Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32342d3234203d3e203436303233.roa
File:                     3130332e3234352e31362e302f32342d3234203d3e203436303233.roa (raw, json)
Hash identifier:          oc7a2yZBp9q1BdzfUR+tIB5Dtqa/efadojr7/o0DfQ4=
Subject key identifier:   57:61:D4:A3:34:78:61:BE:E9:CD:17:A2:3E:14:D2:43:EA:0B:0A:B0
Certificate issuer:       /CN=6D2120D281865021E16D49A2451DC53A851B5BBD
Certificate serial:       0CB3E81F375386EBA64EA169C05A36692FCF69BD
Authority key identifier: 6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32342d3234203d3e203436303233.roa
Signing time:             Wed 13 Nov 2024 09:53:38 +0000
ROA not before:           Wed 13 Nov 2024 09:48:38 +0000
ROA not after:            Wed 12 Nov 2025 09:53:38 +0000
asID:                     46023
IP address blocks:        103.245.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl
                          rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:b3:e8:1f:37:53:86:eb:a6:4e:a1:69:c0:5a:36:69:2f:cf:69:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D2120D281865021E16D49A2451DC53A851B5BBD
        Validity
            Not Before: Nov 13 09:48:38 2024 GMT
            Not After : Nov 12 09:53:38 2025 GMT
        Subject: CN=5761D4A3347861BEE9CD17A23E14D243EA0B0AB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:31:78:4f:99:05:a0:5f:cb:a6:7c:86:e2:b0:
                    a7:52:c3:73:ac:f7:66:f2:40:a7:5d:a7:29:3f:9d:
                    c7:bf:1a:e9:c3:c3:2e:b2:b1:fb:0d:82:2d:e0:ab:
                    39:f2:8a:f7:3d:cf:23:d0:35:e5:24:8d:5c:b7:fb:
                    e9:ec:ce:ee:fb:ae:6b:03:92:23:0b:a4:d1:10:dd:
                    03:82:de:26:39:ba:15:df:fb:2a:b3:7b:f4:39:2d:
                    5e:23:59:93:1a:51:37:e4:d0:9f:0d:07:c5:6c:d0:
                    4f:e8:42:b8:42:6d:f2:f6:31:16:a8:ef:5c:f9:81:
                    2b:0f:aa:db:6a:a6:c8:63:70:91:e6:35:e4:5c:d9:
                    ca:69:1e:ef:a7:ff:13:73:e1:d5:db:72:31:6f:de:
                    44:d3:97:8f:3a:76:2c:f8:96:05:c9:5b:4d:bf:54:
                    d4:1b:a9:68:0d:52:8f:fe:aa:17:b0:d8:ea:6d:41:
                    2b:b6:68:8b:ea:4e:0c:38:01:fc:07:a1:0d:b7:2d:
                    09:e2:ad:e5:8f:4a:2e:81:c6:b2:39:71:4e:ec:15:
                    8e:7e:89:ac:d6:50:60:25:74:60:01:cb:ee:be:6d:
                    bb:dc:b6:b8:6b:25:4f:3c:2a:24:fc:b8:c8:21:ae:
                    97:08:77:0a:6c:52:f2:f3:27:2d:c5:12:b4:2d:84:
                    4d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:61:D4:A3:34:78:61:BE:E9:CD:17:A2:3E:14:D2:43:EA:0B:0A:B0
            X509v3 Authority Key Identifier:
