Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
File:                     3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa (raw, json)
Hash identifier:          p+gJNweQdHB4R0/rDNBfafyml4uK0MQDt/wIllzz2Rk=
Subject key identifier:   D9:E8:A0:C5:48:EA:02:12:06:1A:2A:5D:20:73:E2:AA:E3:C9:7B:37
Certificate issuer:       /CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
Certificate serial:       4F318A6E2E2D6A83267F36A1FA795BDC8446C23A
Authority key identifier: 28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa
Signing time:             Thu 25 Jan 2024 04:01:45 +0000
ROA not before:           Thu 25 Jan 2024 03:56:45 +0000
ROA not after:            Thu 23 Jan 2025 04:01:45 +0000
asID:                     151582
IP address blocks:        103.80.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl
                          rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 15:13:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:31:8a:6e:2e:2d:6a:83:26:7f:36:a1:fa:79:5b:dc:84:46:c2:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28719EEFA340A5EDEDE0078C4CB48497B36F3AD6
        Validity
            Not Before: Jan 25 03:56:45 2024 GMT
            Not After : Jan 23 04:01:45 2025 GMT
        Subject: CN=D9E8A0C548EA0212061A2A5D2073E2AAE3C97B37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e2:5e:71:f3:bb:6d:3f:10:66:f4:ad:51:44:
                    5f:c8:77:30:ce:a0:8c:9d:57:20:c8:ed:90:dd:4f:
                    28:17:7f:70:a0:a3:b3:7c:8b:7d:a5:87:2c:7a:68:
                    0d:2e:ab:b8:10:6c:48:ce:4c:12:9d:ed:d7:59:30:
                    ec:3d:2f:aa:bd:20:bf:6e:0e:7a:41:d3:3b:76:80:
                    20:68:6a:24:d9:2e:e8:df:6d:ce:d8:05:ba:51:96:
                    90:b4:a9:ff:78:f2:57:e3:7e:21:c5:05:ca:fd:43:
                    67:b3:9e:5b:5f:95:74:06:03:a6:0a:61:f4:5b:41:
                    38:bb:bf:35:a6:77:d6:9e:0f:10:25:b1:91:f1:70:
                    30:7a:bd:45:9c:35:db:57:c5:bf:9f:58:a4:db:fe:
                    90:f7:ff:6f:b4:8d:c6:03:ca:6f:f5:73:b5:84:82:
                    35:69:0e:56:ff:62:4a:9f:a5:c2:21:9c:91:53:8c:
                    5e:33:d8:1d:31:a6:3a:c2:4d:8b:ba:fb:67:d7:9c:
                    43:b0:6c:42:c0:cd:cd:da:80:48:7e:a3:e5:db:4c:
                    ad:e6:9d:f3:df:19:e5:dd:b8:77:fe:89:4d:c6:65:
                    88:6f:53:0e:fd:60:91:65:ea:5f:f0:eb:e2:e3:00:
                    8c:59:d3:e1:8a:af:0e:9b:07:3a:0b:27:a0:c3:0a:
                    07:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E8:A0:C5:48:EA:02:12:06:1A:2A:5D:20:73:E2:AA:E3:C9:7B:37
            X509v3 Authority Key Identifier:
                keyid:28:71:9E:EF:A3:40:A5:ED:ED:E0:07:8C:4C:B4:84:97:B3:6F:3A:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/28719EEFA340A5EDEDE0078C4CB48497B36F3AD6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/741e8223-cc68-410e-b67b-9b8825b5cd5f/0/3130332e38302e3233302e302f32342d3234203d3e20313531353832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:4d:e5:40:06:21:6d:54:ed:0f:82:45:dc:2c:ff:84:cb:ba:
         39:b6:e0:34:49:f8:40:f4:e6:99:67:1e:d6:78:e8:ff:94:79:
         e6:3a:1d:89:35:35:dc:2f:46:50:a3:0a:fa:c9:ab:24:ff:82:
         a7:36:fe:98:b0:eb:6c:44:1a:90:39:df:d1:22:ea:0d:08:44:
         66:0b:d3:76:2e:78:58:2e:f6:ff:1b:9a:41:f5:8f:d4:be:22:
         6d:5f:06:d1:a5:51:f8:b7:bf:b2:85:d4:8b:f8:2a:39:6b:42:
         4f:41:e7:7e:35:67:33:7d:a8:d0:70:44:72:dc:ea:5a:43:d1:
         db:7c:30:bb:05:4c:5c:5c:98:d0:48:80:d5:65:09:07:88:ac:
         50:f9:08:26:9b:69:3f:21:e7:86:d9:e2:ae:61:03:a4:cf:c3:
         c8:46:b8:2b:c7:a3:de:54:85:ee:40:94:0b:3f:46:b1:c4:f4:
         47:90:52:4d:13:aa:7b:d2:be:cc:2a:fb:fd:25:d4:1f:ad:71:
         a2:62:ee:2d:a4:1b:6e:f6:42:91:1b:b6:e2:41:0c:d8:88:06:
         2a:06:10:10:49:80:48:eb:11:6a:4c:ed:7c:b8:9d:dd:30:21:
         a4:7c:a4:4b:b0:85:ff:80:15:1e:de:44:8c:73:78:1f:cf:42:
         fe:d7:78:2b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTzGKbi4taoMmfzah+nlb3IRGwjowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdC
MzZGM0FENjAeFw0yNDAxMjUwMzU2NDVaFw0yNTAxMjMwNDAxNDVaMDMxMTAvBgNV
BAMTKEQ5RThBMEM1NDhFQTAyMTIwNjFBMkE1RDIwNzNFMkFBRTNDOTdCMzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA4l5x87ttPxBm9K1RRF/IdzDO
oIydVyDI7ZDdTygXf3Cgo7N8i32lhyx6aA0uq7gQbEjOTBKd7ddZMOw9L6q9IL9u
DnpB0zt2gCBoaiTZLujfbc7YBbpRlpC0qf948lfjfiHFBcr9Q2eznltflXQGA6YK
YfRbQTi7vzWmd9aeDxAlsZHxcDB6vUWcNdtXxb+fWKTb/pD3/2+0jcYDym/1c7WE
gjVpDlb/YkqfpcIhnJFTjF4z2B0xpjrCTYu6+2fXnEOwbELAzc3agEh+o+XbTK3m
nfPfGeXduHf+iU3GZYhvUw79YJFl6l/w6+LjAIxZ0+GKrw6bBzoLJ6DDCgf/AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2eigxUjqAhIGGipdIHPiquPJezcwHwYDVR0j
BBgwFoAUKHGe76NApe3t4AeMTLSEl7NvOtYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NDFlODIyMy1jYzY4LTQxMGUtYjY3Yi05Yjg4MjViNWNkNWYvMC8yODcxOUVFRkEz
NDBBNUVERURFMDA3OEM0Q0I0ODQ5N0IzNkYzQUQ2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg3MTlFRUZBMzQwQTVFREVERTAwNzhDNENCNDg0OTdCMzZG
M0FENi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0MWU4MjIzLWNjNjgtNDEwZS1i
NjdiLTliODgyNWI1Y2Q1Zi8wLzMxMzAzMzJlMzgzMDJlMzIzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMxMzUzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1DmMA0GCSqG
SIb3DQEBCwUAA4IBAQAqTeVABiFtVO0PgkXcLP+Ey7o5tuA0SfhA9OaZZx7WeOj/
lHnmOh2JNTXcL0ZQowr6yask/4KnNv6YsOtsRBqQOd/RIuoNCERmC9N2LnhYLvb/
G5pB9Y/UviJtXwbRpVH4t7+yhdSL+Co5a0JPQed+NWczfajQcERy3OpaQ9HbfDC7
BUxcXJjQSIDVZQkHiKxQ+Qgmm2k/IeeG2eKuYQOkz8PIRrgrx6PeVIXuQJQLP0ax
xPRHkFJNE6p70r7MKvv9JdQfrXGiYu4tpBtu9kKRG7biQQzYiAYqBhAQSYBI6xFq
TO18uJ3dMCGkfKRLsIX/gBUe3kSMc3gfz0L+13gr
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org