Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa
File:                     3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa (raw, json)
Hash identifier:          59Dd3nZ50FlXyKs9Kc8BpiwoV5l0A2i6OJ/jV+dvHUw=
Subject key identifier:   93:6C:BA:33:9E:36:D7:EB:D7:9A:29:2F:53:04:03:54:A8:79:03:50
Certificate issuer:       /CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E
Certificate serial:       1C50746C4B1EBDCAC3D780E481854FF95AA15981
Authority key identifier: F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa
Signing time:             Tue 10 Sep 2024 09:01:52 +0000
ROA not before:           Tue 10 Sep 2024 08:56:52 +0000
ROA not after:            Tue 09 Sep 2025 09:01:52 +0000
asID:                     138046
IP address blocks:        103.121.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl
                          rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:50:74:6c:4b:1e:bd:ca:c3:d7:80:e4:81:85:4f:f9:5a:a1:59:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E
        Validity
            Not Before: Sep 10 08:56:52 2024 GMT
            Not After : Sep  9 09:01:52 2025 GMT
        Subject: CN=936CBA339E36D7EBD79A292F53040354A8790350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:9c:bf:91:d5:3d:79:a6:9a:11:e1:1a:eb:
                    3d:9b:8d:76:08:b1:1e:1d:71:85:11:6b:ab:f6:24:
                    e5:c8:ae:fb:05:b9:45:40:66:9a:29:2f:be:9f:47:
                    e0:1e:af:ca:d8:a1:89:df:10:fa:ab:ce:d3:76:e6:
                    70:48:31:b2:d4:db:43:fc:76:62:a8:f9:c5:d4:dc:
                    96:29:da:dd:48:94:c6:0b:01:56:9d:1a:db:36:73:
                    1b:60:72:b0:c6:99:e0:b2:51:3c:ca:15:ee:8d:0d:
                    78:cb:91:5e:f1:1c:10:c1:00:e3:e4:bd:d7:45:0c:
                    d6:a9:42:60:83:b4:67:b3:aa:a3:ec:08:7e:d5:7c:
                    1d:ba:8b:d1:2e:19:31:ea:d0:2e:71:2a:e2:96:15:
                    11:b7:85:2b:45:7a:3b:6a:0a:c9:0c:f3:a2:1e:68:
                    a7:ab:9d:33:d4:9f:78:90:c1:d9:af:75:e4:6a:d1:
                    a1:52:18:92:dd:14:ba:dc:fb:c4:57:5a:ba:56:4c:
                    f1:c6:11:14:b7:8d:c0:2b:74:c1:c7:65:0f:ef:06:
                    91:91:e2:b9:51:55:08:26:84:9d:00:21:48:72:63:
                    d5:7b:23:98:19:2d:14:fc:1d:9f:b3:3e:d9:b6:ac:
                    06:69:ad:73:0a:27:dc:85:e8:e3:23:8a:98:e4:6a:
                    1f:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:BA:33:9E:36:D7:EB:D7:9A:29:2F:53:04:03:54:A8:79:03:50
            X509v3 Authority Key Identifier:
                keyid:F0:7F:FF:47:2E:D9:C7:00:73:BC:98:86:5A:4A:5A:6C:2B:0E:A3:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F07FFF472ED9C70073BC98865A4A5A6C2B0EA35E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/724db567-33a8-4ce0-bcff-cb0f0a85c239/0/3130332e3132312e35382e302f32342d3234203d3e20313338303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:03:40:f6:82:03:77:2c:f0:1b:6e:14:9c:e6:2a:d9:81:
         12:fe:9d:20:b9:13:43:d5:9a:7b:e8:68:66:11:56:b4:50:ef:
         93:77:68:d3:2c:a4:12:aa:95:3f:e1:a4:e8:5a:40:6c:c9:15:
         39:ef:b6:77:74:44:0a:69:eb:18:66:ab:9f:02:14:89:06:d0:
         ae:0c:8e:07:40:ef:6e:c4:ce:14:eb:91:d5:c8:04:64:ec:9b:
         03:3c:6a:93:49:76:08:9b:92:56:74:82:02:c7:b9:66:09:b0:
         f1:a0:8b:26:1b:72:64:8a:c4:e2:01:26:71:f7:e5:ef:e5:4f:
         92:a5:c1:91:fd:e1:3f:48:d8:60:54:c0:b9:16:e0:32:e5:43:
         ba:b7:f3:d2:bb:e2:23:10:e2:7a:8e:30:f8:44:dd:5a:8b:8b:
         13:f0:8c:bf:7b:48:ec:99:fd:5c:e7:36:82:e0:ba:62:0b:f9:
         b0:14:bc:2e:ab:51:86:a2:6d:4e:9c:f4:a3:b1:b0:97:b4:36:
         b1:21:3e:67:92:c9:f7:ec:5a:aa:39:5f:a8:0c:07:e8:93:b5:
         cf:3d:c7:a0:08:44:43:e8:21:65:58:65:93:e2:a4:30:7e:df:
         6a:8c:68:ed:15:e5:08:2d:8d:fb:9a:3d:1d:49:0a:3a:74:eb:
         36:e3:d0:f1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHFB0bEsevcrD14DkgYVP+VqhWYEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMy
QjBFQTM1RTAeFw0yNDA5MTAwODU2NTJaFw0yNTA5MDkwOTAxNTJaMDMxMTAvBgNV
BAMTKDkzNkNCQTMzOUUzNkQ3RUJENzlBMjkyRjUzMDQwMzU0QTg3OTAzNTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCndpy/kdU9eaaaEeEa6z2bjXYI
sR4dcYURa6v2JOXIrvsFuUVAZpopL76fR+Aer8rYoYnfEPqrztN25nBIMbLU20P8
dmKo+cXU3JYp2t1IlMYLAVadGts2cxtgcrDGmeCyUTzKFe6NDXjLkV7xHBDBAOPk
vddFDNapQmCDtGezqqPsCH7VfB26i9EuGTHq0C5xKuKWFRG3hStFejtqCskM86Ie
aKernTPUn3iQwdmvdeRq0aFSGJLdFLrc+8RXWrpWTPHGERS3jcArdMHHZQ/vBpGR
4rlRVQgmhJ0AIUhyY9V7I5gZLRT8HZ+zPtm2rAZprXMKJ9yF6OMjipjkah/XAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUk2y6M5421+vXmikvUwQDVKh5A1AwHwYDVR0j
BBgwFoAU8H//Ry7ZxwBzvJiGWkpabCsOo14wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
MjRkYjU2Ny0zM2E4LTRjZTAtYmNmZi1jYjBmMGE4NWMyMzkvMC9GMDdGRkY0NzJF
RDlDNzAwNzNCQzk4ODY1QTRBNUE2QzJCMEVBMzVFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjA3RkZGNDcyRUQ5QzcwMDczQkM5ODg2NUE0QTVBNkMyQjBF
QTM1RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzcyNGRiNTY3LTMzYTgtNGNlMC1i
Y2ZmLWNiMGYwYTg1YzIzOS8wLzMxMzAzMzJlMzEzMjMxMmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3k6MA0GCSqG
SIb3DQEBCwUAA4IBAQAzXANA9oIDdyzwG24UnOYq2YES/p0guRND1Zp76GhmEVa0
UO+Td2jTLKQSqpU/4aToWkBsyRU577Z3dEQKaesYZqufAhSJBtCuDI4HQO9uxM4U
65HVyARk7JsDPGqTSXYIm5JWdIICx7lmCbDxoIsmG3JkisTiASZx9+Xv5U+SpcGR
/eE/SNhgVMC5FuAy5UO6t/PSu+IjEOJ6jjD4RN1ai4sT8Iy/e0jsmf1c5zaC4Lpi
C/mwFLwuq1GGom1OnPSjsbCXtDaxIT5nksn37FqqOV+oDAfok7XPPcegCERD6CFl
WGWT4qQwft9qjGjtFeUILY37mj0dSQo6dOs249Dx
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:32 2024 by rpki-client on console-ams.rpki-client.org