Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa
File:                     3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (raw, json)
Hash identifier:          mBmqbiD6CPFR92xSAMuOCVnlUZLtC5bPOZ9zvY3R0mw=
Subject key identifier:   39:59:6A:B7:31:73:D3:6D:69:09:D9:7F:E9:10:50:36:75:79:82:7E
Certificate issuer:       /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
Certificate serial:       1F78EA60CE1E5082DD07938C7753FD632D91A642
Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa
Signing time:             Fri 26 Jan 2024 07:00:01 +0000
ROA not before:           Fri 26 Jan 2024 06:55:01 +0000
ROA not after:            Fri 24 Jan 2025 07:00:01 +0000
asID:                     141126
IP address blocks:        103.213.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl
                          rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:78:ea:60:ce:1e:50:82:dd:07:93:8c:77:53:fd:63:2d:91:a6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77
        Validity
            Not Before: Jan 26 06:55:01 2024 GMT
            Not After : Jan 24 07:00:01 2025 GMT
        Subject: CN=39596AB73173D36D6909D97FE91050367579827E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:77:dd:ca:a0:de:5f:87:b0:99:7e:02:49:41:
                    63:84:56:3d:34:02:cf:2e:02:c3:22:f1:80:c0:95:
                    26:fd:88:cd:c0:95:a0:ab:5c:a3:74:aa:22:fb:d7:
                    34:a0:27:52:3b:c5:62:b6:20:ae:0e:65:bc:f3:a1:
                    92:7e:50:f7:15:e1:01:ad:5e:f2:cb:e0:af:fc:1b:
                    81:e6:0e:15:66:d1:2c:22:94:a9:5f:5b:10:c1:77:
                    6a:0f:33:68:b9:a5:30:2b:b8:81:7b:ed:ec:3e:ee:
                    e0:58:92:0f:95:97:34:ea:58:7d:1d:61:94:22:16:
                    c8:41:e0:b7:12:e1:a6:9a:5e:61:dd:e4:65:d6:2e:
                    db:2d:25:6e:00:ec:f3:df:7c:06:9d:c7:0b:4b:d0:
                    13:d4:7a:4a:45:b3:ae:b6:8c:cf:b6:20:dd:7e:b6:
                    d6:ec:3c:2f:37:3a:c7:48:73:d5:c4:6b:5b:3c:2c:
                    34:33:7f:e1:06:b5:04:ae:fe:1c:6a:78:16:7f:11:
                    1a:23:dd:24:b0:a6:8f:fa:c9:b2:7c:88:2d:7e:f6:
                    c7:42:1a:39:77:d5:a3:e5:cf:4f:ae:7e:37:c0:ee:
                    5d:8a:cb:6a:fe:bd:b8:4b:b0:4c:e8:9b:7e:a0:7c:
                    5e:ab:15:33:52:ff:ef:70:49:a9:8e:bf:75:cb:e4:
                    5a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:59:6A:B7:31:73:D3:6D:69:09:D9:7F:E9:10:50:36:75:79:82:7E
            X509v3 Authority Key Identifier:
                keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.213.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:0a:ff:cb:6a:49:c5:da:90:b0:37:ac:07:6a:a0:5e:e0:7c:
         27:e1:3e:4f:ef:c5:0b:f9:fa:1a:61:0c:76:52:ad:be:a9:64:
         d3:f4:f8:7b:22:fe:fc:66:57:06:dd:d0:b4:79:44:87:35:a7:
         6d:0b:d6:b6:75:ab:43:6c:b8:af:bc:45:3a:a2:b0:d0:0f:af:
         75:5d:c8:cb:0d:f3:28:73:d9:87:0b:82:ba:9e:08:78:d1:f0:
         e5:5d:a7:62:fd:7d:64:2d:d1:0b:98:8c:34:82:f8:a3:e0:25:
         a1:bc:79:b3:5d:58:02:4d:5b:8e:dc:10:30:5e:b7:cb:43:d6:
         38:ed:3a:21:78:08:dd:30:5a:e8:35:a4:b0:0b:c1:59:2d:7e:
         2c:6f:18:a1:a0:eb:2e:a4:c2:ab:94:b3:2e:55:53:6c:ca:b8:
         28:66:88:c3:82:d0:93:c1:6c:f1:12:e9:22:f9:b0:20:c4:cc:
         14:04:c9:e0:f5:55:3a:19:26:48:7d:c7:38:25:a8:e8:77:aa:
         91:50:1a:cf:0d:41:3d:43:75:c3:f8:1d:5b:2d:4e:44:43:00:
         f1:fe:2e:c6:ff:cd:57:e0:80:0b:bf:67:b5:a6:9d:5b:2f:51:
         f6:fb:98:b6:4c:61:1a:20:7d:51:0e:06:7a:0d:30:46:1e:f2:
         69:79:3d:fd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUH3jqYM4eUILdB5OMd1P9Yy2RpkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE
MTY1RkE3NzAeFw0yNDAxMjYwNjU1MDFaFw0yNTAxMjQwNzAwMDFaMDMxMTAvBgNV
BAMTKDM5NTk2QUI3MzE3M0QzNkQ2OTA5RDk3RkU5MTA1MDM2NzU3OTgyN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRd93KoN5fh7CZfgJJQWOEVj00
As8uAsMi8YDAlSb9iM3AlaCrXKN0qiL71zSgJ1I7xWK2IK4OZbzzoZJ+UPcV4QGt
XvLL4K/8G4HmDhVm0SwilKlfWxDBd2oPM2i5pTAruIF77ew+7uBYkg+VlzTqWH0d
YZQiFshB4LcS4aaaXmHd5GXWLtstJW4A7PPffAadxwtL0BPUekpFs662jM+2IN1+
ttbsPC83OsdIc9XEa1s8LDQzf+EGtQSu/hxqeBZ/ERoj3SSwpo/6ybJ8iC1+9sdC
Gjl31aPlz0+ufjfA7l2Ky2r+vbhLsEzom36gfF6rFTNS/+9wSamOv3XL5FofAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUOVlqtzFz021pCdl/6RBQNnV5gn4wHwYDVR0j
BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF
RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1
RkE3Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUyMjkyYmE4LWFkMWEtNDEzOS04
YzIwLTViNTI2ZGE5NzBiZC8wLzMxMzAzMzJlMzIzMTMzMmUzMjMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMTMyMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn1ecwDQYJ
KoZIhvcNAQELBQADggEBAJ0K/8tqScXakLA3rAdqoF7gfCfhPk/vxQv5+hphDHZS
rb6pZNP0+Hsi/vxmVwbd0LR5RIc1p20L1rZ1q0NsuK+8RTqisNAPr3VdyMsN8yhz
2YcLgrqeCHjR8OVdp2L9fWQt0QuYjDSC+KPgJaG8ebNdWAJNW47cEDBet8tD1jjt
OiF4CN0wWug1pLALwVktfixvGKGg6y6kwquUsy5VU2zKuChmiMOC0JPBbPES6SL5
sCDEzBQEyeD1VToZJkh9xzglqOh3qpFQGs8NQT1DdcP4HVstTkRDAPH+Lsb/zVfg
gAu/Z7WmnVsvUfb7mLZMYRogfVEOBnoNMEYe8ml5Pf0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org