Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3232302e34342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          2eBKUXWmF5ts/Iekm7oAEARBCDw1Enrm52lUVeCh2ig=
Subject key identifier:   1A:4F:DB:82:B2:E5:D9:8A:BD:40:3C:4A:31:23:6B:6B:45:4C:0F:FF
Certificate issuer:       /CN=5AE19AE3FA86591042AE694640539C9669DEC801
Certificate serial:       4551ACB84A2A4F8CEC6F35948285D999232B3CDB
Authority key identifier: 5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:51:55 +0000
ROA not before:           Mon 15 Jul 2024 02:46:55 +0000
ROA not after:            Mon 14 Jul 2025 02:51:55 +0000
asID:                     48465
IP address blocks:        103.220.44.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl
                          rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:51:ac:b8:4a:2a:4f:8c:ec:6f:35:94:82:85:d9:99:23:2b:3c:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE19AE3FA86591042AE694640539C9669DEC801
        Validity
            Not Before: Jul 15 02:46:55 2024 GMT
            Not After : Jul 14 02:51:55 2025 GMT
        Subject: CN=1A4FDB82B2E5D98ABD403C4A31236B6B454C0FFF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:68:e4:82:24:9b:16:8a:17:f2:c5:7e:eb:f4:
                    09:f6:6e:b8:a8:29:63:21:c4:a2:76:8c:aa:e8:d0:
                    90:93:a0:ae:1c:33:b9:10:47:ff:0f:9f:6c:5d:e6:
                    f1:04:54:b9:e8:09:89:96:12:71:d0:62:b8:cd:ab:
                    ac:e6:b9:31:59:6a:50:bc:df:89:d2:ef:bc:db:88:
                    87:63:c6:83:98:4f:95:be:e8:aa:2d:6e:ea:a1:96:
                    9f:43:ef:18:f1:34:79:64:8b:9e:02:9b:1c:47:ee:
                    bc:d2:39:fe:fa:14:42:7d:1e:8d:76:c8:4c:d1:87:
                    78:7f:73:9d:33:4c:56:9f:49:07:81:8f:f6:97:e0:
                    42:35:53:78:03:95:6a:6c:a5:07:54:fb:ab:65:ee:
                    9d:02:ed:4a:5a:85:aa:64:38:68:d4:af:22:a4:e6:
                    97:51:84:0a:cd:14:3d:8b:af:d7:dc:4d:79:c1:57:
                    0f:74:7a:c4:8e:f2:11:ad:a2:5a:07:8a:85:62:53:
                    83:8b:72:1f:a5:28:1f:64:ef:99:29:da:e7:14:a4:
                    9b:99:a0:fb:d1:30:16:be:8c:79:e3:0a:6f:41:75:
                    80:2e:ab:63:c4:2a:0d:11:dd:b0:e3:70:bc:d4:17:
                    9d:20:82:e9:3a:a1:7f:2f:ba:65:29:b9:00:5b:47:
                    e2:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:4F:DB:82:B2:E5:D9:8A:BD:40:3C:4A:31:23:6B:6B:45:4C:0F:FF
            X509v3 Authority Key Identifier:
                keyid:5A:E1:9A:E3:FA:86:59:10:42:AE:69:46:40:53:9C:96:69:DE:C8:01

