjYxNTU1MDBaFw0yNTA4MjUxNjAwMDBaMDMxMTAvBgNV
BAMTKEVBNjQ5NEQ5Q0ZGMEY2QUQ5NzE5QUI4QzA0MkM3QUQzMjVCODE1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv0zLQKMhzrYOsUFnomA+iIhI5
KzRxF1xk74agbfDJFJl378Dt+4CSDDYq2w+Ft4KVy0JWR1JR9wGBoWU/G4I9+oOy
R6bVZzziRZaMhYbgGyAy1IkS1ndg3cgvGVMmkR4f0iaKT2moOeMj5wUCd2b5xmjW
IrOP4RxG/kXJen2uIDER5pXeeLdNHEwEEhEuXQvCyqAzd+6+tINZ20svNVE9ZIAS
VbIWb2kyO0uRf/q90zdkUDJBh0cbYeR8BT/j4fCwD2GQgrTH5EHgddTKDXKvPbCc
H58CnMQyL1ksJrryriSXTnEjjDsQfwmfsZkohjHMzyRotx6JxSaAAf+LURXLAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6mSU2c/w9q2XGauMBCx60yW4FYowHwYDVR0j
BBgwFoAUrto6aHbyu24zyBuyiwj582yA3EAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
NzU5NDc2ZS02YWRiLTRmMmUtYmU3NS04NDY3MjU5ZTEyOGYvMC9BRURBM0E2ODc2
RjJCQjZFMzNDODFCQjI4QjA4RjlGMzZDODBEQzQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUVEQTNBNjg3NkYyQkI2RTMzQzgxQkIyOEIwOEY5RjM2Qzgw
REM0MC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzQ3NTk0NzZlLTZhZGItNGYyZS1i
ZTc1LTg0NjcyNTllMTI4Zi8wLzMxMzAzMzJlMzEzNzJlMzEzNDMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEY4wDQYJKoZIhvcN
AQELBQADggEBAFMmisNNC72Jqm1JA1ruXp8HeewUNiD3eAyA5gbeGO7zDPiCnv6F
bprnTnvTONm7n2YgPFgTj2nmiDEyrUfFU0auDca/fcoSDTTt9ODs+Vt+c0OjHNHy
kJ9FLewA+2bqoiJHwSYymkHwwIoscc8LtB2wiqWbDMVEA6I3l0ihmSjtRR8IcYOR
rpAhWP5uRfKP4InbbprhXuE43vxx/QafcROhIVCTnzKT7KKMKBchwAInCwjW/bHp
S93B6+caW+53uLV6q9OKvjn17rp0z/rkmdnpNuZ+j2+PjNPYazXv+EFju8XWmlt+
OHefx61syciVNpObNmLI/EQ4z7sJa5/9RN0=
-----END CERTIFICATE-----
Generated at Fri Nov 22 21:02:27 2024 by rpki-client on console-fra.rpki-client.org