Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa
File:                     3130332e38372e36362e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          0DMqSwdRuCyaRi2PbTsDhz+oLMFj/D7C1/83Vj1hEHw=
Subject key identifier:   B7:A2:90:0C:79:99:3E:15:29:70:3B:C0:BC:D0:3B:6B:96:B1:5C:52
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       01D45EEC3F5734ADB06D5612519463B6FCFC65AF
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa
Signing time:             Thu 02 Nov 2023 04:00:02 +0000
ROA not before:           Thu 02 Nov 2023 03:55:02 +0000
ROA not after:            Thu 31 Oct 2024 04:00:02 +0000
asID:                     18393
IP address blocks:        103.87.66.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d4:5e:ec:3f:57:34:ad:b0:6d:56:12:51:94:63:b6:fc:fc:65:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Nov  2 03:55:02 2023 GMT
            Not After : Oct 31 04:00:02 2024 GMT
        Subject: CN=B7A2900C79993E1529703BC0BCD03B6B96B15C52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:42:26:d3:2a:c9:44:c9:93:be:13:64:78:
                    45:d5:f4:dc:9b:bd:93:2a:ba:f8:95:60:b8:eb:9f:
                    24:01:7d:ee:a1:12:56:a9:13:6f:fe:9f:de:c4:93:
                    22:ac:be:2f:39:c3:fb:92:e6:7d:8b:fa:00:f0:41:
                    5c:c7:41:cd:26:e5:f2:e8:d8:ae:53:cd:d9:b8:d0:
                    37:42:f8:89:7b:d6:4c:a3:8c:a7:e7:50:2e:c6:da:
                    80:6e:24:44:bb:12:8e:2a:d0:a4:7d:f8:6f:3b:03:
                    a6:f8:f1:f2:0d:0e:e0:f6:4d:43:c9:7f:36:d6:83:
                    2e:81:36:ee:b7:9b:1a:05:ab:9f:77:89:ce:c6:ee:
                    2b:45:70:73:f0:c9:11:6b:72:13:0a:45:80:35:b0:
                    35:7c:85:5e:38:4f:f0:f6:12:d5:f9:6f:6a:51:ca:
                    ca:e1:7c:52:0a:7f:99:e4:5c:a3:7f:11:0f:04:a4:
                    74:b6:4e:90:81:09:bf:1c:32:91:1f:f7:b2:ea:11:
                    8a:02:30:4d:a8:68:06:d2:24:95:ab:0a:7f:cc:86:
                    de:2f:13:88:34:7b:fc:10:17:87:f0:ae:f0:83:a5:
                    f6:f4:43:d3:de:50:6f:18:4c:19:88:51:5d:27:d3:
                    77:68:7c:c9:b4:42:b8:a5:02:b5:9c:3b:ea:3d:60:
                    18:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:A2:90:0C:79:99:3E:15:29:70:3B:C0:BC:D0:3B:6B:96:B1:5C:52
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36362e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2b:f3:01:58:e5:2f:b7:44:58:c4:0c:9c:43:6b:de:bc:56:27:
         95:be:91:6d:db:ae:bb:43:43:17:50:ec:bc:89:70:ba:66:1f:
         bf:53:6c:83:58:71:ce:e7:60:1d:8f:cf:8b:a9:00:8e:b6:ec:
         e8:97:a3:9b:e4:d5:c8:58:da:d8:ec:df:e1:8b:34:fd:f2:20:
         9a:12:84:c0:40:27:2c:3c:7a:86:dd:23:4b:e0:26:b6:25:ae:
         b9:1e:49:26:9f:b6:b4:e8:32:0f:5e:aa:5a:fc:78:f1:12:da:
         ae:24:17:f7:2a:60:fa:42:fe:0f:82:9f:9e:45:2b:a3:94:4f:
         2c:18:11:7e:e9:05:d4:21:2c:ad:0d:5d:10:3c:3d:c8:de:7c:
         53:95:a1:d9:fd:72:76:42:7d:d6:31:aa:65:90:fc:09:47:1d:
         d1:28:39:7e:13:ee:82:93:73:b4:4b:04:b4:80:cf:68:3c:f0:
         33:9a:a9:f7:15:5c:97:04:06:5a:b0:29:44:91:b7:6d:d9:dc:
         17:8e:76:87:bf:d0:d8:ff:c9:8d:33:17:c6:9a:74:f5:28:4c:
         84:20:93:22:0b:30:fb:08:00:d5:e0:84:6c:c3:52:e4:2f:3d:
         d8:2a:90:a5:16:2e:57:15:6c:26:54:23:a7:37:97:55:d9:5f:
         fa:dd:68:9a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUAdRe7D9XNK2wbVYSUZRjtvz8Za8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3
RTc5RTY0MjAeFw0yMzExMDIwMzU1MDJaFw0yNDEwMzEwNDAwMDJaMDMxMTAvBgNV
BAMTKEI3QTI5MDBDNzk5OTNFMTUyOTcwM0JDMEJDRDAzQjZCOTZCMTVDNTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAtkIm0yrJRMmTvhNkeEXV9Nyb
vZMquviVYLjrnyQBfe6hElapE2/+n97EkyKsvi85w/uS5n2L+gDwQVzHQc0m5fLo
2K5Tzdm40DdC+Il71kyjjKfnUC7G2oBuJES7Eo4q0KR9+G87A6b48fINDuD2TUPJ
fzbWgy6BNu63mxoFq593ic7G7itFcHPwyRFrchMKRYA1sDV8hV44T/D2EtX5b2pR
ysrhfFIKf5nkXKN/EQ8EpHS2TpCBCb8cMpEf97LqEYoCME2oaAbSJJWrCn/Mht4v
E4g0e/wQF4fwrvCDpfb0Q9PeUG8YTBmIUV0n03dofMm0QrilArWcO+o9YBgbAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUt6KQDHmZPhUpcDvAvNA7a5axXFIwHwYDVR0j
BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw
RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5
RTY0Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i
MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzgzNzJlMzYzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzgzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnV0IwDQYJKoZIhvcN
AQELBQADggEBACvzAVjlL7dEWMQMnENr3rxWJ5W+kW3brrtDQxdQ7LyJcLpmH79T
bINYcc7nYB2Pz4upAI627OiXo5vk1chY2tjs3+GLNP3yIJoShMBAJyw8eobdI0vg
JrYlrrkeSSaftrToMg9eqlr8ePES2q4kF/cqYPpC/g+Cn55FK6OUTywYEX7pBdQh
LK0NXRA8PcjefFOVodn9cnZCfdYxqmWQ/AlHHdEoOX4T7oKTc7RLBLSAz2g88DOa
qfcVXJcEBlqwKUSRt23Z3BeOdoe/0Nj/yY0zF8aadPUoTIQgkyILMPsIANXghGzD
UuQvPdgqkKUWLlcVbCZUI6c3l1XZX/rdaJo=
-----END CERTIFICATE-----
Generated at Fri May 31 17:42:49 2024 by rpki-client on console-fra.rpki-client.org