Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
File:                     3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa (raw, json)
Hash identifier:          SMu/CEzc8AVdGXATEzraGqIbslbrtyKCNL26AnGYvS4=
Subject key identifier:   75:CA:7C:FC:40:70:30:34:38:78:5C:8D:F5:0A:9A:3E:D1:3B:BC:C6
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       36080C49E074F4EA70A4A22D711BA84E385F5AB5
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa
Signing time:             Tue 13 Feb 2024 17:00:01 +0000
ROA not before:           Tue 13 Feb 2024 16:55:01 +0000
ROA not after:            Tue 11 Feb 2025 17:00:01 +0000
asID:                     138866
IP address blocks:        103.140.130.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:08:0c:49:e0:74:f4:ea:70:a4:a2:2d:71:1b:a8:4e:38:5f:5a:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Feb 13 16:55:01 2024 GMT
            Not After : Feb 11 17:00:01 2025 GMT
        Subject: CN=75CA7CFC4070303438785C8DF50A9A3ED13BBCC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a5:bf:9b:ff:57:48:ee:98:a2:a9:31:13:26:
                    d2:f5:98:e5:7d:d6:18:78:b1:a2:36:d5:6f:f6:06:
                    91:a7:18:ad:83:a1:22:1d:4a:5e:75:fe:7b:2f:24:
                    9a:9b:52:1f:48:cc:ec:33:c2:b9:bd:ea:ea:76:a2:
                    e2:4b:11:3c:9e:2e:b0:a3:93:49:6c:02:86:d0:90:
                    75:c2:ae:7e:9f:f0:3f:ca:a6:15:7b:a1:da:a3:3b:
                    11:91:7c:9c:d7:0f:ee:29:8e:3e:f3:6e:27:cc:72:
                    a3:94:4b:03:be:e9:7b:da:66:b8:00:9e:97:98:eb:
                    33:61:87:f6:c4:61:b3:e6:d7:dd:42:a7:4e:19:cf:
                    30:42:91:94:28:cd:14:38:65:ef:b5:e5:c1:9d:81:
                    0b:f2:07:78:8a:88:31:21:2a:04:27:a4:eb:6c:f9:
                    97:d9:ce:ad:60:54:36:ae:7e:aa:a5:b5:c9:8c:71:
                    e3:51:c9:df:cc:3a:30:a5:93:56:42:1b:f2:6a:9b:
                    b6:66:a4:d4:8d:f4:d7:7d:19:c0:db:87:3c:f4:c0:
                    e6:65:2c:64:d4:94:d7:3e:bd:c9:d1:f2:ad:f1:02:
                    7a:1b:e8:e4:00:54:4a:16:b7:c6:9e:f5:f4:4e:24:
                    d9:d7:dc:47:a3:9b:51:e5:ac:eb:fe:49:75:56:f4:
                    28:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:CA:7C:FC:40:70:30:34:38:78:5C:8D:F5:0A:9A:3E:D1:3B:BC:C6
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133302e302f32332d3234203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.130.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:e2:4a:cf:70:44:49:4a:da:33:e7:65:3a:ba:4a:09:06:
         85:99:63:a3:df:ed:d0:2f:54:10:be:6c:15:90:2c:83:63:33:
         54:d1:89:1b:7e:f3:ce:70:56:ae:9a:de:36:d6:f0:3d:26:73:
         89:5f:87:19:7a:59:50:d2:19:a9:7d:3e:65:0f:26:7a:f5:33:
         5f:61:3f:83:b5:96:3d:96:b6:0f:50:3f:79:ef:c5:de:14:3b:
         5b:5f:9b:b2:90:07:c9:7b:39:45:f9:0f:07:98:3c:37:c5:f1:
         fa:24:87:37:7e:92:36:2b:8d:b4:9f:69:59:8e:4f:57:6d:ee:
         fe:f3:65:a4:63:09:41:f0:e9:b1:17:47:26:b9:08:5b:13:a7:
         fe:97:0b:04:e1:d5:4a:05:9b:d4:06:7e:fa:06:89:c5:48:15:
         a7:d4:1e:7e:82:c1:7c:2b:c2:50:07:5b:e2:7e:87:db:b9:42:
         21:cc:13:9e:cb:f3:be:be:54:12:9c:87:9e:73:7e:77:1e:d8:
         7d:20:b2:57:f6:8a:22:9e:46:a1:23:80:55:da:8c:1c:bf:8c:
         e5:85:bf:a7:f0:ca:95:b6:04:bc:65:74:32:ab:1e:cd:f6:9c:
         68:84:67:79:38:8f:16:ee:7c:4f:da:9b:9f:e3:aa:fb:9c:b5:
         ee:0a:d7:44
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNggMSeB09OpwpKItcRuoTjhfWrUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNDAyMTMxNjU1MDFaFw0yNTAyMTExNzAwMDFaMDMxMTAvBgNV
BAMTKDc1Q0E3Q0ZDNDA3MDMwMzQzODc4NUM4REY1MEE5QTNFRDEzQkJDQzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5pb+b/1dI7piiqTETJtL1mOV9
1hh4saI21W/2BpGnGK2DoSIdSl51/nsvJJqbUh9IzOwzwrm96up2ouJLETyeLrCj
k0lsAobQkHXCrn6f8D/KphV7odqjOxGRfJzXD+4pjj7zbifMcqOUSwO+6XvaZrgA
npeY6zNhh/bEYbPm191Cp04ZzzBCkZQozRQ4Ze+15cGdgQvyB3iKiDEhKgQnpOts
+ZfZzq1gVDaufqqltcmMceNRyd/MOjClk1ZCG/Jqm7ZmpNSN9Nd9GcDbhzz0wOZl
LGTUlNc+vcnR8q3xAnob6OQAVEoWt8ae9fROJNnX3Eejm1HlrOv+SXVW9CgtAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUdcp8/EBwMDQ4eFyN9QqaPtE7vMYwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMxMzAzMzJlMzEzNDMwMmUzMTMzMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjIIwDQYJ
KoZIhvcNAQELBQADggEBABvO4krPcERJStoz52U6ukoJBoWZY6Pf7dAvVBC+bBWQ
LINjM1TRiRt+885wVq6a3jbW8D0mc4lfhxl6WVDSGal9PmUPJnr1M19hP4O1lj2W
tg9QP3nvxd4UO1tfm7KQB8l7OUX5DweYPDfF8fokhzd+kjYrjbSfaVmOT1dt7v7z
ZaRjCUHw6bEXRya5CFsTp/6XCwTh1UoFm9QGfvoGicVIFafUHn6CwXwrwlAHW+J+
h9u5QiHME57L876+VBKch55zfnce2H0gslf2iiKeRqEjgFXajBy/jOWFv6fwypW2
BLxldDKrHs32nGiEZ3k4jxbufE/am5/jqvucte4K10Q=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org