Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa
File:                     3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa (raw, json)
Hash identifier:          istfFsp5vbD+irXLU1qimJr+i8zmb6exhkfbRyoYdUc=
Subject key identifier:   20:20:7F:8C:00:31:9F:54:57:C8:81:76:50:70:5E:73:5E:2D:1C:E4
Certificate issuer:       /CN=52145183B5BE1A663FBC5C228102541AC61F9F86
Certificate serial:       1B7577D4F913B669B075F0F30ED6FE1FDD71FE9E
Authority key identifier: 52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa
Signing time:             Wed 20 Sep 2023 10:01:10 +0000
ROA not before:           Wed 20 Sep 2023 09:56:10 +0000
ROA not after:            Wed 18 Sep 2024 10:01:10 +0000
asID:                     141114
IP address blocks:        103.157.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl
                          rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:75:77:d4:f9:13:b6:69:b0:75:f0:f3:0e:d6:fe:1f:dd:71:fe:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52145183B5BE1A663FBC5C228102541AC61F9F86
        Validity
            Not Before: Sep 20 09:56:10 2023 GMT
            Not After : Sep 18 10:01:10 2024 GMT
        Subject: CN=20207F8C00319F5457C8817650705E735E2D1CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:20:06:70:06:f8:66:e7:53:d0:23:55:e8:
                    ba:1d:56:75:8e:16:b7:cb:6a:a3:f2:99:f2:2a:4e:
                    2e:d7:4f:87:51:e0:c5:a6:91:19:e9:89:f6:8a:bc:
                    96:7a:85:33:2d:19:18:15:48:14:62:a7:a6:d1:41:
                    fc:73:5a:ec:06:6e:6b:6b:3c:7f:f6:27:2d:ff:97:
                    ed:66:3f:0f:ee:22:da:be:56:55:0e:e0:c5:26:81:
                    36:f5:89:85:eb:67:21:83:cd:98:a5:ed:4a:69:98:
                    f8:6e:c7:d6:b2:d8:ad:cd:65:d3:46:73:91:f9:09:
                    e2:74:9f:ad:93:f3:e4:70:c7:d6:90:ab:42:90:ed:
                    41:df:57:7d:52:6a:82:b7:df:3f:13:2e:cb:b4:ff:
                    55:d1:09:34:f9:75:ca:7c:10:8a:af:a7:f6:b6:94:
                    5e:ff:9e:04:ba:e0:21:c4:be:31:a7:3e:f6:3a:64:
                    fb:5a:5e:cb:3b:a9:69:63:ad:bb:40:73:5c:e7:ad:
                    68:bb:ed:48:60:1c:bc:80:82:48:22:9c:1f:ac:41:
                    a4:a7:fb:50:d0:df:41:3f:07:fd:d5:74:e6:1b:16:
                    be:f3:a4:b0:8f:b6:af:a9:67:3b:7a:e8:2d:0f:00:
                    10:70:37:8c:72:c9:c2:d3:74:62:a5:08:0d:75:cf:
                    fd:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:20:7F:8C:00:31:9F:54:57:C8:81:76:50:70:5E:73:5E:2D:1C:E4
            X509v3 Authority Key Identifier:
                keyid:52:14:51:83:B5:BE:1A:66:3F:BC:5C:22:81:02:54:1A:C6:1F:9F:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/52145183B5BE1A663FBC5C228102541AC61F9F86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/52145183B5BE1A663FBC5C228102541AC61F9F86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/657e89e8-53aa-44f6-b6d8-5879078bf664/0/3130332e3135372e37382e302f32332d3234203d3e20313431313134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.157.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:58:88:60:97:8a:d8:8e:2e:af:86:88:8d:62:2d:b7:e2:6b:
         5c:d2:f2:8c:a5:27:7e:e7:ab:b9:34:fc:1c:d4:5a:82:3f:23:
         79:ca:32:86:e7:fe:77:3d:a0:7e:9d:5e:63:c0:ef:d3:d4:da:
         37:ca:ba:4f:4b:0d:29:7f:17:64:50:38:02:a2:55:3e:3a:a9:
         9b:db:72:bf:e3:d0:b4:47:ce:b8:8e:f1:d5:39:67:e5:32:3c:
         82:88:19:b4:bf:25:d5:f0:75:f7:9b:97:61:ba:b7:c3:ff:19:
         7d:f2:23:32:49:b8:25:55:b1:a6:74:ea:6a:87:22:98:63:20:
         57:e6:c2:a3:b2:f0:e7:ab:3b:ca:5a:16:69:e6:5e:66:a0:f2:
         39:6a:a2:ad:9f:22:b8:fe:85:e2:7f:ba:9b:7f:28:33:f5:ae:
         06:c2:52:8f:97:77:4f:f0:63:dd:b4:fe:95:e6:68:29:8e:64:
         f5:3d:a4:b8:ea:3d:0f:58:44:21:f7:26:97:ae:b4:96:4b:ba:
         3d:ef:9a:49:19:7f:3c:7d:16:6a:d2:14:42:ed:d6:50:12:bc:
         d9:01:81:c4:a8:cd:df:e7:c2:cd:6f:c1:67:0d:b2:e6:84:14:
         33:7e:f5:3b:c3:d0:56:69:11:9d:78:89:2d:12:cc:cb:6b:3e:
         18:2b:23:ea
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG3V31PkTtmmwdfDzDtb+H91x/p4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFD
NjFGOUY4NjAeFw0yMzA5MjAwOTU2MTBaFw0yNDA5MTgxMDAxMTBaMDMxMTAvBgNV
BAMTKDIwMjA3RjhDMDAzMTlGNTQ1N0M4ODE3NjUwNzA1RTczNUUyRDFDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwoSAGcAb4ZudT0CNV6LodVnWO
FrfLaqPymfIqTi7XT4dR4MWmkRnpifaKvJZ6hTMtGRgVSBRip6bRQfxzWuwGbmtr
PH/2Jy3/l+1mPw/uItq+VlUO4MUmgTb1iYXrZyGDzZil7UppmPhux9ay2K3NZdNG
c5H5CeJ0n62T8+Rwx9aQq0KQ7UHfV31SaoK33z8TLsu0/1XRCTT5dcp8EIqvp/a2
lF7/ngS64CHEvjGnPvY6ZPtaXss7qWljrbtAc1znrWi77UhgHLyAgkginB+sQaSn
+1DQ30E/B/3VdOYbFr7zpLCPtq+pZzt66C0PABBwN4xyycLTdGKlCA11z/1LAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUICB/jAAxn1RXyIF2UHBec14tHOQwHwYDVR0j
BBgwFoAUUhRRg7W+GmY/vFwigQJUGsYfn4YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NTdlODllOC01M2FhLTQ0ZjYtYjZkOC01ODc5MDc4YmY2NjQvMC81MjE0NTE4M0I1
QkUxQTY2M0ZCQzVDMjI4MTAyNTQxQUM2MUY5Rjg2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTIxNDUxODNCNUJFMUE2NjNGQkM1QzIyODEwMjU0MUFDNjFG
OUY4Ni5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1N2U4OWU4LTUzYWEtNDRmNi1i
NmQ4LTU4NzkwNzhiZjY2NC8wLzMxMzAzMzJlMzEzNTM3MmUzNzM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzEzMTM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ51OMA0GCSqG
SIb3DQEBCwUAA4IBAQAlWIhgl4rYji6vhoiNYi234mtc0vKMpSd+56u5NPwc1FqC
PyN5yjKG5/53PaB+nV5jwO/T1No3yrpPSw0pfxdkUDgColU+Oqmb23K/49C0R864
jvHVOWflMjyCiBm0vyXV8HX3m5dhurfD/xl98iMySbglVbGmdOpqhyKYYyBX5sKj
svDnqzvKWhZp5l5moPI5aqKtnyK4/oXif7qbfygz9a4GwlKPl3dP8GPdtP6V5mgp
jmT1PaS46j0PWEQh9yaXrrSWS7o975pJGX88fRZq0hRC7dZQErzZAYHEqM3f58LN
b8FnDbLmhBQzfvU7w9BWaRGdeIktEszLaz4YKyPq
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:43:04 2024 by rpki-client on console-fra.rpki-client.org