Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313339393439.roa
File:                     3130332e36382e322e302f32342d3234203d3e20313339393439.roa (raw, json)
Hash identifier:          MKiHv39O/FuIttcvRgxpigwD+tO0o2VCAy2mnbqE4kE=
Subject key identifier:   01:31:3D:31:F3:56:3D:2F:6B:F8:B4:7A:39:88:34:CF:7B:6C:73:EF
Certificate issuer:       /CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
Certificate serial:       59214513B2A45A65594924F2F04BB80AE1516968
Authority key identifier: 73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313339393439.roa
Signing time:             Wed 21 Aug 2024 08:48:56 +0000
ROA not before:           Wed 21 Aug 2024 08:43:56 +0000
ROA not after:            Wed 20 Aug 2025 08:48:56 +0000
asID:                     139949
IP address blocks:        103.68.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl
                          rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:21:45:13:b2:a4:5a:65:59:49:24:f2:f0:4b:b8:0a:e1:51:69:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73BD266EEF13136ED4F4E96AB4984B5A0E310448
        Validity
            Not Before: Aug 21 08:43:56 2024 GMT
            Not After : Aug 20 08:48:56 2025 GMT
        Subject: CN=01313D31F3563D2F6BF8B47A398834CF7B6C73EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e5:bd:0c:4f:18:0d:9d:c3:d5:4b:7f:30:33:
                    37:61:5a:2c:81:de:ef:01:6f:4f:f5:21:71:0c:02:
                    aa:c4:4a:e7:e9:66:58:4d:6a:8e:a5:91:9f:17:a1:
                    01:21:bb:fe:75:e8:52:fa:29:33:1e:3e:5a:33:86:
                    27:fb:e7:86:45:81:8f:0f:da:d8:66:4d:e9:b1:7c:
                    32:52:6b:b1:d6:0b:e1:26:6d:2c:50:ac:47:82:78:
                    31:ab:bc:70:db:19:eb:73:9f:5d:78:dd:39:69:1a:
                    d2:a8:f8:86:0b:5a:b6:60:48:0d:33:8e:54:76:38:
                    2a:48:84:7b:f3:72:2d:50:64:58:f1:6c:c7:35:b3:
                    a1:8c:3c:ae:9a:3e:3c:b3:18:47:0f:1f:44:c8:b9:
                    e2:7e:05:4d:eb:44:4f:b0:f8:c4:ef:01:9c:9f:61:
                    18:29:fd:ba:3b:32:ed:44:1a:2a:5e:a9:ec:c7:b9:
                    e3:fd:f6:8c:a0:36:da:3a:87:ab:19:0c:75:6b:84:
                    d6:41:15:a0:e9:a9:5e:04:53:44:2f:ca:d8:3d:55:
                    f5:e5:77:95:32:21:d3:70:a1:b6:d9:00:86:3b:48:
                    b3:1c:23:62:fe:bd:0f:69:71:c9:18:93:7a:7c:62:
                    00:3a:03:f4:33:34:f2:ba:be:8d:79:38:d4:61:f4:
                    d1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:31:3D:31:F3:56:3D:2F:6B:F8:B4:7A:39:88:34:CF:7B:6C:73:EF
            X509v3 Authority Key Identifier:
                keyid:73:BD:26:6E:EF:13:13:6E:D4:F4:E9:6A:B4:98:4B:5A:0E:31:04:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/73BD266EEF13136ED4F4E96AB4984B5A0E310448.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73BD266EEF13136ED4F4E96AB4984B5A0E310448.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6e97dbc6-9374-42e2-a3d0-879ed6a19196/0/3130332e36382e322e302f32342d3234203d3e20313339393439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.68.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:50:37:86:04:af:69:56:19:18:44:22:01:12:93:c7:e8:aa:
         1e:8e:8e:bd:37:72:76:45:25:08:93:dc:4d:8a:c9:ea:48:ef:
         ef:0b:2e:14:67:fb:21:32:5d:80:78:d9:8e:8c:bb:98:0d:af:
         cd:7c:75:4d:7d:0d:a8:f3:fd:bf:4b:27:9c:b3:5c:88:52:55:
         2e:fe:d9:f5:b4:a7:01:78:b8:52:42:a1:e7:fc:78:35:be:c7:
         e8:f5:85:d2:1e:41:de:96:14:cc:4e:75:1b:80:13:db:a0:7a:
         5c:18:79:54:33:5c:28:d9:89:40:c0:48:d9:1d:33:b5:28:2b:
         d1:c1:81:55:5c:66:cf:47:65:40:9d:fe:bb:42:85:a8:d8:86:
         2e:5e:54:cc:f1:2d:99:19:87:df:88:ee:4a:41:95:a3:44:0b:
         1b:0f:8d:f6:4a:15:5d:e3:ed:45:e9:f2:0a:7d:76:06:88:1f:
         5e:d8:1b:f4:2e:d9:25:65:48:40:74:9c:a3:09:a9:82:81:23:
         ce:78:91:b2:37:7e:e9:18:9d:97:5d:44:c9:8d:69:98:c5:21:
         3d:3b:b7:7b:0f:00:eb:59:16:90:05:61:b8:ae:0d:3b:93:84:
         0f:3c:1c:1a:98:eb:dc:5a:0e:77:bb:ac:6a:01:96:0a:c8:8a:
         da:a4:d3:d7
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUWSFFE7KkWmVZSSTy8Eu4CuFRaWgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEw
RTMxMDQ0ODAeFw0yNDA4MjEwODQzNTZaFw0yNTA4MjAwODQ4NTZaMDMxMTAvBgNV
BAMTKDAxMzEzRDMxRjM1NjNEMkY2QkY4QjQ3QTM5ODgzNENGN0I2QzczRUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC55b0MTxgNncPVS38wMzdhWiyB
3u8Bb0/1IXEMAqrESufpZlhNao6lkZ8XoQEhu/516FL6KTMePlozhif754ZFgY8P
2thmTemxfDJSa7HWC+EmbSxQrEeCeDGrvHDbGetzn1143TlpGtKo+IYLWrZgSA0z
jlR2OCpIhHvzci1QZFjxbMc1s6GMPK6aPjyzGEcPH0TIueJ+BU3rRE+w+MTvAZyf
YRgp/bo7Mu1EGipeqezHueP99oygNto6h6sZDHVrhNZBFaDpqV4EU0Qvytg9VfXl
d5UyIdNwobbZAIY7SLMcI2L+vQ9pcckYk3p8YgA6A/QzNPK6vo15ONRh9NGXAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUATE9MfNWPS9r+LR6OYg0z3tsc+8wHwYDVR0j
BBgwFoAUc70mbu8TE27U9OlqtJhLWg4xBEgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZTk3ZGJjNi05Mzc0LTQyZTItYTNkMC04NzllZDZhMTkxOTYvMC83M0JEMjY2RUVG
MTMxMzZFRDRGNEU5NkFCNDk4NEI1QTBFMzEwNDQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzNCRDI2NkVFRjEzMTM2RUQ0RjRFOTZBQjQ5ODRCNUEwRTMx
MDQ0OC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlOTdkYmM2LTkzNzQtNDJlMi1h
M2QwLTg3OWVkNmExOTE5Ni8wLzMxMzAzMzJlMzYzODJlMzIyZTMwMmYzMjM0MmQz
MjM0MjAzZDNlMjAzMTMzMzkzOTM0Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnRAIwDQYJKoZIhvcN
AQELBQADggEBAClQN4YEr2lWGRhEIgESk8foqh6Ojr03cnZFJQiT3E2KyepI7+8L
LhRn+yEyXYB42Y6Mu5gNr818dU19Dajz/b9LJ5yzXIhSVS7+2fW0pwF4uFJCoef8
eDW+x+j1hdIeQd6WFMxOdRuAE9ugelwYeVQzXCjZiUDASNkdM7UoK9HBgVVcZs9H
ZUCd/rtChajYhi5eVMzxLZkZh9+I7kpBlaNECxsPjfZKFV3j7UXp8gp9dgaIH17Y
G/Qu2SVlSEB0nKMJqYKBI854kbI3fukYnZddRMmNaZjFIT07t3sPAOtZFpAFYbiu
DTuThA88HBqY69xaDne7rGoBlgrIitqk09c=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org