Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa
File:                     3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa (raw, json)
Hash identifier:          fWCXN9wJ3g/LKlR/psq3GvGmK1dofqwMlLoFKjFJdXQ=
Subject key identifier:   00:A0:E3:25:16:7D:B1:E0:5E:73:32:15:F3:04:80:85:3D:5B:02:40
Certificate issuer:       /CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
Certificate serial:       779A1C0EE96B89BE388102854DC07F95FE3FF954
Authority key identifier: 3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa
Signing time:             Wed 12 Jul 2023 04:00:00 +0000
ROA not before:           Wed 12 Jul 2023 03:55:00 +0000
ROA not after:            Wed 10 Jul 2024 04:00:00 +0000
asID:                     149901
IP address blocks:        103.190.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl
                          rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:9a:1c:0e:e9:6b:89:be:38:81:02:85:4d:c0:7f:95:fe:3f:f9:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3BA5C10190ADC96EE34EB4A6D054457022CBDEE9
        Validity
            Not Before: Jul 12 03:55:00 2023 GMT
            Not After : Jul 10 04:00:00 2024 GMT
        Subject: CN=00A0E325167DB1E05E733215F30480853D5B0240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:7e:ea:ec:4f:e8:97:3d:89:e3:91:ca:46:
                    30:ce:5f:4b:85:ca:26:1a:1c:e8:a3:a1:14:74:72:
                    3f:99:c2:28:f3:d4:1f:d0:1c:f9:36:e6:31:c1:0c:
                    e6:2e:f9:71:d7:23:ac:84:62:d4:49:d9:66:1d:89:
                    af:86:56:37:3a:76:48:06:46:fd:ef:e9:ba:65:c1:
                    4c:d1:8f:95:4a:a2:94:31:04:56:ba:1f:1f:6c:e4:
                    43:07:16:67:9b:94:75:5b:fb:92:aa:c2:c8:2b:c0:
                    a4:88:e3:17:60:8a:e8:95:cc:93:01:4b:63:81:e0:
                    db:b5:53:96:09:3e:83:dd:e1:3d:f4:65:d2:83:ac:
                    78:51:08:7e:6f:03:18:da:00:34:77:c5:26:ae:d3:
                    e6:da:03:c1:9e:ca:f3:d3:ae:57:f5:43:31:18:13:
                    92:c7:56:82:76:8d:74:3b:bb:d8:f4:ff:a6:76:ff:
                    ed:6e:f9:2d:1e:bb:7d:bb:54:fa:2f:60:3a:5e:87:
                    1e:8d:33:c4:cb:8c:74:62:48:2d:58:ab:0a:93:d7:
                    57:86:9c:62:8b:8f:ae:62:68:7c:ee:b7:b4:47:8d:
                    88:05:8f:30:94:f1:07:73:a1:cb:eb:69:23:6d:16:
                    e1:69:4a:a6:c7:c3:fc:fc:db:45:d7:e7:68:f9:36:
                    bf:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:A0:E3:25:16:7D:B1:E0:5E:73:32:15:F3:04:80:85:3D:5B:02:40
            X509v3 Authority Key Identifier:
                keyid:3B:A5:C1:01:90:AD:C9:6E:E3:4E:B4:A6:D0:54:45:70:22:CB:DE:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3BA5C10190ADC96EE34EB4A6D054457022CBDEE9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5e314858-b33a-4b65-9a55-dce41e223873/0/3130332e3139302e36302e302f32342d3234203d3e20313439393031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:c2:f8:8c:2c:1a:03:9c:f8:bf:4e:5d:e2:48:25:87:81:90:
         4f:19:e0:dd:48:81:bc:78:c9:3d:a7:8b:5c:9b:ef:60:b4:14:
         17:19:98:b4:87:02:de:9a:2f:cd:e8:af:1b:66:d6:18:b5:06:
         a7:66:3e:7f:00:04:9a:f7:e8:ec:b4:10:f1:05:c8:66:ee:d6:
         6d:24:cc:cd:7c:06:26:cc:80:2a:84:60:3b:a4:26:55:42:6c:
         2f:cf:cf:5e:55:fb:fe:4a:71:29:4b:92:52:75:a2:bb:ce:d0:
         93:8f:93:5f:87:7c:16:79:73:b4:60:70:b3:66:4e:57:71:eb:
         09:83:b4:02:76:24:3b:d0:72:7a:b0:76:72:14:03:7b:2f:c5:
         88:b4:54:21:eb:10:2b:4a:7a:82:da:10:9f:d0:e3:3c:91:de:
         28:04:7c:61:49:03:02:24:9d:13:27:a5:85:49:b4:d0:d1:db:
         09:86:59:a9:3f:ef:0b:5a:bc:a4:bd:f7:16:30:74:01:56:4f:
         fe:a4:c7:4c:95:75:a0:d8:45:7c:60:16:9d:81:ed:b5:b1:60:
         11:ee:a3:ac:ed:8d:a6:98:eb:db:cd:ef:84:2c:06:ea:61:1b:
         bd:5f:c5:2c:3c:8c:6f:95:89:cc:6e:55:a8:84:0e:46:57:09:
         d8:ca:a0:06
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd5ocDulrib44gQKFTcB/lf4/+VQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAy
MkNCREVFOTAeFw0yMzA3MTIwMzU1MDBaFw0yNDA3MTAwNDAwMDBaMDMxMTAvBgNV
BAMTKDAwQTBFMzI1MTY3REIxRTA1RTczMzIxNUYzMDQ4MDg1M0Q1QjAyNDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCym37q7E/olz2J45HKRjDOX0uF
yiYaHOijoRR0cj+Zwijz1B/QHPk25jHBDOYu+XHXI6yEYtRJ2WYdia+GVjc6dkgG
Rv3v6bplwUzRj5VKopQxBFa6Hx9s5EMHFmeblHVb+5KqwsgrwKSI4xdgiuiVzJMB
S2OB4Nu1U5YJPoPd4T30ZdKDrHhRCH5vAxjaADR3xSau0+baA8GeyvPTrlf1QzEY
E5LHVoJ2jXQ7u9j0/6Z2/+1u+S0eu327VPovYDpehx6NM8TLjHRiSC1YqwqT11eG
nGKLj65iaHzut7RHjYgFjzCU8QdzocvraSNtFuFpSqbHw/z820XX52j5Nr/DAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAKDjJRZ9seBeczIV8wSAhT1bAkAwHwYDVR0j
BBgwFoAUO6XBAZCtyW7jTrSm0FRFcCLL3ukwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
ZTMxNDg1OC1iMzNhLTRiNjUtOWE1NS1kY2U0MWUyMjM4NzMvMC8zQkE1QzEwMTkw
QURDOTZFRTM0RUI0QTZEMDU0NDU3MDIyQ0JERUU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0JBNUMxMDE5MEFEQzk2RUUzNEVCNEE2RDA1NDQ1NzAyMkNC
REVFOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzVlMzE0ODU4LWIzM2EtNGI2NS05
YTU1LWRjZTQxZTIyMzg3My8wLzMxMzAzMzJlMzEzOTMwMmUzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzMDMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ748MA0GCSqG
SIb3DQEBCwUAA4IBAQCVwviMLBoDnPi/Tl3iSCWHgZBPGeDdSIG8eMk9p4tcm+9g
tBQXGZi0hwLemi/N6K8bZtYYtQanZj5/AASa9+jstBDxBchm7tZtJMzNfAYmzIAq
hGA7pCZVQmwvz89eVfv+SnEpS5JSdaK7ztCTj5Nfh3wWeXO0YHCzZk5XcesJg7QC
diQ70HJ6sHZyFAN7L8WItFQh6xArSnqC2hCf0OM8kd4oBHxhSQMCJJ0TJ6WFSbTQ
0dsJhlmpP+8LWrykvfcWMHQBVk/+pMdMlXWg2EV8YBadge21sWAR7qOs7Y2mmOvb
ze+ELAbqYRu9X8UsPIxvlYnMblWohA5GVwnYyqAG
-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:43 2024 by rpki-client on console-fra.rpki-client.org