                keyid:6D:21:20:D2:81:86:50:21:E1:6D:49:A2:45:1D:C5:3A:85:1B:5B:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/6D2120D281865021E16D49A2451DC53A851B5BBD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D2120D281865021E16D49A2451DC53A851B5BBD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55272f7b-d656-4058-a7b6-f25adf3ed1be/0/3130332e3234352e31362e302f32342d3234203d3e203436303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:46:34:47:f6:12:52:5e:4e:3f:43:e2:5c:74:b2:6f:d6:39:
         2a:f4:e8:c9:79:06:16:d9:e1:90:b4:52:08:11:dd:92:a4:1c:
         8b:94:2a:96:82:2b:4a:b1:2f:4d:6c:64:d3:33:0e:a4:ab:36:
         29:93:70:4d:db:53:d0:ff:e7:cd:52:c4:eb:d5:c5:88:a6:1c:
         50:75:8a:19:ee:f9:b9:b5:54:b3:7a:66:17:8b:6d:a4:2c:22:
         12:ec:d6:ef:11:6d:b4:df:f3:db:33:1a:c8:90:a5:db:95:ad:
         72:4e:6e:48:e1:2b:91:d5:f3:0f:3d:d7:3a:b7:9e:88:18:d8:
         ad:1e:0a:74:e1:b0:23:07:0d:2f:32:d5:ca:8f:e0:d6:5d:f8:
         e9:de:e9:07:d2:56:2f:20:ae:df:26:f8:f0:5a:b0:5d:46:58:
         0c:ed:54:f5:26:b6:ea:75:ad:55:15:e3:6e:b0:18:58:8b:c4:
         30:a6:91:57:3b:f7:53:2b:64:ad:31:e2:45:bd:69:52:b5:15:
         a8:d6:5a:e7:5c:1f:af:e9:82:72:c7:da:86:62:d3:93:12:48:
         fa:0b:1d:5f:33:ac:f4:12:76:67:49:21:4d:07:04:f8:8f:80:
         d4:3f:08:04:ea:c7:d5:a7:22:92:3c:13:a5:38:2c:70:0d:fa:
         60:a9:96:b5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDLPoHzdThuumTqFpwFo2aS/Pab0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4
NTFCNUJCRDAeFw0yNDExMTMwOTQ4MzhaFw0yNTExMTIwOTUzMzhaMDMxMTAvBgNV
BAMTKDU3NjFENEEzMzQ3ODYxQkVFOUNEMTdBMjNFMTREMjQzRUEwQjBBQjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCSMXhPmQWgX8umfIbisKdSw3Os
92byQKddpyk/nce/GunDwy6ysfsNgi3gqznyivc9zyPQNeUkjVy3++nszu77rmsD
kiMLpNEQ3QOC3iY5uhXf+yqze/Q5LV4jWZMaUTfk0J8NB8Vs0E/oQrhCbfL2MRao
71z5gSsPqttqpshjcJHmNeRc2cppHu+n/xNz4dXbcjFv3kTTl486diz4lgXJW02/
VNQbqWgNUo/+qhew2OptQSu2aIvqTgw4AfwHoQ23LQnireWPSi6BxrI5cU7sFY5+
iazWUGAldGABy+6+bbvctrhrJU88KiT8uMghrpcIdwpsUvLzJy3FErQthE3hAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV2HUozR4Yb7pzReiPhTSQ+oLCrAwHwYDVR0j
BBgwFoAUbSEg0oGGUCHhbUmiRR3FOoUbW70wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NTI3MmY3Yi1kNjU2LTQwNTgtYTdiNi1mMjVhZGYzZWQxYmUvMC82RDIxMjBEMjgx
ODY1MDIxRTE2RDQ5QTI0NTFEQzUzQTg1MUI1QkJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQyMTIwRDI4MTg2NTAyMUUxNkQ0OUEyNDUxREM1M0E4NTFC
NUJCRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU1MjcyZjdiLWQ2NTYtNDA1OC1h
N2I2LWYyNWFkZjNlZDFiZS8wLzMxMzAzMzJlMzIzNDM1MmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzIzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf1EDANBgkqhkiG
9w0BAQsFAAOCAQEAB0Y0R/YSUl5OP0PiXHSyb9Y5KvToyXkGFtnhkLRSCBHdkqQc
i5QqloIrSrEvTWxk0zMOpKs2KZNwTdtT0P/nzVLE69XFiKYcUHWKGe75ubVUs3pm
F4ttpCwiEuzW7xFttN/z2zMayJCl25Wtck5uSOErkdXzDz3XOreeiBjYrR4KdOGw
IwcNLzLVyo/g1l346d7pB9JWLyCu3yb48FqwXUZYDO1U9Sa26nWtVRXjbrAYWIvE
MKaRVzv3UytkrTHiRb1pUrUVqNZa51wfr+mCcsfahmLTkxJI+gsdXzOs9BJ2Z0kh
TQcE+I+A1D8IBOrH1acikjwTpTgscA36YKmWtQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org