Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa
File:                     3130332e332e3230382e302f32322d3234203d3e203138303034.roa (raw, json)
Hash identifier:          TRkbIk0+FrV+K3gHGX1NOEP/Zf828r6e2rZtJ22y8NM=
Subject key identifier:   62:CA:6C:A4:8F:C6:C6:C0:7A:2C:BD:37:E5:A3:A6:A9:4F:B2:70:26
Certificate issuer:       /CN=735D87BA86773AC70137CF53116358A1F3B19766
Certificate serial:       7ED3C5DCD8ED052EAF8F82D2EA33F1B8480A684C
Authority key identifier: 73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa
Signing time:             Sun 02 Jun 2024 03:00:01 +0000
ROA not before:           Sun 02 Jun 2024 02:55:01 +0000
ROA not after:            Sun 01 Jun 2025 03:00:01 +0000
asID:                     18004
IP address blocks:        103.3.208.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl
                          rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:d3:c5:dc:d8:ed:05:2e:af:8f:82:d2:ea:33:f1:b8:48:0a:68:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=735D87BA86773AC70137CF53116358A1F3B19766
        Validity
            Not Before: Jun  2 02:55:01 2024 GMT
            Not After : Jun  1 03:00:01 2025 GMT
        Subject: CN=62CA6CA48FC6C6C07A2CBD37E5A3A6A94FB27026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:1a:f0:ea:3e:58:15:05:2d:6d:1b:a2:ef:5b:
                    f1:e6:1e:ce:ac:c0:23:29:e5:75:c8:43:e6:15:9b:
                    40:8d:54:bd:f9:8c:f8:32:b5:e1:78:4c:e2:4c:9a:
                    5c:62:e5:da:92:9c:94:c9:a4:f0:d9:63:09:24:92:
                    e7:c9:02:18:a6:a2:58:25:f8:ae:42:c2:db:be:9c:
                    9b:f9:eb:8b:e4:0b:cb:d3:e5:e1:10:3b:88:78:b6:
                    db:0c:a8:ab:73:7a:54:ea:1f:ad:b6:a9:5a:92:9f:
                    c7:a8:93:93:db:3e:4f:e6:0c:0b:ed:65:b6:a6:11:
                    96:72:79:42:33:bc:99:54:35:df:78:2e:18:96:97:
                    21:28:0a:1a:a1:fa:bb:43:12:f1:37:da:d9:d6:44:
                    20:db:26:7c:6a:dd:39:3e:ff:c5:14:d5:7a:f8:2d:
                    a2:e8:8f:d7:f0:09:79:45:83:a7:1d:86:2a:66:39:
                    03:59:59:17:a5:e9:f5:0c:ba:9f:38:06:c5:1f:be:
                    f7:0d:df:9a:41:33:31:f3:87:36:7e:56:34:b1:07:
                    34:5d:e8:ae:f2:89:f6:80:66:41:70:c6:21:ba:10:
                    eb:2a:ee:23:fa:18:52:52:6e:0f:48:ad:fd:4f:af:
                    1b:08:2f:ef:eb:ed:58:a9:72:bb:58:10:0f:09:3e:
                    6a:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CA:6C:A4:8F:C6:C6:C0:7A:2C:BD:37:E5:A3:A6:A9:4F:B2:70:26
            X509v3 Authority Key Identifier:
                keyid:73:5D:87:BA:86:77:3A:C7:01:37:CF:53:11:63:58:A1:F3:B1:97:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/735D87BA86773AC70137CF53116358A1F3B19766.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/735D87BA86773AC70137CF53116358A1F3B19766.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4f5d364a-da0b-4540-9349-5930bd725ce3/0/3130332e332e3230382e302f32322d3234203d3e203138303034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:74:42:f1:ac:26:c5:fb:a0:6c:63:68:cb:af:a1:a6:33:c2:
         39:f4:3d:5f:53:62:f7:53:b5:be:bb:36:7e:e2:de:f0:1e:01:
         e2:e1:26:7b:00:8f:fb:37:f2:c9:35:6e:3b:21:22:2b:af:d7:
         6b:3a:ec:83:8d:73:08:5a:3a:9c:7a:c1:21:8a:41:2f:f8:bf:
         bd:85:81:6c:52:4d:89:16:a9:21:c2:c9:58:bd:3d:15:5c:a9:
         6a:1d:86:bd:66:7d:08:62:31:d7:54:19:d2:fb:8c:2d:8d:ad:
         b4:8b:26:e8:da:66:2e:88:8b:d9:23:a2:0c:f0:aa:b2:dc:81:
         b3:f1:a4:ad:53:08:aa:0a:28:30:8a:5d:1a:5e:d5:a9:dc:50:
         92:cd:33:a2:81:db:40:07:18:1a:83:e2:7e:16:c1:63:49:9f:
         95:2f:c3:be:f8:45:66:1d:c5:b0:23:3b:90:af:ef:5c:f6:b6:
         2e:8c:63:9a:29:33:5b:20:7c:dc:0a:02:6a:9b:90:32:f2:7b:
         db:f6:f4:ff:3b:b0:0a:85:25:ce:84:4d:59:c4:31:a9:ab:54:
         10:68:a0:65:bd:12:62:4d:f8:83:12:bd:ff:8b:cc:c5:0a:20:
         97:3f:72:69:23:e5:de:97:98:bf:cb:f5:d7:57:7e:16:b7:18:
         0a:c2:99:6e
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUftPF3NjtBS6vj4LS6jPxuEgKaEwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFG
M0IxOTc2NjAeFw0yNDA2MDIwMjU1MDFaFw0yNTA2MDEwMzAwMDFaMDMxMTAvBgNV
BAMTKDYyQ0E2Q0E0OEZDNkM2QzA3QTJDQkQzN0U1QTNBNkE5NEZCMjcwMjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0GvDqPlgVBS1tG6LvW/HmHs6s
wCMp5XXIQ+YVm0CNVL35jPgyteF4TOJMmlxi5dqSnJTJpPDZYwkkkufJAhimolgl
+K5Cwtu+nJv564vkC8vT5eEQO4h4ttsMqKtzelTqH622qVqSn8eok5PbPk/mDAvt
ZbamEZZyeUIzvJlUNd94LhiWlyEoChqh+rtDEvE32tnWRCDbJnxq3Tk+/8UU1Xr4
LaLoj9fwCXlFg6cdhipmOQNZWRel6fUMup84BsUfvvcN35pBMzHzhzZ+VjSxBzRd
6K7yifaAZkFwxiG6EOsq7iP6GFJSbg9Irf1PrxsIL+/r7VipcrtYEA8JPmphAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUYspspI/GxsB6LL035aOmqU+ycCYwHwYDVR0j
BBgwFoAUc12HuoZ3OscBN89TEWNYofOxl2YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
ZjVkMzY0YS1kYTBiLTQ1NDAtOTM0OS01OTMwYmQ3MjVjZTMvMC83MzVEODdCQTg2
NzczQUM3MDEzN0NGNTMxMTYzNThBMUYzQjE5NzY2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzM1RDg3QkE4Njc3M0FDNzAxMzdDRjUzMTE2MzU4QTFGM0Ix
OTc2Ni5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRmNWQzNjRhLWRhMGItNDU0MC05
MzQ5LTU5MzBiZDcyNWNlMy8wLzMxMzAzMzJlMzMyZTMyMzAzODJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMxMzgzMDMwMzQucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnA9AwDQYJKoZIhvcN
AQELBQADggEBAEV0QvGsJsX7oGxjaMuvoaYzwjn0PV9TYvdTtb67Nn7i3vAeAeLh
JnsAj/s38sk1bjshIiuv12s67IONcwhaOpx6wSGKQS/4v72FgWxSTYkWqSHCyVi9
PRVcqWodhr1mfQhiMddUGdL7jC2NrbSLJujaZi6Ii9kjogzwqrLcgbPxpK1TCKoK
KDCKXRpe1ancUJLNM6KB20AHGBqD4n4WwWNJn5Uvw774RWYdxbAjO5Cv71z2ti6M
Y5opM1sgfNwKAmqbkDLye9v29P87sAqFJc6ETVnEMamrVBBooGW9EmJN+IMSvf+L
zMUKIJc/cmkj5d6XmL/L9ddXfha3GArCmW4=
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:03 2024 by rpki-client on console-fra.rpki-client.org