Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
File:                     3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa (raw, json)
Hash identifier:          73kIJg9vnm0hXE7o+3LAIR5WbVJGsKOcunyXFZDCSqA=
Subject key identifier:   FC:07:78:FD:D3:95:D1:31:3B:8E:3B:8F:A8:29:64:10:B5:FB:7B:B2
Certificate issuer:       /CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
Certificate serial:       6A26045E9AA93BABBB4C433D08DC6ABD8CADEE9B
Authority key identifier: F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa
Signing time:             Wed 18 Oct 2023 05:01:08 +0000
ROA not before:           Wed 18 Oct 2023 04:56:08 +0000
ROA not after:            Wed 16 Oct 2024 05:01:08 +0000
asID:                     136128
IP address blocks:        103.94.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl
                          rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 23:36:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:26:04:5e:9a:a9:3b:ab:bb:4c:43:3d:08:dc:6a:bd:8c:ad:ee:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F39284EDA8B81E5F498D167C4DB09075943DA23C
        Validity
            Not Before: Oct 18 04:56:08 2023 GMT
            Not After : Oct 16 05:01:08 2024 GMT
        Subject: CN=FC0778FDD395D1313B8E3B8FA8296410B5FB7BB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:47:8e:d0:ca:a1:12:29:28:80:33:93:56:67:
                    e2:cb:70:6e:b1:e2:2f:be:8c:2b:c5:f7:4f:c9:2f:
                    c1:00:3b:d4:24:77:9e:2c:9e:0c:07:de:ea:97:c8:
                    aa:e3:98:62:72:fd:2e:72:eb:c4:e8:7c:28:1e:90:
                    88:07:bb:49:c8:17:18:9f:91:9b:20:a8:84:02:7b:
                    53:4e:36:6c:4d:e2:a6:96:3d:66:8a:0b:6c:25:2e:
                    85:0f:0c:ef:f6:20:12:61:c7:31:88:52:ac:e8:53:
                    71:5b:54:75:a2:3f:2c:b7:fc:89:5c:a5:e0:a7:31:
                    c2:e2:8a:b4:4d:ba:e8:b7:f8:70:03:41:72:61:33:
                    07:5b:bb:1a:5d:61:50:33:72:b1:15:3b:56:28:35:
                    e2:80:9e:b3:55:7d:d9:5f:92:d8:9f:77:89:6d:08:
                    fa:ce:05:4d:e9:d0:47:7a:36:a3:1e:77:ce:89:fc:
                    ca:88:10:70:04:08:0c:57:bb:bf:9a:d8:6b:0c:c5:
                    47:6a:22:ff:b7:25:19:19:39:82:86:2c:d0:a0:2a:
                    8a:8b:93:86:64:27:6a:99:05:7d:a2:a1:34:c1:f8:
                    7e:a0:8a:a3:de:7a:05:89:7c:20:38:12:bf:75:79:
                    48:c8:b1:33:9a:ca:2f:15:3e:5b:10:65:9e:b1:91:
                    c4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:07:78:FD:D3:95:D1:31:3B:8E:3B:8F:A8:29:64:10:B5:FB:7B:B2
            X509v3 Authority Key Identifier:
                keyid:F3:92:84:ED:A8:B8:1E:5F:49:8D:16:7C:4D:B0:90:75:94:3D:A2:3C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/F39284EDA8B81E5F498D167C4DB09075943DA23C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F39284EDA8B81E5F498D167C4DB09075943DA23C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/57edcb7e-c38d-4e67-82bd-4e8150b88561/0/3130332e39342e3133322e302f32342d3234203d3e20313336313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:d4:ad:fe:a7:be:1f:07:0d:fa:69:99:90:f3:c6:a4:e6:8d:
         5d:3a:4f:51:40:1c:88:e6:1c:73:1f:7f:2b:52:1d:b9:2f:ce:
         c9:af:61:13:a6:89:5b:84:2c:5b:fa:2b:f8:48:a7:64:8d:df:
         68:96:e9:07:3a:5a:fe:00:ed:e9:79:59:11:bf:3c:6d:2e:a2:
         9b:35:b7:9b:f7:48:f5:16:21:f5:59:01:35:28:b4:50:5e:28:
         68:7a:d9:b3:ac:01:16:34:dc:f6:84:19:d9:29:71:47:bc:b6:
         9e:69:33:d8:73:4c:7d:79:7e:ec:78:23:68:5d:51:ae:45:a6:
         ee:a7:c8:e9:90:c7:45:85:ae:7a:b2:d1:22:b7:be:9f:c6:28:
         09:12:6c:d2:94:be:ba:e5:40:5d:08:dd:bf:4e:ab:08:45:95:
         93:e9:c6:ab:37:2d:00:f9:42:65:78:5d:0a:5d:06:e4:bd:c6:
         71:96:7e:bc:7d:8d:2f:6f:2b:7d:ea:d7:a6:cf:dd:cf:c1:f9:
         0d:7e:c0:8d:3c:a4:41:f0:1a:45:0a:9f:7d:2d:b9:ee:de:b8:
         73:df:96:1f:90:d2:8f:bf:d6:97:59:f7:19:fc:11:3f:15:f5:
         e4:0e:a8:bf:55:79:e0:f5:11:f6:35:62:6a:f3:c7:12:6f:11:
         35:24:96:2a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUaiYEXpqpO6u7TEM9CNxqvYyt7pswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5
NDNEQTIzQzAeFw0yMzEwMTgwNDU2MDhaFw0yNDEwMTYwNTAxMDhaMDMxMTAvBgNV
BAMTKEZDMDc3OEZERDM5NUQxMzEzQjhFM0I4RkE4Mjk2NDEwQjVGQjdCQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDER47QyqESKSiAM5NWZ+LLcG6x
4i++jCvF90/JL8EAO9Qkd54sngwH3uqXyKrjmGJy/S5y68TofCgekIgHu0nIFxif
kZsgqIQCe1NONmxN4qaWPWaKC2wlLoUPDO/2IBJhxzGIUqzoU3FbVHWiPyy3/Ilc
peCnMcLiirRNuui3+HADQXJhMwdbuxpdYVAzcrEVO1YoNeKAnrNVfdlfktifd4lt
CPrOBU3p0Ed6NqMed86J/MqIEHAECAxXu7+a2GsMxUdqIv+3JRkZOYKGLNCgKoqL
k4ZkJ2qZBX2ioTTB+H6giqPeegWJfCA4Er91eUjIsTOayi8VPlsQZZ6xkcQlAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU/Ad4/dOV0TE7jjuPqClkELX7e7IwHwYDVR0j
BBgwFoAU85KE7ai4Hl9JjRZ8TbCQdZQ9ojwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
N2VkY2I3ZS1jMzhkLTRlNjctODJiZC00ZTgxNTBiODg1NjEvMC9GMzkyODRFREE4
QjgxRTVGNDk4RDE2N0M0REIwOTA3NTk0M0RBMjNDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjM5Mjg0RURBOEI4MUU1RjQ5OEQxNjdDNERCMDkwNzU5NDNE
QTIzQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU3ZWRjYjdlLWMzOGQtNGU2Ny04
MmJkLTRlODE1MGI4ODU2MS8wLzMxMzAzMzJlMzkzNDJlMzEzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzEzMjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ16EMA0GCSqG
SIb3DQEBCwUAA4IBAQB41K3+p74fBw36aZmQ88ak5o1dOk9RQByI5hxzH38rUh25
L87Jr2ETpolbhCxb+iv4SKdkjd9olukHOlr+AO3peVkRvzxtLqKbNbeb90j1FiH1
WQE1KLRQXihoetmzrAEWNNz2hBnZKXFHvLaeaTPYc0x9eX7seCNoXVGuRabup8jp
kMdFha56stEit76fxigJEmzSlL665UBdCN2/TqsIRZWT6carNy0A+UJleF0KXQbk
vcZxln68fY0vbyt96temz93PwfkNfsCNPKRB8BpFCp99Lbnu3rhz35YfkNKPv9aX
WfcZ/BE/FfXkDqi/VXng9RH2NWJq88cSbxE1JJYq
-----END CERTIFICATE-----
Generated at Fri Jun 21 01:18:37 2024 by rpki-client on console-fra.rpki-client.org