Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa
File:                     3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa (raw, json)
Hash identifier:          CsvPbO1dTyPsmUs0Y51ZaJ0Q65Hxq5scKNV2P6WWsfo=
Subject key identifier:   A7:D4:00:AE:00:60:07:0E:9A:B4:3D:8A:9B:F1:7B:91:CB:C9:A4:C8
Certificate issuer:       /CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
Certificate serial:       589074275D5C365804F95E4D0654734184F5B711
Authority key identifier: 3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa
Signing time:             Sun 16 Jun 2024 10:00:54 +0000
ROA not before:           Sun 16 Jun 2024 09:55:54 +0000
ROA not after:            Sun 15 Jun 2025 10:00:54 +0000
asID:                     138866
IP address blocks:        103.140.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl
                          rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:90:74:27:5d:5c:36:58:04:f9:5e:4d:06:54:73:41:84:f5:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D64FD900E2E64CB159D0067167853AAFC8A7E97
        Validity
            Not Before: Jun 16 09:55:54 2024 GMT
            Not After : Jun 15 10:00:54 2025 GMT
        Subject: CN=A7D400AE0060070E9AB43D8A9BF17B91CBC9A4C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:2e:55:16:d1:7f:da:22:a5:97:4f:a4:26:ee:
                    55:df:10:1b:1a:f6:fe:b0:73:13:1f:b0:7a:fb:ed:
                    cb:93:96:dc:bd:47:49:47:3e:7a:fa:b6:10:8a:e1:
                    18:cb:9b:a1:94:30:fa:d1:6d:4e:20:56:72:2a:94:
                    a1:b3:12:5d:f7:8e:a3:28:9e:81:71:1c:22:35:1e:
                    85:05:fb:2c:bf:48:5b:98:1c:b6:6f:b1:6e:8c:7c:
                    9c:df:51:4c:a3:65:1c:52:ca:4a:d1:26:a2:b7:f5:
                    2b:d5:9b:47:8d:9c:6c:59:02:45:78:e3:57:3b:04:
                    10:05:da:ee:fb:29:82:50:a5:f9:cd:e6:ad:c4:f7:
                    44:6f:23:a6:41:d2:af:bc:be:96:5d:02:1a:7c:15:
                    9f:f3:f3:dd:5e:fc:09:5f:cf:14:94:ed:ec:c6:67:
                    de:6e:dd:52:ed:d8:62:1d:a8:18:5d:de:d6:3d:89:
                    e0:86:1b:bc:16:c1:3f:85:40:41:65:1e:bb:78:19:
                    a2:11:79:ac:ea:0e:9e:a8:df:a0:20:ca:0c:37:29:
                    e4:36:ed:84:08:b2:7b:8b:5d:8a:db:4c:71:e9:fb:
                    84:19:84:b5:7f:81:c9:56:02:fe:20:f6:11:24:01:
                    aa:70:2b:e5:eb:a4:d9:35:bb:80:28:a6:f1:43:d7:
                    e4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:00:AE:00:60:07:0E:9A:B4:3D:8A:9B:F1:7B:91:CB:C9:A4:C8
            X509v3 Authority Key Identifier:
                keyid:3D:64:FD:90:0E:2E:64:CB:15:9D:00:67:16:78:53:AA:FC:8A:7E:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3D64FD900E2E64CB159D0067167853AAFC8A7E97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D64FD900E2E64CB159D0067167853AAFC8A7E97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5a519aeb-5c56-4cb3-94a0-0f400ea6a375/0/3130332e3134302e3133312e302f32342d3234203d3e20313338383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:f7:0f:26:01:44:7e:a8:ba:87:30:b4:f3:bb:86:d2:19:67:
         56:6a:94:bd:46:e8:a4:11:d4:ea:83:5c:18:be:fe:54:7a:46:
         b0:4b:dd:b0:82:e5:91:da:b1:73:ae:be:80:74:87:00:ce:a4:
         20:23:c6:41:46:6e:3d:68:ff:79:87:af:72:ff:5a:58:eb:8c:
         a2:9c:bd:f5:9e:97:89:7d:67:72:f0:b9:aa:f7:43:8c:75:fc:
         05:09:70:40:f7:9a:6f:79:c7:6c:6a:3d:e1:b1:71:b9:31:4b:
         0c:47:49:c0:96:80:18:0e:fd:56:35:4a:97:30:aa:7a:a4:8c:
         81:7f:7f:86:26:a9:ad:48:4c:8f:38:28:79:b2:bc:af:14:d5:
         de:49:6e:1a:23:0d:2f:17:54:11:35:6d:98:b7:ae:6f:66:b3:
         03:46:59:49:82:ce:e8:70:0a:97:5d:5b:d5:05:5d:2a:bd:a9:
         5a:13:db:26:06:85:b6:c3:58:7c:2f:32:a3:ca:00:52:2d:99:
         3b:20:05:da:1f:3a:1f:cf:bf:30:b9:d3:ba:14:c3:09:c7:bf:
         6c:42:f2:15:db:b0:d2:31:e8:c3:e9:86:0d:6e:ba:48:44:58:
         b0:d1:b3:c3:e1:95:62:d8:3f:2d:6c:eb:f4:67:4b:7e:ce:f7:
         1a:30:d8:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWJB0J11cNlgE+V5NBlRzQYT1txEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFG
QzhBN0U5NzAeFw0yNDA2MTYwOTU1NTRaFw0yNTA2MTUxMDAwNTRaMDMxMTAvBgNV
BAMTKEE3RDQwMEFFMDA2MDA3MEU5QUI0M0Q4QTlCRjE3QjkxQ0JDOUE0QzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD3LlUW0X/aIqWXT6Qm7lXfEBsa
9v6wcxMfsHr77cuTlty9R0lHPnr6thCK4RjLm6GUMPrRbU4gVnIqlKGzEl33jqMo
noFxHCI1HoUF+yy/SFuYHLZvsW6MfJzfUUyjZRxSykrRJqK39SvVm0eNnGxZAkV4
41c7BBAF2u77KYJQpfnN5q3E90RvI6ZB0q+8vpZdAhp8FZ/z891e/AlfzxSU7ezG
Z95u3VLt2GIdqBhd3tY9ieCGG7wWwT+FQEFlHrt4GaIReazqDp6o36Agygw3KeQ2
7YQIsnuLXYrbTHHp+4QZhLV/gclWAv4g9hEkAapwK+XrpNk1u4AopvFD1+SXAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUp9QArgBgBw6atD2Km/F7kcvJpMgwHwYDVR0j
BBgwFoAUPWT9kA4uZMsVnQBnFnhTqvyKfpcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YTUxOWFlYi01YzU2LTRjYjMtOTRhMC0wZjQwMGVhNmEzNzUvMC8zRDY0RkQ5MDBF
MkU2NENCMTU5RDAwNjcxNjc4NTNBQUZDOEE3RTk3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q2NEZEOTAwRTJFNjRDQjE1OUQwMDY3MTY3ODUzQUFGQzhB
N0U5Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVhNTE5YWViLTVjNTYtNGNiMy05
NGEwLTBmNDAwZWE2YTM3NS8wLzMxMzAzMzJlMzEzNDMwMmUzMTMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzODM2MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjIMwDQYJ
KoZIhvcNAQELBQADggEBAEP3DyYBRH6ouocwtPO7htIZZ1ZqlL1G6KQR1OqDXBi+
/lR6RrBL3bCC5ZHasXOuvoB0hwDOpCAjxkFGbj1o/3mHr3L/WljrjKKcvfWel4l9
Z3Lwuar3Q4x1/AUJcED3mm95x2xqPeGxcbkxSwxHScCWgBgO/VY1SpcwqnqkjIF/
f4Ymqa1ITI84KHmyvK8U1d5JbhojDS8XVBE1bZi3rm9mswNGWUmCzuhwCpddW9UF
XSq9qVoT2yYGhbbDWHwvMqPKAFItmTsgBdofOh/PvzC507oUwwnHv2xC8hXbsNIx
6MPphg1uukhEWLDRs8PhlWLYPy1s6/RnS37O9xow2EE=
-----END CERTIFICATE-----
Generated at Mon Nov 25 21:31:13 2024 by rpki-client on console-ams.rpki-client.org