Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
File:                     3130332e38302e38302e302f32332d3233203d3e203634333030.roa (raw, json)
Hash identifier:          FLTD+2Jpp1mp5koYThGmMrPDSpfNY8z0qn+l8hTwOQ8=
Subject key identifier:   8C:29:70:FD:A5:A7:93:E6:BB:97:57:40:B3:17:D9:36:AF:04:69:D3
Certificate issuer:       /CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
Certificate serial:       09DF909DE22600EC3139C7F00FDC9F203147EE01
Authority key identifier: 2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa
Signing time:             Mon 19 Aug 2024 04:02:49 +0000
ROA not before:           Mon 19 Aug 2024 03:57:49 +0000
ROA not after:            Mon 18 Aug 2025 04:02:49 +0000
asID:                     64300
IP address blocks:        103.80.80.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl
                          rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:df:90:9d:e2:26:00:ec:31:39:c7:f0:0f:dc:9f:20:31:47:ee:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2E11A39B0B99F143E3419363EC55A676EC6370BC
        Validity
            Not Before: Aug 19 03:57:49 2024 GMT
            Not After : Aug 18 04:02:49 2025 GMT
        Subject: CN=8C2970FDA5A793E6BB975740B317D936AF0469D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:38:14:37:37:d4:59:ff:91:bb:f4:84:ae:85:
                    56:0d:f8:85:8d:41:08:52:f3:fd:5d:bf:13:7d:98:
                    fc:f3:ff:c3:99:13:a2:5d:fd:0d:8a:9b:8b:57:cf:
                    f5:de:0b:a9:44:f7:96:23:49:e3:23:53:59:50:56:
                    98:23:e3:23:89:e3:99:e8:18:f2:fa:ef:a3:0c:b3:
                    9d:d9:01:3c:cc:3e:50:b3:61:80:2c:b4:45:c9:f6:
                    58:90:6b:9f:18:60:5a:90:68:ef:41:b9:6d:0b:a9:
                    f8:b8:4c:fb:3a:05:ba:1d:65:00:c6:8f:ef:6f:bb:
                    57:ae:de:98:f3:09:47:3d:f6:05:17:c4:d8:1d:01:
                    d5:c6:a5:05:f7:d3:f6:01:69:b9:08:57:64:d2:12:
                    5e:9b:35:c9:4e:f8:84:be:a9:61:72:d8:69:f4:b1:
                    19:66:f4:a4:c8:dd:3b:51:3f:2b:ab:3d:9c:90:f9:
                    14:86:b1:ee:2a:87:ec:58:a3:fc:a4:b8:9e:fd:ff:
                    27:db:9d:99:6f:bd:50:b2:74:79:c9:21:53:8e:d6:
                    21:cd:00:39:87:ba:73:90:7a:70:b8:cb:65:d2:f9:
                    0e:e8:cd:bc:c0:bd:9e:10:ce:f8:a8:c2:d7:80:57:
                    f9:ef:64:38:4a:1d:7a:fc:44:38:80:52:b3:b5:78:
                    75:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:29:70:FD:A5:A7:93:E6:BB:97:57:40:B3:17:D9:36:AF:04:69:D3
            X509v3 Authority Key Identifier:
                keyid:2E:11:A3:9B:0B:99:F1:43:E3:41:93:63:EC:55:A6:76:EC:63:70:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/2E11A39B0B99F143E3419363EC55A676EC6370BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2E11A39B0B99F143E3419363EC55A676EC6370BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/586d3637-92b4-4ac7-a75b-99cb0b0565b0/0/3130332e38302e38302e302f32332d3233203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:61:3e:f4:82:e6:0c:16:9b:86:79:24:eb:a2:a9:ce:0f:8e:
