Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
File:                     3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa (raw, json)
Hash identifier:          kBG2q2NpoQNQY5u4bPq2Trzf/jU8kmYTusuU638oaHo=
Subject key identifier:   B4:BA:A0:71:CE:30:73:06:89:31:E1:14:6A:65:9B:99:51:CA:2D:3D
Certificate issuer:       /CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
Certificate serial:       2E973FB9572A6B72179FC1D4EFDE3D29B90EE9D7
Authority key identifier: AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa
Signing time:             Mon 22 Jan 2024 16:00:01 +0000
ROA not before:           Mon 22 Jan 2024 15:55:01 +0000
ROA not after:            Mon 20 Jan 2025 16:00:01 +0000
asID:                     142354
IP address blocks:        103.169.224.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl
                          rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:97:3f:b9:57:2a:6b:72:17:9f:c1:d4:ef:de:3d:29:b9:0e:e9:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD2A0F6B3024BFF11458D72C8E5623FB74867F53
        Validity
            Not Before: Jan 22 15:55:01 2024 GMT
            Not After : Jan 20 16:00:01 2025 GMT
        Subject: CN=B4BAA071CE3073068931E1146A659B9951CA2D3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:50:53:78:84:ea:a3:6e:84:19:29:4f:fd:cb:
                    da:fc:9d:b9:77:29:8a:b6:fb:0f:95:2d:17:50:b4:
                    0a:e4:36:d5:e5:c3:f4:13:ed:3d:37:ee:f6:4d:06:
                    de:8d:f7:01:22:c7:dc:4f:0c:e5:1f:ab:4d:da:ad:
                    d4:b4:37:8e:46:c5:f3:e7:2a:b6:3d:dc:69:c7:6a:
                    32:4c:1a:15:f1:9f:21:e6:01:3d:c8:41:9b:08:52:
                    08:ef:4f:35:08:cc:4e:68:f2:2e:f7:81:8c:27:2b:
                    ff:53:b1:08:24:ba:91:1c:06:aa:ac:ea:60:3a:29:
                    53:c7:d2:f4:a3:bc:b6:62:94:a7:cd:cb:16:99:c4:
                    59:d8:e9:87:0c:11:36:34:73:60:2c:e7:c6:86:cc:
                    16:06:29:cc:0c:27:d1:f0:d4:09:f3:02:00:4a:81:
                    36:6b:50:c3:db:84:1c:d2:e5:3f:ff:34:89:3a:46:
                    85:49:84:97:b6:0a:fa:3f:93:58:19:a6:7f:1b:e6:
                    0d:2b:5c:c8:7d:15:c5:ba:55:ad:2d:67:4f:3a:b5:
                    ae:37:99:3a:3b:20:af:8e:2f:6e:d1:9a:7c:89:c6:
                    38:44:86:67:d5:2a:7b:94:f1:c5:5d:e9:ad:76:6c:
                    11:ad:a0:3b:b5:82:e0:5b:fa:5f:12:c8:cf:67:3c:
                    db:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BA:A0:71:CE:30:73:06:89:31:E1:14:6A:65:9B:99:51:CA:2D:3D
            X509v3 Authority Key Identifier:
                keyid:AD:2A:0F:6B:30:24:BF:F1:14:58:D7:2C:8E:56:23:FB:74:86:7F:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD2A0F6B3024BFF11458D72C8E5623FB74867F53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66af4de5-5037-4917-9a93-0192c6959bfb/0/3130332e3136392e3232342e302f32332d3233203d3e20313432333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:18:e3:8a:ff:9e:f8:c0:d2:c5:b7:fc:e0:15:fb:cf:da:1b:
