Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          bJ6i/BAc6zrBSm9HW7tI5NHcCOAYOtyoukU8OZRZfZA=
Subject key identifier:   C4:BF:86:42:13:67:F1:95:43:25:F3:77:E2:C5:3F:A9:D7:BC:89:C1
Certificate issuer:       /CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
Certificate serial:       61B331B08F6646A3076FCC9578686C46C31AF129
Authority key identifier: 38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 12 Jul 2024 16:00:00 +0000
ROA not before:           Fri 12 Jul 2024 15:55:00 +0000
ROA not after:            Fri 11 Jul 2025 16:00:00 +0000
asID:                     9341
IP address blocks:        103.212.178.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl
                          rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:b3:31:b0:8f:66:46:a3:07:6f:cc:95:78:68:6c:46:c3:1a:f1:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385CADA9D59B15B5F48DCBA1C80B7EDAC282D804
        Validity
            Not Before: Jul 12 15:55:00 2024 GMT
            Not After : Jul 11 16:00:00 2025 GMT
        Subject: CN=C4BF86421367F1954325F377E2C53FA9D7BC89C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:96:8e:05:3e:bd:45:d0:bf:02:2a:0c:0e:29:
                    56:39:bc:e3:b2:bc:67:ec:98:45:1c:ab:bd:9a:06:
                    d3:70:fe:57:d4:7e:3d:bc:91:6f:38:b6:55:45:af:
                    e3:ca:48:b6:82:65:bd:9b:57:e7:1f:cd:56:5a:86:
                    1d:34:3d:e5:dc:64:39:0f:85:17:ba:1d:3d:e0:07:
                    f5:fc:f9:7e:42:dd:45:79:be:42:bb:73:65:6f:45:
                    17:3e:6b:ea:8e:d2:b3:da:ea:c2:67:a1:25:3f:df:
                    00:f3:62:92:ff:74:06:79:2a:21:54:71:7c:5d:eb:
                    48:b0:7c:9c:d6:0e:bb:76:c7:fd:f3:ab:aa:e0:28:
                    44:bf:06:fe:53:dd:7e:94:dd:1a:ba:8d:d9:b2:c3:
                    f5:f2:3a:c6:03:35:0b:e0:f9:48:02:e9:f7:ea:85:
                    5f:d8:93:bd:5b:69:40:c2:1c:e2:4e:f8:d0:b5:69:
                    ef:f4:4b:e3:54:5a:db:66:ba:17:fc:3b:d3:03:31:
                    b6:3d:69:bd:ef:43:83:81:6c:5f:65:87:6e:48:dc:
                    d8:2e:3d:43:41:8a:36:ce:0a:68:5a:7a:41:71:00:
                    c6:34:ee:5a:84:48:c7:c2:d4:32:95:40:6d:7b:75:
                    3c:bb:28:07:04:41:8d:2a:01:3b:ee:00:f0:84:b4:
                    12:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:BF:86:42:13:67:F1:95:43:25:F3:77:E2:C5:3F:A9:D7:BC:89:C1
            X509v3 Authority Key Identifier:
                keyid:38:5C:AD:A9:D5:9B:15:B5:F4:8D:CB:A1:C8:0B:7E:DA:C2:82:D8:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/385CADA9D59B15B5F48DCBA1C80B7EDAC282D804.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5b64a78c-dd4c-4c9d-bcf0-6de6cdb925b0/0/3130332e3231322e3137382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.212.178.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:91:6a:e7:b1:48:45:e0:b4:8d:60:99:71:a3:d6:38:6f:6e:
         b5:41:ac:8e:b5:17:af:c2:a4:bb:ce:78:e8:1c:64:ec:4d:12:
         42:e1:06:9b:9a:71:d1:5c:22:9d:61:8e:ea:0c:f0:d9:c1:3b:
         87:ae:0e:ba:da:34:62:75:6c:67:89:64:3c:ba:2a:17:6f:86:
         5d:33:9f:d1:bc:f4:6d:ec:e7:82:7a:f2:7e:ae:c2:cd:cc:07:
         68:31:30:e6:74:c7:17:05:b1:7c:10:ef:ea:51:95:7c:82:1c:
         2f:3b:87:01:b2:0a:62:4d:eb:c3:e5:ff:6f:27:0a:aa:2f:dd:
         44:48:97:27:e4:42:cd:00:63:00:32:bd:cc:a6:c3:e8:93:0d:
         5d:05:f8:f8:a5:08:be:ff:86:d9:0a:ef:13:1a:24:d1:d5:de:
         75:f4:2d:24:a6:3e:bc:7e:4b:a6:54:34:f6:bd:15:2e:26:fe:
         5e:14:b6:3c:fd:2e:2a:bf:93:cb:6e:58:08:7b:da:04:5b:92:
         c8:d8:d4:54:e0:b8:3a:d2:72:47:40:64:f5:b8:c0:ae:a5:86:
         30:49:04:d3:a0:56:80:51:79:d7:81:b3:54:85:6b:6f:2c:55:
         42:f2:12:42:a9:7d:7c:ab:1e:4b:64:23:83:82:cb:82:88:27:
         90:6d:38:1e
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYbMxsI9mRqMHb8yVeGhsRsMa8SkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFD
MjgyRDgwNDAeFw0yNDA3MTIxNTU1MDBaFw0yNTA3MTExNjAwMDBaMDMxMTAvBgNV
BAMTKEM0QkY4NjQyMTM2N0YxOTU0MzI1RjM3N0UyQzUzRkE5RDdCQzg5QzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDolo4FPr1F0L8CKgwOKVY5vOOy
vGfsmEUcq72aBtNw/lfUfj28kW84tlVFr+PKSLaCZb2bV+cfzVZahh00PeXcZDkP
hRe6HT3gB/X8+X5C3UV5vkK7c2VvRRc+a+qO0rPa6sJnoSU/3wDzYpL/dAZ5KiFU
cXxd60iwfJzWDrt2x/3zq6rgKES/Bv5T3X6U3Rq6jdmyw/XyOsYDNQvg+UgC6ffq
hV/Yk71baUDCHOJO+NC1ae/0S+NUWttmuhf8O9MDMbY9ab3vQ4OBbF9lh25I3Ngu
PUNBijbOCmhaekFxAMY07lqESMfC1DKVQG17dTy7KAcEQY0qATvuAPCEtBI/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxL+GQhNn8ZVDJfN34sU/qde8icEwHwYDVR0j
BBgwFoAUOFytqdWbFbX0jcuhyAt+2sKC2AQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YjY0YTc4Yy1kZDRjLTRjOWQtYmNmMC02ZGU2Y2RiOTI1YjAvMC8zODVDQURBOUQ1
OUIxNUI1RjQ4RENCQTFDODBCN0VEQUMyODJEODA0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg1Q0FEQTlENTlCMTVCNUY0OERDQkExQzgwQjdFREFDMjgy
RDgwNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzViNjRhNzhjLWRkNGMtNGM5ZC1i
Y2YwLTZkZTZjZGI5MjViMC8wLzMxMzAzMzJlMzIzMTMyMmUzMTM3MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWfUsjANBgkqhkiG
9w0BAQsFAAOCAQEAAJFq57FIReC0jWCZcaPWOG9utUGsjrUXr8Kku8546Bxk7E0S
QuEGm5px0VwinWGO6gzw2cE7h64Outo0YnVsZ4lkPLoqF2+GXTOf0bz0bezngnry
fq7CzcwHaDEw5nTHFwWxfBDv6lGVfIIcLzuHAbIKYk3rw+X/bycKqi/dREiXJ+RC
zQBjADK9zKbD6JMNXQX4+KUIvv+G2QrvExok0dXedfQtJKY+vH5LplQ09r0VLib+
XhS2PP0uKr+Ty25YCHvaBFuSyNjUVOC4OtJyR0Bk9bjArqWGMEkE06BWgFF514Gz
VIVrbyxVQvISQql9fKseS2Qjg4LLgognkG04Hg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org