Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa
File:                     3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa (raw, json)
Hash identifier:          Iadszw72iQTXzXRb+BGMEXZI1wJXr8CPm014ECbmlyE=
Subject key identifier:   7D:7F:D2:CC:70:F7:02:0A:6F:BF:92:C4:DD:98:C8:A5:E3:E8:7D:FE
Certificate issuer:       /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial:       44C64C8FB37846F60638934E136A8DEC1B8EE1CC
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa
Signing time:             Sat 23 Dec 2023 07:00:00 +0000
ROA not before:           Sat 23 Dec 2023 06:55:00 +0000
ROA not after:            Sat 21 Dec 2024 07:00:00 +0000
asID:                     131745
IP address blocks:        103.178.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl
                          rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:52:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:c6:4c:8f:b3:78:46:f6:06:38:93:4e:13:6a:8d:ec:1b:8e:e1:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
        Validity
            Not Before: Dec 23 06:55:00 2023 GMT
            Not After : Dec 21 07:00:00 2024 GMT
        Subject: CN=7D7FD2CC70F7020A6FBF92C4DD98C8A5E3E87DFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:ad:5d:59:9d:41:ac:75:6d:24:c8:0d:af:be:
                    d5:a5:e4:f6:f6:c1:e4:f6:7d:5b:75:f1:e5:59:2f:
                    f8:c1:08:bb:ec:4a:e4:f2:6c:6a:de:b5:2f:d6:5a:
                    bd:61:7d:52:e5:10:da:1a:ce:46:5c:fa:1e:e3:01:
                    df:ac:64:05:50:09:0c:69:d6:95:3e:28:6c:59:e3:
                    8b:52:9d:c8:35:75:3f:7c:13:bf:c1:0a:6b:6e:2c:
                    f9:57:1a:ec:0a:e2:2d:18:0d:35:f4:63:32:3d:26:
                    20:cf:ff:9c:03:84:09:2e:b0:25:88:ff:e7:08:61:
                    2b:42:c9:04:3b:45:83:7f:db:7b:a8:d4:65:2e:5c:
                    79:27:ea:eb:c3:09:b0:b3:ab:26:22:9a:51:5b:4f:
                    d5:fd:e1:f4:a9:d6:2f:06:6e:26:08:81:42:38:94:
                    15:eb:9a:81:2e:d9:eb:ad:4d:14:15:11:7f:bd:66:
                    ad:91:22:52:b1:d8:18:1f:40:38:43:64:5c:64:73:
                    57:b4:d5:f2:d6:fc:76:f5:99:66:97:5b:47:7e:8d:
                    b5:76:45:65:d7:33:e3:49:e4:d1:7b:85:0d:52:45:
                    0f:51:cf:4c:d1:8e:74:25:92:e0:61:8d:e8:4d:e5:
                    00:88:fd:cd:4c:28:24:a6:0f:c5:c2:06:f1:3d:6a:
                    38:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:7F:D2:CC:70:F7:02:0A:6F:BF:92:C4:DD:98:C8:A5:E3:E8:7D:FE
            X509v3 Authority Key Identifier:
                keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313331373435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         65:06:67:26:74:7c:f0:09:a9:3b:0e:10:e7:d3:67:1b:6f:f2:
         e0:2f:10:64:64:5e:22:93:a4:ab:d8:f8:e9:ef:71:32:5f:0e:
         59:f2:1a:b2:f6:f1:bb:97:25:35:53:64:42:5f:f6:c1:c1:41:
         aa:9e:b1:84:17:24:54:31:1c:bb:17:b9:03:94:65:d3:fb:a2:
         00:e0:9c:d5:9f:34:e7:6f:b6:b8:1c:e0:7b:f4:2d:16:b5:a2:
         f7:94:4e:21:3f:33:5f:b5:b0:47:db:74:b1:e5:45:36:a0:84:
         22:57:75:6f:45:4b:8e:8e:06:e9:5d:c9:9b:cf:91:b9:bc:49:
         48:4f:07:5a:04:db:51:4a:a6:93:78:4c:16:6c:a3:9e:6b:1d:
         93:56:28:2e:ab:80:fe:a8:05:f7:bc:62:32:48:fa:6a:14:3a:
         ba:e4:56:54:24:8c:38:5f:14:1e:be:73:11:33:32:16:75:00:
         7c:e6:20:27:3b:29:9f:06:7c:ee:12:15:5e:25:b7:53:c2:17:
         0b:60:c5:44:cc:da:27:92:5d:64:ea:20:ed:9f:55:93:26:09:
         fc:07:8f:f9:a2:35:9e:8c:e0:8a:27:37:82:f7:40:c5:a5:5e:
         da:fe:b8:7a:cb:1d:8e:44:44:3b:bd:6b:38:10:f8:ab:da:33:
         5b:e9:02:5a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURMZMj7N4RvYGOJNOE2qN7BuO4cwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBF
MkZCMzk4QjAeFw0yMzEyMjMwNjU1MDBaFw0yNDEyMjEwNzAwMDBaMDMxMTAvBgNV
BAMTKDdEN0ZEMkNDNzBGNzAyMEE2RkJGOTJDNEREOThDOEE1RTNFODdERkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIrV1ZnUGsdW0kyA2vvtWl5Pb2
weT2fVt18eVZL/jBCLvsSuTybGretS/WWr1hfVLlENoazkZc+h7jAd+sZAVQCQxp
1pU+KGxZ44tSncg1dT98E7/BCmtuLPlXGuwK4i0YDTX0YzI9JiDP/5wDhAkusCWI
/+cIYStCyQQ7RYN/23uo1GUuXHkn6uvDCbCzqyYimlFbT9X94fSp1i8GbiYIgUI4
lBXrmoEu2eutTRQVEX+9Zq2RIlKx2BgfQDhDZFxkc1e01fLW/Hb1mWaXW0d+jbV2
RWXXM+NJ5NF7hQ1SRQ9Rz0zRjnQlkuBhjehN5QCI/c1MKCSmD8XCBvE9ajhBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfX/SzHD3Agpvv5LE3ZjIpePoff4wHwYDVR0j
BBgwFoAUMfJYZTfkMYCJyFXeCIOmkOL7OYswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmFiODA0Mi0wZTFjLTQzYjEtYjcwMy02MzQzOGJlMjMyNWIvMC8zMUYyNTg2NTM3
RTQzMTgwODlDODU1REUwODgzQTY5MEUyRkIzOThCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzFGMjU4NjUzN0U0MzE4MDg5Qzg1NURFMDg4M0E2OTBFMkZC
Mzk4Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiYWI4MDQyLTBlMWMtNDNiMS1i
NzAzLTYzNDM4YmUyMzI1Yi8wLzMxMzAzMzJlMzEzNzM4MmUzMTM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzEzNzM0MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnspIwDQYJ
KoZIhvcNAQELBQADggEBAGUGZyZ0fPAJqTsOEOfTZxtv8uAvEGRkXiKTpKvY+Onv
cTJfDlnyGrL28buXJTVTZEJf9sHBQaqesYQXJFQxHLsXuQOUZdP7ogDgnNWfNOdv
trgc4Hv0LRa1oveUTiE/M1+1sEfbdLHlRTaghCJXdW9FS46OBuldyZvPkbm8SUhP
B1oE21FKppN4TBZso55rHZNWKC6rgP6oBfe8YjJI+moUOrrkVlQkjDhfFB6+cxEz
MhZ1AHzmICc7KZ8GfO4SFV4lt1PCFwtgxUTM2ieSXWTqIO2fVZMmCfwHj/miNZ6M
4IonN4L3QMWlXtr+uHrLHY5ERDu9azgQ+KvaM1vpAlo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:37 2024 by rpki-client on console-ams.rpki-client.org