Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa
File:                     3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa (raw, json)
Hash identifier:          2seZDXO4pcnd1JynB4V1//2E6KgnitMomhQoGmg2FZQ=
Subject key identifier:   01:BC:F7:36:E7:01:BA:F7:A2:FA:A4:01:E4:32:3F:06:D1:88:65:AC
Certificate issuer:       /CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
Certificate serial:       4D51C02B02DF07EAADF79072F2A53EC7474157A4
Authority key identifier: A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa
Signing time:             Thu 23 Nov 2023 12:00:02 +0000
ROA not before:           Thu 23 Nov 2023 11:55:02 +0000
ROA not after:            Thu 21 Nov 2024 12:00:02 +0000
asID:                     141637
IP address blocks:        103.162.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl
                          rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:51:c0:2b:02:df:07:ea:ad:f7:90:72:f2:a5:3e:c7:47:41:57:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A230D664FEDFC0266349811ED3999BE5220F1DEA
        Validity
            Not Before: Nov 23 11:55:02 2023 GMT
            Not After : Nov 21 12:00:02 2024 GMT
        Subject: CN=01BCF736E701BAF7A2FAA401E4323F06D18865AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:31:84:f0:1f:f6:41:50:2b:5e:2a:c2:68:ec:
                    47:00:d5:ea:6e:30:6c:4c:c0:0b:9a:b2:49:67:b9:
                    81:19:59:bd:87:c5:d7:aa:c2:e5:a1:86:36:29:69:
                    7e:0d:b4:a8:a2:11:57:74:31:11:da:97:8f:5f:15:
                    d9:cb:3c:c7:6a:8f:5c:47:9d:5f:d3:68:69:47:a1:
                    06:59:fc:a9:2e:29:ad:e0:13:cf:35:c1:9d:b7:92:
                    7f:63:ea:5e:3d:fe:ec:d3:dc:31:31:de:01:f0:e3:
                    9a:6b:dc:89:3e:bb:74:ad:6c:f6:13:43:69:e6:8f:
                    8c:46:61:b9:6b:45:75:a9:ae:e7:c6:fd:ab:4a:6f:
                    a4:ec:cc:ee:d6:fe:48:dc:17:55:3a:8e:b5:aa:3c:
                    e8:99:e1:92:1f:5e:a4:8e:99:ae:3a:5d:7a:ec:df:
                    fe:eb:1f:70:50:50:27:af:da:dd:b3:97:d8:6d:de:
                    a5:b3:aa:3c:b8:c4:61:cb:1a:c9:28:b5:f3:d7:3b:
                    95:f3:3d:52:25:21:a7:00:21:75:1b:1d:b1:58:3e:
                    26:fa:76:c4:45:e0:cd:45:9f:e2:36:f9:e4:7e:95:
                    48:72:7a:c2:fc:f4:b7:ec:2c:a7:67:fc:b5:c7:2a:
                    2a:8f:b9:ba:b8:64:79:1c:61:4c:c2:d3:7a:c6:53:
                    dc:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:BC:F7:36:E7:01:BA:F7:A2:FA:A4:01:E4:32:3F:06:D1:88:65:AC
            X509v3 Authority Key Identifier:
                keyid:A2:30:D6:64:FE:DF:C0:26:63:49:81:1E:D3:99:9B:E5:22:0F:1D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/A230D664FEDFC0266349811ED3999BE5220F1DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A230D664FEDFC0266349811ED3999BE5220F1DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/54242355-a7e2-4cb9-8cff-9e17c742c2ef/0/3130332e3136322e33342e302f32342d3234203d3e20313431363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:1e:cc:d4:33:19:81:e8:d0:5a:4d:da:ef:6b:b6:a3:fa:28:
         ac:b6:42:77:34:63:08:cc:be:4f:f8:a7:20:67:86:20:24:3a:
         0a:93:28:66:61:6e:22:e4:e3:99:2a:dd:b4:46:80:40:91:0b:
         13:69:d9:a6:99:ae:27:36:b9:68:b8:a4:2a:f8:4f:d2:49:d2:
         e2:db:e5:5e:e5:23:6c:de:02:6b:19:1e:c8:fc:4d:cc:7c:d5:
         51:43:94:75:8d:c8:9f:23:52:f2:85:8a:43:56:d0:ff:9a:19:
         d6:32:2b:9b:c5:2e:2c:b9:70:e1:2b:48:19:8d:ef:2b:b6:4e:
         b4:3d:7d:dc:96:27:ad:f8:55:4a:e1:fe:6d:13:74:91:8f:83:
         b4:15:3a:d4:f1:ea:d7:ca:bf:bc:6c:70:72:d6:c1:34:b7:a4:
         cf:cc:62:d5:9e:36:bf:f5:49:b7:11:58:e6:d2:a1:ba:e7:4c:
         da:b6:dc:b5:e6:ec:67:d3:90:a5:fc:27:1f:bf:7c:bd:ef:17:
         6d:d9:00:9c:dc:a6:93:94:dd:2d:f9:ef:5f:20:6c:a3:2d:b0:
         c9:ab:c9:03:43:f3:ff:b2:07:1c:96:65:43:4a:41:1b:86:26:
         49:0d:db:8f:4d:9a:38:8b:39:f2:3b:bf:8c:81:e3:16:6e:66:
         b2:7a:b9:dc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTVHAKwLfB+qt95By8qU+x0dBV6QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUy
MjBGMURFQTAeFw0yMzExMjMxMTU1MDJaFw0yNDExMjExMjAwMDJaMDMxMTAvBgNV
BAMTKDAxQkNGNzM2RTcwMUJBRjdBMkZBQTQwMUU0MzIzRjA2RDE4ODY1QUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKMYTwH/ZBUCteKsJo7EcA1epu
MGxMwAuasklnuYEZWb2HxdeqwuWhhjYpaX4NtKiiEVd0MRHal49fFdnLPMdqj1xH
nV/TaGlHoQZZ/KkuKa3gE881wZ23kn9j6l49/uzT3DEx3gHw45pr3Ik+u3StbPYT
Q2nmj4xGYblrRXWprufG/atKb6TszO7W/kjcF1U6jrWqPOiZ4ZIfXqSOma46XXrs
3/7rH3BQUCev2t2zl9ht3qWzqjy4xGHLGskotfPXO5XzPVIlIacAIXUbHbFYPib6
dsRF4M1Fn+I2+eR+lUhyesL89LfsLKdn/LXHKiqPubq4ZHkcYUzC03rGU9zhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAbz3NucBuvei+qQB5DI/BtGIZawwHwYDVR0j
BBgwFoAUojDWZP7fwCZjSYEe05mb5SIPHeowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NDI0MjM1NS1hN2UyLTRjYjktOGNmZi05ZTE3Yzc0MmMyZWYvMC9BMjMwRDY2NEZF
REZDMDI2NjM0OTgxMUVEMzk5OUJFNTIyMEYxREVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTIzMEQ2NjRGRURGQzAyNjYzNDk4MTFFRDM5OTlCRTUyMjBG
MURFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU0MjQyMzU1LWE3ZTItNGNiOS04
Y2ZmLTllMTdjNzQyYzJlZi8wLzMxMzAzMzJlMzEzNjMyMmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6IiMA0GCSqG
SIb3DQEBCwUAA4IBAQBrHszUMxmB6NBaTdrva7aj+iistkJ3NGMIzL5P+KcgZ4Yg
JDoKkyhmYW4i5OOZKt20RoBAkQsTadmmma4nNrlouKQq+E/SSdLi2+Ve5SNs3gJr
GR7I/E3MfNVRQ5R1jcifI1LyhYpDVtD/mhnWMiubxS4suXDhK0gZje8rtk60PX3c
liet+FVK4f5tE3SRj4O0FTrU8erXyr+8bHBy1sE0t6TPzGLVnja/9Um3EVjm0qG6
50zatty15uxn05Cl/Ccfv3y97xdt2QCc3KaTlN0t+e9fIGyjLbDJq8kDQ/P/sgcc
lmVDSkEbhiZJDduPTZo4iznyO7+MgeMWbmayernc
-----END CERTIFICATE-----
Generated at Thu Apr 25 01:59:05 2024 by rpki-client on console-ams.rpki-client.org