Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa
File:                     3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa (raw, json)
Hash identifier:          YuCIBCLhXC9oRR5L7sSxm7JujWyUcJC+1KM+HuOvXW0=
Subject key identifier:   D8:FD:E2:9E:42:19:CB:51:91:62:F8:BC:F6:C2:D4:19:D7:CB:D9:64
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       13BD63D03B3E39B4439C6200EF7B838086808E62
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa
Signing time:             Fri 01 Sep 2023 11:00:01 +0000
ROA not before:           Fri 01 Sep 2023 10:55:01 +0000
ROA not after:            Fri 30 Aug 2024 11:00:01 +0000
asID:                     150199
IP address blocks:        103.220.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:63:d0:3b:3e:39:b4:43:9c:62:00:ef:7b:83:80:86:80:8e:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Sep  1 10:55:01 2023 GMT
            Not After : Aug 30 11:00:01 2024 GMT
        Subject: CN=D8FDE29E4219CB519162F8BCF6C2D419D7CBD964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ea:c3:15:b1:ff:53:81:e8:b3:c2:29:ae:be:
                    ec:1d:b9:a5:d1:8f:df:df:68:7b:fc:ea:c7:cb:6b:
                    4f:36:51:19:d1:8c:af:78:39:5c:b3:41:7c:53:46:
                    ed:39:a3:63:4e:46:17:79:95:dc:6a:b2:b9:5c:d4:
                    ac:89:d3:9e:c7:ea:88:5d:c6:0c:f6:a7:0b:33:ac:
                    31:dc:df:c9:8f:bc:4e:66:4a:d8:5b:86:96:a6:e7:
                    49:ee:84:3a:a9:8b:3a:4a:de:d5:fc:5c:c9:5a:b6:
                    92:e1:60:09:48:52:91:1e:de:08:88:0d:bf:39:d2:
                    fe:c5:28:6a:46:dd:85:0f:16:2a:ad:de:b6:f0:48:
                    30:ba:7b:19:a8:55:56:97:b9:ac:3b:f9:60:b3:2e:
                    1e:46:1c:a2:85:08:96:95:04:80:5a:26:dc:96:d4:
                    ac:c7:01:09:79:55:e2:0c:15:f8:d5:83:67:de:b1:
                    fc:73:a5:4f:d8:db:4d:8d:1e:8e:db:3c:e0:dd:6f:
                    9c:97:64:94:ff:44:1e:f5:51:53:9f:24:3f:a1:b0:
                    83:a5:99:1b:af:a9:62:3c:dd:5c:b9:b0:b8:eb:67:
                    7e:61:34:f1:a0:e1:91:19:ae:da:7b:35:69:af:46:
                    e1:7a:34:7a:81:d1:67:cd:16:25:c8:d4:4d:be:92:
                    1f:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:FD:E2:9E:42:19:CB:51:91:62:F8:BC:F6:C2:D4:19:D7:CB:D9:64
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e20313530313939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:06:c7:6b:30:f3:e8:89:74:91:7c:6c:c0:30:96:4d:8a:6e:
         cd:93:c6:71:43:46:51:14:4d:86:a4:7e:dd:ed:9b:ab:b1:c5:
         e4:7a:19:4e:14:8d:e0:22:0d:1f:6a:62:49:b0:bc:78:74:2d:
         a2:ca:cb:33:02:4c:ee:20:cc:35:86:83:94:85:9a:47:b9:78:
         3b:f5:e0:df:89:b0:dd:3a:68:0b:b3:7f:7f:5c:3d:7c:a1:5a:
         51:6c:e9:7f:fd:2b:0f:28:1b:7d:1d:99:4a:c5:32:38:34:4b:
         95:8b:ec:29:8c:95:15:d4:5b:f2:fa:b4:db:63:dd:74:eb:cc:
         82:83:f7:f7:cb:52:d7:46:86:ff:6e:3c:b3:7e:ea:7d:90:58:
         f1:b5:ea:a6:02:a6:33:1c:20:1f:66:b8:dd:fe:c6:df:c3:e5:
         38:00:ea:68:fe:37:d6:05:a9:57:86:c4:d9:da:9d:c1:97:96:
         10:a6:15:e4:28:b4:6e:97:40:7c:9e:fe:cd:50:db:d5:cc:70:
         9c:57:ac:f6:15:e7:25:52:6e:c4:ce:13:d9:96:d0:79:2b:b4:
         46:9e:0f:75:e3:3b:08:8d:0d:df:af:d5:89:81:9b:f1:55:42:
         2a:7c:ca:2e:09:83:0a:ca:d6:25:b4:bb:42:b8:41:d0:48:03:
         c3:c1:cf:5b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUE71j0Ds+ObRDnGIA73uDgIaAjmIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2
OURFQzgwMTAeFw0yMzA5MDExMDU1MDFaFw0yNDA4MzAxMTAwMDFaMDMxMTAvBgNV
BAMTKEQ4RkRFMjlFNDIxOUNCNTE5MTYyRjhCQ0Y2QzJENDE5RDdDQkQ5NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR6sMVsf9TgeizwimuvuwduaXR
j9/faHv86sfLa082URnRjK94OVyzQXxTRu05o2NORhd5ldxqsrlc1KyJ057H6ohd
xgz2pwszrDHc38mPvE5mSthbhpam50nuhDqpizpK3tX8XMlatpLhYAlIUpEe3giI
Db850v7FKGpG3YUPFiqt3rbwSDC6exmoVVaXuaw7+WCzLh5GHKKFCJaVBIBaJtyW
1KzHAQl5VeIMFfjVg2fesfxzpU/Y202NHo7bPODdb5yXZJT/RB71UVOfJD+hsIOl
mRuvqWI83Vy5sLjrZ35hNPGg4ZEZrtp7NWmvRuF6NHqB0WfNFiXI1E2+kh9vAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2P3inkIZy1GRYvi89sLUGdfL2WQwHwYDVR0j
BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB
ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF
QzgwMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1NzI5MjkxLWExYTctNGIxOS05
M2Y2LTFkODQ1NzRhNjdhZS8wLzMxMzAzMzJlMzIzMjMwMmUzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzEzOTM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ9wsMA0GCSqG
SIb3DQEBCwUAA4IBAQCHBsdrMPPoiXSRfGzAMJZNim7Nk8ZxQ0ZRFE2GpH7d7Zur
scXkehlOFI3gIg0famJJsLx4dC2iysszAkzuIMw1hoOUhZpHuXg79eDfibDdOmgL
s39/XD18oVpRbOl//SsPKBt9HZlKxTI4NEuVi+wpjJUV1Fvy+rTbY91068yCg/f3
y1LXRob/bjyzfup9kFjxteqmAqYzHCAfZrjd/sbfw+U4AOpo/jfWBalXhsTZ2p3B
l5YQphXkKLRul0B8nv7NUNvVzHCcV6z2FeclUm7EzhPZltB5K7RGng914zsIjQ3f
r9WJgZvxVUIqfMouCYMKytYltLtCuEHQSAPDwc9b
-----END CERTIFICATE-----
Generated at Sat Jun 22 18:39:15 2024 by rpki-client on console-fra.rpki-client.org