         34:49:82:22:b0:21:f0:7c:c1:0a:1b:a4:bf:90:2a:d6:f1:20:
         53:e9:57:b1:8e:d7:65:69:f6:a9:8f:e5:f8:9e:d6:14:2e:7a:
         18:8c:10:ac:94:a7:92:81:2c:0b:c5:1a:8d:ad:93:1b:06:e4:
         77:b2:49:8f:f8:b1:6e:70:3a:ee:37:89:85:8d:58:09:00:44:
         d4:d3:60:de:df:c2:a6:3c:94:3d:f4:78:3d:c9:9d:c8:1c:06:
         52:1e:24:33:0f:2a:db:55:9f:99:f6:b0:d9:25:c7:30:7a:7d:
         a3:94:60:d9:4d:de:6d:37:89:69:7d:ae:31:9c:38:56:c6:d1:
         0f:44:f6:35:e9:89:b9:55:25:10:0b:e7:4c:cf:51:9d:74:72:
         bd:74:42:21:55:c4:9d:12:2f:9d:88:f6:d2:b5:cf:a2:04:93:
         b7:b0:f3:92:0b:86:d6:81:8f:c2:fc:5f:38:55:07:2e:aa:52:
         f9:d9:0a:e0:c7:e4:b2:4a:00:eb:e3:9d:8e:a4:c5:5b:e6:06:
         40:8b:0c:dd:c4:a8:42:23:73:4a:03:db:ec:06:e2:1a:27:98:
         dd:01:87:dc:a1:60:e3:d0:89:28:38:37:9d:16:04:2f:a4:3e:
         cb:d4:76:f9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUCd+QneImAOwxOcfwD9yfIDFH7gEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZF
QzYzNzBCQzAeFw0yNDA4MTkwMzU3NDlaFw0yNTA4MTgwNDAyNDlaMDMxMTAvBgNV
BAMTKDhDMjk3MEZEQTVBNzkzRTZCQjk3NTc0MEIzMTdEOTM2QUYwNDY5RDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrOBQ3N9RZ/5G79ISuhVYN+IWN
QQhS8/1dvxN9mPzz/8OZE6Jd/Q2Km4tXz/XeC6lE95YjSeMjU1lQVpgj4yOJ45no
GPL676MMs53ZATzMPlCzYYAstEXJ9liQa58YYFqQaO9BuW0Lqfi4TPs6BbodZQDG
j+9vu1eu3pjzCUc99gUXxNgdAdXGpQX30/YBabkIV2TSEl6bNclO+IS+qWFy2Gn0
sRlm9KTI3TtRPyurPZyQ+RSGse4qh+xYo/ykuJ79/yfbnZlvvVCydHnJIVOO1iHN
ADmHunOQenC4y2XS+Q7ozbzAvZ4QzviowteAV/nvZDhKHXr8RDiAUrO1eHUrAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUjClw/aWnk+a7l1dAsxfZNq8EadMwHwYDVR0j
BBgwFoAULhGjmwuZ8UPjQZNj7FWmduxjcLwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ODZkMzYzNy05MmI0LTRhYzctYTc1Yi05OWNiMGIwNTY1YjAvMC8yRTExQTM5QjBC
OTlGMTQzRTM0MTkzNjNFQzU1QTY3NkVDNjM3MEJDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkUxMUEzOUIwQjk5RjE0M0UzNDE5MzYzRUM1NUE2NzZFQzYz
NzBCQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzU4NmQzNjM3LTkyYjQtNGFjNy1h
NzViLTk5Y2IwYjA1NjViMC8wLzMxMzAzMzJlMzgzMDJlMzgzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzQzMzMwMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnUFAwDQYJKoZIhvcN
AQELBQADggEBAEZhPvSC5gwWm4Z5JOuiqc4PjjRJgiKwIfB8wQobpL+QKtbxIFPp
V7GO12Vp9qmP5fie1hQuehiMEKyUp5KBLAvFGo2tkxsG5HeySY/4sW5wOu43iYWN
WAkARNTTYN7fwqY8lD30eD3JncgcBlIeJDMPKttVn5n2sNklxzB6faOUYNlN3m03
iWl9rjGcOFbG0Q9E9jXpiblVJRAL50zPUZ10cr10QiFVxJ0SL52I9tK1z6IEk7ew
85ILhtaBj8L8XzhVBy6qUvnZCuDH5LJKAOvjnY6kxVvmBkCLDN3EqEIjc0oD2+wG
4honmN0Bh9yhYOPQiSg4N50WBC+kPsvUdvk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 02:56:53 2024 by rpki-client on console-fra.rpki-client.org