Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa
File:                     3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa (raw, json)
Hash identifier:          yKxlAh8xWUc7eSqJYIqudwrZ8bmbbVumjPeTA0K2cl0=
Subject key identifier:   B8:F2:EA:8D:D1:93:D3:F0:95:17:16:04:15:2E:FE:B9:7D:41:F7:2C
Certificate issuer:       /CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
Certificate serial:       50C9008E674642BF00F618808F0F0D29CD500469
Authority key identifier: 3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa
Signing time:             Fri 19 Jan 2024 06:20:34 +0000
ROA not before:           Fri 19 Jan 2024 06:15:34 +0000
ROA not after:            Fri 17 Jan 2025 06:20:34 +0000
asID:                     138127
IP address blocks:        103.132.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl
                          rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:c9:00:8e:67:46:42:bf:00:f6:18:80:8f:0f:0d:29:cd:50:04:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E0B957B582D8AEF99A49C6448F9993C72378BF3
        Validity
            Not Before: Jan 19 06:15:34 2024 GMT
            Not After : Jan 17 06:20:34 2025 GMT
        Subject: CN=B8F2EA8DD193D3F095171604152EFEB97D41F72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3b:90:88:7b:ea:f6:de:3e:ad:fc:b8:99:88:
                    94:f2:a0:48:df:f3:f0:7e:43:5e:73:14:ce:78:9f:
                    5e:c6:f4:10:90:2f:4f:9e:8b:b1:10:b6:d6:32:7e:
                    19:81:14:99:38:ad:95:e2:d8:75:e3:77:17:b2:e8:
                    42:0d:6f:f7:74:27:e0:3d:27:5b:c8:54:28:81:f1:
                    6b:48:47:a2:72:27:14:55:46:a2:b8:b3:61:c4:56:
                    7f:8c:11:d4:5d:33:64:29:9f:a4:fc:e7:ab:a6:8f:
                    b2:27:5f:99:69:8f:9c:d6:9d:42:e6:7f:b3:73:17:
                    01:85:af:2c:dd:71:b1:0e:20:9e:4f:1b:77:5e:34:
                    62:b5:0a:df:97:36:56:04:de:c9:f1:fd:9c:a3:35:
                    a8:95:72:fc:3d:85:76:92:64:c1:a6:a2:ac:66:fd:
                    6f:86:88:f8:b3:2d:a1:84:f1:ec:25:18:bc:7f:5b:
                    31:a9:9d:f0:a9:9d:12:6e:1d:8a:b9:60:3c:65:19:
                    81:ab:ba:6c:7d:99:d5:fe:70:c3:7a:d9:33:62:97:
                    70:30:a6:6b:42:7e:b5:9f:86:a4:94:91:65:ca:dd:
                    05:36:ac:5f:00:cd:0b:e0:e2:ff:d4:84:94:c7:01:
                    ea:cd:eb:61:02:2d:b8:ce:ad:e6:33:6c:43:8c:4e:
                    05:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F2:EA:8D:D1:93:D3:F0:95:17:16:04:15:2E:FE:B9:7D:41:F7:2C
            X509v3 Authority Key Identifier:
                keyid:3E:0B:95:7B:58:2D:8A:EF:99:A4:9C:64:48:F9:99:3C:72:37:8B:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3E0B957B582D8AEF99A49C6448F9993C72378BF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E0B957B582D8AEF99A49C6448F9993C72378BF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4edc9e4f-8180-41d6-b08d-8ee5a8a70a05/0/3130332e3133322e3233312e302f32342d3234203d3e20313338313237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:b2:a3:48:d4:25:9a:67:73:4a:43:a4:73:51:d4:d2:cb:72:
         85:45:09:53:61:76:1b:d0:68:18:3f:7b:9f:ec:1b:47:49:83:
         fe:3c:65:82:d0:f2:c9:76:0b:5e:5b:d0:77:45:79:18:06:b4:
         31:13:95:9d:f6:4b:30:73:69:2f:38:4f:85:e3:04:a2:b3:ef:
         82:46:52:d5:e0:e2:3d:ab:04:4e:3b:e8:1c:84:d4:b8:8e:63:
         b1:e1:c8:b8:f8:4e:6d:df:b2:06:1c:36:27:64:83:13:7a:54:
         77:5b:b1:2b:a4:80:8d:b0:0c:76:0c:66:32:86:5d:6e:fc:d5:
         19:97:36:cc:cd:52:6d:e5:a9:de:34:3c:bb:50:24:72:4a:f9:
         17:7c:6a:80:de:0a:1c:e1:64:cb:58:37:35:d9:48:0e:34:ba:
         d0:12:06:56:26:87:45:47:8c:65:06:cc:3c:67:d9:23:6f:2d:
         c9:d9:e2:fb:4d:95:e7:76:c2:f4:8a:fa:de:74:62:50:5c:49:
         78:b5:e0:d0:1f:a0:0a:65:1c:8b:0c:18:7c:ec:00:fb:19:ee:
         cb:93:0d:46:c1:d2:1a:73:27:4a:e8:78:77:12:2b:7b:1a:02:
         56:3c:f9:cf:a1:25:93:37:2e:ec:0f:91:79:a8:27:05:34:50:
         ab:52:72:e9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUMkAjmdGQr8A9hiAjw8NKc1QBGkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3
MjM3OEJGMzAeFw0yNDAxMTkwNjE1MzRaFw0yNTAxMTcwNjIwMzRaMDMxMTAvBgNV
BAMTKEI4RjJFQThERDE5M0QzRjA5NTE3MTYwNDE1MkVGRUI5N0Q0MUY3MkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2O5CIe+r23j6t/LiZiJTyoEjf
8/B+Q15zFM54n17G9BCQL0+ei7EQttYyfhmBFJk4rZXi2HXjdxey6EINb/d0J+A9
J1vIVCiB8WtIR6JyJxRVRqK4s2HEVn+MEdRdM2Qpn6T856umj7InX5lpj5zWnULm
f7NzFwGFryzdcbEOIJ5PG3deNGK1Ct+XNlYE3snx/ZyjNaiVcvw9hXaSZMGmoqxm
/W+GiPizLaGE8ewlGLx/WzGpnfCpnRJuHYq5YDxlGYGrumx9mdX+cMN62TNil3Aw
pmtCfrWfhqSUkWXK3QU2rF8AzQvg4v/UhJTHAerN62ECLbjOreYzbEOMTgWrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUuPLqjdGT0/CVFxYEFS7+uX1B9ywwHwYDVR0j
BBgwFoAUPguVe1gtiu+ZpJxkSPmZPHI3i/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZWRjOWU0Zi04MTgwLTQxZDYtYjA4ZC04ZWU1YThhNzBhMDUvMC8zRTBCOTU3QjU4
MkQ4QUVGOTlBNDlDNjQ0OEY5OTkzQzcyMzc4QkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0UwQjk1N0I1ODJEOEFFRjk5QTQ5QzY0NDhGOTk5M0M3MjM3
OEJGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRlZGM5ZTRmLTgxODAtNDFkNi1i
MDhkLThlZTVhOGE3MGEwNS8wLzMxMzAzMzJlMzEzMzMyMmUzMjMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMyMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnhOcwDQYJ
KoZIhvcNAQELBQADggEBAHGyo0jUJZpnc0pDpHNR1NLLcoVFCVNhdhvQaBg/e5/s
G0dJg/48ZYLQ8sl2C15b0HdFeRgGtDETlZ32SzBzaS84T4XjBKKz74JGUtXg4j2r
BE476ByE1LiOY7HhyLj4Tm3fsgYcNidkgxN6VHdbsSukgI2wDHYMZjKGXW781RmX
NszNUm3lqd40PLtQJHJK+Rd8aoDeChzhZMtYNzXZSA40utASBlYmh0VHjGUGzDxn
2SNvLcnZ4vtNled2wvSK+t50YlBcSXi14NAfoAplHIsMGHzsAPsZ7suTDUbB0hpz
J0roeHcSK3saAlY8+c+hJZM3LuwPkXmoJwU0UKtScuk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 05:48:03 2024 by rpki-client on console-fra.rpki-client.org