Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa
File:                     3130332e38372e36372e302f32342d3234203d3e203138333933.roa (raw, json)
Hash identifier:          /PAMeXgtnZaqp6vGBb1yVanU11YNUYTBM/kMV+Ee8lk=
Subject key identifier:   C9:A0:16:4D:DC:0D:0B:B6:66:13:79:F9:56:9F:56:9D:D8:F8:BD:72
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       18CDFD2DCD9BF2467EFCBBF9FC0833FE1092644B
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa
Signing time:             Thu 02 Nov 2023 04:00:02 +0000
ROA not before:           Thu 02 Nov 2023 03:55:02 +0000
ROA not after:            Thu 31 Oct 2024 04:00:02 +0000
asID:                     18393
IP address blocks:        103.87.67.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 11:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:cd:fd:2d:cd:9b:f2:46:7e:fc:bb:f9:fc:08:33:fe:10:92:64:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Nov  2 03:55:02 2023 GMT
            Not After : Oct 31 04:00:02 2024 GMT
        Subject: CN=C9A0164DDC0D0BB6661379F9569F569DD8F8BD72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:51:b8:f5:a0:d9:9d:00:38:ee:89:70:b1:
                    22:4e:64:b1:61:d0:58:1f:6e:30:74:75:3f:c7:28:
                    11:0c:b9:76:83:27:a8:04:88:4a:82:87:a3:23:a6:
                    fd:7b:8c:e2:16:67:3c:d5:0b:e6:92:7d:d2:9a:6f:
                    06:5b:60:77:1e:07:f8:7a:73:47:76:19:4e:61:3b:
                    f3:7c:39:75:c2:02:dd:44:97:52:0a:8d:b8:50:9c:
                    81:cd:c7:d9:c5:21:dd:d8:9f:12:29:27:a7:24:bc:
                    85:1f:a8:e9:6a:12:19:62:98:41:9a:e3:27:83:8a:
                    21:8a:71:6c:b5:bc:bc:2e:dd:04:e7:b7:cf:64:54:
                    29:98:54:09:d6:32:2b:e8:66:c1:bd:77:84:87:2a:
                    b6:4f:de:87:6f:34:08:9a:8c:34:48:44:00:e3:2b:
                    d2:3a:00:94:a8:31:5f:3c:5e:61:71:49:a5:8b:58:
                    0a:fe:86:79:cb:91:01:52:7a:ef:8d:ea:4b:99:8d:
                    64:29:80:72:94:50:9c:d9:76:eb:8a:cf:dc:f5:c3:
                    71:87:d9:ef:ea:88:1c:0a:24:22:28:8f:3e:de:64:
                    c3:67:62:1f:75:24:0c:91:57:12:5a:c8:b3:cd:f9:
                    b6:0c:03:79:fa:b1:55:3f:d3:d3:24:8a:12:d4:94:
                    af:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A0:16:4D:DC:0D:0B:B6:66:13:79:F9:56:9F:56:9D:D8:F8:BD:72
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e38372e36372e302f32342d3234203d3e203138333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:2b:5e:cb:b8:ca:00:dc:3e:0c:e2:68:fe:11:80:23:8d:2d:
         a6:da:a3:87:8b:55:4b:04:e1:8d:68:9c:a8:b9:15:7d:3a:2c:
         3c:61:6a:62:30:e7:ff:fb:59:52:37:a7:1f:31:69:a7:45:0d:
         0f:97:64:7e:43:b9:ac:62:4b:76:37:d0:3f:ab:34:d3:4d:0f:
         54:89:2a:16:a9:fe:f5:d8:5f:d5:c8:49:f5:f0:cb:0c:6b:0c:
         25:05:52:52:4b:53:13:18:d0:32:d9:fb:0c:2b:56:bf:95:b6:
         9e:9c:0a:dd:47:ea:3d:62:95:ec:9b:c6:29:c4:cc:55:86:18:
         da:ce:82:6e:f9:f4:17:91:cc:44:f4:70:86:83:c6:d7:c0:94:
         84:47:d5:01:04:9e:81:df:e1:a8:a8:7f:72:1f:7e:be:75:30:
         05:b9:12:ad:57:67:48:07:9b:a1:c7:38:3e:f5:c2:d3:77:64:
         1e:76:a7:6b:48:5a:42:61:11:c8:d7:5a:d0:ac:bd:be:5d:78:
         6b:d7:68:61:c3:1f:b4:53:86:d3:d7:25:0e:64:c3:76:49:ea:
         6d:ad:5f:86:f1:7f:ce:1b:ad:68:4d:5c:46:67:fd:63:0f:ea:
         b8:00:61:b9:0b:2e:42:6d:c5:f9:7b:3b:e3:c2:a7:b3:3f:de:
         f2:07:66:d9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUGM39Lc2b8kZ+/Lv5/Agz/hCSZEswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3
RTc5RTY0MjAeFw0yMzExMDIwMzU1MDJaFw0yNDEwMzEwNDAwMDJaMDMxMTAvBgNV
BAMTKEM5QTAxNjREREMwRDBCQjY2NjEzNzlGOTU2OUY1NjlERDhGOEJENzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDil1G49aDZnQA47olwsSJOZLFh
0FgfbjB0dT/HKBEMuXaDJ6gEiEqCh6Mjpv17jOIWZzzVC+aSfdKabwZbYHceB/h6
c0d2GU5hO/N8OXXCAt1El1IKjbhQnIHNx9nFId3YnxIpJ6ckvIUfqOlqEhlimEGa
4yeDiiGKcWy1vLwu3QTnt89kVCmYVAnWMivoZsG9d4SHKrZP3odvNAiajDRIRADj
K9I6AJSoMV88XmFxSaWLWAr+hnnLkQFSeu+N6kuZjWQpgHKUUJzZduuKz9z1w3GH
2e/qiBwKJCIojz7eZMNnYh91JAyRVxJayLPN+bYMA3n6sVU/09MkihLUlK8lAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUyaAWTdwNC7ZmE3n5Vp9Wndj4vXIwHwYDVR0j
BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw
RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5
RTY0Mi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i
MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzgzNzJlMzYzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzgzMzM5MzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnV0MwDQYJKoZIhvcN
AQELBQADggEBAEMrXsu4ygDcPgziaP4RgCONLabao4eLVUsE4Y1onKi5FX06LDxh
amIw5//7WVI3px8xaadFDQ+XZH5DuaxiS3Y30D+rNNNND1SJKhap/vXYX9XISfXw
ywxrDCUFUlJLUxMY0DLZ+wwrVr+Vtp6cCt1H6j1ileybxinEzFWGGNrOgm759BeR
zET0cIaDxtfAlIRH1QEEnoHf4aiof3Iffr51MAW5Eq1XZ0gHm6HHOD71wtN3ZB52
p2tIWkJhEcjXWtCsvb5deGvXaGHDH7RThtPXJQ5kw3ZJ6m2tX4bxf84brWhNXEZn
/WMP6rgAYbkLLkJtxfl7O+PCp7M/3vIHZtk=
-----END CERTIFICATE-----
Generated at Fri Jun 21 15:50:40 2024 by rpki-client on console-ams.rpki-client.org