Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3233203d3e203634333030.roa
File:                     3130332e31332e3230342e302f32332d3233203d3e203634333030.roa (raw, json)
Hash identifier:          8eQ+uaWhj/8JC0Q6bqQ5W3D+o9R0y8BNfV+loOSXNIY=
Subject key identifier:   E8:D6:D4:93:92:2D:30:C8:36:78:72:BC:17:00:97:3B:01:B2:90:CE
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       1920948A06D1F35941511C117B30999F247779B6
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3233203d3e203634333030.roa
Signing time:             Fri 07 Jun 2024 15:45:49 +0000
ROA not before:           Fri 07 Jun 2024 15:40:49 +0000
ROA not after:            Fri 06 Jun 2025 15:45:49 +0000
asID:                     64300
IP address blocks:        103.13.204.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 10:53:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:20:94:8a:06:d1:f3:59:41:51:1c:11:7b:30:99:9f:24:77:79:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jun  7 15:40:49 2024 GMT
            Not After : Jun  6 15:45:49 2025 GMT
        Subject: CN=E8D6D493922D30C8367872BC1700973B01B290CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:37:2d:a4:dc:af:80:87:65:b4:86:5a:75:a7:
                    f5:00:0e:a8:7a:47:e9:af:39:ac:15:93:a0:a9:25:
                    5d:6b:e3:b2:3c:90:28:20:fe:65:ce:e5:e9:02:c4:
                    7a:14:9f:99:23:a9:77:f1:26:77:26:5a:c6:cf:07:
                    3c:d5:c8:12:62:47:b9:1e:8a:70:28:19:8d:68:6a:
                    80:06:55:84:7e:9e:42:29:6a:e6:38:d9:6f:f2:85:
                    c8:47:c8:72:9d:2d:19:fa:3e:27:b7:d2:07:38:0e:
                    b4:0b:7b:0d:1e:71:1b:ed:2e:56:81:98:f3:41:0f:
                    78:52:c0:4c:b1:47:bb:e7:d2:45:99:2f:59:47:1b:
                    e9:ae:0b:c8:8a:68:fc:5b:1f:19:07:f7:eb:fb:eb:
                    10:03:cf:d2:d4:19:87:04:9f:af:c0:c6:6b:b1:a4:
                    c9:21:ad:f4:23:95:30:98:63:75:8e:72:4f:91:3b:
                    a1:74:c2:8b:5e:d2:c2:e1:46:c5:d5:68:05:23:73:
                    5a:f6:04:71:f1:04:89:00:79:03:f2:98:67:c1:58:
                    c9:b2:b6:50:a2:77:ba:47:e8:3f:2d:6a:c1:af:9a:
                    cb:71:b1:e4:b7:38:4b:18:62:db:bc:dd:eb:b9:dc:
                    ce:38:f2:88:49:de:6a:e8:4e:79:44:73:21:13:c6:
                    3a:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D6:D4:93:92:2D:30:C8:36:78:72:BC:17:00:97:3B:01:B2:90:CE
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32332d3233203d3e203634333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a5:29:5d:0b:b1:89:43:f3:9f:9b:c7:e2:02:ef:bc:dd:53:0f:
         ba:f2:14:c8:cb:26:6f:1a:2c:95:7f:e2:43:51:96:16:b9:c0:
         d2:39:ef:d9:6c:44:a5:1c:19:50:b0:37:2b:84:f8:c6:b6:bb:
         ba:23:8d:87:cd:2f:1b:ad:78:b4:7b:81:20:f2:3a:7d:95:48:
         b4:13:23:e0:99:2b:0e:e2:71:35:02:fc:b4:3c:03:c9:17:a9:
         ac:f5:02:29:7d:66:5a:99:6d:13:9c:d9:f5:72:21:3e:85:d1:
         15:a4:d4:87:fb:10:dd:a6:59:da:82:b0:ed:7e:4c:66:78:4f:
         2f:b5:d7:20:f6:b7:15:15:aa:21:70:62:25:da:d7:57:86:fe:
         d7:16:5d:49:cf:d6:e3:07:90:5a:e2:f4:53:bc:77:b1:0d:8e:
         94:e7:32:44:9c:72:49:84:15:f7:5d:1b:40:6a:db:71:2e:d5:
         f4:0e:f5:0b:74:05:5c:83:71:73:d0:1d:d7:8f:f3:75:68:50:
         75:0f:c7:5e:f7:36:bd:1d:54:77:7f:3c:0b:1f:08:d0:ed:00:
         c7:93:8e:53:98:6d:46:3c:26:9e:66:a2:52:f1:f1:fc:02:65:
         a3:3b:dc:eb:c4:44:ac:ad:c5:c0:f6:8c:21:c6:f8:91:e4:21:
         7b:2b:43:f0
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGSCUigbR81lBURwRezCZnyR3ebYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky
QzQwNkQ5QjAeFw0yNDA2MDcxNTQwNDlaFw0yNTA2MDYxNTQ1NDlaMDMxMTAvBgNV
BAMTKEU4RDZENDkzOTIyRDMwQzgzNjc4NzJCQzE3MDA5NzNCMDFCMjkwQ0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXNy2k3K+Ah2W0hlp1p/UADqh6
R+mvOawVk6CpJV1r47I8kCgg/mXO5ekCxHoUn5kjqXfxJncmWsbPBzzVyBJiR7ke
inAoGY1oaoAGVYR+nkIpauY42W/yhchHyHKdLRn6Pie30gc4DrQLew0ecRvtLlaB
mPNBD3hSwEyxR7vn0kWZL1lHG+muC8iKaPxbHxkH9+v76xADz9LUGYcEn6/Axmux
pMkhrfQjlTCYY3WOck+RO6F0wote0sLhRsXVaAUjc1r2BHHxBIkAeQPymGfBWMmy
tlCid7pH6D8tasGvmstxseS3OEsYYtu83eu53M448ohJ3mroTnlEcyETxjqDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU6NbUk5ItMMg2eHK8FwCXOwGykM4wHwYDVR0j
BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2
QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw
NkQ5Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i
NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzYzNDMzMzAzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcNzDANBgkqhkiG
9w0BAQsFAAOCAQEApSldC7GJQ/Ofm8fiAu+83VMPuvIUyMsmbxoslX/iQ1GWFrnA
0jnv2WxEpRwZULA3K4T4xra7uiONh80vG614tHuBIPI6fZVItBMj4JkrDuJxNQL8
tDwDyReprPUCKX1mWpltE5zZ9XIhPoXRFaTUh/sQ3aZZ2oKw7X5MZnhPL7XXIPa3
FRWqIXBiJdrXV4b+1xZdSc/W4weQWuL0U7x3sQ2OlOcyRJxySYQV910bQGrbcS7V
9A71C3QFXINxc9Ad14/zdWhQdQ/HXvc2vR1Ud388Cx8I0O0Ax5OOU5htRjwmnmai
UvHx/AJlozvc68RErK3FwPaMIcb4keQheytD8A==
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:55:38 2024 by rpki-client on console-ams.rpki-client.org