Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
File:                     3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          Er6imwwu/bZPZyfg/bjua6k7KHLjwxDl0mpgaBvXLaI=
Subject key identifier:   40:4A:ED:31:7A:DC:BC:88:D4:93:D2:44:E0:5C:1A:84:C4:0D:8B:6B
Certificate issuer:       /CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
Certificate serial:       7AEE124F5A8A74AB0172FB9B7521A0AAD2738A80
Authority key identifier: A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa
Signing time:             Thu 12 Sep 2024 07:02:55 +0000
ROA not before:           Thu 12 Sep 2024 06:57:55 +0000
ROA not after:            Thu 11 Sep 2025 07:02:55 +0000
asID:                     23679
IP address blocks:        103.103.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl
                          rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:ee:12:4f:5a:8a:74:ab:01:72:fb:9b:75:21:a0:aa:d2:73:8a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A349D07CAB13BF067B13D95E99981C2BA84B9A6B
        Validity
            Not Before: Sep 12 06:57:55 2024 GMT
            Not After : Sep 11 07:02:55 2025 GMT
        Subject: CN=404AED317ADCBC88D493D244E05C1A84C40D8B6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:63:df:b2:2d:6e:4c:e7:f4:84:80:3f:9b:6a:
                    d1:2a:a9:1c:db:c7:b1:78:15:e3:1b:22:2e:97:5d:
                    10:f5:f4:f0:56:e3:f5:ec:cf:fc:bf:21:f1:50:97:
                    f8:a5:15:68:aa:eb:56:ca:8c:1f:ce:90:a2:01:0e:
                    45:e9:80:70:e5:97:84:db:e8:4d:7c:c9:a1:e7:d5:
                    ac:b9:ae:c0:8f:ab:7d:d2:55:fe:33:1f:5b:b5:0f:
                    e4:4e:a6:f5:c5:c4:ee:df:c6:86:1e:d5:fa:41:60:
                    26:2e:31:ef:ec:84:0c:49:79:ba:de:90:5e:eb:00:
                    95:7d:e1:d2:2a:15:d4:94:bd:7a:c9:f7:45:43:b0:
                    9b:07:81:ef:f1:2c:b1:c5:ce:da:3e:28:fd:c6:9b:
                    17:1e:42:4b:2a:5d:16:be:27:b8:c6:1d:bf:d7:5c:
                    8e:26:4a:cb:32:d3:c6:4c:e7:42:3f:1e:12:cb:38:
                    fa:ea:bc:71:e6:b9:6d:eb:3d:28:64:a7:f3:c8:f2:
                    11:20:3a:17:d1:b1:9f:e7:a0:a6:dd:e9:72:d2:e5:
                    9b:90:09:e5:db:a0:b5:03:46:30:a3:0a:ec:d0:51:
                    ce:9f:7f:29:47:bf:e7:8e:40:a3:b6:bd:68:88:a4:
                    70:0f:96:7b:f8:99:b2:41:ad:e5:e6:29:c4:3a:6e:
                    17:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4A:ED:31:7A:DC:BC:88:D4:93:D2:44:E0:5C:1A:84:C4:0D:8B:6B
            X509v3 Authority Key Identifier:
                keyid:A3:49:D0:7C:AB:13:BF:06:7B:13:D9:5E:99:98:1C:2B:A8:4B:9A:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A349D07CAB13BF067B13D95E99981C2BA84B9A6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6adfcb44-ae7a-4423-ae7d-08648bf1deb1/0/3130332e3130332e3133372e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.103.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:ef:c6:1e:07:44:70:75:ce:c6:03:d1:a2:9f:4e:e8:84:f0:
         4c:cd:45:b7:30:8d:3b:25:e0:18:74:7b:23:ef:5a:48:41:25:
         26:9c:e4:63:bb:fb:b1:a3:ab:c7:c1:8c:2c:b8:11:6e:ef:91:
         c3:5c:1a:09:2a:13:4d:ae:7f:03:ae:36:16:f5:cf:40:ab:4d:
         92:63:7e:b4:d6:6b:9b:6d:23:cd:50:23:54:aa:59:7c:37:98:
         ae:74:91:7b:4a:8a:cf:5d:8a:dc:09:63:5f:d6:2b:63:3c:7c:
         d7:6b:c0:90:d5:93:41:b7:f2:9e:68:d2:e4:48:df:16:d6:ed:
         30:1f:2b:e1:46:c8:97:3c:a6:74:f1:28:da:c6:f1:98:e9:88:
         e8:6b:31:da:85:78:fe:27:4b:69:8a:21:1e:bb:fb:ff:03:98:
         ba:82:3f:2d:8f:9c:0b:05:a9:73:23:bd:b1:2d:0c:9f:c7:07:
         9c:4e:45:0a:9d:72:53:dc:de:34:d2:58:62:01:a8:ff:df:ad:
         82:53:86:bb:a1:d4:ec:f2:0c:2c:9f:54:a3:d9:c4:e6:f6:17:
         0a:d1:03:6f:f1:bf:8f:dd:7e:b7:85:4c:81:f7:61:d4:54:31:
         0b:95:d1:eb:9d:ae:f1:64:19:83:0b:ad:c6:c9:ae:6c:36:00:
         7f:a5:db:e9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeu4ST1qKdKsBcvubdSGgqtJzioAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJB
ODRCOUE2QjAeFw0yNDA5MTIwNjU3NTVaFw0yNTA5MTEwNzAyNTVaMDMxMTAvBgNV
BAMTKDQwNEFFRDMxN0FEQ0JDODhENDkzRDI0NEUwNUMxQTg0QzQwRDhCNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpY9+yLW5M5/SEgD+batEqqRzb
x7F4FeMbIi6XXRD19PBW4/Xsz/y/IfFQl/ilFWiq61bKjB/OkKIBDkXpgHDll4Tb
6E18yaHn1ay5rsCPq33SVf4zH1u1D+ROpvXFxO7fxoYe1fpBYCYuMe/shAxJebre
kF7rAJV94dIqFdSUvXrJ90VDsJsHge/xLLHFzto+KP3GmxceQksqXRa+J7jGHb/X
XI4mSssy08ZM50I/HhLLOPrqvHHmuW3rPShkp/PI8hEgOhfRsZ/noKbd6XLS5ZuQ
CeXboLUDRjCjCuzQUc6ffylHv+eOQKO2vWiIpHAPlnv4mbJBreXmKcQ6bhfBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUQErtMXrcvIjUk9JE4FwahMQNi2swHwYDVR0j
BBgwFoAUo0nQfKsTvwZ7E9lemZgcK6hLmmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
YWRmY2I0NC1hZTdhLTQ0MjMtYWU3ZC0wODY0OGJmMWRlYjEvMC9BMzQ5RDA3Q0FC
MTNCRjA2N0IxM0Q5NUU5OTk4MUMyQkE4NEI5QTZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTM0OUQwN0NBQjEzQkYwNjdCMTNEOTVFOTk5ODFDMkJBODRC
OUE2Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZhZGZjYjQ0LWFlN2EtNDQyMy1h
ZTdkLTA4NjQ4YmYxZGViMS8wLzMxMzAzMzJlMzEzMDMzMmUzMTMzMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjMzMzYzNzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2eJMA0GCSqG
SIb3DQEBCwUAA4IBAQAo78YeB0Rwdc7GA9Gin07ohPBMzUW3MI07JeAYdHsj71pI
QSUmnORju/uxo6vHwYwsuBFu75HDXBoJKhNNrn8DrjYW9c9Aq02SY3601mubbSPN
UCNUqll8N5iudJF7SorPXYrcCWNf1itjPHzXa8CQ1ZNBt/KeaNLkSN8W1u0wHyvh
RsiXPKZ08SjaxvGY6YjoazHahXj+J0tpiiEeu/v/A5i6gj8tj5wLBalzI72xLQyf
xwecTkUKnXJT3N400lhiAaj/362CU4a7odTs8gwsn1Sj2cTm9hcK0QNv8b+P3X63
hUyB92HUVDELldHrna7xZBmDC63Gya5sNgB/pdvp
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org