Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa
File:                     3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa (raw, json)
Hash identifier:          Q4AjejyzAPd/ncgkm+rk+HuwBec70FAvTry5cmeq/hA=
Subject key identifier:   EF:A1:66:E2:57:F4:EE:9A:33:56:78:67:AB:81:06:BA:17:05:B7:BC
Certificate issuer:       /CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
Certificate serial:       375E00F57EA28FD59521D56A75C247C059C6CBC7
Authority key identifier: C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa
Signing time:             Mon 01 Jul 2024 01:01:42 +0000
ROA not before:           Mon 01 Jul 2024 00:56:42 +0000
ROA not after:            Mon 30 Jun 2025 01:01:42 +0000
asID:                     141064
IP address blocks:        103.155.166.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl
                          rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:5e:00:f5:7e:a2:8f:d5:95:21:d5:6a:75:c2:47:c0:59:c6:cb:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B
        Validity
            Not Before: Jul  1 00:56:42 2024 GMT
            Not After : Jun 30 01:01:42 2025 GMT
        Subject: CN=EFA166E257F4EE9A33567867AB8106BA1705B7BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:18:54:4a:9b:3a:17:62:7f:59:7b:c2:2a:77:
                    8d:d8:09:c1:6f:23:96:04:9e:5e:fb:52:68:47:b7:
                    d3:45:80:6a:68:41:28:44:d3:76:9e:32:29:2c:6c:
                    4f:67:0f:a3:ca:56:6b:ed:5f:77:d1:07:3e:74:c6:
                    b6:a7:e0:a3:84:74:6a:d5:b2:14:94:48:c9:eb:ed:
                    5b:e1:90:12:24:04:2a:c6:0d:80:fe:40:7b:df:02:
                    19:16:48:9b:0f:da:d3:ab:94:56:ec:66:a7:60:a2:
                    e1:22:14:27:7e:bd:d8:b6:25:08:c9:be:cb:22:0e:
                    20:cd:85:1f:ef:48:dd:84:07:10:06:99:f8:d6:41:
                    92:90:90:11:4d:05:c2:6c:b6:1d:8b:26:50:19:b6:
                    ac:b9:7c:2b:c4:5a:75:3b:d6:4f:ce:a8:fe:a1:62:
                    a5:80:85:56:bf:aa:3e:e7:1c:05:0d:74:42:04:d2:
                    e1:75:33:55:a1:ed:4b:7c:d5:a0:eb:5e:02:6a:09:
                    37:f8:77:d2:da:fe:13:ba:b7:57:97:25:a9:70:00:
                    2d:fc:6d:11:bc:22:6e:a7:3a:dd:82:4b:25:41:73:
                    b6:ff:95:84:bf:b5:db:0b:b0:27:dc:d6:3a:f1:c6:
                    4c:a7:cb:3f:30:d3:a4:47:c5:a9:37:f4:cf:4e:2d:
                    f8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A1:66:E2:57:F4:EE:9A:33:56:78:67:AB:81:06:BA:17:05:B7:BC
            X509v3 Authority Key Identifier:
                keyid:C4:CE:1B:D3:CB:FB:01:5E:60:96:5A:65:E2:FB:31:A6:BA:26:18:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C4CE1BD3CBFB015E60965A65E2FB31A6BA26189B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4c6b2bd7-d7f1-4815-a60a-cad54029ce88/0/3130332e3135352e3136362e302f32332d3233203d3e20313431303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.166.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:2b:bd:5d:ba:f5:a3:66:a3:8a:c3:e0:51:07:9d:ef:3d:94:
         f4:63:68:a8:b3:ce:90:ed:40:8d:29:b1:cb:ff:29:16:33:0d:
         ab:ab:e5:13:44:e4:70:db:49:36:7b:5b:e5:7d:8a:95:b1:1f:
         a8:d7:ec:a0:fd:cc:a4:aa:89:b4:34:e7:b8:c8:4e:5d:b3:e2:
         ef:91:e4:cd:49:80:e2:ca:8f:6c:8f:9d:a0:1e:1f:89:d5:77:
         3c:ad:2d:80:fa:4b:66:41:34:b0:36:4b:96:15:f4:1b:37:e9:
         d9:ff:bb:26:d5:ae:e4:13:90:d1:30:ff:0f:5f:ba:6f:27:62:
         86:99:d1:48:7c:ae:b3:78:8c:b5:54:ec:56:59:dd:60:28:f3:
         a4:06:e8:21:de:b0:76:07:ae:e4:a3:75:1c:09:79:28:67:f7:
         d4:b6:52:14:d5:6c:9b:32:d3:53:f7:aa:72:4e:67:76:c7:6a:
         24:c1:6d:a0:a7:a2:d9:94:c8:73:46:e9:d4:67:75:34:f6:13:
         42:b3:1a:57:a5:4f:e8:1f:5e:5d:18:30:b4:23:76:aa:8a:4c:
         95:64:2f:e8:64:a7:7f:0d:5e:f3:fa:74:cd:15:27:a7:ff:37:
         75:ee:6f:b8:cd:71:6e:0b:09:a2:7d:73:d1:97:6e:f4:dc:d4:
         92:ff:f1:18
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUN14A9X6ij9WVIdVqdcJHwFnGy8cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZC
QTI2MTg5QjAeFw0yNDA3MDEwMDU2NDJaFw0yNTA2MzAwMTAxNDJaMDMxMTAvBgNV
BAMTKEVGQTE2NkUyNTdGNEVFOUEzMzU2Nzg2N0FCODEwNkJBMTcwNUI3QkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGFRKmzoXYn9Ze8Iqd43YCcFv
I5YEnl77UmhHt9NFgGpoQShE03aeMiksbE9nD6PKVmvtX3fRBz50xran4KOEdGrV
shSUSMnr7VvhkBIkBCrGDYD+QHvfAhkWSJsP2tOrlFbsZqdgouEiFCd+vdi2JQjJ
vssiDiDNhR/vSN2EBxAGmfjWQZKQkBFNBcJsth2LJlAZtqy5fCvEWnU71k/OqP6h
YqWAhVa/qj7nHAUNdEIE0uF1M1Wh7Ut81aDrXgJqCTf4d9La/hO6t1eXJalwAC38
bRG8Im6nOt2CSyVBc7b/lYS/tdsLsCfc1jrxxkynyz8w06RHxak39M9OLfjrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU76Fm4lf07pozVnhnq4EGuhcFt7wwHwYDVR0j
BBgwFoAUxM4b08v7AV5gllpl4vsxpromGJswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YzZiMmJkNy1kN2YxLTQ4MTUtYTYwYS1jYWQ1NDAyOWNlODgvMC9DNENFMUJEM0NC
RkIwMTVFNjA5NjVBNjVFMkZCMzFBNkJBMjYxODlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzRDRTFCRDNDQkZCMDE1RTYwOTY1QTY1RTJGQjMxQTZCQTI2
MTg5Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRjNmIyYmQ3LWQ3ZjEtNDgxNS1h
NjBhLWNhZDU0MDI5Y2U4OC8wLzMxMzAzMzJlMzEzNTM1MmUzMTM2MzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzEzMDM2MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnm6YwDQYJ
KoZIhvcNAQELBQADggEBAJMrvV269aNmo4rD4FEHne89lPRjaKizzpDtQI0pscv/
KRYzDaur5RNE5HDbSTZ7W+V9ipWxH6jX7KD9zKSqibQ057jITl2z4u+R5M1JgOLK
j2yPnaAeH4nVdzytLYD6S2ZBNLA2S5YV9Bs36dn/uybVruQTkNEw/w9fum8nYoaZ
0Uh8rrN4jLVU7FZZ3WAo86QG6CHesHYHruSjdRwJeShn99S2UhTVbJsy01P3qnJO
Z3bHaiTBbaCnotmUyHNG6dRndTT2E0KzGlelT+gfXl0YMLQjdqqKTJVkL+hkp38N
XvP6dM0VJ6f/N3Xub7jNcW4LCaJ9c9GXbvTc1JL/8Rg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org