Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa
File:                     3130332e3134332e32342e302f32332d3233203d3e203536323432.roa (raw, json)
Hash identifier:          B1/s6+78Cp1e8vH3JEGO7Ppi51Bm8jMd7SgCexVDBDA=
Subject key identifier:   6B:C9:21:DC:9F:EF:8F:FE:40:1A:C4:A1:17:C4:A5:09:D6:A5:FE:5C
Certificate issuer:       /CN=C380A411E3CE15C60336341BB4B0994B307B920D
Certificate serial:       633C71146DCE957D89949CA3B22CDDED16D038E4
Authority key identifier: C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa
Signing time:             Thu 08 Feb 2024 09:00:04 +0000
ROA not before:           Thu 08 Feb 2024 08:55:04 +0000
ROA not after:            Thu 06 Feb 2025 09:00:04 +0000
asID:                     56242
IP address blocks:        103.143.24.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl
                          rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 20:30:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:3c:71:14:6d:ce:95:7d:89:94:9c:a3:b2:2c:dd:ed:16:d0:38:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C380A411E3CE15C60336341BB4B0994B307B920D
        Validity
            Not Before: Feb  8 08:55:04 2024 GMT
            Not After : Feb  6 09:00:04 2025 GMT
        Subject: CN=6BC921DC9FEF8FFE401AC4A117C4A509D6A5FE5C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d6:ec:98:69:19:f4:a7:94:64:54:a7:d1:5a:
                    da:b4:9e:6c:e8:47:10:c9:27:f3:d4:9a:cd:b7:4e:
                    be:eb:b9:67:3c:ed:d3:4c:f4:6b:b6:fa:cb:4a:87:
                    10:5d:1b:ac:4f:f7:1c:2c:06:5b:93:3a:8b:af:84:
                    23:40:a2:1e:e9:ca:18:a6:53:b9:61:ba:c1:d6:f6:
                    c1:b9:b3:ca:c2:79:a6:9a:c6:b0:d0:af:c7:3c:be:
                    e6:12:c2:8e:9c:22:ad:bf:92:8a:e6:f5:c9:c8:f4:
                    5f:69:2e:cd:e7:93:a5:02:1c:4b:eb:b4:94:7b:d4:
                    41:19:72:48:c6:22:ee:79:39:00:b1:ec:08:a4:41:
                    a7:5e:bc:ba:fa:ce:3a:d9:f6:95:a9:2d:55:f7:f7:
                    2f:eb:d4:6d:10:4d:e4:10:93:1c:d7:cc:3b:5e:18:
                    fa:2a:d8:e4:37:f9:79:d4:03:33:70:57:df:30:f6:
                    54:8b:26:2b:ad:b2:61:0f:84:a3:68:a1:1d:a8:70:
                    bc:4b:4c:08:54:a3:0c:48:a1:88:f7:34:b7:5b:8b:
                    ff:81:75:5e:f5:52:1b:21:8b:4c:cb:fc:71:ce:41:
                    5b:fa:07:ab:8e:50:86:05:45:56:7b:d5:a6:f0:e7:
                    2f:af:e1:f5:dc:22:d4:a4:35:d7:5e:7b:42:65:a0:
                    59:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C9:21:DC:9F:EF:8F:FE:40:1A:C4:A1:17:C4:A5:09:D6:A5:FE:5C
            X509v3 Authority Key Identifier:
                keyid:C3:80:A4:11:E3:CE:15:C6:03:36:34:1B:B4:B0:99:4B:30:7B:92:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/C380A411E3CE15C60336341BB4B0994B307B920D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C380A411E3CE15C60336341BB4B0994B307B920D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/65c400d1-9bbd-4e2b-8d58-6f749dbc392d/0/3130332e3134332e32342e302f32332d3233203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:13:d7:2e:cc:70:28:0c:0c:ea:13:ac:f5:e5:ea:00:c3:c1:
         8f:0f:31:a3:ce:de:84:f3:35:9b:3d:88:be:12:19:1e:fe:46:
         0a:2c:d7:7c:53:7b:a9:ea:6f:16:79:d2:5f:af:53:26:05:b5:
         fc:c1:04:d1:ac:0d:28:e8:91:28:5c:d6:36:77:e9:f4:51:73:
         69:b6:b7:ad:f3:8c:5d:fe:99:d0:0f:44:b9:40:63:76:94:b9:
         d2:65:5a:55:1e:3a:b0:fd:05:8d:dc:4d:b9:f5:19:bc:07:4d:
         70:a5:95:2d:78:0a:0e:8d:b4:50:7a:0d:d2:75:58:a1:dd:f7:
         1b:e4:ca:ce:88:7f:6f:57:4e:28:ab:5c:9c:69:41:4c:f2:4e:
         5c:12:2e:8a:12:84:2f:3d:68:15:4d:23:6a:cf:a8:3f:bc:0e:
         da:1d:73:54:8a:a0:e1:1b:db:e5:e6:90:b9:4e:3c:70:41:cf:
         40:c7:2a:f2:a5:53:62:0b:eb:9c:d2:ed:05:6c:42:f6:69:ad:
         ce:ca:e3:82:46:99:03:d3:63:17:06:d2:bc:9b:7a:d9:b0:b1:
         57:b9:76:80:40:fe:89:2c:1a:42:d8:cf:ea:c7:5a:0a:c3:1d:
         60:f9:92:b2:5d:cb:42:8f:9a:d7:95:e4:df:ef:3c:bc:e6:40:
         60:01:5f:3a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUYzxxFG3OlX2JlJyjsizd7RbQOOQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIz
MDdCOTIwRDAeFw0yNDAyMDgwODU1MDRaFw0yNTAyMDYwOTAwMDRaMDMxMTAvBgNV
BAMTKDZCQzkyMURDOUZFRjhGRkU0MDFBQzRBMTE3QzRBNTA5RDZBNUZFNUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN1uyYaRn0p5RkVKfRWtq0nmzo
RxDJJ/PUms23Tr7ruWc87dNM9Gu2+stKhxBdG6xP9xwsBluTOouvhCNAoh7pyhim
U7lhusHW9sG5s8rCeaaaxrDQr8c8vuYSwo6cIq2/korm9cnI9F9pLs3nk6UCHEvr
tJR71EEZckjGIu55OQCx7AikQadevLr6zjrZ9pWpLVX39y/r1G0QTeQQkxzXzDte
GPoq2OQ3+XnUAzNwV98w9lSLJiutsmEPhKNooR2ocLxLTAhUowxIoYj3NLdbi/+B
dV71Uhshi0zL/HHOQVv6B6uOUIYFRVZ71abw5y+v4fXcItSkNddee0JloFl7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUa8kh3J/vj/5AGsShF8SlCdal/lwwHwYDVR0j
BBgwFoAUw4CkEePOFcYDNjQbtLCZSzB7kg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NWM0MDBkMS05YmJkLTRlMmItOGQ1OC02Zjc0OWRiYzM5MmQvMC9DMzgwQTQxMUUz
Q0UxNUM2MDMzNjM0MUJCNEIwOTk0QjMwN0I5MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzM4MEE0MTFFM0NFMTVDNjAzMzYzNDFCQjRCMDk5NEIzMDdC
OTIwRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY1YzQwMGQxLTliYmQtNGUyYi04
ZDU4LTZmNzQ5ZGJjMzkyZC8wLzMxMzAzMzJlMzEzNDMzMmUzMjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzUzNjMyMzQzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWePGDANBgkqhkiG
9w0BAQsFAAOCAQEAoRPXLsxwKAwM6hOs9eXqAMPBjw8xo87ehPM1mz2IvhIZHv5G
CizXfFN7qepvFnnSX69TJgW1/MEE0awNKOiRKFzWNnfp9FFzaba3rfOMXf6Z0A9E
uUBjdpS50mVaVR46sP0FjdxNufUZvAdNcKWVLXgKDo20UHoN0nVYod33G+TKzoh/
b1dOKKtcnGlBTPJOXBIuihKELz1oFU0jas+oP7wO2h1zVIqg4Rvb5eaQuU48cEHP
QMcq8qVTYgvrnNLtBWxC9mmtzsrjgkaZA9NjFwbSvJt62bCxV7l2gED+iSwaQtjP
6sdaCsMdYPmSsl3LQo+a15Xk3+88vOZAYAFfOg==
-----END CERTIFICATE-----
Generated at Thu May 2 14:31:25 2024 by rpki-client on console-fra.rpki-client.org