Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa
File:                     3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa (raw, json)
Hash identifier:          wjsJVoZRGR+izi0X9dlwysNrRNMYfMi9I2n8oqyAFW0=
Subject key identifier:   D7:8A:15:11:DA:F4:0A:A9:A1:D5:F7:08:83:50:09:45:36:A6:D5:B7
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       0B78FE04B0E4ACFB0C8ADBF3F619AAD5D656485C
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa
Signing time:             Fri 23 Aug 2024 08:38:28 +0000
ROA not before:           Fri 23 Aug 2024 08:33:28 +0000
ROA not after:            Fri 22 Aug 2025 08:38:28 +0000
asID:                     136116
IP address blocks:        103.94.238.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 00:33:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:78:fe:04:b0:e4:ac:fb:0c:8a:db:f3:f6:19:aa:d5:d6:56:48:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Aug 23 08:33:28 2024 GMT
            Not After : Aug 22 08:38:28 2025 GMT
        Subject: CN=D78A1511DAF40AA9A1D5F7088350094536A6D5B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:42:1b:7e:c9:12:0b:db:fa:e1:93:80:1b:48:
                    9e:4a:ec:fa:c9:80:17:7a:39:dc:41:9a:da:ba:e4:
                    99:8a:17:03:c2:93:c9:17:9e:1b:7b:b2:d8:78:e3:
                    67:b6:7a:9d:f8:34:be:6c:36:b0:08:63:07:68:18:
                    34:92:dc:bf:a0:e6:70:3b:67:b2:f2:3e:64:fb:d1:
                    6a:13:d5:fd:37:55:dc:4f:b4:d1:ce:8d:13:01:af:
                    76:57:34:0a:e8:07:a1:99:dd:28:7b:9f:0a:41:64:
                    37:d6:e4:8c:4a:16:fd:89:d5:ef:9b:32:4c:af:ee:
                    85:e0:27:b5:8f:58:ac:11:70:7f:24:7d:d9:03:85:
                    f1:10:66:36:55:d6:1f:aa:47:f4:cf:80:c9:1a:79:
                    fb:d6:19:17:ea:ed:be:2b:49:9b:73:35:c2:1b:20:
                    74:ef:38:60:02:c6:c3:14:d9:63:f2:4a:2f:55:bc:
                    d6:e6:3b:bd:cd:bf:f1:b3:84:b6:af:38:11:a0:7a:
                    6f:df:4e:29:92:11:e2:2f:a7:b4:5b:68:61:a9:b4:
                    78:4b:1e:36:2b:88:ab:3a:04:06:2d:1e:d4:c9:88:
                    57:8e:c6:0a:39:8c:0c:e8:67:7e:47:99:69:aa:f9:
                    e9:29:7c:a3:df:3f:ab:6a:75:b7:49:3d:75:51:5c:
                    50:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:8A:15:11:DA:F4:0A:A9:A1:D5:F7:08:83:50:09:45:36:A6:D5:B7
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32332d3233203d3e20313336313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:17:1d:c2:e4:f7:be:2f:6f:04:e3:f4:8a:f6:09:3d:54:4a:
         45:62:08:65:c0:f3:01:ff:03:ca:28:fb:b0:31:7e:84:d6:91:
         d0:95:27:aa:70:40:91:fc:5e:f1:df:be:ba:b2:ba:05:20:c0:
         e0:ff:83:6b:83:d4:81:c2:1d:c6:f0:f3:65:5c:d3:52:22:12:
         10:d0:67:43:09:af:8a:3d:fd:35:ad:c7:7a:e5:79:ac:20:36:
         8b:c0:b3:ab:83:c6:78:58:62:69:28:b0:59:98:c1:56:da:33:
         cd:c6:bf:6d:b7:96:59:44:11:20:28:2a:79:7b:3c:6f:7e:8c:
         24:dc:9b:87:8e:cd:92:50:17:33:bf:5a:ce:02:aa:5d:1b:5d:
         27:7f:b9:4b:96:91:82:00:f2:43:42:3f:6b:5b:5b:d3:f6:5a:
         64:98:ac:6a:fe:8a:c9:f7:fc:d5:08:00:82:55:a4:2b:fe:41:
         64:a5:61:ac:61:e3:06:12:d3:c5:25:9e:c2:d7:47:2b:40:a7:
         e4:85:6d:db:59:f4:56:02:49:99:b6:be:32:ac:12:25:e2:3b:
         bf:df:d9:c6:ac:6d:64:58:58:77:46:ea:a5:01:ff:54:e2:c4:
         52:e1:0e:cb:0a:47:3f:b0:22:e5:1c:8f:7f:7d:62:a6:fe:94:
         ef:e7:c0:ed
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC3j+BLDkrPsMitvz9hmq1dZWSFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3
RTc5RTY0MjAeFw0yNDA4MjMwODMzMjhaFw0yNTA4MjIwODM4MjhaMDMxMTAvBgNV
BAMTKEQ3OEExNTExREFGNDBBQTlBMUQ1RjcwODgzNTAwOTQ1MzZBNkQ1QjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQht+yRIL2/rhk4AbSJ5K7PrJ
gBd6OdxBmtq65JmKFwPCk8kXnht7sth442e2ep34NL5sNrAIYwdoGDSS3L+g5nA7
Z7LyPmT70WoT1f03VdxPtNHOjRMBr3ZXNAroB6GZ3Sh7nwpBZDfW5IxKFv2J1e+b
Mkyv7oXgJ7WPWKwRcH8kfdkDhfEQZjZV1h+qR/TPgMkaefvWGRfq7b4rSZtzNcIb
IHTvOGACxsMU2WPySi9VvNbmO73Nv/GzhLavOBGgem/fTimSEeIvp7RbaGGptHhL
HjYriKs6BAYtHtTJiFeOxgo5jAzoZ35HmWmq+ekpfKPfP6tqdbdJPXVRXFDBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU14oVEdr0Cqmh1fcIg1AJRTam1bcwHwYDVR0j
BBgwFoAUXNoSAgDSjk/Gb+zWD1r8xX555kIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmFmODM1Mi1jZDY1LTRkYjctYjBjYi0wNDhiNDVlN2E0YmYvMC81Q0RBMTIwMjAw
RDI4RTRGQzY2RkVDRDYwRjVBRkNDNTdFNzlFNjQyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUNEQTEyMDIwMEQyOEU0RkM2NkZFQ0Q2MEY1QUZDQzU3RTc5
RTY0Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyYWY4MzUyLWNkNjUtNGRiNy1i
MGNiLTA0OGI0NWU3YTRiZi8wLzMxMzAzMzJlMzkzNDJlMzIzMzM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzEzMTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ17uMA0GCSqG
SIb3DQEBCwUAA4IBAQBpFx3C5Pe+L28E4/SK9gk9VEpFYghlwPMB/wPKKPuwMX6E
1pHQlSeqcECR/F7x3766sroFIMDg/4Nrg9SBwh3G8PNlXNNSIhIQ0GdDCa+KPf01
rcd65XmsIDaLwLOrg8Z4WGJpKLBZmMFW2jPNxr9tt5ZZRBEgKCp5ezxvfowk3JuH
js2SUBczv1rOAqpdG10nf7lLlpGCAPJDQj9rW1vT9lpkmKxq/orJ9/zVCACCVaQr
/kFkpWGsYeMGEtPFJZ7C10crQKfkhW3bWfRWAkmZtr4yrBIl4ju/39nGrG1kWFh3
RuqlAf9U4sRS4Q7LCkc/sCLlHI9/fWKm/pTv58Dt
-----END CERTIFICATE-----
Generated at Fri Sep 27 23:38:13 2024 by rpki-client on console-ams.rpki-client.org