Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa
File:                     3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa (raw, json)
Hash identifier:          EDpIpRTLN0yFPF7XG+MSDTWZW8JNfOrFhvnj07p7etE=
Subject key identifier:   B0:84:C2:C7:1C:14:92:EF:FF:5D:DA:AF:A1:73:D4:39:33:2E:20:58
Certificate issuer:       /CN=51122991EB0981E672637F95671E74F6E59AAC7B
Certificate serial:       204D16EBB1AB688B182E8B0F11C07E7372B809B0
Authority key identifier: 51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa
Signing time:             Mon 01 Jul 2024 01:03:13 +0000
ROA not before:           Mon 01 Jul 2024 00:58:13 +0000
ROA not after:            Mon 30 Jun 2025 01:03:13 +0000
asID:                     133359
IP address blocks:        103.238.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.crl
                          rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:4d:16:eb:b1:ab:68:8b:18:2e:8b:0f:11:c0:7e:73:72:b8:09:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51122991EB0981E672637F95671E74F6E59AAC7B
        Validity
            Not Before: Jul  1 00:58:13 2024 GMT
            Not After : Jun 30 01:03:13 2025 GMT
        Subject: CN=B084C2C71C1492EFFF5DDAAFA173D439332E2058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:48:31:f0:4c:9e:27:88:4a:35:cd:c1:00:54:
                    45:8b:0c:a2:91:28:7c:f4:09:cd:9a:bf:3e:d3:18:
                    ef:da:dc:db:b4:19:d0:f7:cd:24:a0:64:3a:5c:69:
                    e0:c7:a8:04:2c:7f:fe:15:c0:d4:b1:59:9b:e3:fb:
                    6e:00:d2:6a:4b:85:6d:bf:c1:59:64:4e:9d:e4:3e:
                    93:ec:d3:88:46:c5:63:fb:e2:24:0c:f8:95:9f:1b:
                    45:fb:9f:0e:bb:3d:e1:2a:6f:c0:80:b4:a6:5e:ac:
                    c8:29:3e:79:e0:4f:5c:bf:28:6e:d9:83:7f:45:c1:
                    6e:2c:e8:23:6e:32:74:cf:98:46:c9:c9:49:7c:a6:
                    91:5b:60:69:e7:a5:d9:53:b7:1f:eb:ee:52:e2:3f:
                    5f:e4:de:b5:33:b0:a0:fb:48:79:96:72:ed:db:bc:
                    f2:1a:30:fc:5d:74:78:d5:a1:57:8e:f6:38:6d:2e:
                    d8:f2:07:fa:45:5f:11:f3:5d:64:16:22:ff:7f:ea:
                    8c:ae:5c:4c:bd:eb:80:97:c4:87:0c:4f:3a:52:c5:
                    b5:95:d5:80:0d:a3:6c:69:d9:cd:2f:ce:76:56:82:
                    15:63:27:61:2e:1f:0a:db:a3:04:f8:40:1f:9c:b9:
                    51:09:d4:e1:1e:40:04:b3:37:b2:a5:9c:95:53:8d:
                    c2:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:84:C2:C7:1C:14:92:EF:FF:5D:DA:AF:A1:73:D4:39:33:2E:20:58
            X509v3 Authority Key Identifier:
                keyid:51:12:29:91:EB:09:81:E6:72:63:7F:95:67:1E:74:F6:E5:9A:AC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/51122991EB0981E672637F95671E74F6E59AAC7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51122991EB0981E672637F95671E74F6E59AAC7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c219259-ed1a-4d18-bd92-94b60672e6a1/0/3130332e3233382e3133382e302f32332d3234203d3e20313333333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.238.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         60:63:c7:7d:76:c3:73:13:7d:1a:f5:fb:7f:ae:ce:63:fe:4a:
         ae:41:78:f8:1b:72:32:c0:a5:3a:7e:be:92:c0:44:4d:09:2d:
         a3:70:1d:16:c6:6d:73:c8:7c:27:e9:95:18:04:37:39:28:60:
         80:a7:47:56:e7:88:fb:61:e8:12:66:07:1f:65:f3:2e:af:6b:
         01:d4:11:7a:59:c7:ac:b9:6f:14:49:43:29:2b:0a:f1:34:5d:
         3d:50:b3:42:b3:19:7d:59:83:6d:78:4b:8b:3e:7f:49:f4:31:
         cf:ba:0e:43:83:72:60:31:17:19:5d:40:67:19:c9:ab:20:8f:
         f4:d5:37:9a:dc:6b:f0:99:91:98:68:5a:94:f9:23:3e:81:d1:
         bb:8e:35:78:c0:e7:0c:4c:09:4e:9e:0b:3c:89:5e:1d:ae:88:
         a4:9e:ff:a6:45:7c:a9:62:fd:97:20:0f:55:57:fe:f2:c1:ed:
         fe:88:ab:7e:db:d6:02:f1:97:31:7d:2f:db:6f:ed:29:d0:fe:
         31:54:14:83:4a:d0:c1:aa:f5:10:f7:ac:d6:35:05:59:62:94:
         87:78:79:41:3b:b7:62:31:03:2e:56:49:1e:c6:19:cc:37:46:
         e6:14:8b:d7:d8:f9:24:6d:ad:ee:e0:14:8b:bc:b2:8c:df:c2:
         c2:4c:43:f9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIE0W67GraIsYLosPEcB+c3K4CbAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMjI5OTFFQjA5ODFFNjcyNjM3Rjk1NjcxRTc0RjZF
NTlBQUM3QjAeFw0yNDA3MDEwMDU4MTNaFw0yNTA2MzAwMTAzMTNaMDMxMTAvBgNV
BAMTKEIwODRDMkM3MUMxNDkyRUZGRjVEREFBRkExNzNENDM5MzMyRTIwNTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdSDHwTJ4niEo1zcEAVEWLDKKR
KHz0Cc2avz7TGO/a3Nu0GdD3zSSgZDpcaeDHqAQsf/4VwNSxWZvj+24A0mpLhW2/
wVlkTp3kPpPs04hGxWP74iQM+JWfG0X7nw67PeEqb8CAtKZerMgpPnngT1y/KG7Z
g39FwW4s6CNuMnTPmEbJyUl8ppFbYGnnpdlTtx/r7lLiP1/k3rUzsKD7SHmWcu3b
vPIaMPxddHjVoVeO9jhtLtjyB/pFXxHzXWQWIv9/6oyuXEy964CXxIcMTzpSxbWV
1YANo2xp2c0vznZWghVjJ2EuHwrbowT4QB+cuVEJ1OEeQASzN7KlnJVTjcL1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUsITCxxwUku//XdqvoXPUOTMuIFgwHwYDVR0j
BBgwFoAUURIpkesJgeZyY3+VZx509uWarHswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
YzIxOTI1OS1lZDFhLTRkMTgtYmQ5Mi05NGI2MDY3MmU2YTEvMC81MTEyMjk5MUVC
MDk4MUU2NzI2MzdGOTU2NzFFNzRGNkU1OUFBQzdCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMjI5OTFFQjA5ODFFNjcyNjM3Rjk1NjcxRTc0RjZFNTlB
QUM3Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVjMjE5MjU5LWVkMWEtNGQxOC1i
ZDkyLTk0YjYwNjcyZTZhMS8wLzMxMzAzMzJlMzIzMzM4MmUzMTMzMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzMzMzM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFn7oowDQYJ
KoZIhvcNAQELBQADggEBAGBjx312w3MTfRr1+3+uzmP+Sq5BePgbcjLApTp+vpLA
RE0JLaNwHRbGbXPIfCfplRgENzkoYICnR1bniPth6BJmBx9l8y6vawHUEXpZx6y5
bxRJQykrCvE0XT1Qs0KzGX1Zg214S4s+f0n0Mc+6DkODcmAxFxldQGcZyasgj/TV
N5rca/CZkZhoWpT5Iz6B0buONXjA5wxMCU6eCzyJXh2uiKSe/6ZFfKli/ZcgD1VX
/vLB7f6Iq37b1gLxlzF9L9tv7SnQ/jFUFINK0MGq9RD3rNY1BVlilId4eUE7t2Ix
Ay5WSR7GGcw3RuYUi9fY+SRtre7gFIu8sozfwsJMQ/k=
-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org