Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa
File:                     3130332e34372e3232382e302f32332d3234203d3e2039333431.roa (raw, json)
Hash identifier:          Qti+oTUYFollYnIQYzbp3wVuMoMl1nGK5wRKkzqBask=
Subject key identifier:   CF:82:3B:3F:33:26:46:01:6D:0B:4C:9C:91:1A:90:E5:E9:0C:0E:4B
Certificate issuer:       /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial:       5D03C9C74AED59F71FCD8146A29F0C2CADABAD18
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa
Signing time:             Thu 29 Aug 2024 14:00:01 +0000
ROA not before:           Thu 29 Aug 2024 13:55:01 +0000
ROA not after:            Thu 28 Aug 2025 14:00:01 +0000
asID:                     9341
IP address blocks:        103.47.228.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
                          rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:03:c9:c7:4a:ed:59:f7:1f:cd:81:46:a2:9f:0c:2c:ad:ab:ad:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61566F205F7037962069571320603B274357CC6D
        Validity
            Not Before: Aug 29 13:55:01 2024 GMT
            Not After : Aug 28 14:00:01 2025 GMT
        Subject: CN=CF823B3F332646016D0B4C9C911A90E5E90C0E4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c4:75:2e:7a:58:c0:45:ea:f0:05:8e:99:6a:
                    95:c1:a5:f5:ec:0f:4e:b6:66:ba:62:63:02:93:26:
                    cf:c7:91:c7:9f:05:05:0f:0e:f4:76:b9:e9:8c:83:
                    7e:b9:5c:ab:49:4b:26:34:0b:80:05:cb:fb:ab:94:
                    25:89:66:6f:66:a0:94:31:d4:1c:aa:38:be:b4:03:
                    d6:fe:e6:1e:b9:b7:06:c0:e6:2b:6e:67:6a:ea:d1:
                    a4:00:d2:a0:47:bf:07:04:48:8f:31:43:4e:79:fb:
                    3a:13:54:85:bc:4f:92:bd:b5:3e:fb:fb:4f:e9:bd:
                    5e:6c:3c:f3:ed:16:4c:c0:c2:ae:2b:b4:b8:e2:57:
                    72:b5:41:ee:8e:a0:ec:6b:1e:83:ba:31:c1:3d:25:
                    a6:62:33:16:71:6a:6b:0c:ae:fc:44:59:77:a8:70:
                    36:d2:a0:f2:a3:a6:a1:67:a1:2e:94:d3:5c:54:65:
                    e4:0b:e2:0b:f7:7d:68:52:49:31:8a:9d:ac:1c:46:
                    94:3b:43:ce:ec:78:0a:8e:66:1e:4d:34:82:2b:87:
                    f3:13:2f:01:e7:3a:e9:9e:b8:f9:ef:7f:fa:d3:ef:
                    21:c1:0f:2c:08:88:26:47:50:27:20:e1:98:89:35:
                    5d:0b:b7:f4:47:8c:da:04:d3:eb:90:41:47:f4:05:
                    a4:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:82:3B:3F:33:26:46:01:6D:0B:4C:9C:91:1A:90:E5:E9:0C:0E:4B
            X509v3 Authority Key Identifier:
                keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3130332e34372e3232382e302f32332d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.47.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:28:2c:07:fb:f4:98:ec:1c:22:99:13:da:02:e5:0d:af:33:
         f3:cc:38:b9:84:89:22:ff:fa:7d:c3:a0:d2:19:bf:ec:e2:2e:
         a8:07:2f:1d:c6:56:a9:4b:b1:6e:49:81:48:3b:67:a0:34:f1:
         53:1b:df:e8:77:e2:c5:9c:60:d4:36:a9:ed:97:29:38:e0:58:
         e1:96:78:ff:9d:ec:a2:a8:20:24:94:6f:92:d8:6d:4b:df:79:
         24:0f:5e:4f:d9:63:95:6b:4b:80:5c:5f:e8:2b:e5:21:1e:2d:
         6a:0f:82:65:7b:5c:3c:d9:a7:3d:98:05:ce:cd:bf:c2:bb:c8:
         a3:86:88:43:89:20:06:01:bc:53:0d:03:72:30:29:4f:ab:55:
         bb:93:3c:37:bb:50:05:db:f5:f1:4c:68:e5:5d:e7:42:95:3a:
         b8:4d:ac:9b:60:aa:13:d7:d9:62:1e:06:98:53:ae:5b:28:e1:
         2a:a4:82:76:3c:da:14:f5:72:fb:06:e2:4d:2b:cb:c1:d1:b9:
         17:0a:33:27:6a:6b:a2:36:1c:43:ea:5d:bd:35:ff:94:d5:30:
         5d:46:eb:82:4e:e6:cc:7e:df:eb:a8:a3:da:2d:60:f2:76:90:
         52:6b:06:34:9a:1f:0d:d0:06:84:fb:ca:05:67:56:5e:8b:6b:
         3c:af:76:f8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXQPJx0rtWfcfzYFGop8MLK2rrRgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNDA4MjkxMzU1MDFaFw0yNTA4MjgxNDAwMDFaMDMxMTAvBgNV
BAMTKENGODIzQjNGMzMyNjQ2MDE2RDBCNEM5QzkxMUE5MEU1RTkwQzBFNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLxHUueljARerwBY6ZapXBpfXs
D062ZrpiYwKTJs/HkcefBQUPDvR2uemMg365XKtJSyY0C4AFy/urlCWJZm9moJQx
1ByqOL60A9b+5h65twbA5ituZ2rq0aQA0qBHvwcESI8xQ055+zoTVIW8T5K9tT77
+0/pvV5sPPPtFkzAwq4rtLjiV3K1Qe6OoOxrHoO6McE9JaZiMxZxamsMrvxEWXeo
cDbSoPKjpqFnoS6U01xUZeQL4gv3fWhSSTGKnawcRpQ7Q87seAqOZh5NNIIrh/MT
LwHnOumeuPnvf/rT7yHBDywIiCZHUCcg4ZiJNV0Lt/RHjNoE0+uQQUf0BaSnAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUz4I7PzMmRgFtC0yckRqQ5ekMDkswHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzczYmRjYmFlLTJlOWQtNGYzZi04
YWI5LTM0MjRlNDQ4NDg0ZS8wLzMxMzAzMzJlMzQzNzJlMzIzMjM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnL+QwDQYJKoZIhvcN
AQELBQADggEBAFgoLAf79JjsHCKZE9oC5Q2vM/PMOLmEiSL/+n3DoNIZv+ziLqgH
Lx3GVqlLsW5JgUg7Z6A08VMb3+h34sWcYNQ2qe2XKTjgWOGWeP+d7KKoICSUb5LY
bUvfeSQPXk/ZY5VrS4BcX+gr5SEeLWoPgmV7XDzZpz2YBc7Nv8K7yKOGiEOJIAYB
vFMNA3IwKU+rVbuTPDe7UAXb9fFMaOVd50KVOrhNrJtgqhPX2WIeBphTrlso4Sqk
gnY82hT1cvsG4k0ry8HRuRcKMydqa6I2HEPqXb01/5TVMF1G64JO5sx+3+uoo9ot
YPJ2kFJrBjSaHw3QBoT7ygVnVl6Lazyvdvg=
-----END CERTIFICATE-----
Generated at Thu Nov 21 01:24:17 2024 by rpki-client on console-ams.rpki-client.org