Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
File:                     3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa (raw, json)
Hash identifier:          HM06Nxz+y/gIUQ+X/bWtaqdgCwesuVZhQ6jDGPYAPi4=
Subject key identifier:   2D:84:91:F5:75:75:18:D3:00:88:00:0B:E4:71:DC:55:EA:99:48:1A
Certificate issuer:       /CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
Certificate serial:       492B393D8AE44CCFD551C76E9608BD7AFA8B5881
Authority key identifier: EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa
Signing time:             Fri 24 May 2024 16:00:00 +0000
ROA not before:           Fri 24 May 2024 15:55:00 +0000
ROA not after:            Fri 23 May 2025 16:00:00 +0000
asID:                     149365
IP address blocks:        103.180.167.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl
                          rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 16:12:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:2b:39:3d:8a:e4:4c:cf:d5:51:c7:6e:96:08:bd:7a:fa:8b:58:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE6CBB9BBDADA4EABD41A094453212A55B300C81
        Validity
            Not Before: May 24 15:55:00 2024 GMT
            Not After : May 23 16:00:00 2025 GMT
        Subject: CN=2D8491F5757518D30088000BE471DC55EA99481A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7f:48:05:b2:54:29:52:db:11:25:76:db:cc:
                    c6:b3:35:eb:a4:16:1a:0a:2a:af:bf:9d:6d:fe:b9:
                    f9:7f:d1:10:2a:ac:8c:42:4c:fa:78:93:f7:7b:3b:
                    50:c3:57:bc:8f:16:dc:eb:c3:9b:0d:a6:72:ba:f0:
                    f2:15:51:b5:d3:3c:25:b4:91:a0:d5:08:67:fb:81:
                    24:b1:67:97:86:14:1a:6d:f1:b9:69:5a:61:16:30:
                    6e:cd:8d:d4:dc:7b:a8:90:23:b9:0c:ab:5a:84:24:
                    40:cd:93:4e:fd:85:ac:22:1c:f4:e6:67:7d:85:38:
                    02:0c:d2:b9:dd:95:52:a6:bd:9e:90:6d:87:b3:84:
                    0f:8f:d7:8a:7d:af:7a:91:95:84:11:ac:65:62:be:
                    03:da:dd:ff:8d:2c:d9:98:2c:03:a4:b4:3b:95:b0:
                    44:3c:8c:2c:a1:f3:1f:02:21:c2:20:25:c1:fe:a5:
                    17:a6:d4:6d:d0:17:99:54:46:80:00:6b:d0:f3:11:
                    0f:d4:f6:26:cc:73:81:6c:50:6a:66:86:92:1c:68:
                    b0:0a:cb:af:e5:2f:82:79:c8:94:40:3e:99:20:fd:
                    81:bd:74:45:53:9d:8b:07:98:a1:5b:d4:7b:16:6a:
                    f4:08:6d:25:c3:65:36:9a:a7:1f:39:89:6d:fb:ab:
                    78:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:84:91:F5:75:75:18:D3:00:88:00:0B:E4:71:DC:55:EA:99:48:1A
            X509v3 Authority Key Identifier:
                keyid:EE:6C:BB:9B:BD:AD:A4:EA:BD:41:A0:94:45:32:12:A5:5B:30:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/EE6CBB9BBDADA4EABD41A094453212A55B300C81.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE6CBB9BBDADA4EABD41A094453212A55B300C81.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50661332-3773-45d6-801a-1d7eae341cac/0/3130332e3138302e3136372e302f32342d3234203d3e20313439333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:bd:61:9d:26:1f:8e:14:59:6d:9a:5f:a8:a8:80:60:8f:72:
         ad:99:ab:d5:47:6a:52:62:83:89:a9:73:a7:1c:e8:7f:3a:87:
         fb:61:c0:7b:87:32:5c:c9:e2:63:49:d5:e5:eb:40:fe:3f:69:
         d8:f7:88:ea:01:39:f2:7c:4d:70:93:16:f8:0c:16:e8:86:02:
         94:9b:8a:68:75:5e:e2:1f:d1:39:39:f2:5c:a0:e7:d6:b6:b5:
         67:74:03:4a:57:d6:1f:8f:47:bd:dc:ce:c6:0b:49:bb:9b:5e:
         34:07:e1:44:06:1c:e0:e9:70:fe:33:6a:ab:e6:49:9c:1f:b6:
         af:eb:ab:0a:52:6e:a2:af:77:b9:3a:cb:0e:ca:c4:3c:be:a7:
         d7:a3:87:c5:a7:cc:76:d3:f9:ed:c2:11:e3:f1:40:64:9f:9e:
         f4:15:17:9f:b1:44:84:0d:2e:b1:36:d4:ab:75:53:04:da:8c:
         b9:03:e7:2b:ab:3f:1d:e2:ba:8a:0b:17:a6:74:ed:ad:70:1e:
         f2:61:59:0c:08:44:c9:4b:0a:3d:15:a5:75:eb:6e:c1:90:30:
         dd:30:9d:ae:08:99:b4:22:76:b0:7b:a8:fc:db:de:ca:80:6c:
         a7:57:e5:cd:3b:72:d0:ec:f9:70:9f:03:fe:f3:be:7a:db:fb:
         ad:2d:f2:66
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSSs5PYrkTM/VUcdulgi9evqLWIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUU2Q0JCOUJCREFEQTRFQUJENDFBMDk0NDUzMjEyQTU1
QjMwMEM4MTAeFw0yNDA1MjQxNTU1MDBaFw0yNTA1MjMxNjAwMDBaMDMxMTAvBgNV
BAMTKDJEODQ5MUY1NzU3NTE4RDMwMDg4MDAwQkU0NzFEQzU1RUE5OTQ4MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0f0gFslQpUtsRJXbbzMazNeuk
FhoKKq+/nW3+ufl/0RAqrIxCTPp4k/d7O1DDV7yPFtzrw5sNpnK68PIVUbXTPCW0
kaDVCGf7gSSxZ5eGFBpt8blpWmEWMG7NjdTce6iQI7kMq1qEJEDNk079hawiHPTm
Z32FOAIM0rndlVKmvZ6QbYezhA+P14p9r3qRlYQRrGVivgPa3f+NLNmYLAOktDuV
sEQ8jCyh8x8CIcIgJcH+pRem1G3QF5lURoAAa9DzEQ/U9ibMc4FsUGpmhpIcaLAK
y6/lL4J5yJRAPpkg/YG9dEVTnYsHmKFb1HsWavQIbSXDZTaapx85iW37q3gVAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQULYSR9XV1GNMAiAAL5HHcVeqZSBowHwYDVR0j
BBgwFoAU7my7m72tpOq9QaCURTISpVswDIEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MDY2MTMzMi0zNzczLTQ1ZDYtODAxYS0xZDdlYWUzNDFjYWMvMC9FRTZDQkI5QkJE
QURBNEVBQkQ0MUEwOTQ0NTMyMTJBNTVCMzAwQzgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUU2Q0JCOUJCREFEQTRFQUJENDFBMDk0NDUzMjEyQTU1QjMw
MEM4MS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwNjYxMzMyLTM3NzMtNDVkNi04
MDFhLTFkN2VhZTM0MWNhYy8wLzMxMzAzMzJlMzEzODMwMmUzMTM2MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntKcwDQYJ
KoZIhvcNAQELBQADggEBADm9YZ0mH44UWW2aX6iogGCPcq2Zq9VHalJig4mpc6cc
6H86h/thwHuHMlzJ4mNJ1eXrQP4/adj3iOoBOfJ8TXCTFvgMFuiGApSbimh1XuIf
0Tk58lyg59a2tWd0A0pX1h+PR73czsYLSbubXjQH4UQGHODpcP4zaqvmSZwftq/r
qwpSbqKvd7k6yw7KxDy+p9ejh8WnzHbT+e3CEePxQGSfnvQVF5+xRIQNLrE21Kt1
UwTajLkD5yurPx3iuooLF6Z07a1wHvJhWQwIRMlLCj0VpXXrbsGQMN0wna4ImbQi
drB7qPzb3sqAbKdX5c07ctDs+XCfA/7zvnrb+60t8mY=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org