Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa
File:                     3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa (raw, json)
Hash identifier:          9Ryd3Iuo45mFpjlZiuD/h6nihGcwet3lKWcDNjIWflo=
Subject key identifier:   FC:05:BC:61:AA:59:00:B9:FC:BE:16:25:53:42:80:BA:55:7C:3F:0F
Certificate issuer:       /CN=90EF20986B3061451D9F1178EB4D439522186281
Certificate serial:       1A01EFD1E11D0D602EFFEB324978D03B287F6557
Authority key identifier: 90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa
Signing time:             Sat 12 Oct 2024 07:00:00 +0000
ROA not before:           Sat 12 Oct 2024 06:55:00 +0000
ROA not after:            Sat 11 Oct 2025 07:00:00 +0000
asID:                     149319
IP address blocks:        103.178.21.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl
                          rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:28:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:01:ef:d1:e1:1d:0d:60:2e:ff:eb:32:49:78:d0:3b:28:7f:65:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90EF20986B3061451D9F1178EB4D439522186281
        Validity
            Not Before: Oct 12 06:55:00 2024 GMT
            Not After : Oct 11 07:00:00 2025 GMT
        Subject: CN=FC05BC61AA5900B9FCBE1625534280BA557C3F0F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:61:42:68:5d:a5:b3:73:2d:1e:06:3b:80:39:
                    1c:a4:63:6c:13:2c:94:2d:0c:a8:19:5b:18:79:78:
                    b6:92:6c:a8:a8:5b:a9:4e:0d:3d:fb:3d:8c:c6:48:
                    d4:2e:71:c5:b1:50:7c:92:b9:6f:e6:92:ce:f4:9f:
                    ca:50:01:9a:ad:d6:1d:49:78:5f:ab:ca:ca:5d:94:
                    d5:cc:82:33:c3:51:df:db:13:ee:9f:8f:c8:73:1a:
                    f2:a7:38:d7:2b:01:51:5d:f4:13:5e:e8:c0:fa:ac:
                    e5:ca:7d:a7:22:98:25:15:16:e4:e4:85:07:59:3d:
                    39:23:8d:dd:40:97:c9:f8:e4:53:b8:30:ea:f6:98:
                    5c:a1:39:b1:2f:99:56:5c:3c:ad:3f:a7:d6:a5:d5:
                    82:87:01:64:0d:14:c7:81:7a:d0:63:94:30:37:cd:
                    86:2f:c2:cf:3c:d9:cf:81:c5:c5:e5:d1:3e:7f:d6:
                    51:4d:d2:f2:37:b9:05:ad:80:a7:8c:38:37:41:c3:
                    4d:84:e2:4c:a0:a3:69:e1:ae:26:60:66:d5:a5:b5:
                    9c:f3:72:a0:97:48:28:0d:3f:b4:b7:05:8f:6d:bc:
                    1a:b1:b9:61:54:41:9b:2f:14:90:fb:7b:f0:01:43:
                    0d:69:9e:06:ec:4c:48:36:26:a2:9c:3d:70:a4:ce:
                    f3:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:05:BC:61:AA:59:00:B9:FC:BE:16:25:53:42:80:BA:55:7C:3F:0F
            X509v3 Authority Key Identifier:
