Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa
File:                     3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          dr9xu7CIi6+ik1UpGLg3wt8yFQdd1RVO43AbherDW7g=
Subject key identifier:   E8:AF:C6:F7:F1:C7:08:6A:11:80:74:0B:90:22:27:7D:C3:29:4F:7E
Certificate issuer:       /CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
Certificate serial:       298D2826CB291EBE65234218BB7B5D669E0CA1CA
Authority key identifier: 21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa
Signing time:             Thu 30 May 2024 15:00:01 +0000
ROA not before:           Thu 30 May 2024 14:55:01 +0000
ROA not after:            Thu 29 May 2025 15:00:01 +0000
asID:                     134655
IP address blocks:        103.209.184.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl
                          rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:8d:28:26:cb:29:1e:be:65:23:42:18:bb:7b:5d:66:9e:0c:a1:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79
        Validity
            Not Before: May 30 14:55:01 2024 GMT
            Not After : May 29 15:00:01 2025 GMT
        Subject: CN=E8AFC6F7F1C7086A1180740B9022277DC3294F7E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:d0:9a:ec:8f:70:48:8b:23:30:57:6a:f7:25:
                    5f:f9:57:67:cc:28:2b:93:31:b5:d2:14:d1:c8:e1:
                    fa:02:84:8f:aa:35:2a:34:db:2e:e9:92:2d:95:4d:
                    cc:8e:b9:38:61:1f:af:84:c0:1b:78:01:e3:a9:9a:
                    38:d7:3a:29:7c:c9:f2:b1:29:97:77:9e:f5:32:c3:
                    d3:3e:5a:58:7d:0a:b0:77:04:05:28:a7:83:e2:4d:
                    d3:fe:10:19:09:b1:3c:c5:1f:9b:96:0a:31:64:78:
                    9b:a9:39:b7:ba:57:aa:60:90:df:4f:a6:22:75:11:
                    54:53:29:69:88:dc:f9:bf:fa:e9:4c:66:58:aa:ff:
                    b1:48:0d:57:d9:88:f1:8d:c3:46:85:c3:f9:e9:1a:
                    03:29:47:18:6e:e7:74:27:3b:42:62:5c:d1:c4:88:
                    02:67:b4:15:fa:28:68:f3:c4:66:5d:1c:0a:d5:24:
                    ab:22:e5:57:08:6a:6f:0f:2f:fb:e2:37:cd:ba:fd:
                    92:0c:ff:df:b1:ae:f2:b9:ae:20:e0:8f:1e:c2:13:
                    64:90:8a:49:37:2c:df:80:f0:86:06:a6:91:c5:fe:
                    8a:a3:b7:af:69:c5:c5:48:b5:08:3d:d7:e0:3b:16:
                    e6:a1:ec:14:e7:f6:43:6b:65:5a:08:cf:03:78:e2:
                    1b:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AF:C6:F7:F1:C7:08:6A:11:80:74:0B:90:22:27:7D:C3:29:4F:7E
            X509v3 Authority Key Identifier:
                keyid:21:46:CD:CD:7A:3C:7A:19:15:B7:8C:5B:2C:9F:CF:BA:8A:3B:6E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2146CDCD7A3C7A1915B78C5B2C9FCFBA8A3B6E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6939dbf1-3075-4519-ba90-cee8d3979fcd/0/3130332e3230392e3138342e302f32322d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.209.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         02:dc:11:12:54:cd:ab:83:ba:1a:0f:bd:2b:41:43:27:87:37:
         67:77:aa:d9:39:af:a3:bc:6b:9e:95:9d:3d:01:64:40:f9:64:
         01:fc:de:c6:69:a2:95:e7:ba:8d:28:2a:0f:75:8c:75:59:9a:
         bc:93:93:a1:d9:0c:f9:96:75:01:07:da:52:49:b8:5d:51:ac:
         e8:90:44:c3:53:bd:8f:bb:6e:e4:86:8e:b6:d2:b4:60:aa:06:
         39:5e:6d:09:de:5d:34:53:54:54:19:7e:5e:83:47:5a:9c:fc:
         18:9c:24:3c:cf:5b:26:16:0e:76:e8:72:d4:2d:3e:aa:92:ac:
         31:30:e8:e1:6d:7f:4b:50:e3:f1:04:36:3a:36:5b:c2:d9:4d:
         e3:6d:8b:92:4f:af:44:a4:78:e2:3f:77:1c:c0:90:55:c2:04:
         50:5e:42:15:32:31:a1:a2:94:0c:57:08:a3:90:fe:70:04:0c:
         be:6f:9b:e4:a9:8a:f2:a6:d0:e9:8b:e0:fd:40:91:3e:e7:5e:
         12:e4:b3:bc:61:28:d7:28:be:ce:50:a3:89:40:3d:08:5f:bb:
         6c:b9:3c:5c:9e:e2:4a:47:00:e3:8a:bc:97:3c:76:86:a3:03:
         80:fa:61:62:40:31:6e:09:95:20:af:c5:ad:14:7f:db:71:42:
         f2:aa:53:2a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUKY0oJsspHr5lI0IYu3tdZp4MocowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4
QTNCNkU3OTAeFw0yNDA1MzAxNDU1MDFaFw0yNTA1MjkxNTAwMDFaMDMxMTAvBgNV
BAMTKEU4QUZDNkY3RjFDNzA4NkExMTgwNzQwQjkwMjIyNzdEQzMyOTRGN0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD50Jrsj3BIiyMwV2r3JV/5V2fM
KCuTMbXSFNHI4foChI+qNSo02y7pki2VTcyOuThhH6+EwBt4AeOpmjjXOil8yfKx
KZd3nvUyw9M+Wlh9CrB3BAUop4PiTdP+EBkJsTzFH5uWCjFkeJupObe6V6pgkN9P
piJ1EVRTKWmI3Pm/+ulMZliq/7FIDVfZiPGNw0aFw/npGgMpRxhu53QnO0JiXNHE
iAJntBX6KGjzxGZdHArVJKsi5VcIam8PL/viN826/ZIM/9+xrvK5riDgjx7CE2SQ
ikk3LN+A8IYGppHF/oqjt69pxcVItQg91+A7Fuah7BTn9kNrZVoIzwN44hsnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6K/G9/HHCGoRgHQLkCInfcMpT34wHwYDVR0j
BBgwFoAUIUbNzXo8ehkVt4xbLJ/Puoo7bnkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
OTM5ZGJmMS0zMDc1LTQ1MTktYmE5MC1jZWU4ZDM5NzlmY2QvMC8yMTQ2Q0RDRDdB
M0M3QTE5MTVCNzhDNUIyQzlGQ0ZCQThBM0I2RTc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjE0NkNEQ0Q3QTNDN0ExOTE1Qjc4QzVCMkM5RkNGQkE4QTNC
NkU3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzY5MzlkYmYxLTMwNzUtNDUxOS1i
YTkwLWNlZThkMzk3OWZjZC8wLzMxMzAzMzJlMzIzMDM5MmUzMTM4MzQyZTMwMmYz
MjMyMmQzMjM0MjAzZDNlMjAzMTMzMzQzNjM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJn0bgwDQYJ
KoZIhvcNAQELBQADggEBAALcERJUzauDuhoPvStBQyeHN2d3qtk5r6O8a56VnT0B
ZED5ZAH83sZpopXnuo0oKg91jHVZmryTk6HZDPmWdQEH2lJJuF1RrOiQRMNTvY+7
buSGjrbStGCqBjlebQneXTRTVFQZfl6DR1qc/BicJDzPWyYWDnboctQtPqqSrDEw
6OFtf0tQ4/EENjo2W8LZTeNti5JPr0SkeOI/dxzAkFXCBFBeQhUyMaGilAxXCKOQ
/nAEDL5vm+SpivKm0OmL4P1AkT7nXhLks7xhKNcovs5Qo4lAPQhfu2y5PFye4kpH
AOOKvJc8doajA4D6YWJAMW4JlSCvxa0Uf9txQvKqUyo=
-----END CERTIFICATE-----
Generated at Sun Nov 24 05:18:50 2024 by rpki-client on console-ams.rpki-client.org