Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
File:                     3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa (raw, json)
Hash identifier:          mSliD1vp9W3HskEo7RkLZAe+zzV/2ow/Kxu30d1qJXM=
Subject key identifier:   BC:12:53:24:B4:81:A6:81:FB:7A:07:47:FF:E5:39:A9:66:34:ED:27
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       2B81F8849ADC5AE9570EF463AE435C988922CDFC
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa
Signing time:             Fri 26 Jul 2024 04:00:01 +0000
ROA not before:           Fri 26 Jul 2024 03:55:01 +0000
ROA not after:            Fri 25 Jul 2025 04:00:01 +0000
asID:                     149951
IP address blocks:        103.111.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl
                          rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:81:f8:84:9a:dc:5a:e9:57:0e:f4:63:ae:43:5c:98:89:22:cd:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Jul 26 03:55:01 2024 GMT
            Not After : Jul 25 04:00:01 2025 GMT
        Subject: CN=BC125324B481A681FB7A0747FFE539A96634ED27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:f0:7f:a7:d6:be:0f:ca:7c:33:aa:13:86:
                    a1:7e:a5:fe:e4:3c:17:9d:a1:5d:65:c6:04:07:22:
                    2d:1d:26:81:32:d2:d7:2a:49:69:d8:a1:14:19:e8:
                    09:cf:71:cd:2d:b2:03:4c:40:ad:fc:69:4c:00:1e:
                    74:61:8f:8e:8a:71:e9:3d:be:02:9c:12:fc:4c:4c:
                    78:19:fe:3a:83:81:19:6b:ba:78:8a:21:9f:f6:9b:
                    8f:b2:30:16:7f:6d:b5:cf:7a:04:e7:1f:0a:62:dd:
                    ee:a7:db:8a:ad:09:e9:95:08:ae:00:03:47:4f:52:
                    4d:06:70:51:47:4e:fa:a2:bf:30:0c:c4:5f:ce:ea:
                    8b:4d:2a:3d:2f:d3:29:0d:66:14:02:b5:8e:94:21:
                    4c:d0:cd:45:eb:91:06:95:2b:7f:5b:b3:2a:28:fd:
                    2d:84:04:b1:92:f0:76:97:21:7b:64:4d:3c:20:f7:
                    ad:d7:b4:50:1a:ca:ce:01:b5:43:b4:1a:4a:02:b1:
                    26:f4:46:fe:c9:df:62:1f:b8:28:b6:87:f0:f0:74:
                    54:05:4f:d9:c0:08:f0:7a:24:fa:93:98:73:4e:15:
                    8b:54:6e:7b:be:11:ba:ca:b2:ef:d3:58:46:8e:70:
                    f8:8f:c1:ef:eb:99:53:37:3a:c1:67:40:82:7b:ab:
                    a1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:12:53:24:B4:81:A6:81:FB:7A:07:47:FF:E5:39:A9:66:34:ED:27
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131392e302f32342d3234203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:2b:6b:69:47:f1:f0:2d:26:ee:9e:bd:9c:45:df:68:b1:19:
         44:40:99:a6:94:bd:3d:1d:a8:60:3e:d3:71:54:d1:84:ef:65:
         96:ea:b2:90:33:90:f3:7d:53:16:90:90:8f:e3:d1:e9:33:63:
         dc:11:a8:87:f1:cb:3e:31:19:b5:91:70:19:58:b8:55:a0:7d:
         45:5d:d5:26:a7:b2:ca:3c:9d:06:64:a1:8d:3b:ae:1c:d2:5b:
         92:9a:b3:0c:57:3c:76:2c:a1:67:92:27:de:e5:69:69:da:0a:
         1c:e8:0d:b3:8e:87:af:d8:10:76:0b:f7:ac:ca:0f:ee:42:77:
         4e:75:47:24:5c:0b:2d:27:df:77:80:60:a9:48:93:13:12:00:
         50:be:e6:29:df:2f:c0:51:00:47:05:38:0a:3a:f2:2a:63:6a:
         52:ab:f1:48:43:15:ff:6c:34:6a:43:0e:35:b0:3d:2c:06:5c:
         43:ae:00:58:8c:a3:14:fc:1d:16:0d:da:78:ff:46:b4:8a:cd:
         0b:ac:70:e8:c5:9d:67:22:43:7f:4f:b7:8f:a1:db:6e:6f:74:
         4e:fd:92:5c:89:34:c3:37:2e:17:b7:3a:74:9e:1e:7e:62:90:
         cc:f3:60:a6:cd:1a:fd:ea:e2:bb:94:c8:1c:2c:50:b1:d0:64:
         76:c2:58:f8
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUK4H4hJrcWulXDvRjrkNcmIkizfwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1
N0IxRTM1QjAeFw0yNDA3MjYwMzU1MDFaFw0yNTA3MjUwNDAwMDFaMDMxMTAvBgNV
BAMTKEJDMTI1MzI0QjQ4MUE2ODFGQjdBMDc0N0ZGRTUzOUE5NjYzNEVEMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMZ/B/p9a+D8p8M6oThqF+pf7k
PBedoV1lxgQHIi0dJoEy0tcqSWnYoRQZ6AnPcc0tsgNMQK38aUwAHnRhj46Kcek9
vgKcEvxMTHgZ/jqDgRlruniKIZ/2m4+yMBZ/bbXPegTnHwpi3e6n24qtCemVCK4A
A0dPUk0GcFFHTvqivzAMxF/O6otNKj0v0ykNZhQCtY6UIUzQzUXrkQaVK39bsyoo
/S2EBLGS8HaXIXtkTTwg963XtFAays4BtUO0GkoCsSb0Rv7J32IfuCi2h/DwdFQF
T9nACPB6JPqTmHNOFYtUbnu+EbrKsu/TWEaOcPiPwe/rmVM3OsFnQIJ7q6HRAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUvBJTJLSBpoH7egdH/+U5qWY07ScwHwYDVR0j
BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz
MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix
RTM1Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZjE2YzQ1LTk2ZmItNGM5Mi04
MDRlLTY0YjBiZjI4MDMwMi8wLzMxMzAzMzJlMzEzMTMxMmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnb3cwDQYJ
KoZIhvcNAQELBQADggEBACcra2lH8fAtJu6evZxF32ixGURAmaaUvT0dqGA+03FU
0YTvZZbqspAzkPN9UxaQkI/j0ekzY9wRqIfxyz4xGbWRcBlYuFWgfUVd1Sansso8
nQZkoY07rhzSW5KaswxXPHYsoWeSJ97laWnaChzoDbOOh6/YEHYL96zKD+5Cd051
RyRcCy0n33eAYKlIkxMSAFC+5infL8BRAEcFOAo68ipjalKr8UhDFf9sNGpDDjWw
PSwGXEOuAFiMoxT8HRYN2nj/RrSKzQuscOjFnWciQ39Pt4+h225vdE79klyJNMM3
Lhe3OnSeHn5ikMzzYKbNGv3q4ruUyBwsULHQZHbCWPg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org