Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          hx/ewGlEs42WwazUkR19IGaEFBeT7zadPeBTmHRYrnU=
Subject key identifier:   0A:E8:3C:FF:23:35:80:66:99:AB:A5:87:89:6D:1B:47:99:E6:DD:55
Certificate issuer:       /CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
Certificate serial:       50BEBA88EE18DCFDC55E063FC75C3C709F4E59E4
Authority key identifier: CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa
Signing time:             Thu 06 Jun 2024 15:00:02 +0000
ROA not before:           Thu 06 Jun 2024 14:55:02 +0000
ROA not after:            Thu 05 Jun 2025 15:00:02 +0000
asID:                     142364
IP address blocks:        103.170.100.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl
                          rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:be:ba:88:ee:18:dc:fd:c5:5e:06:3f:c7:5c:3c:70:9f:4e:59:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F
        Validity
            Not Before: Jun  6 14:55:02 2024 GMT
            Not After : Jun  5 15:00:02 2025 GMT
        Subject: CN=0AE83CFF2335806699ABA587896D1B4799E6DD55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:ea:30:a1:ca:b9:ec:ce:c3:0f:2c:f4:4d:
                    0c:a5:22:7d:57:47:50:1b:8f:3b:d8:5e:dc:10:00:
                    50:89:ee:8d:14:ed:6c:a2:90:20:bb:47:42:c7:70:
                    b5:1f:57:8d:c9:3e:16:3d:c2:08:a5:be:39:1b:b3:
                    a8:89:c3:6f:f2:e3:b6:0d:19:84:54:86:39:43:09:
                    15:51:52:51:c2:5f:eb:db:b4:86:91:1f:0f:eb:f5:
                    6f:82:a5:3a:88:18:54:ba:fd:e1:1c:c9:cd:c9:f6:
                    f6:1d:51:db:41:2f:5a:23:fc:02:e0:bd:22:4a:e9:
                    15:cc:a7:26:c3:33:55:bf:9e:a0:71:4c:40:75:cd:
                    39:0a:9c:32:fd:4d:4b:2f:87:23:83:9f:96:86:2d:
                    e7:63:55:2c:52:c3:a9:ff:bf:4c:75:f9:a2:eb:5f:
                    b4:00:73:20:04:b6:f5:4e:0e:8f:30:f9:f8:9c:7d:
                    a3:91:e2:59:e4:36:4a:24:92:0c:8b:46:7a:4b:05:
                    51:f8:fb:74:f2:5c:6c:1d:11:03:db:da:95:7a:1a:
                    d3:81:45:9d:15:a2:ec:29:7c:81:7c:3a:28:c6:4d:
                    ac:71:fe:23:73:b9:69:76:7d:86:22:55:c1:fd:f9:
                    d2:ba:16:4d:e3:fe:79:65:95:5d:c0:97:45:9e:10:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:3C:FF:23:35:80:66:99:AB:A5:87:89:6D:1B:47:99:E6:DD:55
            X509v3 Authority Key Identifier:
                keyid:CE:C5:FE:18:3A:39:10:5C:9E:27:02:CC:2B:F0:89:1F:C3:5E:1E:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CEC5FE183A39105C9E2702CC2BF0891FC35E1E4F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/561cf777-8adf-4ef1-8d6f-9862c55620ea/0/3130332e3137302e3130302e302f32342d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:4b:0b:78:af:71:2b:11:d6:88:f0:e6:b0:5f:ca:2d:3a:4c:
         83:00:2b:41:b3:49:42:88:8e:6a:7a:bd:87:fb:12:ae:05:f0:
         2f:f5:76:82:85:e7:6d:c6:bb:59:7a:db:9c:8a:b8:33:99:86:
         99:96:ce:52:3a:99:ee:53:86:f3:09:8d:8a:7f:25:ff:8e:a3:
         ca:51:44:5a:f4:48:b2:11:42:d8:a1:ad:7e:73:f7:3d:0a:41:
         c4:a9:db:65:fc:a5:84:2c:f9:17:5e:65:10:5c:bf:25:0d:7f:
         67:9f:5d:18:87:7f:a4:18:90:02:a5:2d:f3:09:55:f6:8e:d8:
         05:e2:6e:f3:3c:a2:d4:65:1f:f9:20:a9:bd:60:fa:2c:33:bf:
         3b:db:12:50:8d:62:7e:ce:71:2a:ac:ce:f8:0c:c8:24:12:25:
         91:4c:cb:4a:4c:de:20:aa:d4:c5:7a:b6:ad:de:3c:72:38:c3:
         0b:ad:10:c7:80:2c:6d:6a:05:53:02:30:5c:e8:31:61:a7:8a:
         ed:6b:25:8b:95:13:e4:48:c9:ac:be:ea:12:aa:11:b4:f4:94:
         01:d6:7d:3d:90:6d:47:0b:7b:35:59:9e:43:e4:ac:75:36:f1:
         de:96:15:fe:5c:17:21:f4:70:1e:d4:a0:7d:39:b2:2d:fe:cc:
         43:a5:d5:60
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUL66iO4Y3P3FXgY/x1w8cJ9OWeQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZD
MzVFMUU0RjAeFw0yNDA2MDYxNDU1MDJaFw0yNTA2MDUxNTAwMDJaMDMxMTAvBgNV
BAMTKDBBRTgzQ0ZGMjMzNTgwNjY5OUFCQTU4Nzg5NkQxQjQ3OTlFNkRENTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFl+owocq57M7DDyz0TQylIn1X
R1AbjzvYXtwQAFCJ7o0U7WyikCC7R0LHcLUfV43JPhY9wgilvjkbs6iJw2/y47YN
GYRUhjlDCRVRUlHCX+vbtIaRHw/r9W+CpTqIGFS6/eEcyc3J9vYdUdtBL1oj/ALg
vSJK6RXMpybDM1W/nqBxTEB1zTkKnDL9TUsvhyODn5aGLedjVSxSw6n/v0x1+aLr
X7QAcyAEtvVODo8w+ficfaOR4lnkNkokkgyLRnpLBVH4+3TyXGwdEQPb2pV6GtOB
RZ0VouwpfIF8OijGTaxx/iNzuWl2fYYiVcH9+dK6Fk3j/nlllV3Al0WeEOXvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUCug8/yM1gGaZq6WHiW0bR5nm3VUwHwYDVR0j
BBgwFoAUzsX+GDo5EFyeJwLMK/CJH8NeHk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NjFjZjc3Ny04YWRmLTRlZjEtOGQ2Zi05ODYyYzU1NjIwZWEvMC9DRUM1RkUxODNB
MzkxMDVDOUUyNzAyQ0MyQkYwODkxRkMzNUUxRTRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0VDNUZFMTgzQTM5MTA1QzlFMjcwMkNDMkJGMDg5MUZDMzVF
MUU0Ri5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2MWNmNzc3LThhZGYtNGVmMS04
ZDZmLTk4NjJjNTU2MjBlYS8wLzMxMzAzMzJlMzEzNzMwMmUzMTMwMzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnqmQwDQYJ
KoZIhvcNAQELBQADggEBABJLC3ivcSsR1ojw5rBfyi06TIMAK0GzSUKIjmp6vYf7
Eq4F8C/1doKF523Gu1l625yKuDOZhpmWzlI6me5ThvMJjYp/Jf+Oo8pRRFr0SLIR
QtihrX5z9z0KQcSp22X8pYQs+RdeZRBcvyUNf2efXRiHf6QYkAKlLfMJVfaO2AXi
bvM8otRlH/kgqb1g+iwzvzvbElCNYn7OcSqszvgMyCQSJZFMy0pM3iCq1MV6tq3e
PHI4wwutEMeALG1qBVMCMFzoMWGniu1rJYuVE+RIyay+6hKqEbT0lAHWfT2QbUcL
ezVZnkPkrHU28d6WFf5cFyH0cB7UoH05si3+zEOl1WA=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:02 2024 by rpki-client on console-fra.rpki-client.org