         11:19:1d:9c:22:3e:a5:71:d8:c3:d1:e2:fe:f7:bc:aa:8e:fc:
         c2:39:81:bf:b6:09:35:ce:d5:8e:4f:0f:5f:38:9e:74:3a:63:
         22:a1:cf:02:70:df:d6:00:30:d3:ff:5d:28:86:b1:56:eb:92:
         ed:aa:d7:06:40:0d:36:f4:ae:87:dc:a1:82:c3:d8:79:40:4d:
         2e:7c:a5:12:32:76:dd:63:12:8c:a4:a1:49:2b:bd:9f:43:f0:
         c1:d2:8d:a0:54:03:a5:cc:bf:91:31:2b:54:a1:1a:6d:e9:38:
         33:2c:06:1b:d1:90:79:2d:66:e0:e2:62:14:c2:2a:ea:dd:ae:
         cc:4c:e2:1e:15:71:ba:ed:5a:a7:dc:f0:06:a6:ad:9f:68:93:
         f5:65:1b:92:5f:42:7c:ef:d1:b1:95:32:47:c2:fc:b1:3a:75:
         48:7c:d0:a5:5b:62:df:b8:43:18:aa:6d:b4:84:0c:ab:04:d5:
         ac:14:1d:2b:8b:98:82:4d:87:32:6a:d3:79:35:38:d1:69:68:
         f2:48:bc:40:c9:86:7c:3e:7e:1c:08:f3:7b:f8:0f:3b:ff:fc:
         66:07:52:2b:5a:8d:ee:44:c7:7e:40:6b:03:9f:37:24:05:8e:
         47:16:03:e6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULpc/uVcqa3IXn8HU7949KbkO6dcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3
NDg2N0Y1MzAeFw0yNDAxMjIxNTU1MDFaFw0yNTAxMjAxNjAwMDFaMDMxMTAvBgNV
BAMTKEI0QkFBMDcxQ0UzMDczMDY4OTMxRTExNDZBNjU5Qjk5NTFDQTJEM0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUUFN4hOqjboQZKU/9y9r8nbl3
KYq2+w+VLRdQtArkNtXlw/QT7T037vZNBt6N9wEix9xPDOUfq03ardS0N45GxfPn
KrY93GnHajJMGhXxnyHmAT3IQZsIUgjvTzUIzE5o8i73gYwnK/9TsQgkupEcBqqs
6mA6KVPH0vSjvLZilKfNyxaZxFnY6YcMETY0c2As58aGzBYGKcwMJ9Hw1AnzAgBK
gTZrUMPbhBzS5T//NIk6RoVJhJe2Cvo/k1gZpn8b5g0rXMh9FcW6Va0tZ086ta43
mTo7IK+OL27RmnyJxjhEhmfVKnuU8cVd6a12bBGtoDu1guBb+l8SyM9nPNvrAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUtLqgcc4wcwaJMeEUamWbmVHKLT0wHwYDVR0j
BBgwFoAUrSoPazAkv/EUWNcsjlYj+3SGf1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
NmFmNGRlNS01MDM3LTQ5MTctOWE5My0wMTkyYzY5NTliZmIvMC9BRDJBMEY2QjMw
MjRCRkYxMTQ1OEQ3MkM4RTU2MjNGQjc0ODY3RjUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUQyQTBGNkIzMDI0QkZGMTE0NThENzJDOEU1NjIzRkI3NDg2
N0Y1My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY2YWY0ZGU1LTUwMzctNDkxNy05
YTkzLTAxOTJjNjk1OWJmYi8wLzMxMzAzMzJlMzEzNjM5MmUzMjMyMzQyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzIzMzM1MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnqeAwDQYJ
KoZIhvcNAQELBQADggEBABIY44r/nvjA0sW3/OAV+8/aGxEZHZwiPqVx2MPR4v73
vKqO/MI5gb+2CTXO1Y5PD184nnQ6YyKhzwJw39YAMNP/XSiGsVbrku2q1wZADTb0
rofcoYLD2HlATS58pRIydt1jEoykoUkrvZ9D8MHSjaBUA6XMv5ExK1ShGm3pODMs
BhvRkHktZuDiYhTCKurdrsxM4h4VcbrtWqfc8AamrZ9ok/VlG5JfQnzv0bGVMkfC
/LE6dUh80KVbYt+4QxiqbbSEDKsE1awUHSuLmIJNhzJq03k1ONFpaPJIvEDJhnw+
fhwI83v4Dzv//GYHUitaje5Ex35AawOfNyQFjkcWA+Y=
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:19 2024 by rpki-client on console-fra.rpki-client.org