Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa
File:                     3130332e32362e3139312e302f32342d3234203d3e203536323836.roa (raw, json)
Hash identifier:          uTXK3XDG0KhTaoRUywuol7dZt/HZLMA3dPAT4T5JouU=
Subject key identifier:   F8:18:1E:48:EB:C1:91:B1:75:E3:D8:85:7C:57:91:2F:B8:40:0F:6F
Certificate issuer:       /CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
Certificate serial:       2278E0ED76238E54EDD7AAFB421561688090DB1F
Authority key identifier: 9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa
Signing time:             Mon 15 Jan 2024 09:00:46 +0000
ROA not before:           Mon 15 Jan 2024 08:55:46 +0000
ROA not after:            Mon 13 Jan 2025 09:00:46 +0000
asID:                     56286
IP address blocks:        103.26.191.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl
                          rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:78:e0:ed:76:23:8e:54:ed:d7:aa:fb:42:15:61:68:80:90:db:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9BEEED1DCEE081F653A0D37A8175E2C40BB82B23
        Validity
            Not Before: Jan 15 08:55:46 2024 GMT
            Not After : Jan 13 09:00:46 2025 GMT
        Subject: CN=F8181E48EBC191B175E3D8857C57912FB8400F6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:38:cb:3d:0c:93:03:38:12:8e:1c:01:16:25:
                    a7:48:0f:e4:13:af:68:16:f6:d2:5a:96:f2:8d:74:
                    0c:11:c9:1d:c1:4e:1c:92:34:fd:3c:8e:23:7a:87:
                    5d:17:41:8d:4a:15:8a:d3:b6:4f:62:ea:32:c8:00:
                    99:85:cc:53:d0:0f:7c:05:05:42:88:04:29:4e:ee:
                    e2:1f:14:63:de:1f:11:bd:45:11:75:8e:e7:92:33:
                    57:3c:7f:7f:fd:28:6f:c6:f3:dc:25:83:61:c6:ac:
                    c2:ad:61:98:f3:ca:63:80:02:68:23:1c:b1:48:a6:
                    b0:4b:54:a5:f3:3b:de:11:4c:af:de:f5:52:53:8f:
                    36:14:be:d0:20:00:4d:41:9a:2c:1f:dc:6f:77:06:
                    d6:e0:78:93:e2:07:7d:d6:2d:b1:98:4a:81:c4:bb:
                    5f:5d:41:c2:74:7c:db:79:05:a2:3e:a4:8d:f8:98:
                    bb:04:29:c4:e9:33:b7:11:a4:42:52:e1:15:a6:fa:
                    49:eb:4d:2a:81:95:a5:c1:d6:c3:57:10:96:77:24:
                    0e:b3:d6:bc:48:25:e2:a7:56:31:c2:d7:a2:08:0a:
                    47:a1:09:03:31:21:d0:43:c2:31:5d:7d:8f:8e:44:
                    7c:ae:15:a7:04:86:f8:e3:93:ea:05:85:25:c5:d4:
                    26:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:18:1E:48:EB:C1:91:B1:75:E3:D8:85:7C:57:91:2F:B8:40:0F:6F
            X509v3 Authority Key Identifier:
                keyid:9B:EE:ED:1D:CE:E0:81:F6:53:A0:D3:7A:81:75:E2:C4:0B:B8:2B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9BEEED1DCEE081F653A0D37A8175E2C40BB82B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66926c82-c8e5-4f97-8994-2c40653817ce/0/3130332e32362e3139312e302f32342d3234203d3e203536323836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:89:ac:a1:9f:6f:db:c5:fb:57:81:ad:4c:12:dd:5d:b8:15:
         e1:0e:8b:0f:91:9d:b9:40:01:75:e4:46:f1:4b:7f:b4:b9:95:
         19:4e:71:c8:4c:98:4f:63:fe:b8:ba:25:b4:02:96:55:ab:e8:
         54:e3:1d:63:90:bc:a7:58:8d:57:13:39:5e:c5:8d:5b:7c:d7:
         e9:19:9a:c3:1f:1e:52:bc:c8:0e:b4:44:c5:80:61:7e:6f:b7:
         fc:86:25:76:8a:54:28:e5:06:e9:c4:f8:8e:09:15:16:db:65:
         46:c8:17:ae:56:ae:60:dd:d1:43:62:31:9c:d9:a0:c1:03:c1:
         24:e7:ea:00:8c:6e:e0:fa:d1:5f:98:45:ad:9d:b5:cb:aa:e6:
         19:3b:90:fd:60:88:4d:72:72:da:29:2e:b1:fd:09:e8:78:4c:
         60:e0:6e:9a:07:31:3a:76:71:90:e2:b6:3e:18:25:f1:f7:36:
         62:d0:57:c4:b3:85:ea:bd:c0:ff:e1:b9:c4:4a:52:85:c8:51:
         d1:a0:69:19:ac:ca:13:30:1d:3e:42:c8:44:e6:7c:d9:de:6f:
         b6:7e:78:8f:84:e3:d2:3f:47:e1:48:33:69:fe:22:f5:f4:22:
         d2:b7:b8:fc:ae:55:2d:40:39:d0:7f:3d:45:22:fd:97:e6:f9:
         1c:ac:e8:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUInjg7XYjjlTt16r7QhVhaICQ2x8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQw
QkI4MkIyMzAeFw0yNDAxMTUwODU1NDZaFw0yNTAxMTMwOTAwNDZaMDMxMTAvBgNV
BAMTKEY4MTgxRTQ4RUJDMTkxQjE3NUUzRDg4NTdDNTc5MTJGQjg0MDBGNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUOMs9DJMDOBKOHAEWJadID+QT
r2gW9tJalvKNdAwRyR3BThySNP08jiN6h10XQY1KFYrTtk9i6jLIAJmFzFPQD3wF
BUKIBClO7uIfFGPeHxG9RRF1jueSM1c8f3/9KG/G89wlg2HGrMKtYZjzymOAAmgj
HLFIprBLVKXzO94RTK/e9VJTjzYUvtAgAE1Bmiwf3G93BtbgeJPiB33WLbGYSoHE
u19dQcJ0fNt5BaI+pI34mLsEKcTpM7cRpEJS4RWm+knrTSqBlaXB1sNXEJZ3JA6z
1rxIJeKnVjHC16IICkehCQMxIdBDwjFdfY+ORHyuFacEhvjjk+oFhSXF1Cb/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU+BgeSOvBkbF149iFfFeRL7hAD28wHwYDVR0j
BBgwFoAUm+7tHc7ggfZToNN6gXXixAu4KyMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NjkyNmM4Mi1jOGU1LTRmOTctODk5NC0yYzQwNjUzODE3Y2UvMC85QkVFRUQxRENF
RTA4MUY2NTNBMEQzN0E4MTc1RTJDNDBCQjgyQjIzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUJFRUVEMURDRUUwODFGNjUzQTBEMzdBODE3NUUyQzQwQkI4
MkIyMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2OTI2YzgyLWM4ZTUtNGY5Ny04
OTk0LTJjNDA2NTM4MTdjZS8wLzMxMzAzMzJlMzIzNjJlMzEzOTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzgzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcavzANBgkqhkiG
9w0BAQsFAAOCAQEADImsoZ9v28X7V4GtTBLdXbgV4Q6LD5GduUABdeRG8Ut/tLmV
GU5xyEyYT2P+uLoltAKWVavoVOMdY5C8p1iNVxM5XsWNW3zX6Rmawx8eUrzIDrRE
xYBhfm+3/IYldopUKOUG6cT4jgkVFttlRsgXrlauYN3RQ2IxnNmgwQPBJOfqAIxu
4PrRX5hFrZ21y6rmGTuQ/WCITXJy2ikusf0J6HhMYOBumgcxOnZxkOK2Phgl8fc2
YtBXxLOF6r3A/+G5xEpShchR0aBpGazKEzAdPkLIROZ82d5vtn54j4Tj0j9H4Ugz
af4i9fQi0re4/K5VLUA50H89RSL9l+b5HKzoaQ==
-----END CERTIFICATE-----
Generated at Sun Jun 2 12:44:44 2024 by rpki-client on console-ams.rpki-client.org