Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa
File:                     3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa (raw, json)
Hash identifier:          lGbb1c7YYyFRjQRuKGj/ey49slvJpEm0AWJ3siLp++U=
Subject key identifier:   62:E0:5F:30:6A:48:25:ED:D5:EC:58:82:4E:8C:43:8D:ED:E3:B0:9F
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       5AE89ADFD1D61F2E1660AF1E90477DC2C45DDCF8
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa
Signing time:             Mon 31 Jul 2023 00:02:20 +0000
ROA not before:           Sun 30 Jul 2023 23:57:20 +0000
ROA not after:            Mon 29 Jul 2024 00:02:20 +0000
asID:                     132642
IP address blocks:        103.19.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 19:39:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:e8:9a:df:d1:d6:1f:2e:16:60:af:1e:90:47:7d:c2:c4:5d:dc:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul 30 23:57:20 2023 GMT
            Not After : Jul 29 00:02:20 2024 GMT
        Subject: CN=62E05F306A4825EDD5EC58824E8C438DEDE3B09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:82:0d:6c:0b:b9:30:2d:c2:d6:ca:b6:1a:b7:
                    2d:e9:5e:32:f8:6d:68:b1:f5:83:ce:c0:88:ed:b5:
                    3e:97:e4:c7:17:94:fb:19:2b:17:59:88:d6:7d:ab:
                    08:b1:ff:9e:90:80:8a:44:d8:17:f7:4b:14:da:0a:
                    c7:46:d5:d1:f5:74:54:0b:e1:5a:05:50:1c:12:67:
                    d5:e1:7a:fd:f0:d4:3a:be:ad:15:bb:fd:aa:fe:a6:
                    1d:28:5d:65:fd:4e:ca:85:a7:96:56:28:81:8c:fc:
                    34:38:0c:90:aa:cd:07:8f:ce:62:88:5f:9c:9d:c6:
                    15:40:1f:cc:a1:cb:95:b4:04:9a:ae:59:ef:5e:63:
                    91:54:fe:59:79:54:f9:3c:68:99:31:06:09:68:43:
                    7a:2d:0c:07:95:aa:b3:34:24:d5:f6:5a:97:06:45:
                    02:2d:82:88:a5:30:d5:fb:ca:c0:80:d2:f9:68:76:
                    19:72:c7:33:63:1b:7f:74:e7:1a:00:aa:2d:4f:1c:
                    d1:1e:46:34:ba:7c:f1:dd:e7:62:7d:03:00:aa:ee:
                    fe:f0:11:72:d3:a9:79:29:16:08:31:26:5b:fa:6d:
                    1c:b2:8b:9c:f4:a1:39:9a:e2:d9:71:9e:1a:40:af:
                    b9:46:10:98:1c:0a:e0:3a:10:97:af:42:8f:25:2b:
                    db:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:E0:5F:30:6A:48:25:ED:D5:EC:58:82:4E:8C:43:8D:ED:E3:B0:9F
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138302e302f32322d3232203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6c:9a:60:8f:25:e1:49:ea:6c:a4:a0:a4:10:21:32:91:b3:8d:
         64:af:73:4d:12:7e:74:98:2f:2e:e3:fb:30:17:55:e5:4e:84:
         c1:86:e1:1f:3c:70:ef:1c:10:c6:d5:87:bc:e7:9e:cf:9f:78:
         98:0b:37:7a:22:70:40:06:11:84:91:91:10:04:82:c6:9d:cb:
         f9:8a:a0:4f:fe:6c:04:21:3e:2f:3a:82:66:6b:d4:cc:9e:6f:
         db:e9:42:32:f4:f3:c2:e7:da:f2:05:cd:7c:59:83:e3:69:c1:
         98:7c:a0:e3:b0:fd:13:ab:95:4c:ac:9c:52:d8:e0:5c:47:88:
         79:f2:d5:e9:0c:67:3a:b2:99:ea:2f:65:f8:22:7e:ca:c6:6b:
         4c:8e:5d:24:3a:87:dd:5e:b1:a0:96:27:92:ef:a6:0c:6f:87:
         15:bd:b4:61:87:2f:ea:51:24:c7:28:2f:20:07:53:7b:92:89:
         32:c1:c8:fc:b4:ba:6d:d7:ba:f9:81:5f:00:ae:af:a3:f6:97:
         97:da:78:52:96:1f:a6:6b:66:7c:af:79:e5:d6:a5:2d:49:40:
         be:99:72:a5:8f:9f:bc:36:65:b9:0b:f9:7b:a6:9f:60:3f:ad:
         47:66:06:e9:41:01:ed:e1:ec:25:ed:ab:85:8c:b9:3a:c9:7d:
         33:38:7f:1c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWuia39HWHy4WYK8ekEd9wsRd3PgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0
MzdDQThFOTAeFw0yMzA3MzAyMzU3MjBaFw0yNDA3MjkwMDAyMjBaMDMxMTAvBgNV
BAMTKDYyRTA1RjMwNkE0ODI1RURENUVDNTg4MjRFOEM0MzhERURFM0IwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0gg1sC7kwLcLWyrYaty3pXjL4
bWix9YPOwIjttT6X5McXlPsZKxdZiNZ9qwix/56QgIpE2Bf3SxTaCsdG1dH1dFQL
4VoFUBwSZ9Xhev3w1Dq+rRW7/ar+ph0oXWX9TsqFp5ZWKIGM/DQ4DJCqzQePzmKI
X5ydxhVAH8yhy5W0BJquWe9eY5FU/ll5VPk8aJkxBgloQ3otDAeVqrM0JNX2WpcG
RQItgoilMNX7ysCA0vlodhlyxzNjG3905xoAqi1PHNEeRjS6fPHd52J9AwCq7v7w
EXLTqXkpFggxJlv6bRyyi5z0oTma4tlxnhpAr7lGEJgcCuA6EJevQo8lK9tlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYuBfMGpIJe3V7FiCToxDje3jsJ8wHwYDVR0j
BBgwFoAUgYgjtQ+NY+nZU8S3UvBNsEN8qOkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MGM3NzNjOC1mYjU2LTQ0OWYtODY0OS0xMTJkNmUxNjg2YjMvMC84MTg4MjNCNTBG
OEQ2M0U5RDk1M0M0Qjc1MkYwNERCMDQzN0NBOEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODE4ODIzQjUwRjhENjNFOUQ5NTNDNEI3NTJGMDREQjA0MzdD
QThFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUwYzc3M2M4LWZiNTYtNDQ5Zi04
NjQ5LTExMmQ2ZTE2ODZiMy8wLzMxMzAzMzJlMzEzOTJlMzEzODMwMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzEzMzMyMzYzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCZxO0MA0GCSqG
SIb3DQEBCwUAA4IBAQBsmmCPJeFJ6mykoKQQITKRs41kr3NNEn50mC8u4/swF1Xl
ToTBhuEfPHDvHBDG1Ye8557Pn3iYCzd6InBABhGEkZEQBILGncv5iqBP/mwEIT4v
OoJma9TMnm/b6UIy9PPC59ryBc18WYPjacGYfKDjsP0Tq5VMrJxS2OBcR4h58tXp
DGc6spnqL2X4In7KxmtMjl0kOofdXrGglieS76YMb4cVvbRhhy/qUSTHKC8gB1N7
kokywcj8tLpt17r5gV8Arq+j9peX2nhSlh+ma2Z8r3nl1qUtSUC+mXKlj5+8NmW5
C/l7pp9gP61HZgbpQQHt4ewl7auFjLk6yX0zOH8c
-----END CERTIFICATE-----
Generated at Thu May 2 20:02:07 2024 by rpki-client on console-ams.rpki-client.org