Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
File:                     3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          8tOuGjnRrg2L43R4OwWN9skFJhYh6lC02g4D9d0w83o=
Subject key identifier:   5E:B9:F7:8A:BA:8F:52:4E:2B:F9:E7:AF:43:22:19:C6:8D:13:53:B3
Certificate issuer:       /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Certificate serial:       456B773CC7D2A9111F62F48744FD877CF14C36AC
Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
Signing time:             Sat 17 Aug 2024 06:00:00 +0000
ROA not before:           Sat 17 Aug 2024 05:55:00 +0000
ROA not after:            Sat 16 Aug 2025 06:00:00 +0000
asID:                     55699
IP address blocks:        103.104.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
                          rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 11:47:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:6b:77:3c:c7:d2:a9:11:1f:62:f4:87:44:fd:87:7c:f1:4c:36:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
        Validity
            Not Before: Aug 17 05:55:00 2024 GMT
            Not After : Aug 16 06:00:00 2025 GMT
        Subject: CN=5EB9F78ABA8F524E2BF9E7AF432219C68D1353B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:29:3b:0a:a0:86:05:30:f4:bb:b1:bd:dc:0d:
                    56:06:10:e7:0e:b2:46:31:1c:8d:d8:c8:31:ae:4d:
                    75:24:c7:68:ef:c4:e6:21:a7:90:40:a9:82:57:92:
                    da:61:43:9d:8c:5c:c5:dc:b1:ae:3c:ec:cb:35:bc:
                    4b:e9:27:6e:50:0b:61:73:a8:4b:94:f1:a8:3c:64:
                    b9:69:a8:66:4a:db:17:9e:49:9d:3b:ec:ac:25:bf:
                    fb:46:d4:4a:af:20:ab:c1:3f:2a:47:f5:88:11:27:
                    4f:5f:89:7b:fe:67:e4:2c:f1:d9:0f:28:fd:bc:a4:
                    7e:fd:53:c6:69:b2:78:85:ab:4d:ba:70:5c:0c:3d:
                    3e:ba:55:03:a3:50:30:71:d4:d9:07:fd:71:1e:2c:
                    36:da:ff:83:f2:fe:1b:15:b8:55:5a:24:40:51:04:
                    89:b9:63:f8:9c:d2:82:d7:bf:8b:25:7a:6b:df:23:
                    dd:69:59:8e:bf:dc:49:a0:fa:a2:7d:b5:d2:a5:0e:
                    63:11:0c:73:cf:88:f3:55:56:17:22:09:fb:2c:f5:
                    45:48:45:39:08:68:ba:7d:0b:7b:c1:5f:e6:58:6c:
                    fd:40:68:b4:4a:57:2f:78:e6:72:f5:39:f2:a2:8b:
                    78:b3:5a:69:b4:34:a1:ef:f0:bd:f0:29:a2:e4:b9:
                    5d:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:B9:F7:8A:BA:8F:52:4E:2B:F9:E7:AF:43:22:19:C6:8D:13:53:B3
            X509v3 Authority Key Identifier:
                keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         91:f1:23:34:8b:0f:b4:94:96:8c:89:09:cf:64:de:df:69:f6:
