Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e362e302f32332d3234203d3e2039333431.roa
File:                     3130332e32362e362e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          e8IAVO/fOwo9Dor1w1y7NN9LnlgOsb7UW/Yt487aFl0=
Subject key identifier:   5B:93:73:EC:E5:8B:81:41:74:B2:65:47:7D:F7:42:8F:7A:FD:F3:74
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       10C386369C7BE272C5AC2A81F5A68E37C1A20B4A
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e362e302f32332d3234203d3e2039333431.roa
Signing time:             Thu 29 Aug 2024 14:00:01 +0000
ROA not before:           Thu 29 Aug 2024 13:55:01 +0000
ROA not after:            Thu 28 Aug 2025 14:00:01 +0000
asID:                     9341
IP address blocks:        103.26.6.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:c3:86:36:9c:7b:e2:72:c5:ac:2a:81:f5:a6:8e:37:c1:a2:0b:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 29 13:55:01 2024 GMT
            Not After : Aug 28 14:00:01 2025 GMT
        Subject: CN=5B9373ECE58B814174B265477DF7428F7AFDF374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9d:2d:01:a5:f3:f0:a9:35:33:ba:23:32:ae:
                    4c:6e:04:d0:ed:eb:ab:73:5e:68:21:3c:98:bc:2b:
                    a0:03:0d:d9:73:c8:02:55:66:db:69:3b:f2:b6:5e:
                    cd:32:8d:97:d2:03:39:98:8f:6a:7e:52:f3:74:42:
                    fc:56:4f:3c:0c:ea:ea:54:9e:06:ee:fe:0f:9b:0a:
                    19:02:2f:f1:ac:9f:69:9c:55:7f:c0:17:60:47:cb:
                    17:55:5f:25:25:09:2c:e5:d8:5e:cb:f2:f7:05:61:
                    a3:ce:d5:2d:d0:aa:e3:cf:e5:36:c6:04:6e:65:d4:
                    cb:91:35:3d:f3:68:dd:93:fa:65:72:91:aa:c3:bd:
                    41:ac:ff:32:bb:0a:40:e1:e1:14:94:2b:ba:35:9c:
                    df:6c:b4:2b:c0:50:58:a9:a8:02:59:26:31:c7:6b:
                    68:f9:df:c5:9e:e9:fd:01:d9:bf:d5:63:52:08:e7:
                    c8:21:d1:95:2f:d6:f7:e4:1f:86:b5:ee:3b:86:5b:
                    d1:ab:b5:55:fe:7c:02:13:a5:f6:37:6d:38:80:fe:
                    f3:3e:2a:5f:50:f9:1a:92:89:7b:f0:41:20:b2:31:
                    a3:2c:73:84:91:56:0b:71:c3:2f:f7:c2:b6:af:44:
                    8b:9a:2b:db:88:c2:18:ea:df:03:c8:65:09:71:06:
                    a4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:93:73:EC:E5:8B:81:41:74:B2:65:47:7D:F7:42:8F:7A:FD:F3:74
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e32362e362e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.6.0/23

    Signature Algorithm: sha256WithRSAEncryption
         57:90:b7:c8:17:cc:e6:ae:65:31:e8:32:be:4a:e0:7e:79:d0:
         45:c7:78:d4:43:61:73:63:13:d6:e4:da:ff:2d:34:04:ee:99:
         c0:fe:51:76:6a:f0:5f:25:78:ed:8a:66:9e:e3:d2:33:91:c9:
         7a:92:e7:19:b7:e6:8a:3b:d6:fe:6d:b4:e9:f8:cc:ba:60:85:
         d2:88:f9:3e:f6:ca:d9:3a:d6:bc:8f:4d:60:9f:cb:13:4f:3e:
         50:c0:f2:9d:c2:95:ce:7c:02:05:2b:cf:bd:b2:31:1f:2b:af:
         8b:64:0f:9a:bb:1b:d4:93:d0:f9:19:8a:6d:f8:3d:9d:57:e0:
         4a:3f:6c:3d:06:4d:10:bc:31:c5:77:08:f2:44:79:b6:7a:05:
         19:c8:3f:b3:19:74:12:87:e8:8c:97:2f:6c:95:cb:1d:9f:31:
         0f:52:98:6b:94:06:f5:8b:16:7f:1a:f8:3c:0f:3c:40:a9:1b:
         1e:cb:60:14:02:86:8f:10:e2:a4:f4:30:fd:ba:a0:27:3c:f4:
         14:a0:3e:51:92:02:66:eb:89:11:e3:8c:81:08:75:13:00:fb:
         b5:6e:99:6c:a7:28:09:e2:53:86:ab:fa:67:cb:14:f5:09:04:
         ed:84:9b:f5:d0:c9:4c:39:01:d5:55:4a:a0:fe:2a:48:0b:1b:
         3f:9e:0f:12
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUEMOGNpx74nLFrCqB9aaON8GiC0owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA4MjkxMzU1MDFaFw0yNTA4MjgxNDAwMDFaMDMxMTAvBgNV
BAMTKDVCOTM3M0VDRTU4QjgxNDE3NEIyNjU0NzdERjc0MjhGN0FGREYzNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYnS0BpfPwqTUzuiMyrkxuBNDt
66tzXmghPJi8K6ADDdlzyAJVZttpO/K2Xs0yjZfSAzmYj2p+UvN0QvxWTzwM6upU
ngbu/g+bChkCL/Gsn2mcVX/AF2BHyxdVXyUlCSzl2F7L8vcFYaPO1S3QquPP5TbG
BG5l1MuRNT3zaN2T+mVykarDvUGs/zK7CkDh4RSUK7o1nN9stCvAUFipqAJZJjHH
a2j538We6f0B2b/VY1II58gh0ZUv1vfkH4a17juGW9GrtVX+fAITpfY3bTiA/vM+
Kl9Q+RqSiXvwQSCyMaMsc4SRVgtxwy/3wravRIuaK9uIwhjq3wPIZQlxBqQTAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUW5Nz7OWLgUF0smVHffdCj3r983QwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzEzMDMzMmUzMjM2MmUzNjJlMzAyZjMyMzMyZDMy
MzQyMDNkM2UyMDM5MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZxoGMA0GCSqGSIb3DQEBCwUA
A4IBAQBXkLfIF8zmrmUx6DK+SuB+edBFx3jUQ2FzYxPW5Nr/LTQE7pnA/lF2avBf
JXjtimae49Izkcl6kucZt+aKO9b+bbTp+My6YIXSiPk+9srZOta8j01gn8sTTz5Q
wPKdwpXOfAIFK8+9sjEfK6+LZA+auxvUk9D5GYpt+D2dV+BKP2w9Bk0QvDHFdwjy
RHm2egUZyD+zGXQSh+iMly9slcsdnzEPUphrlAb1ixZ/Gvg8DzxAqRsey2AUAoaP
EOKk9DD9uqAnPPQUoD5RkgJm64kR44yBCHUTAPu1bplspygJ4lOGq/pnyxT1CQTt
hJv10MlMOQHVVUqg/ipICxs/ng8S
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org