Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
File:                     3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa (raw, json)
Hash identifier:          1DPyVV3EC5JcqcKs+YGppQegotz9R/zHXcpfMsnq24Y=
Subject key identifier:   E9:F1:0F:B2:13:7F:A6:AC:0A:60:CB:A2:15:09:A4:C3:24:96:60:96
Certificate issuer:       /CN=73B96F5AC43A4212760D6629FB36B21B2E801D90
Certificate serial:       59E59464BD6BE346CEC1F2F12A1D9D4E6C6D5F50
Authority key identifier: 73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa
Signing time:             Tue 05 Sep 2023 05:00:00 +0000
ROA not before:           Tue 05 Sep 2023 04:55:00 +0000
ROA not after:            Tue 03 Sep 2024 05:00:00 +0000
asID:                     147105
IP address blocks:        103.174.232.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl
                          rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e5:94:64:bd:6b:e3:46:ce:c1:f2:f1:2a:1d:9d:4e:6c:6d:5f:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73B96F5AC43A4212760D6629FB36B21B2E801D90
        Validity
            Not Before: Sep  5 04:55:00 2023 GMT
            Not After : Sep  3 05:00:00 2024 GMT
        Subject: CN=E9F10FB2137FA6AC0A60CBA21509A4C324966096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:95:31:ce:b4:b1:4f:d6:6c:d3:1d:80:c1:f5:
                    ce:1e:79:35:b2:02:44:44:af:96:78:4d:45:3a:58:
                    b6:19:f9:bb:dc:c4:07:f9:b9:d3:de:3f:65:85:fe:
                    fd:e4:8f:23:ba:11:bd:8b:04:04:f7:c9:5c:3a:ab:
                    c5:06:7d:e1:fd:04:52:60:1f:b3:89:d8:0f:66:0d:
                    a3:38:99:30:c8:d7:fb:3e:0c:af:c1:88:e6:b4:d3:
                    34:72:c5:59:f7:31:cc:fe:13:4c:94:0c:89:0c:92:
                    24:41:ea:65:7f:4b:59:ef:af:5b:e2:7d:5b:ce:ee:
                    ad:9b:da:91:ef:1b:91:8b:79:24:20:ad:66:ba:ca:
                    e4:c8:f7:75:ce:7f:95:d0:55:b5:9f:9f:2a:08:c2:
                    39:8d:99:eb:67:fd:5c:e5:1f:e7:38:86:2b:be:db:
                    34:64:6b:46:f7:ea:78:31:37:f0:48:64:29:bb:b8:
                    ee:7c:e6:ae:65:39:ca:43:78:d5:3e:6f:07:4e:5d:
                    6a:01:99:1a:7e:0d:48:f7:6d:d2:65:b3:dc:02:0a:
                    1f:a0:5a:6c:ad:0f:5d:e2:93:4d:ba:6f:16:3f:ce:
                    0f:ff:67:6d:f5:1c:1d:cf:af:b2:5f:4e:34:93:f8:
                    b9:44:3c:33:09:48:9e:67:af:4b:c8:01:6d:e4:96:
                    1b:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:F1:0F:B2:13:7F:A6:AC:0A:60:CB:A2:15:09:A4:C3:24:96:60:96
            X509v3 Authority Key Identifier:
                keyid:73:B9:6F:5A:C4:3A:42:12:76:0D:66:29:FB:36:B2:1B:2E:80:1D:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/73B96F5AC43A4212760D6629FB36B21B2E801D90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73B96F5AC43A4212760D6629FB36B21B2E801D90.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6cbea81d-85ac-40a5-a7f5-3fa362b17bcb/0/3130332e3137342e3233322e302f32332d3234203d3e20313437313035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.232.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:50:2d:30:85:b6:01:2a:38:97:f3:6c:92:87:6a:c9:7a:
         6d:1d:47:11:36:dc:3d:80:f9:8f:c6:39:ae:70:43:2a:b8:c4:
         24:9a:7e:e7:47:7b:9c:d7:9d:e8:33:f4:f1:d9:03:c2:36:d2:
         05:78:0e:0f:8e:79:67:76:66:a3:0a:bd:dd:45:88:8f:fc:d8:
         2f:59:ff:2f:5c:b1:51:46:f0:7a:aa:74:f5:b7:c3:cc:54:c7:
         b7:09:e3:cf:a8:77:d9:6a:33:79:ed:ce:4a:1d:a8:9d:15:18:
         f2:8b:26:35:f2:88:a8:aa:6c:64:52:0a:49:91:b3:a0:e4:d5:
         27:bd:cb:48:ee:22:fe:7a:5a:0e:ef:fb:a8:27:b5:41:c5:d4:
         ee:5e:18:bc:2f:90:bb:56:fa:2b:bd:7d:63:30:3b:59:97:1e:
         43:27:cc:0c:ce:d4:a2:e5:45:f9:9e:fc:59:e5:de:4b:fb:07:
         93:43:27:2a:68:e2:2b:82:d9:34:d2:fb:28:41:f9:67:f0:20:
         7a:e0:76:3a:a0:8e:61:3e:c6:25:74:a6:1f:ff:e4:5a:97:db:
         da:06:7f:37:ec:04:9a:f1:d2:4c:d6:42:5d:f7:87:72:ef:0c:
         10:17:92:af:98:30:53:f3:13:0f:48:52:46:73:cb:27:19:bf:
         20:71:12:e3
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWeWUZL1r40bOwfLxKh2dTmxtX1AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIy
RTgwMUQ5MDAeFw0yMzA5MDUwNDU1MDBaFw0yNDA5MDMwNTAwMDBaMDMxMTAvBgNV
BAMTKEU5RjEwRkIyMTM3RkE2QUMwQTYwQ0JBMjE1MDlBNEMzMjQ5NjYwOTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCklTHOtLFP1mzTHYDB9c4eeTWy
AkREr5Z4TUU6WLYZ+bvcxAf5udPeP2WF/v3kjyO6Eb2LBAT3yVw6q8UGfeH9BFJg
H7OJ2A9mDaM4mTDI1/s+DK/BiOa00zRyxVn3Mcz+E0yUDIkMkiRB6mV/S1nvr1vi
fVvO7q2b2pHvG5GLeSQgrWa6yuTI93XOf5XQVbWfnyoIwjmNmetn/VzlH+c4hiu+
2zRka0b36ngxN/BIZCm7uO585q5lOcpDeNU+bwdOXWoBmRp+DUj3bdJls9wCCh+g
WmytD13ik026bxY/zg//Z231HB3Pr7JfTjST+LlEPDMJSJ5nr0vIAW3klhsbAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU6fEPshN/pqwKYMuiFQmkwySWYJYwHwYDVR0j
BBgwFoAUc7lvWsQ6QhJ2DWYp+zayGy6AHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Y2JlYTgxZC04NWFjLTQwYTUtYTdmNS0zZmEzNjJiMTdiY2IvMC83M0I5NkY1QUM0
M0E0MjEyNzYwRDY2MjlGQjM2QjIxQjJFODAxRDkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCOTZGNUFDNDNBNDIxMjc2MEQ2NjI5RkIzNkIyMUIyRTgw
MUQ5MC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjYmVhODFkLTg1YWMtNDBhNS1h
N2Y1LTNmYTM2MmIxN2JjYi8wLzMxMzAzMzJlMzEzNzM0MmUzMjMzMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTMwMzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnrugwDQYJ
KoZIhvcNAQELBQADggEBAFKyUC0whbYBKjiX82ySh2rJem0dRxE23D2A+Y/GOa5w
Qyq4xCSafudHe5zXnegz9PHZA8I20gV4Dg+OeWd2ZqMKvd1FiI/82C9Z/y9csVFG
8HqqdPW3w8xUx7cJ48+od9lqM3ntzkodqJ0VGPKLJjXyiKiqbGRSCkmRs6Dk1Se9
y0juIv56Wg7v+6gntUHF1O5eGLwvkLtW+iu9fWMwO1mXHkMnzAzO1KLlRfme/Fnl
3kv7B5NDJypo4iuC2TTS+yhB+WfwIHrgdjqgjmE+xiV0ph//5FqX29oGfzfsBJrx
0kzWQl33h3LvDBAXkq+YMFPzEw9IUkZzyycZvyBxEuM=
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:50:19 2024 by rpki-client on console-ams.rpki-client.org