Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
File:                     3130332e3234352e31362e302f32322d3234203d3e203436303233.roa (raw, json)
Hash identifier:          PpALimtbBE16UsxvYAE3t7KXuw0rzaxc/sz7ukHKaaU=
Subject key identifier:   0B:67:5E:46:1D:8B:63:9D:3E:42:48:4A:24:F0:4B:02:E6:BB:D2:36
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       4DD2ED28D7B5B784CFB3CA43A24C28196C58354F
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa
Signing time:             Wed 13 Nov 2024 09:53:06 +0000
ROA not before:           Wed 13 Nov 2024 09:48:06 +0000
ROA not after:            Wed 12 Nov 2025 09:53:06 +0000
asID:                     46023
IP address blocks:        103.245.16.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d2:ed:28:d7:b5:b7:84:cf:b3:ca:43:a2:4c:28:19:6c:58:35:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Nov 13 09:48:06 2024 GMT
            Not After : Nov 12 09:53:06 2025 GMT
        Subject: CN=0B675E461D8B639D3E42484A24F04B02E6BBD236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:96:91:4f:2b:1f:5d:4b:c1:34:3f:c7:45:
                    bd:e3:16:fa:c3:3a:d6:78:ed:e1:e3:3d:ca:52:54:
                    fa:9e:36:df:da:38:e9:8c:35:ff:36:a2:31:80:98:
                    fd:a1:d6:49:11:80:08:55:09:a7:ed:4e:ca:37:13:
                    8f:a2:1e:19:cd:d2:b9:c9:e8:89:fb:ce:6d:e4:71:
                    35:84:04:00:8d:07:45:ef:36:3a:c8:c5:07:71:f0:
                    1c:50:69:cf:83:06:45:b0:3b:89:66:77:35:20:db:
                    84:1c:64:f5:8e:d4:cf:ec:9c:e5:fd:0b:82:0d:35:
                    20:0a:30:94:64:6f:b5:d7:5f:da:d4:c2:12:2b:d8:
                    84:1c:78:2b:12:11:2b:c3:f4:09:69:47:a7:f6:04:
                    b7:40:dc:aa:bf:7d:c7:de:5a:b3:e5:d9:80:42:6e:
                    a8:99:13:8d:86:5c:f4:10:28:83:4f:95:0d:02:db:
                    a4:45:89:ec:2b:bd:1d:41:e3:8b:6e:6a:67:89:80:
                    5d:66:3c:62:b8:37:cf:09:3e:52:f7:c3:90:cf:62:
                    5a:68:96:f4:3a:b6:07:8c:96:f2:d8:b5:a5:76:d6:
                    1f:df:f5:b7:53:6a:3d:90:59:93:bb:1a:97:cc:d3:
                    51:2f:08:68:69:63:4c:dd:73:cc:2d:3f:6e:e5:a9:
                    4d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:67:5E:46:1D:8B:63:9D:3E:42:48:4A:24:F0:4B:02:E6:BB:D2:36
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32322d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.16.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:37:ee:f3:be:29:17:54:55:f3:47:eb:e2:da:b3:8a:8f:73:
         13:36:61:52:b6:e6:d0:f1:90:a3:ee:43:89:c0:04:01:82:1f:
         f3:d7:f1:bf:8f:87:3c:f2:a4:a5:1f:71:9e:97:a4:55:cb:bd:
         f8:56:be:90:36:58:91:54:79:9e:57:3c:fb:a2:4d:62:0b:20:
         cc:65:07:5f:6e:b3:47:13:ab:48:ec:64:09:3c:82:b6:80:78:
         e5:cd:88:93:0d:c1:eb:81:16:4e:5d:8d:ed:15:20:ec:28:0a:
         03:54:96:66:74:70:ea:fe:c9:fb:81:c6:0a:89:77:c5:d4:a0:
         38:7c:8b:30:09:95:a8:1a:ac:47:78:3a:26:bc:d9:a7:d8:3b:
         42:d4:3f:5f:eb:05:11:1a:1e:2c:8e:f8:24:5f:a8:b1:53:de:
         58:4e:38:48:65:41:94:cd:b2:4b:b9:28:c7:d7:15:b2:26:99:
         0e:bc:10:a4:2d:09:40:0e:0e:00:f9:e6:4f:9e:f9:bd:a9:d6:
         d5:66:54:f0:d9:4a:b2:6b:9c:c9:71:e5:88:62:39:bf:a4:22:
         0e:8b:b4:5d:98:94:2a:40:1e:f6:63:19:6e:19:e2:4f:fd:ba:
         fb:1c:2e:3c:13:da:17:02:34:6b:a8:f0:f6:c2:4d:41:1f:00:
         aa:f6:b5:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUTdLtKNe1t4TPs8pDokwoGWxYNU8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4
NTFCNUJCRDAeFw0yNDExMTMwOTQ4MDZaFw0yNTExMTIwOTUzMDZaMDMxMTAvBgNV
BAMTKDBCNjc1RTQ2MUQ4QjYzOUQzRTQyNDg0QTI0RjA0QjAyRTZCQkQyMzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLJpaRTysfXUvBND/HRb3jFvrD
OtZ47eHjPcpSVPqeNt/aOOmMNf82ojGAmP2h1kkRgAhVCaftTso3E4+iHhnN0rnJ
6In7zm3kcTWEBACNB0XvNjrIxQdx8BxQac+DBkWwO4lmdzUg24QcZPWO1M/snOX9
C4INNSAKMJRkb7XXX9rUwhIr2IQceCsSESvD9AlpR6f2BLdA3Kq/fcfeWrPl2YBC
bqiZE42GXPQQKINPlQ0C26RFiewrvR1B44tuameJgF1mPGK4N88JPlL3w5DPYlpo
lvQ6tgeMlvLYtaV21h/f9bdTaj2QWZO7GpfM01EvCGhpY0zdc8wtP27lqU31AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUC2deRh2LY50+QkhKJPBLAua70jYwHwYDVR0j
BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx
ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC
NUJCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1MjcyZjdiLWQ2NTYtNDA1OC1h
N2I2LWYyNWFkZjNlZDFiZS8wLzMxMzAzMzJlMzIzNDM1MmUzMTM2MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmf1EDANBgkqhkiG
9w0BAQsFAAOCAQEAsjfu874pF1RV80fr4tqzio9zEzZhUrbm0PGQo+5DicAEAYIf
89fxv4+HPPKkpR9xnpekVcu9+Fa+kDZYkVR5nlc8+6JNYgsgzGUHX26zRxOrSOxk
CTyCtoB45c2Ikw3B64EWTl2N7RUg7CgKA1SWZnRw6v7J+4HGCol3xdSgOHyLMAmV
qBqsR3g6JrzZp9g7QtQ/X+sFERoeLI74JF+osVPeWE44SGVBlM2yS7kox9cVsiaZ
DrwQpC0JQA4OAPnmT575vanW1WZU8NlKsmucyXHliGI5v6QiDou0XZiUKkAe9mMZ
bhniT/26+xwuPBPaFwI0a6jw9sJNQR8Aqva1tw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org