Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          iWmmzoJdZk9ZiUdCzogUB4JMPdFGBOggQ9Z0g06MNoU=
Subject key identifier:   BA:15:76:CA:C0:56:E8:56:F9:A2:75:F1:42:C8:D2:D2:A1:46:63:36
Certificate issuer:       /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial:       7A1DE78ECEBF7468ABDC9CBD494788DD30AD766C
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa
Signing time:             Fri 19 Jan 2024 06:19:17 +0000
ROA not before:           Fri 19 Jan 2024 06:14:17 +0000
ROA not after:            Fri 17 Jan 2025 06:19:17 +0000
asID:                     138127
IP address blocks:        103.132.230.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
                          rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:1d:e7:8e:ce:bf:74:68:ab:dc:9c:bd:49:47:88:dd:30:ad:76:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
        Validity
            Not Before: Jan 19 06:14:17 2024 GMT
            Not After : Jan 17 06:19:17 2025 GMT
        Subject: CN=BA1576CAC056E856F9A275F142C8D2D2A1466336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:1a:73:71:ae:31:2c:f9:e6:90:f2:ad:f1:
                    dd:40:fa:3f:b4:65:6f:22:a5:22:59:98:8c:05:cf:
                    94:ff:8f:f0:29:49:27:a8:8f:07:13:ca:4c:93:bc:
                    2a:81:f9:ad:27:cb:65:c1:4a:d9:22:c0:3e:af:c4:
                    cc:08:3d:fd:eb:8e:22:99:03:2a:d4:40:04:b9:a6:
                    42:bc:d4:43:06:e0:ca:8d:4d:bd:89:5a:8b:95:9e:
                    6c:6d:e4:94:ff:79:cf:aa:89:1b:0a:42:6c:cc:99:
                    65:a7:32:31:d4:13:da:eb:0a:71:bb:eb:87:7d:f4:
                    df:16:ec:29:2a:76:ac:a8:3e:9c:ce:30:d6:f3:7d:
                    dc:a1:9e:c9:eb:2e:a7:41:5d:fa:0d:d8:09:99:f9:
                    ad:52:68:d4:ec:4b:d6:fe:82:83:78:74:b9:b8:c2:
                    b1:3e:75:f5:bc:cd:33:16:ca:94:06:7c:1d:f4:bb:
                    9c:c5:a0:15:47:66:b0:7b:d8:be:e6:ea:1e:ee:9e:
                    c4:00:5e:21:67:ae:5f:3f:86:36:f0:c4:17:64:10:
                    a7:b4:19:53:c3:57:3d:4e:27:24:b8:5a:ae:a3:12:
                    d5:d3:a2:5a:2b:1f:75:07:6d:1d:1b:59:9f:9e:09:
                    16:54:84:04:8c:c9:52:e8:fe:bb:55:48:c6:78:8a:
                    3f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:15:76:CA:C0:56:E8:56:F9:A2:75:F1:42:C8:D2:D2:A1:46:63:36
            X509v3 Authority Key Identifier:
                keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233302e302f32332d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         79:e0:2d:1b:73:3a:b5:26:a2:08:41:ae:ae:8b:9c:bf:84:96:
         ee:24:48:8c:c0:f7:90:fb:31:7c:54:c0:81:97:75:94:d9:c5:
         a8:e1:bf:be:4b:72:cf:51:e5:6b:47:05:78:76:d5:dc:2d:8b:
         ab:88:03:63:47:5d:ab:0f:ca:2a:00:09:92:c3:60:b1:93:28:
         ee:4e:e4:b6:ec:fc:b5:60:39:bf:bf:97:53:7d:bf:a2:fa:0f:
         f6:7d:f8:24:92:d1:15:8d:39:4e:52:79:c4:2b:45:07:39:99:
         71:dd:96:36:89:e9:cd:d0:fd:e9:23:3c:8f:bd:73:33:e0:8a:
         09:09:6f:17:29:50:07:1b:c3:79:7c:49:c2:92:1a:36:5f:6b:
         55:b3:af:a5:83:7d:16:70:b8:66:bf:b3:11:50:74:8b:4c:e7:
         ee:29:03:5c:c6:51:95:af:4f:60:61:a9:39:14:ce:d9:fd:38:
         9f:1d:c0:2e:41:6b:1e:3f:b7:af:f5:97:28:1b:6c:fa:dd:4f:
         ac:68:6e:22:c9:ed:5d:9b:65:6b:ac:c5:c7:75:2d:1b:ba:9d:
         6e:2e:dd:bc:9c:bb:04:40:2a:df:77:60:29:23:3b:56:50:96:
         89:4c:47:de:ef:3b:77:1c:69:c7:32:c8:90:74:8f:96:90:26:
         93:ae:e4:ae
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeh3njs6/dGir3Jy9SUeI3TCtdmwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3
MjM3OEJGMzAeFw0yNDAxMTkwNjE0MTdaFw0yNTAxMTcwNjE5MTdaMDMxMTAvBgNV
BAMTKEJBMTU3NkNBQzA1NkU4NTZGOUEyNzVGMTQyQzhEMkQyQTE0NjYzMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Uxpzca4xLPnmkPKt8d1A+j+0
ZW8ipSJZmIwFz5T/j/ApSSeojwcTykyTvCqB+a0ny2XBStkiwD6vxMwIPf3rjiKZ
AyrUQAS5pkK81EMG4MqNTb2JWouVnmxt5JT/ec+qiRsKQmzMmWWnMjHUE9rrCnG7
64d99N8W7CkqdqyoPpzOMNbzfdyhnsnrLqdBXfoN2AmZ+a1SaNTsS9b+goN4dLm4
wrE+dfW8zTMWypQGfB30u5zFoBVHZrB72L7m6h7unsQAXiFnrl8/hjbwxBdkEKe0
GVPDVz1OJyS4Wq6jEtXTolorH3UHbR0bWZ+eCRZUhASMyVLo/rtVSMZ4ij8HAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUuhV2ysBW6Fb5onXxQsjS0qFGYzYwHwYDVR0j
BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4
MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3
OEJGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlZGM5ZTRmLTgxODAtNDFkNi1i
MDhkLThlZTVhOGE3MGEwNS8wLzMxMzAzMzJlMzEzMzMyMmUzMjMzMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnhOYwDQYJ
KoZIhvcNAQELBQADggEBAHngLRtzOrUmoghBrq6LnL+Elu4kSIzA95D7MXxUwIGX
dZTZxajhv75Lcs9R5WtHBXh21dwti6uIA2NHXasPyioACZLDYLGTKO5O5Lbs/LVg
Ob+/l1N9v6L6D/Z9+CSS0RWNOU5SecQrRQc5mXHdljaJ6c3Q/ekjPI+9czPgigkJ
bxcpUAcbw3l8ScKSGjZfa1Wzr6WDfRZwuGa/sxFQdItM5+4pA1zGUZWvT2BhqTkU
ztn9OJ8dwC5Bax4/t6/1lygbbPrdT6xobiLJ7V2bZWusxcd1LRu6nW4u3bycuwRA
Kt93YCkjO1ZQlolMR97vO3ccaccyyJB0j5aQJpOu5K4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org