         35:9b:a7:c9:89:2c:87:76:aa:08:ba:b8:d6:81:7d:64:f3:91:
         b5:09:35:0f:47:bc:57:c9:b6:21:29:1c:c3:1b:75:13:14:03:
         0a:86:c2:a2:02:33:ea:0f:bf:24:70:64:ba:41:76:33:a1:0f:
         d7:76:78:38:47:33:18:cd:a7:b9:a9:83:9c:c7:6b:af:4d:07:
         d3:a9:c7:f1:e9:01:32:38:09:ac:5b:a8:42:ce:1f:76:5e:a3:
         25:e1:bc:95:d8:25:bc:2d:76:1c:4b:a6:a3:91:6f:c0:5d:91:
         74:58:5e:9d:45:a3:29:ee:d8:dd:b7:9c:af:8b:9b:38:5f:45:
         17:a9:91:29:f5:ea:b6:11:ef:ad:82:2c:d5:cd:21:03:5f:6e:
         8a:4a:9c:c9:1c:aa:e2:06:2c:cf:72:6d:17:2e:70:96:dd:9e:
         e5:fd:d6:e1:63:0b:66:d7:8e:9e:94:38:09:cc:eb:e8:3c:8b:
         60:40:2e:0a:1c:cf:71:b0:57:6c:37:96:6a:3e:9b:8e:6a:80:
         0f:16:29:50:d2:c9:1f:33:d4:ec:12:16:93:75:01:95:8a:e3:
         7b:e4:6d:c4:64:d7:4a:d3:f1:1e:d2:6a:60:d5:d6:ac:43:9c:
         8f:7c:42:5c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIURWt3PMfSqREfYvSHRP2HfPFMNqwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZG
MTZEMzY2QzAeFw0yNDA4MTcwNTU1MDBaFw0yNTA4MTYwNjAwMDBaMDMxMTAvBgNV
BAMTKDVFQjlGNzhBQkE4RjUyNEUyQkY5RTdBRjQzMjIxOUM2OEQxMzUzQjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKTsKoIYFMPS7sb3cDVYGEOcO
skYxHI3YyDGuTXUkx2jvxOYhp5BAqYJXktphQ52MXMXcsa487Ms1vEvpJ25QC2Fz
qEuU8ag8ZLlpqGZK2xeeSZ077Kwlv/tG1EqvIKvBPypH9YgRJ09fiXv+Z+Qs8dkP
KP28pH79U8ZpsniFq026cFwMPT66VQOjUDBx1NkH/XEeLDba/4Py/hsVuFVaJEBR
BIm5Y/ic0oLXv4slemvfI91pWY6/3Emg+qJ9tdKlDmMRDHPPiPNVVhciCfss9UVI
RTkIaLp9C3vBX+ZYbP1AaLRKVy945nL1OfKii3izWmm0NKHv8L3wKaLkuV3nAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXrn3irqPUk4r+eevQyIZxo0TU7MwHwYDVR0j
BBgwFoAUMb1Gvn1T5Xg41f2JRZC4r/FtNmwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NmFkMDlmMy0wMDIzLTQ0NDUtODQxNi01Y2JkZTEzZmRkNDAvMC8zMUJENDZCRTdE
NTNFNTc4MzhENUZEODk0NTkwQjhBRkYxNkQzNjZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzFCRDQ2QkU3RDUzRTU3ODM4RDVGRDg5NDU5MEI4QUZGMTZE
MzY2Qy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2YWQwOWYzLTAwMjMtNDQ0NS04
NDE2LTVjYmRlMTNmZGQ0MC8wLzMxMzAzMzJlMzEzMDM0MmUzMTMyMmUzMDJmMzIz
MjJkMzIzMjIwM2QzZTIwMzUzNTM2MzkzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmdoDDANBgkqhkiG
9w0BAQsFAAOCAQEAkfEjNIsPtJSWjIkJz2Te32n2NZunyYksh3aqCLq41oF9ZPOR
tQk1D0e8V8m2ISkcwxt1ExQDCobCogIz6g+/JHBkukF2M6EP13Z4OEczGM2nuamD
nMdrr00H06nH8ekBMjgJrFuoQs4fdl6jJeG8ldglvC12HEumo5FvwF2RdFhenUWj
Ke7Y3becr4ubOF9FF6mRKfXqthHvrYIs1c0hA19uikqcyRyq4gYsz3JtFy5wlt2e
5f3W4WMLZteOnpQ4Cczr6DyLYEAuChzPcbBXbDeWaj6bjmqADxYpUNLJHzPU7BIW
k3UBlYrje+RtxGTXStPxHtJqYNXWrEOcj3xCXA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:38 2024 by rpki-client on console-ams.rpki-client.org