Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa
File:                     3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa (raw, json)
Hash identifier:          BQkEeWFZR8rknKNZBkItfwN8svdOp5ahDx5VVdB7w/0=
Subject key identifier:   32:F5:0D:11:A4:28:64:A1:D9:85:31:EE:E2:8F:1B:78:3C:E3:88:AF
Certificate issuer:       /CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
Certificate serial:       6C2A21A2FDDAD6CBE2BAD56EDDDDE3D0B28C70F5
Authority key identifier: 0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa
Signing time:             Wed 28 Aug 2024 02:00:43 +0000
ROA not before:           Wed 28 Aug 2024 01:55:43 +0000
ROA not after:            Wed 27 Aug 2025 02:00:43 +0000
asID:                     142360
IP address blocks:        103.147.156.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl
                          rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:2a:21:a2:fd:da:d6:cb:e2:ba:d5:6e:dd:dd:e3:d0:b2:8c:70:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D3926ADFB47314F1E7D5B92769131D429FC13A9
        Validity
            Not Before: Aug 28 01:55:43 2024 GMT
            Not After : Aug 27 02:00:43 2025 GMT
        Subject: CN=32F50D11A42864A1D98531EEE28F1B783CE388AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:15:ee:e8:11:3c:be:0b:03:f1:36:6e:2c:02:
                    dc:a6:8f:28:74:6a:eb:80:0e:13:37:ca:86:1f:f9:
                    52:93:f0:33:b7:85:e4:99:68:53:ab:da:36:80:93:
                    ff:58:0b:72:aa:e6:fc:7e:1f:42:65:79:c3:dc:ba:
                    bf:3a:d5:4f:25:3f:b6:b8:ee:b1:b9:37:80:98:9a:
                    33:0a:3f:f8:ba:c7:84:7b:9e:22:65:8e:43:b3:15:
                    1b:b5:a1:8d:eb:2f:3e:6a:25:7a:7f:48:4d:ce:5e:
                    9d:48:41:88:80:b1:29:b0:87:c5:c7:40:d7:72:d0:
                    d9:ae:62:29:fe:00:8f:90:cf:db:2b:f4:bb:dc:87:
                    58:f4:9f:2b:b8:8a:e6:27:17:03:31:64:42:f0:f1:
                    d8:5b:bc:bd:f4:9c:a8:32:f2:04:ce:d4:a5:72:83:
                    e2:60:db:4c:88:82:27:e9:18:f9:2a:b1:dd:84:a6:
                    cc:66:ea:43:f4:b2:cb:86:29:d7:c9:ff:d3:76:ca:
                    63:b1:f3:5a:76:fd:9e:e4:27:e1:40:eb:2e:ae:a2:
                    74:99:3c:91:4f:22:16:ee:4f:9a:a0:8c:1f:a7:4c:
                    ab:3f:9c:35:61:45:e0:33:ec:3e:9a:d9:25:67:d6:
                    a3:7c:11:59:88:28:44:35:40:3b:e7:a3:4b:b2:35:
                    4f:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:F5:0D:11:A4:28:64:A1:D9:85:31:EE:E2:8F:1B:78:3C:E3:88:AF
            X509v3 Authority Key Identifier:
                keyid:0D:39:26:AD:FB:47:31:4F:1E:7D:5B:92:76:91:31:D4:29:FC:13:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/0D3926ADFB47314F1E7D5B92769131D429FC13A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D3926ADFB47314F1E7D5B92769131D429FC13A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62daa95f-2f59-439a-834f-a721c372a74c/0/3130332e3134372e3135362e302f32342d3234203d3e20313432333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.156.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6b:5a:c1:c8:0b:10:46:6c:12:33:0c:3e:48:fc:67:83:2a:
         f1:fb:4a:47:0e:d0:67:a5:c7:30:2a:49:b3:48:cf:ba:01:f7:
         32:97:cf:98:f3:4d:d4:51:75:1c:d9:c4:71:44:21:3b:81:7f:
         e2:aa:05:54:28:ff:b0:ce:e0:52:99:c7:74:e3:7a:24:8c:45:
         db:03:28:b0:ca:a5:7d:3d:30:a8:27:64:3a:46:c9:f2:a1:f9:
         ff:12:6a:4f:8e:1e:35:55:b2:c5:04:35:34:ae:0b:fd:3f:9d:
         00:e5:a5:f0:42:64:6c:4d:93:8c:34:72:d2:96:58:6e:f1:55:
         8c:19:e7:d6:95:17:e9:21:ff:41:42:0d:b4:b2:c8:05:00:65:
         9a:07:ae:85:1a:e0:e2:ae:c1:9e:cc:2c:d0:c6:65:b9:10:da:
         bb:07:2f:3b:57:30:75:3e:22:59:27:cf:31:6e:19:33:fd:03:
         d1:a9:8e:72:79:16:ec:4a:ed:1b:dc:ed:f8:e0:84:e6:a9:d5:
         1a:a6:a3:83:8d:df:9f:03:37:46:92:c5:19:85:1a:af:89:04:
         cb:e7:ac:d7:b6:e4:c5:e8:a7:ed:60:3a:65:dc:8a:69:e5:6b:
         0d:f9:5b:fc:72:c3:0e:dd:c7:78:f3:e6:3f:e5:da:15:45:29:
         02:80:0f:09
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbCohov3a1sviutVu3d3j0LKMcPUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQy
OUZDMTNBOTAeFw0yNDA4MjgwMTU1NDNaFw0yNTA4MjcwMjAwNDNaMDMxMTAvBgNV
BAMTKDMyRjUwRDExQTQyODY0QTFEOTg1MzFFRUUyOEYxQjc4M0NFMzg4QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6Fe7oETy+CwPxNm4sAtymjyh0
auuADhM3yoYf+VKT8DO3heSZaFOr2jaAk/9YC3Kq5vx+H0JlecPcur861U8lP7a4
7rG5N4CYmjMKP/i6x4R7niJljkOzFRu1oY3rLz5qJXp/SE3OXp1IQYiAsSmwh8XH
QNdy0NmuYin+AI+Qz9sr9Lvch1j0nyu4iuYnFwMxZELw8dhbvL30nKgy8gTO1KVy
g+Jg20yIgifpGPkqsd2Epsxm6kP0ssuGKdfJ/9N2ymOx81p2/Z7kJ+FA6y6uonSZ
PJFPIhbuT5qgjB+nTKs/nDVhReAz7D6a2SVn1qN8EVmIKEQ1QDvno0uyNU+zAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUMvUNEaQoZKHZhTHu4o8beDzjiK8wHwYDVR0j
BBgwFoAUDTkmrftHMU8efVuSdpEx1Cn8E6kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
MmRhYTk1Zi0yZjU5LTQzOWEtODM0Zi1hNzIxYzM3MmE3NGMvMC8wRDM5MjZBREZC
NDczMTRGMUU3RDVCOTI3NjkxMzFENDI5RkMxM0E5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEQzOTI2QURGQjQ3MzE0RjFFN0Q1QjkyNzY5MTMxRDQyOUZD
MTNBOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzYyZGFhOTVmLTJmNTktNDM5YS04
MzRmLWE3MjFjMzcyYTc0Yy8wLzMxMzAzMzJlMzEzNDM3MmUzMTM1MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM2MzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk5wwDQYJ
KoZIhvcNAQELBQADggEBAGtrWsHICxBGbBIzDD5I/GeDKvH7SkcO0GelxzAqSbNI
z7oB9zKXz5jzTdRRdRzZxHFEITuBf+KqBVQo/7DO4FKZx3TjeiSMRdsDKLDKpX09
MKgnZDpGyfKh+f8Sak+OHjVVssUENTSuC/0/nQDlpfBCZGxNk4w0ctKWWG7xVYwZ
59aVF+kh/0FCDbSyyAUAZZoHroUa4OKuwZ7MLNDGZbkQ2rsHLztXMHU+IlknzzFu
GTP9A9GpjnJ5FuxK7Rvc7fjghOap1Rqmo4ON358DN0aSxRmFGq+JBMvnrNe25MXo
p+1gOmXcimnlaw35W/xyww7dx3jz5j/l2hVFKQKADwk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org