                keyid:90:EF:20:98:6B:30:61:45:1D:9F:11:78:EB:4D:43:95:22:18:62:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/90EF20986B3061451D9F1178EB4D439522186281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90EF20986B3061451D9F1178EB4D439522186281.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56fd9a58-a906-4029-92e2-adcb56ae18bd/0/3130332e3137382e32312e302f32342d3234203d3e20313439333139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:92:37:cc:f3:45:31:1e:99:61:9c:38:7d:b2:e8:38:56:b9:
         e9:e0:93:e7:f1:76:d9:a4:fc:15:33:7d:d9:5d:05:12:9d:d3:
         dd:ca:9d:65:b5:30:98:0f:2d:00:cc:01:0a:8e:b5:bc:30:f4:
         97:9a:b0:a2:fd:01:1b:cb:f0:2e:31:41:67:f2:f4:ec:87:47:
         8f:6d:76:26:66:d1:90:2d:e7:ec:e5:05:a3:71:dd:bf:e6:92:
         88:dc:71:55:04:83:5a:e1:16:8f:ce:31:11:9c:78:45:b4:b0:
         a8:34:ad:6e:f0:65:bf:25:c1:ee:a1:d9:2c:8b:09:bb:71:38:
         67:a8:a9:27:f1:86:27:d0:e1:a2:a5:37:a3:3a:89:58:1b:d7:
         77:fb:77:33:a2:08:97:96:c6:22:97:f8:5e:ef:b5:0a:d1:ff:
         c1:81:94:df:dd:41:16:f5:5b:3e:17:9d:43:02:aa:7f:c5:53:
         f2:47:01:a9:5f:2c:21:44:ac:5a:82:93:c3:ee:25:d9:fb:0f:
         93:6a:17:f3:64:db:4d:11:4f:80:32:3b:9e:d8:9d:03:b1:e4:
         66:1d:5f:e8:10:67:a7:cf:14:76:6c:32:5e:3a:84:55:5c:aa:
         1d:29:cd:a2:09:b4:7a:03:a5:75:b8:c4:cf:7a:31:9b:73:63:
         35:1b:a5:a4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGgHv0eEdDWAu/+sySXjQOyh/ZVcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUy
MjE4NjI4MTAeFw0yNDEwMTIwNjU1MDBaFw0yNTEwMTEwNzAwMDBaMDMxMTAvBgNV
BAMTKEZDMDVCQzYxQUE1OTAwQjlGQ0JFMTYyNTUzNDI4MEJBNTU3QzNGMEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5YUJoXaWzcy0eBjuAORykY2wT
LJQtDKgZWxh5eLaSbKioW6lODT37PYzGSNQuccWxUHySuW/mks70n8pQAZqt1h1J
eF+ryspdlNXMgjPDUd/bE+6fj8hzGvKnONcrAVFd9BNe6MD6rOXKfacimCUVFuTk
hQdZPTkjjd1Al8n45FO4MOr2mFyhObEvmVZcPK0/p9al1YKHAWQNFMeBetBjlDA3
zYYvws882c+BxcXl0T5/1lFN0vI3uQWtgKeMODdBw02E4kygo2nhriZgZtWltZzz
cqCXSCgNP7S3BY9tvBqxuWFUQZsvFJD7e/ABQw1pngbsTEg2JqKcPXCkzvPtAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/AW8YapZALn8vhYlU0KAulV8Pw8wHwYDVR0j
BBgwFoAUkO8gmGswYUUdnxF4601DlSIYYoEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
NmZkOWE1OC1hOTA2LTQwMjktOTJlMi1hZGNiNTZhZTE4YmQvMC85MEVGMjA5ODZC
MzA2MTQ1MUQ5RjExNzhFQjRENDM5NTIyMTg2MjgxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTBFRjIwOTg2QjMwNjE0NTFEOUYxMTc4RUI0RDQzOTUyMjE4
NjI4MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU2ZmQ5YTU4LWE5MDYtNDAyOS05
MmUyLWFkY2I1NmFlMThiZC8wLzMxMzAzMzJlMzEzNzM4MmUzMjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzMzMTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7IVMA0GCSqG
SIb3DQEBCwUAA4IBAQCjkjfM80UxHplhnDh9sug4Vrnp4JPn8XbZpPwVM33ZXQUS
ndPdyp1ltTCYDy0AzAEKjrW8MPSXmrCi/QEby/AuMUFn8vTsh0ePbXYmZtGQLefs
5QWjcd2/5pKI3HFVBINa4RaPzjERnHhFtLCoNK1u8GW/JcHuodksiwm7cThnqKkn
8YYn0OGipTejOolYG9d3+3czogiXlsYil/he77UK0f/BgZTf3UEW9Vs+F51DAqp/
xVPyRwGpXywhRKxagpPD7iXZ+w+TahfzZNtNEU+AMjue2J0DseRmHV/oEGenzxR2
bDJeOoRVXKodKc2iCbR6A6V1uMTPejGbc2M1G6Wk
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org