Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa
File:                     3130332e31332e3230342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          ooe5BvLckN2pDrtsCZ8RIaZPhdP7MMJRdzzFayWAIi0=
Subject key identifier:   64:91:5E:F4:C4:17:9A:B4:63:70:75:A7:53:61:15:FB:34:63:4A:C5
Certificate issuer:       /CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
Certificate serial:       2E76D7E5D39FC640312597C7AEB7FECED08C13E6
Authority key identifier: F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:36:59 +0000
ROA not before:           Mon 15 Jul 2024 02:31:59 +0000
ROA not after:            Mon 14 Jul 2025 02:36:59 +0000
asID:                     48465
IP address blocks:        103.13.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl
                          rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:76:d7:e5:d3:9f:c6:40:31:25:97:c7:ae:b7:fe:ce:d0:8c:13:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F7D89AF4A6B49559B90BD1A11D2262692C406D9B
        Validity
            Not Before: Jul 15 02:31:59 2024 GMT
            Not After : Jul 14 02:36:59 2025 GMT
        Subject: CN=64915EF4C4179AB4637075A7536115FB34634AC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b7:ba:66:8e:ce:48:bc:89:c6:2f:90:7c:7a:
                    96:df:39:9f:09:dd:bf:44:cc:b7:c7:34:8e:38:99:
                    e4:eb:9d:03:87:ca:7d:6e:f5:6f:6a:1d:a7:ea:4b:
                    80:18:72:3b:4c:68:e1:bd:80:a3:5f:a7:01:56:62:
                    a7:0e:a3:5d:bc:39:ae:30:27:bb:48:bb:8d:95:f3:
                    b2:52:9a:85:70:51:87:7d:ae:d9:90:7e:ef:98:2f:
                    33:93:a9:6d:75:9e:6c:54:da:d5:d5:d8:fb:4e:39:
                    71:9c:e6:76:37:b0:a7:89:78:e9:84:19:ea:42:1f:
                    86:7d:9e:cf:de:71:10:e7:38:79:cf:db:aa:83:05:
                    32:9b:e7:35:59:c8:01:ba:2f:7a:79:12:67:44:cf:
                    22:99:9c:ea:b3:25:41:ff:64:f6:e1:d6:42:46:5a:
                    63:8c:b4:cd:3a:0e:63:61:d0:1c:ae:97:60:90:57:
                    ba:55:c3:36:a9:00:bc:32:7e:3c:a8:48:f9:43:7e:
                    b7:fe:8a:4a:a6:87:15:4b:00:f4:01:ce:ff:03:92:
                    30:26:9b:87:e1:0a:64:e8:11:26:7c:b4:c0:26:c1:
                    90:e8:99:75:96:1e:77:29:f6:eb:62:9b:06:55:22:
                    98:11:d9:1f:89:cc:5f:85:49:9c:f1:92:8e:d9:6c:
                    b9:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:91:5E:F4:C4:17:9A:B4:63:70:75:A7:53:61:15:FB:34:63:4A:C5
            X509v3 Authority Key Identifier:
                keyid:F7:D8:9A:F4:A6:B4:95:59:B9:0B:D1:A1:1D:22:62:69:2C:40:6D:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7D89AF4A6B49559B90BD1A11D2262692C406D9B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc9096c-28dc-44e4-b4cf-96d631b73ac0/0/3130332e31332e3230342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:17:6b:65:b7:54:21:08:47:c4:0f:1c:7b:a1:f8:9e:68:d2:
         36:98:43:5b:69:69:be:61:f0:70:1b:0c:18:97:06:5e:2f:d8:
         87:57:4e:df:de:71:78:b6:dc:61:70:99:7e:00:c0:3e:31:88:
         d6:aa:ed:cb:a5:96:d6:84:ec:6e:9f:dc:04:53:c4:83:1e:c9:
         b3:14:27:5e:6d:5f:d1:bc:3f:cc:0b:26:36:6e:e8:33:92:0a:
         23:61:55:79:e6:28:1c:a7:ac:84:45:ec:91:a8:fc:a2:e6:f2:
         d7:e0:61:83:f0:d2:80:a7:7d:75:6b:ea:0b:59:b2:d2:4a:8a:
         7b:e2:72:df:dc:a1:16:7c:7f:fb:ac:94:58:2c:bd:98:89:c5:
         e1:6b:c5:eb:47:d0:10:99:0a:9d:45:e4:b4:41:26:70:e3:c8:
         2e:57:d1:ec:ce:a7:3f:ee:b2:ad:c8:cf:34:a1:b5:f5:92:bb:
         1b:3e:13:06:8f:84:ce:19:46:40:78:bf:24:34:08:17:47:25:
         df:1f:6d:52:d7:36:61:61:5d:cf:78:1a:4e:b1:17:7b:fb:f9:
         b2:7c:1f:42:b3:82:80:20:5a:a5:73:3e:57:e9:54:05:e4:2c:
         53:fa:8b:f6:28:86:ca:af:5f:db:82:2b:e7:bb:e0:a6:21:eb:
         e9:1d:d8:fe
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULnbX5dOfxkAxJZfHrrf+ztCME+YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjky
QzQwNkQ5QjAeFw0yNDA3MTUwMjMxNTlaFw0yNTA3MTQwMjM2NTlaMDMxMTAvBgNV
BAMTKDY0OTE1RUY0QzQxNzlBQjQ2MzcwNzVBNzUzNjExNUZCMzQ2MzRBQzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1t7pmjs5IvInGL5B8epbfOZ8J
3b9EzLfHNI44meTrnQOHyn1u9W9qHafqS4AYcjtMaOG9gKNfpwFWYqcOo128Oa4w
J7tIu42V87JSmoVwUYd9rtmQfu+YLzOTqW11nmxU2tXV2PtOOXGc5nY3sKeJeOmE
GepCH4Z9ns/ecRDnOHnP26qDBTKb5zVZyAG6L3p5EmdEzyKZnOqzJUH/ZPbh1kJG
WmOMtM06DmNh0Byul2CQV7pVwzapALwyfjyoSPlDfrf+ikqmhxVLAPQBzv8DkjAm
m4fhCmToESZ8tMAmwZDomXWWHncp9utimwZVIpgR2R+JzF+FSZzxko7ZbLmJAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUZJFe9MQXmrRjcHWnU2EV+zRjSsUwHwYDVR0j
BBgwFoAU99ia9Ka0lVm5C9GhHSJiaSxAbZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
ZmM5MDk2Yy0yOGRjLTQ0ZTQtYjRjZi05NmQ2MzFiNzNhYzAvMC9GN0Q4OUFGNEE2
QjQ5NTU5QjkwQkQxQTExRDIyNjI2OTJDNDA2RDlCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjdEODlBRjRBNkI0OTU1OUI5MEJEMUExMUQyMjYyNjkyQzQw
NkQ5Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZmYzkwOTZjLTI4ZGMtNDRlNC1i
NGNmLTk2ZDYzMWI3M2FjMC8wLzMxMzAzMzJlMzEzMzJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcNzDANBgkqhkiG
9w0BAQsFAAOCAQEAzBdrZbdUIQhHxA8ce6H4nmjSNphDW2lpvmHwcBsMGJcGXi/Y
h1dO395xeLbcYXCZfgDAPjGI1qrty6WW1oTsbp/cBFPEgx7JsxQnXm1f0bw/zAsm
Nm7oM5IKI2FVeeYoHKeshEXskaj8ouby1+Bhg/DSgKd9dWvqC1my0kqKe+Jy39yh
Fnx/+6yUWCy9mInF4WvF60fQEJkKnUXktEEmcOPILlfR7M6nP+6yrcjPNKG19ZK7
Gz4TBo+EzhlGQHi/JDQIF0cl3x9tUtc2YWFdz3gaTrEXe/v5snwfQrOCgCBapXM+
V+lUBeQsU/qL9iiGyq9f24Ir57vgpiHr6R3Y/g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org