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/5AE19AE3FA86591042AE694640539C9669DEC801.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE19AE3FA86591042AE694640539C9669DEC801.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65729291-a1a7-4b19-93f6-1d84574a67ae/0/3130332e3232302e34342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.220.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:f1:84:f9:77:d9:44:8a:af:83:99:05:00:88:18:02:6e:4b:
         dc:2f:fe:37:35:1c:ff:b8:fd:03:75:c9:2d:26:29:e3:3b:ce:
         da:8e:a6:88:b0:79:6d:cf:77:5b:35:59:eb:01:cd:c6:0c:ab:
         58:36:25:23:78:a5:12:3e:23:57:40:a5:a7:1f:f4:47:9e:ad:
         07:d9:51:01:10:bc:68:5e:bf:bc:b6:60:44:f8:37:71:35:59:
         e2:bb:03:0b:c8:c0:13:b5:5d:de:1b:a6:eb:02:20:30:69:92:
         9e:3c:fa:aa:6f:4a:90:8d:7d:c6:39:61:0a:b2:1f:a0:c7:63:
         50:15:b8:63:5d:07:ac:35:98:f7:7f:87:de:23:76:ee:23:1d:
         42:ad:b5:aa:f8:d9:81:3f:be:94:37:49:f7:61:e5:1a:ac:a5:
         62:30:ca:53:ba:6a:2f:01:54:36:36:bb:11:da:31:32:b5:78:
         fc:9b:2b:7b:c5:37:2a:8b:d5:36:32:fe:1c:15:ca:7f:85:14:
         35:9c:39:b7:6e:be:92:67:46:39:87:a8:50:df:45:20:ea:7d:
         8e:f1:47:c7:60:c3:02:f6:26:e0:66:81:32:08:86:31:ed:64:
         c4:65:4a:f9:a2:dd:9f:45:7e:b2:45:15:6a:80:6e:85:5c:e5:
         8d:60:15:a4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURVGsuEoqT4zsbzWUgoXZmSMrPNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2
OURFQzgwMTAeFw0yNDA3MTUwMjQ2NTVaFw0yNTA3MTQwMjUxNTVaMDMxMTAvBgNV
BAMTKDFBNEZEQjgyQjJFNUQ5OEFCRDQwM0M0QTMxMjM2QjZCNDU0QzBGRkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6aOSCJJsWihfyxX7r9An2brio
KWMhxKJ2jKro0JCToK4cM7kQR/8Pn2xd5vEEVLnoCYmWEnHQYrjNq6zmuTFZalC8
34nS77zbiIdjxoOYT5W+6Kotbuqhlp9D7xjxNHlki54CmxxH7rzSOf76FEJ9Ho12
yEzRh3h/c50zTFafSQeBj/aX4EI1U3gDlWpspQdU+6tl7p0C7UpahapkOGjUryKk
5pdRhArNFD2Lr9fcTXnBVw90esSO8hGtoloHioViU4OLch+lKB9k75kp2ucUpJuZ
oPvRMBa+jHnjCm9BdYAuq2PEKg0R3bDjcLzUF50gguk6oX8vumUpuQBbR+JHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUGk/bgrLl2Yq9QDxKMSNra0VMD/8wHwYDVR0j
BBgwFoAUWuGa4/qGWRBCrmlGQFOclmneyAEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTcyOTI5MS1hMWE3LTRiMTktOTNmNi0xZDg0NTc0YTY3YWUvMC81QUUxOUFFM0ZB
ODY1OTEwNDJBRTY5NDY0MDUzOUM5NjY5REVDODAxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFFMTlBRTNGQTg2NTkxMDQyQUU2OTQ2NDA1MzlDOTY2OURF
QzgwMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1NzI5MjkxLWExYTctNGIxOS05
M2Y2LTFkODQ1NzRhNjdhZS8wLzMxMzAzMzJlMzIzMjMwMmUzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfcLDANBgkqhkiG
9w0BAQsFAAOCAQEAR/GE+XfZRIqvg5kFAIgYAm5L3C/+NzUc/7j9A3XJLSYp4zvO
2o6miLB5bc93WzVZ6wHNxgyrWDYlI3ilEj4jV0Clpx/0R56tB9lRARC8aF6/vLZg
RPg3cTVZ4rsDC8jAE7Vd3hum6wIgMGmSnjz6qm9KkI19xjlhCrIfoMdjUBW4Y10H
rDWY93+H3iN27iMdQq21qvjZgT++lDdJ92HlGqylYjDKU7pqLwFUNja7EdoxMrV4
/Jsre8U3KovVNjL+HBXKf4UUNZw5t26+kmdGOYeoUN9FIOp9jvFHx2DDAvYm4GaB
MgiGMe1kxGVK+aLdn0V+skUVaoBuhVzljWAVpA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org