Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa
File:                     3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (raw, json)
Hash identifier:          VjVwemiupRPnh6lv9qYoBoox2vPe9u6RAkQP/Xmd1zs=
Subject key identifier:   78:09:23:D9:39:96:E1:03:AF:AB:A8:44:0E:B6:7D:5E:26:BF:64:1F
Certificate issuer:       /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2
Certificate serial:       569286C8EC9F3019C9E6B3C9ADDEFFE31011AF9C
Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa
Signing time:             Tue 16 Jul 2024 11:25:37 +0000
ROA not before:           Tue 16 Jul 2024 11:20:37 +0000
ROA not after:            Tue 15 Jul 2025 11:25:37 +0000
asID:                     133800
IP address blocks:        103.89.165.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl
                          rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 02:44:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:92:86:c8:ec:9f:30:19:c9:e6:b3:c9:ad:de:ff:e3:10:11:af:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2
        Validity
            Not Before: Jul 16 11:20:37 2024 GMT
            Not After : Jul 15 11:25:37 2025 GMT
        Subject: CN=780923D93996E103AFABA8440EB67D5E26BF641F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:31:27:d2:f4:73:bf:20:74:7c:80:bf:df:6e:
                    ef:90:1e:4e:77:7f:8a:bf:a0:c0:57:1b:3f:81:15:
                    e3:e0:88:89:e0:86:9d:f7:8d:a9:1a:7d:45:e1:87:
                    5c:9b:b2:59:aa:49:03:37:1f:20:8d:7f:a7:f2:e8:
                    8a:78:98:e5:30:90:a1:80:7e:4b:9b:58:f4:1e:29:
                    ba:8c:98:79:b5:be:0e:ce:b1:1a:af:c2:39:e9:b0:
                    c4:0a:09:bd:d5:e3:38:7f:18:09:41:3e:68:17:7f:
                    61:60:ee:12:c7:73:65:d7:6c:de:48:7e:18:7e:a5:
                    8d:4b:1b:08:f5:a6:b9:7c:d8:b6:e4:15:15:27:8b:
                    66:a0:6d:39:6a:92:7a:e6:51:f6:db:b0:1b:93:41:
                    5b:df:c2:25:06:37:ab:a2:e1:10:0b:73:9c:62:e9:
                    27:ad:26:7f:d8:85:f5:2e:1d:ec:6e:ea:4a:bc:f5:
                    ed:4a:66:bb:51:58:5a:cb:94:ff:85:88:c3:60:96:
                    a0:2f:8d:67:83:28:b8:f4:aa:e4:11:ba:c2:df:f6:
                    fa:1a:e5:11:08:c5:76:6b:bd:53:0b:c8:cf:8d:e2:
                    93:ea:a9:25:83:cf:f4:79:5e:82:26:f6:c2:57:2b:
                    19:c4:ab:d9:ca:08:67:9c:fb:8b:d9:b0:34:db:e7:
                    77:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:09:23:D9:39:96:E1:03:AF:AB:A8:44:0E:B6:7D:5E:26:BF:64:1F
            X509v3 Authority Key Identifier:
                keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.89.165.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:9b:ce:3a:b5:22:ca:87:dc:90:c3:cb:a3:20:5e:f2:09:3d:
         df:31:e5:34:e6:ea:4f:d9:cb:6a:e7:da:df:51:aa:3b:23:d9:
         6e:c0:59:b5:bd:63:da:df:21:6a:0f:3e:3c:79:3f:81:b6:c6:
         aa:bc:f8:b0:8f:19:42:5b:d2:54:64:71:58:49:8d:d9:09:e6:
         01:85:ff:37:d7:ac:88:5c:fb:ea:59:a7:c9:cb:ae:70:9f:a4:
         ca:2a:a8:29:fc:d3:b3:a5:2a:03:e1:7e:f6:2d:dc:89:8f:ba:
         12:2f:ab:6b:19:ad:ec:94:33:b4:a6:45:85:00:b2:93:5c:4c:
         b4:59:8a:c1:1a:7f:02:70:8d:6b:6c:c9:ff:a2:45:70:92:14:
         59:0d:a5:77:6b:a8:de:c2:da:18:22:90:74:72:49:12:21:3a:
         cb:72:fa:46:fa:a5:44:85:0d:9b:61:5a:53:b6:7e:9e:13:8c:
         4a:27:67:86:d2:7e:66:b6:5a:fc:ce:c2:ce:28:3f:4f:9a:2c:
         ed:80:f8:81:50:a4:c8:38:cb:68:1a:9f:2a:f2:fe:bc:c7:8e:
         54:2d:a1:48:bc:38:87:9c:2e:05:7b:54:1c:63:2a:67:44:3d:
         51:ea:08:0c:c7:22:62:c6:6d:31:5d:7b:92:3e:3f:3a:52:cf:
         8a:1a:3d:d4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUVpKGyOyfMBnJ5rPJrd7/4xARr5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0
NTFCMDhDMjAeFw0yNDA3MTYxMTIwMzdaFw0yNTA3MTUxMTI1MzdaMDMxMTAvBgNV
BAMTKDc4MDkyM0Q5Mzk5NkUxMDNBRkFCQTg0NDBFQjY3RDVFMjZCRjY0MUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaMSfS9HO/IHR8gL/fbu+QHk53
f4q/oMBXGz+BFePgiInghp33jakafUXhh1ybslmqSQM3HyCNf6fy6Ip4mOUwkKGA
fkubWPQeKbqMmHm1vg7OsRqvwjnpsMQKCb3V4zh/GAlBPmgXf2Fg7hLHc2XXbN5I
fhh+pY1LGwj1prl82LbkFRUni2agbTlqknrmUfbbsBuTQVvfwiUGN6ui4RALc5xi
6SetJn/YhfUuHexu6kq89e1KZrtRWFrLlP+FiMNglqAvjWeDKLj0quQRusLf9voa
5REIxXZrvVMLyM+N4pPqqSWDz/R5XoIm9sJXKxnEq9nKCGec+4vZsDTb53cjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeAkj2TmW4QOvq6hEDrZ9Xia/ZB8wHwYDVR0j
BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz
QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC
MDhDMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRkMTc2ZGRkLWE5ODAtNDNkNi05
NGE3LTk1ZWVkYTUzOTY2NS8wLzMxMzAzMzJlMzgzOTJlMzEzNjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1mlMA0GCSqG
SIb3DQEBCwUAA4IBAQBhm846tSLKh9yQw8ujIF7yCT3fMeU05upP2ctq59rfUao7
I9luwFm1vWPa3yFqDz48eT+BtsaqvPiwjxlCW9JUZHFYSY3ZCeYBhf8316yIXPvq
WafJy65wn6TKKqgp/NOzpSoD4X72LdyJj7oSL6trGa3slDO0pkWFALKTXEy0WYrB
Gn8CcI1rbMn/okVwkhRZDaV3a6jewtoYIpB0ckkSITrLcvpG+qVEhQ2bYVpTtn6e
E4xKJ2eG0n5mtlr8zsLOKD9PmiztgPiBUKTIOMtoGp8q8v68x45ULaFIvDiHnC4F
e1QcYypnRD1R6ggMxyJixm0xXXuSPj86Us+KGj3U
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org