Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
File:                     3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa (raw, json)
Hash identifier:          E63SGSxp1G+CnOFzBut8GLg5h3CIovw5zFnttNOuSxA=
Subject key identifier:   B0:45:E6:27:B7:F1:DD:C7:D9:29:9F:EF:01:CB:F9:DE:55:76:07:0D
Certificate issuer:       /CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
Certificate serial:       2654B5057135607A8693EDA0D1501B85ECAD131E
Authority key identifier: E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa
Signing time:             Sun 29 Oct 2023 18:00:01 +0000
ROA not before:           Sun 29 Oct 2023 17:55:01 +0000
ROA not after:            Sun 27 Oct 2024 18:00:01 +0000
asID:                     139952
IP address blocks:        103.175.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl
                          rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:54:b5:05:71:35:60:7a:86:93:ed:a0:d1:50:1b:85:ec:ad:13:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E07D333345CD7D30F1DC10D98F6E73457739DF18
        Validity
            Not Before: Oct 29 17:55:01 2023 GMT
            Not After : Oct 27 18:00:01 2024 GMT
        Subject: CN=B045E627B7F1DDC7D9299FEF01CBF9DE5576070D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f6:75:cf:ec:f8:f2:77:61:ae:b0:db:74:92:
                    83:26:dc:f2:ff:87:bf:0a:1d:d8:3e:36:2f:27:bf:
                    a7:95:b5:01:1b:17:31:9d:8f:9e:a3:43:f7:6b:c2:
                    c6:f9:ef:67:03:bf:3b:15:1c:8b:44:b5:39:cc:ac:
                    60:e9:c9:ac:73:6c:1b:46:d2:85:f4:d8:46:bf:9e:
                    1d:23:43:c0:bc:16:92:53:2d:d3:4c:57:9c:19:1f:
                    f7:57:0a:aa:2b:8a:16:f1:04:03:86:ca:c9:48:ee:
                    e7:a2:a0:89:be:1a:f4:70:09:00:d3:e9:d3:71:de:
                    96:0e:93:fa:2b:a2:b3:4e:4a:f4:f5:5a:c7:4c:12:
                    33:03:0a:f9:44:4a:86:52:f1:00:48:c3:a5:64:6f:
                    1d:e4:ce:08:c6:d7:5b:cb:99:ba:22:1a:a5:f5:88:
                    4c:ca:0b:45:83:e3:7d:aa:7c:2a:9e:41:4e:f2:09:
                    d6:8d:1b:8f:16:99:1d:4a:c2:31:a5:b4:62:ff:c1:
                    3a:c8:62:27:6f:bb:58:07:09:4c:84:6f:01:94:5a:
                    4e:71:4f:aa:50:e2:6f:89:28:be:da:14:1e:45:7d:
                    b7:25:69:4c:0c:3a:b4:7b:e6:a7:94:1e:01:12:ae:
                    79:2a:37:f3:6d:00:fa:9a:2c:c3:98:1f:4a:1e:2d:
                    01:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:45:E6:27:B7:F1:DD:C7:D9:29:9F:EF:01:CB:F9:DE:55:76:07:0D
            X509v3 Authority Key Identifier:
                keyid:E0:7D:33:33:45:CD:7D:30:F1:DC:10:D9:8F:6E:73:45:77:39:DF:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/E07D333345CD7D30F1DC10D98F6E73457739DF18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07D333345CD7D30F1DC10D98F6E73457739DF18.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e62880e-d5f2-4069-88ff-1267b7cc01c5/0/3130332e3137352e32352e302f32342d3234203d3e20313339393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:80:c0:20:a4:fc:f7:92:8f:a8:44:ea:27:4c:2b:38:53:22:
         1b:36:98:d1:d0:0a:4a:7b:83:92:53:7c:cf:9b:ab:13:6d:ee:
         ae:1a:18:71:27:fa:42:e4:44:36:0f:58:32:33:28:8a:01:94:
         fe:6b:17:1e:9d:1f:ae:e3:d5:4b:f2:12:b3:93:84:d6:f0:2c:
         4d:ab:6b:08:6a:b4:12:f9:b0:19:11:a2:c1:c3:fb:b4:a9:6a:
         e4:ff:9c:38:d2:8d:68:d6:7b:5a:a6:89:af:f5:26:e5:25:b3:
         00:32:ed:7d:92:44:4f:ae:ae:ba:9c:df:7c:2e:ab:88:43:14:
         64:9b:c4:fc:46:1c:49:83:10:d3:08:58:43:6a:a7:68:ab:91:
         83:d2:48:0f:b5:c3:b5:3b:21:6a:f2:9a:9d:3e:42:de:ba:af:
         3a:83:77:98:bc:f9:6c:50:51:e7:ec:56:26:36:a0:f8:0d:13:
         e2:52:0f:c6:61:d7:eb:dd:93:f0:d0:6b:e4:5a:4e:8f:f3:da:
         29:d0:9f:29:57:86:6c:d4:2f:e5:c6:68:90:ab:f6:a5:87:d8:
         45:f2:af:bc:3a:ba:29:64:5c:62:1e:94:97:5b:1e:4c:3b:2b:
         35:a7:8b:0a:f3:8c:77:dd:6b:37:95:dd:37:b9:ac:66:c9:45:
         87:f9:6f:e2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJlS1BXE1YHqGk+2g0VAbheytEx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3
NzM5REYxODAeFw0yMzEwMjkxNzU1MDFaFw0yNDEwMjcxODAwMDFaMDMxMTAvBgNV
BAMTKEIwNDVFNjI3QjdGMUREQzdEOTI5OUZFRjAxQ0JGOURFNTU3NjA3MEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCt9nXP7Pjyd2GusNt0koMm3PL/
h78KHdg+Ni8nv6eVtQEbFzGdj56jQ/drwsb572cDvzsVHItEtTnMrGDpyaxzbBtG
0oX02Ea/nh0jQ8C8FpJTLdNMV5wZH/dXCqorihbxBAOGyslI7ueioIm+GvRwCQDT
6dNx3pYOk/ororNOSvT1WsdMEjMDCvlESoZS8QBIw6Vkbx3kzgjG11vLmboiGqX1
iEzKC0WD432qfCqeQU7yCdaNG48WmR1KwjGltGL/wTrIYidvu1gHCUyEbwGUWk5x
T6pQ4m+JKL7aFB5FfbclaUwMOrR75qeUHgESrnkqN/NtAPqaLMOYH0oeLQH5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUsEXmJ7fx3cfZKZ/vAcv53lV2Bw0wHwYDVR0j
BBgwFoAU4H0zM0XNfTDx3BDZj25zRXc53xgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTYyODgwZS1kNWYyLTQwNjktODhmZi0xMjY3YjdjYzAxYzUvMC9FMDdEMzMzMzQ1
Q0Q3RDMwRjFEQzEwRDk4RjZFNzM0NTc3MzlERjE4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTA3RDMzMzM0NUNEN0QzMEYxREMxMEQ5OEY2RTczNDU3NzM5
REYxOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlNjI4ODBlLWQ1ZjItNDA2OS04
OGZmLTEyNjdiN2NjMDFjNS8wLzMxMzAzMzJlMzEzNzM1MmUzMjM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ68ZMA0GCSqG
SIb3DQEBCwUAA4IBAQAXgMAgpPz3ko+oROonTCs4UyIbNpjR0ApKe4OSU3zPm6sT
be6uGhhxJ/pC5EQ2D1gyMyiKAZT+axcenR+u49VL8hKzk4TW8CxNq2sIarQS+bAZ
EaLBw/u0qWrk/5w40o1o1ntapomv9SblJbMAMu19kkRPrq66nN98LquIQxRkm8T8
RhxJgxDTCFhDaqdoq5GD0kgPtcO1OyFq8pqdPkLeuq86g3eYvPlsUFHn7FYmNqD4
DRPiUg/GYdfr3ZPw0GvkWk6P89op0J8pV4Zs1C/lxmiQq/alh9hF8q+8OropZFxi
HpSXWx5MOys1p4sK84x33Ws3ld03uaxmyUWH+W/i
-----END CERTIFICATE-----
Generated at Fri Jun 21 15:50:40 2024 by rpki-client on console-ams.rpki-client.org