Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          Ss59sjtuzZzHxU4wVgffc5lRWrpUhdlYbl1sQ1q9oHY=
Subject key identifier:   84:7E:0F:C3:57:E6:CF:77:E5:0B:2C:5E:6F:5C:65:93:00:5D:67:F4
Certificate issuer:       /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Certificate serial:       168EE33407F64DB185821EDAA1E2256C8927B7D8
Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 29 Sep 2024 18:00:01 +0000
ROA not before:           Sun 29 Sep 2024 17:55:01 +0000
ROA not after:            Sun 28 Sep 2025 18:00:01 +0000
asID:                     139952
IP address blocks:        103.175.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
                          rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 22:30:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:8e:e3:34:07:f6:4d:b1:85:82:1e:da:a1:e2:25:6c:89:27:b7:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
        Validity
            Not Before: Sep 29 17:55:01 2024 GMT
            Not After : Sep 28 18:00:01 2025 GMT
        Subject: CN=847E0FC357E6CF77E50B2C5E6F5C6593005D67F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f5:0a:13:dc:24:22:04:18:73:6f:63:46:01:
                    c4:44:71:d8:c6:1e:f0:3d:61:a2:48:5f:4a:ee:52:
                    67:34:22:06:60:02:10:8c:66:a2:9f:8b:7f:4a:f6:
                    ce:65:df:5a:35:88:8b:d1:4c:be:65:61:d9:a1:ba:
                    84:e0:f8:6f:3f:d9:d1:e0:31:22:18:f8:9b:f1:58:
                    e4:94:84:b9:c1:05:a0:e0:20:3f:b0:0b:88:b4:8a:
                    f0:65:62:4d:1b:0d:85:87:0b:79:ec:7d:2e:3e:b4:
                    5f:88:71:78:fc:1b:72:74:22:ef:08:5f:00:d6:96:
                    fc:ea:a7:aa:c5:6f:f2:51:40:60:04:4a:07:dd:a0:
                    e2:e5:ad:d1:36:48:49:7d:59:45:8f:d5:68:25:2e:
                    15:3f:8a:4f:36:8d:7f:24:d8:bd:75:35:75:fc:70:
                    55:ad:ce:fc:5b:16:32:b4:63:67:6b:20:e8:0d:16:
                    16:3b:37:6a:31:4c:86:aa:e4:77:6d:33:21:57:aa:
                    41:71:c7:d8:77:09:ab:1a:98:cd:02:a9:97:f6:e2:
                    cb:23:da:b4:90:90:6d:a1:bc:87:47:2d:ad:f3:70:
                    3b:52:ec:50:ca:db:e3:49:ed:68:d3:6a:c4:a3:d8:
                    3b:95:c0:ef:01:3b:ac:88:d0:c9:c1:18:ac:95:81:
                    ca:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:7E:0F:C3:57:E6:CF:77:E5:0B:2C:5E:6F:5C:65:93:00:5D:67:F4
            X509v3 Authority Key Identifier:
                keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:dc:cc:5d:9a:e4:81:82:a3:18:30:ae:83:84:20:ad:f5:9c:
         c9:ff:3d:55:e5:2a:d3:e9:f0:83:46:b0:8c:00:ec:8a:8d:8f:
         e7:a2:25:91:7a:eb:00:99:cb:41:f2:2f:a6:f7:4b:03:58:bb:
         15:0a:e6:73:23:e2:2e:80:63:ba:5b:a5:d8:fd:3c:c8:65:4b:
         e2:c6:b6:d9:e3:c3:16:15:20:76:38:29:af:de:7d:49:44:81:
         0d:6a:2b:62:47:e4:ab:8a:89:37:5a:d3:81:ce:74:4a:a0:03:
         14:cb:be:18:39:8d:bd:bc:4b:b4:70:16:b7:ac:75:88:8c:d2:
         3e:75:a8:f5:72:30:a8:01:89:f5:e2:3f:7b:06:45:c8:67:10:
         6f:e6:f8:24:f1:fb:bb:26:a7:da:61:59:46:53:19:1a:a1:08:
         a9:50:f7:bf:5c:b2:4d:39:29:73:2d:a4:47:e5:92:72:26:18:
         80:c7:50:f1:35:cf:a3:36:e0:1a:a7:84:64:ba:59:ef:02:6b:
         34:01:6f:a4:c4:db:99:54:30:65:16:cb:15:3b:97:39:35:42:
         c0:52:ed:1c:bb:05:8f:1f:3c:ec:c2:c3:65:e7:c4:9f:07:2b:
         13:a3:da:93:eb:87:cc:58:e6:cb:00:a7:1a:84:6c:3d:2f:04:
         2c:00:4a:96
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFo7jNAf2TbGFgh7aoeIlbIknt9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3
NzM5REYxODAeFw0yNDA5MjkxNzU1MDFaFw0yNTA5MjgxODAwMDFaMDMxMTAvBgNV
BAMTKDg0N0UwRkMzNTdFNkNGNzdFNTBCMkM1RTZGNUM2NTkzMDA1RDY3RjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe9QoT3CQiBBhzb2NGAcREcdjG
HvA9YaJIX0ruUmc0IgZgAhCMZqKfi39K9s5l31o1iIvRTL5lYdmhuoTg+G8/2dHg
MSIY+JvxWOSUhLnBBaDgID+wC4i0ivBlYk0bDYWHC3nsfS4+tF+IcXj8G3J0Iu8I
XwDWlvzqp6rFb/JRQGAESgfdoOLlrdE2SEl9WUWP1WglLhU/ik82jX8k2L11NXX8
cFWtzvxbFjK0Y2drIOgNFhY7N2oxTIaq5HdtMyFXqkFxx9h3CasamM0CqZf24ssj
2rSQkG2hvIdHLa3zcDtS7FDK2+NJ7WjTasSj2DuVwO8BO6yI0MnBGKyVgcpVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhH4Pw1fmz3flCyxeb1xlkwBdZ/QwHwYDVR0j
BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1
Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5
REYxOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNjI4ODBlLWQ1ZjItNDA2OS04
OGZmLTEyNjdiN2NjMDFjNS8wLzMxMzAzMzJlMzEzNzM1MmUzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68ZMA0GCSqG
SIb3DQEBCwUAA4IBAQDH3MxdmuSBgqMYMK6DhCCt9ZzJ/z1V5SrT6fCDRrCMAOyK
jY/noiWReusAmctB8i+m90sDWLsVCuZzI+IugGO6W6XY/TzIZUvixrbZ48MWFSB2
OCmv3n1JRIENaitiR+Sriok3WtOBznRKoAMUy74YOY29vEu0cBa3rHWIjNI+daj1
cjCoAYn14j97BkXIZxBv5vgk8fu7JqfaYVlGUxkaoQipUPe/XLJNOSlzLaRH5ZJy
JhiAx1DxNc+jNuAap4RkulnvAms0AW+kxNuZVDBlFssVO5c5NULAUu0cuwWPHzzs
wsNl58SfBysTo9qT64fMWObLAKcahGw9LwQsAEqW
-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org