Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
File:                     3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa (raw, json)
Hash identifier:          aipKK67BLb1EG7mXe6a8m7XjE6g2AZs5fXiFjCTk1Jw=
Subject key identifier:   26:4B:5F:3B:DE:57:29:85:77:10:ED:AB:44:33:BB:7D:63:E6:CF:B1
Certificate issuer:       /CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
Certificate serial:       12B28977B57E7F942D2DDA2A5E53CA4043D47288
Authority key identifier: AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa
Signing time:             Tue 05 Sep 2023 04:01:01 +0000
ROA not before:           Tue 05 Sep 2023 03:56:01 +0000
ROA not after:            Tue 03 Sep 2024 04:01:01 +0000
asID:                     149943
IP address blocks:        103.191.254.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl
                          rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b2:89:77:b5:7e:7f:94:2d:2d:da:2a:5e:53:ca:40:43:d4:72:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADE0D4624859A4D642D8C07FD007B4EEE066EFF3
        Validity
            Not Before: Sep  5 03:56:01 2023 GMT
            Not After : Sep  3 04:01:01 2024 GMT
        Subject: CN=264B5F3BDE5729857710EDAB4433BB7D63E6CFB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f3:1b:9e:5c:a4:a7:47:e4:69:3c:15:ad:49:
                    a5:10:be:81:38:e0:a8:e2:59:f3:f0:12:7a:c7:e2:
                    e2:f3:b9:fe:e4:db:8c:c7:3f:bb:3d:2e:06:fc:d5:
                    60:35:d9:c5:04:dc:59:52:ee:43:b8:09:56:f5:cd:
                    90:e9:c8:03:81:4f:d9:6f:a7:44:86:04:ba:a3:5c:
                    cb:2a:0a:e1:67:d1:69:37:f0:3d:3b:f7:51:4b:df:
                    e1:cb:ac:e4:f2:3a:d8:ae:0d:81:31:ce:a0:a3:7f:
                    64:87:fd:55:78:f8:b6:55:b0:c7:4d:40:61:d7:a1:
                    40:d4:d2:22:24:80:1c:a2:0f:45:e4:48:76:91:22:
                    c9:b3:a0:3c:7d:00:c0:c5:5f:75:01:57:f8:d8:6e:
                    81:0a:cc:b2:af:b3:d9:75:85:b6:3b:ec:9b:25:e7:
                    2f:27:bb:f4:5a:89:e4:00:0a:47:3f:62:e4:08:ef:
                    43:50:a4:d1:1e:5d:ad:c9:79:7f:10:74:b8:07:fc:
                    dc:51:24:32:82:52:b0:df:4c:59:b5:32:56:27:03:
                    b8:05:06:ab:53:58:18:88:1e:7a:c6:45:e0:33:ef:
                    b1:12:80:68:67:84:b6:47:fa:56:29:b1:59:a6:b7:
                    19:09:d8:d6:44:8e:9c:56:fb:ea:2c:34:19:d7:db:
                    6f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:4B:5F:3B:DE:57:29:85:77:10:ED:AB:44:33:BB:7D:63:E6:CF:B1
            X509v3 Authority Key Identifier:
                keyid:AD:E0:D4:62:48:59:A4:D6:42:D8:C0:7F:D0:07:B4:EE:E0:66:EF:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADE0D4624859A4D642D8C07FD007B4EEE066EFF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6098f924-9f2e-499b-8101-02f7506932bf/0/3130332e3139312e3235342e302f32332d3233203d3e20313439393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:e2:9f:e2:39:5f:f0:e5:52:bc:55:d7:b9:ba:37:16:f8:
         fa:09:c8:6f:e1:25:2a:48:c0:f3:e1:69:30:9a:c2:30:61:cb:
         8f:2f:64:08:c1:da:02:f5:74:54:5d:f2:41:3b:37:b3:d6:a2:
         21:6a:f5:38:89:78:d1:94:a0:42:91:57:ff:f1:cf:79:ce:12:
         37:ff:00:0a:4b:f9:1b:71:ae:05:dd:84:3a:8d:65:83:ae:19:
         60:19:d8:da:46:ae:71:41:2f:09:50:25:87:00:b1:f0:57:c6:
         b2:20:a6:a8:8e:78:c3:5b:7a:6f:52:85:ab:3b:7a:9b:8b:01:
         27:98:4a:78:3d:3f:19:54:f3:a1:10:a5:0c:94:ef:bc:e6:34:
         aa:65:27:72:52:64:95:14:97:5c:cd:6d:84:2f:ca:f8:f3:ee:
         68:3d:6e:aa:18:0d:19:32:d1:ce:26:a7:35:1e:4b:35:9d:cc:
         d6:71:93:78:9c:4f:a1:a9:9a:cd:a4:68:2c:b1:87:f8:46:a3:
         10:cb:a9:a1:42:08:e3:41:c3:70:52:c0:90:a6:fd:1e:4a:83:
         01:ed:f6:34:7a:92:0c:c8:bd:1d:16:07:83:ef:86:16:e9:c9:
         c4:75:38:d0:c2:4c:79:04:dc:91:6a:a1:a8:55:b4:33:a8:5d:
         df:f7:0d:b4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUErKJd7V+f5QtLdoqXlPKQEPUcogwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVF
MDY2RUZGMzAeFw0yMzA5MDUwMzU2MDFaFw0yNDA5MDMwNDAxMDFaMDMxMTAvBgNV
BAMTKDI2NEI1RjNCREU1NzI5ODU3NzEwRURBQjQ0MzNCQjdENjNFNkNGQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC38xueXKSnR+RpPBWtSaUQvoE4
4KjiWfPwEnrH4uLzuf7k24zHP7s9Lgb81WA12cUE3FlS7kO4CVb1zZDpyAOBT9lv
p0SGBLqjXMsqCuFn0Wk38D0791FL3+HLrOTyOtiuDYExzqCjf2SH/VV4+LZVsMdN
QGHXoUDU0iIkgByiD0XkSHaRIsmzoDx9AMDFX3UBV/jYboEKzLKvs9l1hbY77Jsl
5y8nu/RaieQACkc/YuQI70NQpNEeXa3JeX8QdLgH/NxRJDKCUrDfTFm1MlYnA7gF
BqtTWBiIHnrGReAz77ESgGhnhLZH+lYpsVmmtxkJ2NZEjpxW++osNBnX22/nAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUJktfO95XKYV3EO2rRDO7fWPmz7EwHwYDVR0j
BBgwFoAUreDUYkhZpNZC2MB/0Ae07uBm7/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MDk4ZjkyNC05ZjJlLTQ5OWItODEwMS0wMmY3NTA2OTMyYmYvMC9BREUwRDQ2MjQ4
NTlBNEQ2NDJEOEMwN0ZEMDA3QjRFRUUwNjZFRkYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQURFMEQ0NjI0ODU5QTRENjQyRDhDMDdGRDAwN0I0RUVFMDY2
RUZGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYwOThmOTI0LTlmMmUtNDk5Yi04
MTAxLTAyZjc1MDY5MzJiZi8wLzMxMzAzMzJlMzEzOTMxMmUzMjM1MzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzOTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnv/4wDQYJ
KoZIhvcNAQELBQADggEBAAfm4p/iOV/w5VK8Vde5ujcW+PoJyG/hJSpIwPPhaTCa
wjBhy48vZAjB2gL1dFRd8kE7N7PWoiFq9TiJeNGUoEKRV//xz3nOEjf/AApL+Rtx
rgXdhDqNZYOuGWAZ2NpGrnFBLwlQJYcAsfBXxrIgpqiOeMNbem9Shas7epuLASeY
Sng9PxlU86EQpQyU77zmNKplJ3JSZJUUl1zNbYQvyvjz7mg9bqoYDRky0c4mpzUe
SzWdzNZxk3icT6Gpms2kaCyxh/hGoxDLqaFCCONBw3BSwJCm/R5KgwHt9jR6kgzI
vR0WB4PvhhbpycR1ONDCTHkE3JFqoahVtDOoXd/3DbQ=
-----END CERTIFICATE-----
Generated at Sun Jun 23 10:11:53 2024 by rpki-client on console-ams.rpki-client.org