Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
File:                     3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa (raw, json)
Hash identifier:          ieMGqtS8RhGJzVFgVXdHFZF0bIr1rTb711Dv1YSs4lQ=
Subject key identifier:   6A:77:75:32:FB:05:53:03:0A:D9:9E:2E:79:64:F7:98:25:50:05:54
Certificate issuer:       /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial:       077D954E29D9C75EB513C64DBEF022352D64940B
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa
Signing time:             Wed 24 Jul 2024 15:00:00 +0000
ROA not before:           Wed 24 Jul 2024 14:55:00 +0000
ROA not after:            Wed 23 Jul 2025 15:00:00 +0000
asID:                     149901
IP address blocks:        103.190.60.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
                          rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 13:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:7d:95:4e:29:d9:c7:5e:b5:13:c6:4d:be:f0:22:35:2d:64:94:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
        Validity
            Not Before: Jul 24 14:55:00 2024 GMT
            Not After : Jul 23 15:00:00 2025 GMT
        Subject: CN=6A777532FB0553030AD99E2E7964F79825500554
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:20:56:d6:98:c5:2e:c8:24:a9:3f:57:ff:e8:
                    23:c9:02:d9:af:2a:f8:73:b4:1b:64:2b:7e:1d:23:
                    cd:29:54:38:ae:94:a5:ee:7c:08:7e:f9:49:8c:d6:
                    74:9c:1b:74:6b:ee:71:a0:e6:a9:48:e4:3f:10:de:
                    54:0f:c9:19:07:6b:ab:a5:c6:9e:56:15:14:2d:7d:
                    cf:82:33:92:9c:51:5e:97:79:73:80:da:07:05:9a:
                    55:6c:f4:35:d7:5b:d9:10:cc:ca:6b:14:95:5e:3f:
                    29:62:82:db:0f:ef:a7:43:e1:7b:86:b6:b6:f3:b8:
                    41:cb:3e:bd:36:e8:46:98:9b:c2:ef:96:73:ce:5e:
                    9a:95:dc:ad:c7:1b:9e:d3:47:39:69:ca:6e:b5:1a:
                    82:70:89:bf:e9:e2:a2:f8:92:cd:d3:61:77:52:f3:
                    b2:a8:93:5f:e5:33:f9:03:bb:8a:7d:6c:99:db:26:
                    66:d4:1a:4e:9d:bc:0f:d0:98:68:0f:66:46:df:4f:
                    52:2e:fe:ab:c8:bb:1f:c6:23:e3:a0:10:dc:56:92:
                    26:f7:6a:61:fe:78:34:5d:37:b2:68:88:1a:2d:1e:
                    f1:22:5d:ac:ff:7a:57:52:06:74:69:cb:4f:3c:e9:
                    51:8d:13:eb:2d:f3:66:f7:df:77:5b:88:cb:6d:49:
                    ef:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:77:75:32:FB:05:53:03:0A:D9:9E:2E:79:64:F7:98:25:50:05:54
            X509v3 Authority Key Identifier:
                keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32332d3233203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.60.0/23

    Signature Algorithm: sha256WithRSAEncryption
         88:72:b2:26:1e:35:98:25:4d:23:4d:24:30:aa:02:e3:5a:6f:
         b8:c0:9a:a0:81:ca:bf:66:cb:71:a5:60:ab:0c:db:56:27:7e:
         4f:02:ce:b0:eb:02:88:97:05:eb:f4:a5:2b:cc:b4:1b:55:26:
         b2:2c:a4:b9:18:35:8f:f7:c6:b1:0f:80:41:dc:c6:de:69:98:
         49:7f:fa:51:02:f8:ca:29:67:61:5a:96:17:71:9d:99:fc:df:
         14:59:57:fd:b0:4a:59:dd:6d:9b:4f:64:b0:1b:6d:f5:be:5a:
         5c:7d:c2:ad:44:65:0c:ac:ef:19:5e:46:e3:4e:65:44:b6:66:
         8c:fc:79:35:4c:04:d1:37:a3:07:10:f1:ae:79:df:d9:48:0b:
         c7:d3:21:22:6a:fc:89:1f:52:db:56:8b:91:b7:10:3d:85:2c:
         59:bd:72:62:38:06:72:eb:14:df:af:59:51:2d:88:85:ea:a6:
         1d:97:27:9f:51:2b:80:8a:41:e8:39:87:b8:e3:fd:f3:c5:a5:
         cd:ff:95:e0:70:a9:e7:87:6e:7c:22:04:85:65:fe:77:15:31:
         39:cc:14:66:48:a3:54:c8:5c:31:62:f9:bb:23:b2:b6:5f:73:
         7a:49:c3:d0:e8:a7:61:ee:ee:73:f3:af:53:97:52:69:00:82:
         d8:18:1c:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUB32VTinZx161E8ZNvvAiNS1klAswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy
MkNCREVFOTAeFw0yNDA3MjQxNDU1MDBaFw0yNTA3MjMxNTAwMDBaMDMxMTAvBgNV
BAMTKDZBNzc3NTMyRkIwNTUzMDMwQUQ5OUUyRTc5NjRGNzk4MjU1MDA1NTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEIFbWmMUuyCSpP1f/6CPJAtmv
KvhztBtkK34dI80pVDiulKXufAh++UmM1nScG3Rr7nGg5qlI5D8Q3lQPyRkHa6ul
xp5WFRQtfc+CM5KcUV6XeXOA2gcFmlVs9DXXW9kQzMprFJVePyligtsP76dD4XuG
trbzuEHLPr026EaYm8LvlnPOXpqV3K3HG57TRzlpym61GoJwib/p4qL4ks3TYXdS
87Kok1/lM/kDu4p9bJnbJmbUGk6dvA/QmGgPZkbfT1Iu/qvIux/GI+OgENxWkib3
amH+eDRdN7JoiBotHvEiXaz/eldSBnRpy0886VGNE+st82b333dbiMttSe8NAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUand1MvsFUwMK2Z4ueWT3mCVQBVQwHwYDVR0j
BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw
QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC
REVFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4LWIzM2EtNGI2NS05
YTU1LWRjZTQxZTIyMzg3My8wLzMxMzAzMzJlMzEzOTMwMmUzNjMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ748MA0GCSqG
SIb3DQEBCwUAA4IBAQCIcrImHjWYJU0jTSQwqgLjWm+4wJqggcq/ZstxpWCrDNtW
J35PAs6w6wKIlwXr9KUrzLQbVSayLKS5GDWP98axD4BB3MbeaZhJf/pRAvjKKWdh
WpYXcZ2Z/N8UWVf9sEpZ3W2bT2SwG231vlpcfcKtRGUMrO8ZXkbjTmVEtmaM/Hk1
TATRN6MHEPGued/ZSAvH0yEiavyJH1LbVouRtxA9hSxZvXJiOAZy6xTfr1lRLYiF
6qYdlyefUSuAikHoOYe44/3zxaXN/5XgcKnnh258IgSFZf53FTE5zBRmSKNUyFwx
Yvm7I7K2X3N6ScPQ6Kdh7u5z869Tl1JpAILYGBzA
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:16 2024 by rpki-client on console-ams.rpki-client.org