Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa
File:                     3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa (raw, json)
Hash identifier:          4s9IftYaQt421MSMHDjzz8PeI+HBNABsHOrvrRTWyRM=
Subject key identifier:   4C:E9:6C:0A:49:0A:74:45:DF:C1:0B:74:72:56:46:8E:78:3B:9D:A0
Certificate issuer:       /CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
Certificate serial:       7942A4C1AC5DB94918796EC8679C085C1395B127
Authority key identifier: E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa
Signing time:             Thu 15 Feb 2024 07:00:00 +0000
ROA not before:           Thu 15 Feb 2024 06:55:00 +0000
ROA not after:            Thu 13 Feb 2025 07:00:00 +0000
asID:                     142347
IP address blocks:        103.101.218.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl
                          rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:42:a4:c1:ac:5d:b9:49:18:79:6e:c8:67:9c:08:5c:13:95:b1:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0AC9F73542C4FA1E52F9E565EED952D4528ABD5
        Validity
            Not Before: Feb 15 06:55:00 2024 GMT
            Not After : Feb 13 07:00:00 2025 GMT
        Subject: CN=4CE96C0A490A7445DFC10B747256468E783B9DA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:95:ee:16:c7:a4:c1:9e:b7:ca:00:19:a0:0e:
                    3c:da:27:ec:5e:de:1d:19:e7:83:1e:5b:f0:ac:8f:
                    0b:57:20:2d:c6:ba:ac:ad:61:da:ad:75:a9:35:e0:
                    4c:7c:22:c6:cc:1c:e1:8a:16:9d:67:b1:10:a9:f4:
                    60:dc:e1:0a:d1:3d:58:a4:93:99:75:bd:34:78:58:
                    4e:27:7b:a5:65:98:e0:34:f7:e6:6b:10:e8:e6:61:
                    d0:35:9f:bc:b7:4d:c1:d1:fc:51:28:50:1e:61:98:
                    28:ea:3d:67:5b:5d:e1:e7:65:c7:52:e6:a6:ca:be:
                    68:9a:8d:62:5d:a2:42:16:b7:21:ee:00:66:db:4e:
                    77:de:e8:e4:a5:14:97:ce:3a:f7:7c:76:0d:5c:2c:
                    3a:29:ec:78:5b:28:63:8a:1f:a4:c5:c0:27:5c:73:
                    75:e9:d7:d1:4f:b5:23:2e:59:41:f8:f8:f3:18:ac:
                    d2:7d:e0:35:12:56:3c:e4:a7:b2:11:5c:0f:58:17:
                    d4:74:69:61:5b:5d:cd:e4:c1:ff:25:d6:bc:ea:23:
                    dc:ed:0e:62:b6:04:6a:27:0f:98:43:4f:47:47:0c:
                    1a:ae:a8:12:b6:58:1d:1a:c6:7d:4e:f9:10:62:d8:
                    9e:50:f3:1a:b0:f3:1e:59:0f:95:e6:b0:d6:5c:4b:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:6C:0A:49:0A:74:45:DF:C1:0B:74:72:56:46:8E:78:3B:9D:A0
            X509v3 Authority Key Identifier:
                keyid:E0:AC:9F:73:54:2C:4F:A1:E5:2F:9E:56:5E:ED:95:2D:45:28:AB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0AC9F73542C4FA1E52F9E565EED952D4528ABD5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ef0013b-59a6-4733-89f8-28fa3d88579f/0/3130332e3130312e3231382e302f32332d3234203d3e20313432333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.101.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:33:f5:82:29:53:b5:a9:27:2c:52:cc:ce:e4:5d:e6:70:2c:
         85:73:08:2c:12:48:c4:f9:a4:d7:a6:de:76:08:89:73:52:54:
         cc:86:b5:96:d2:05:b9:0c:6d:11:8d:85:fb:16:15:d4:08:38:
         76:12:8f:6b:e7:33:c4:41:64:ce:fe:b6:4d:bc:c2:c7:35:b9:
         71:52:b0:83:36:43:46:35:fe:cd:77:60:53:4b:a9:34:93:30:
         d9:23:1b:3e:76:35:e5:0e:08:cf:2c:71:fe:70:6d:6c:8e:d7:
         e8:45:66:fc:d6:db:c8:12:7d:a8:ea:78:29:6d:c4:b4:8d:30:
         a1:04:85:6a:53:0c:51:f2:de:fc:96:6c:da:9b:c6:10:62:16:
         85:12:b2:fc:07:60:d8:0a:48:2d:0a:93:3c:9e:b1:82:64:bc:
         be:3c:b3:7d:7c:b1:ea:cf:42:d5:92:bf:3c:d7:a4:f3:0f:73:
         89:3f:06:58:85:e8:07:bb:79:ca:3a:a3:f8:b9:ae:e6:51:b5:
         23:8b:49:36:f0:e8:9e:06:d4:22:4a:03:cf:dd:09:8b:14:98:
         2e:5e:bb:ed:90:06:c7:6b:5e:03:63:79:b8:96:55:c3:52:b5:
         1a:c8:4c:bd:08:8c:68:fc:f6:d5:29:9e:9d:79:fd:02:4d:5c:
         7c:14:10:1d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeUKkwaxduUkYeW7IZ5wIXBOVsScwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0
NTI4QUJENTAeFw0yNDAyMTUwNjU1MDBaFw0yNTAyMTMwNzAwMDBaMDMxMTAvBgNV
BAMTKDRDRTk2QzBBNDkwQTc0NDVERkMxMEI3NDcyNTY0NjhFNzgzQjlEQTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCule4Wx6TBnrfKABmgDjzaJ+xe
3h0Z54MeW/CsjwtXIC3GuqytYdqtdak14Ex8IsbMHOGKFp1nsRCp9GDc4QrRPVik
k5l1vTR4WE4ne6VlmOA09+ZrEOjmYdA1n7y3TcHR/FEoUB5hmCjqPWdbXeHnZcdS
5qbKvmiajWJdokIWtyHuAGbbTnfe6OSlFJfOOvd8dg1cLDop7HhbKGOKH6TFwCdc
c3Xp19FPtSMuWUH4+PMYrNJ94DUSVjzkp7IRXA9YF9R0aWFbXc3kwf8l1rzqI9zt
DmK2BGonD5hDT0dHDBquqBK2WB0axn1O+RBi2J5Q8xqw8x5ZD5XmsNZcSwXBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUTOlsCkkKdEXfwQt0clZGjng7naAwHwYDVR0j
BBgwFoAU4Kyfc1QsT6HlL55WXu2VLUUoq9UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZWYwMDEzYi01OWE2LTQ3MzMtODlmOC0yOGZhM2Q4ODU3OWYvMC9FMEFDOUY3MzU0
MkM0RkExRTUyRjlFNTY1RUVEOTUyRDQ1MjhBQkQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTBBQzlGNzM1NDJDNEZBMUU1MkY5RTU2NUVFRDk1MkQ0NTI4
QUJENS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZlZjAwMTNiLTU5YTYtNDczMy04
OWY4LTI4ZmEzZDg4NTc5Zi8wLzMxMzAzMzJlMzEzMDMxMmUzMjMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM0Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnZdowDQYJ
KoZIhvcNAQELBQADggEBABoz9YIpU7WpJyxSzM7kXeZwLIVzCCwSSMT5pNem3nYI
iXNSVMyGtZbSBbkMbRGNhfsWFdQIOHYSj2vnM8RBZM7+tk28wsc1uXFSsIM2Q0Y1
/s13YFNLqTSTMNkjGz52NeUOCM8scf5wbWyO1+hFZvzW28gSfajqeCltxLSNMKEE
hWpTDFHy3vyWbNqbxhBiFoUSsvwHYNgKSC0KkzyesYJkvL48s318serPQtWSvzzX
pPMPc4k/BliF6Ae7eco6o/i5ruZRtSOLSTbw6J4G1CJKA8/dCYsUmC5eu+2QBsdr
XgNjebiWVcNStRrITL0IjGj89tUpnp15/QJNXHwUEB0=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:29:57 2024 by rpki-client on console-fra.rpki-client.org