Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa
File:                     3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa (raw, json)
Hash identifier:          qgxvDREohl8HyRbhcazHY5xMaPx+gAUEKngHtpt1ckg=
Subject key identifier:   8A:94:B0:36:D9:53:12:E7:8B:78:61:29:16:AD:F5:6F:C0:15:4A:A2
Certificate issuer:       /CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
Certificate serial:       23EC003793EE27318435A49307EC58D82ECC2458
Authority key identifier: 8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa
Signing time:             Tue 23 Jul 2024 19:00:00 +0000
ROA not before:           Tue 23 Jul 2024 18:55:00 +0000
ROA not after:            Tue 22 Jul 2025 19:00:00 +0000
asID:                     149720
IP address blocks:        103.187.112.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl
                          rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:ec:00:37:93:ee:27:31:84:35:a4:93:07:ec:58:d8:2e:cc:24:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CBCE2EE006256C9A6207949314A7D1FCC415B5A
        Validity
            Not Before: Jul 23 18:55:00 2024 GMT
            Not After : Jul 22 19:00:00 2025 GMT
        Subject: CN=8A94B036D95312E78B78612916ADF56FC0154AA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:8a:d6:83:49:1e:50:bc:03:0c:a4:dd:ba:
                    b6:63:88:b7:f5:7d:9c:f8:37:93:31:cd:d6:a1:4f:
                    c1:ea:3c:f4:a7:4c:ac:13:8c:47:3d:ee:cb:07:f9:
                    d1:bf:92:f7:59:f5:07:51:2f:cc:bc:11:23:0d:56:
                    95:c8:bb:e4:41:69:33:e4:33:82:a5:b2:78:7b:e1:
                    2d:84:10:eb:3b:e3:7d:6b:45:f0:e1:c9:ff:b7:db:
                    99:2d:b4:78:59:71:8a:4d:a7:73:16:be:99:a8:a1:
                    0d:63:17:4e:98:88:74:bb:8b:05:91:9e:b4:a8:5e:
                    11:ca:c3:09:95:21:08:84:b8:b6:92:c0:16:cf:bd:
                    ea:fa:1a:26:0e:7b:ed:24:28:a8:67:8f:b8:ca:52:
                    1c:8c:27:a8:1e:99:3e:fb:39:7d:26:97:9f:8c:69:
                    0e:e8:41:f0:fe:e3:4b:9d:ba:ce:5d:7f:1e:39:5b:
                    19:80:dc:31:e2:21:af:ab:d6:c8:e5:bd:a9:5c:dd:
                    b7:d8:f3:b1:b5:e4:77:9b:c1:70:14:a8:d6:e3:e9:
                    10:02:e3:5b:d3:6a:90:88:04:ea:9e:da:1c:9c:b1:
                    bd:37:7c:41:1d:1f:52:9e:88:2d:f5:ed:bf:82:ac:
                    8e:99:56:4b:ec:7a:50:5b:f9:d3:09:6a:13:11:96:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:94:B0:36:D9:53:12:E7:8B:78:61:29:16:AD:F5:6F:C0:15:4A:A2
            X509v3 Authority Key Identifier:
                keyid:8C:BC:E2:EE:00:62:56:C9:A6:20:79:49:31:4A:7D:1F:CC:41:5B:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CBCE2EE006256C9A6207949314A7D1FCC415B5A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/758db87b-16cd-437a-a5b5-08cb35da97f0/0/3130332e3138372e3131322e302f32332d3234203d3e20313439373230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.187.112.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:24:32:29:56:37:a8:0f:31:4d:61:b5:0f:98:bd:f1:fc:1b:
         26:d5:1e:7e:8b:a5:66:ae:46:9f:89:bb:65:f4:93:a7:93:2d:
         6d:a9:1a:bb:e5:0b:21:96:f2:bb:df:d7:d1:ac:d8:31:df:8c:
         26:c7:0a:ec:cf:4d:d4:dc:e4:b8:a8:56:63:f2:09:0a:75:02:
         57:82:f0:66:c4:9b:67:b8:d7:58:0b:38:1b:3b:97:2d:e2:a8:
         dd:3c:e0:1d:e3:d5:4c:41:e1:d7:3a:1f:f6:fb:67:1a:1d:f5:
         55:fd:73:67:1e:cb:34:c2:7f:21:ac:7f:30:59:26:e0:ff:da:
         05:d5:df:66:b2:e8:70:69:7a:23:e5:55:35:e7:d0:7e:96:51:
         48:b0:fd:85:c2:4f:e1:2b:10:ff:15:5e:c3:15:55:87:b4:3d:
         5a:56:68:f3:d2:a1:aa:d0:21:b1:ba:bb:92:24:b2:cd:03:fd:
         16:fd:b3:52:95:24:d1:95:e0:ae:52:53:c0:f6:1c:35:f5:dd:
         c3:af:8b:0e:fa:85:fc:a6:af:cc:3c:43:09:47:1f:68:0b:d0:
         d6:60:97:d7:e7:30:ff:41:80:ec:77:f8:39:55:d0:48:32:70:
         2e:6a:4c:f4:b6:30:a8:2d:92:6d:4a:31:6b:26:38:58:b1:29:
         5a:ad:77:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUI+wAN5PuJzGENaSTB+xY2C7MJFgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZD
QzQxNUI1QTAeFw0yNDA3MjMxODU1MDBaFw0yNTA3MjIxOTAwMDBaMDMxMTAvBgNV
BAMTKDhBOTRCMDM2RDk1MzEyRTc4Qjc4NjEyOTE2QURGNTZGQzAxNTRBQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/uorWg0keULwDDKTdurZjiLf1
fZz4N5MxzdahT8HqPPSnTKwTjEc97ssH+dG/kvdZ9QdRL8y8ESMNVpXIu+RBaTPk
M4Klsnh74S2EEOs7431rRfDhyf+325kttHhZcYpNp3MWvpmooQ1jF06YiHS7iwWR
nrSoXhHKwwmVIQiEuLaSwBbPver6GiYOe+0kKKhnj7jKUhyMJ6gemT77OX0ml5+M
aQ7oQfD+40udus5dfx45WxmA3DHiIa+r1sjlvalc3bfY87G15HebwXAUqNbj6RAC
41vTapCIBOqe2hycsb03fEEdH1KeiC317b+CrI6ZVkvselBb+dMJahMRlpUjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUipSwNtlTEueLeGEpFq31b8AVSqIwHwYDVR0j
BBgwFoAUjLzi7gBiVsmmIHlJMUp9H8xBW1owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NThkYjg3Yi0xNmNkLTQzN2EtYTViNS0wOGNiMzVkYTk3ZjAvMC84Q0JDRTJFRTAw
NjI1NkM5QTYyMDc5NDkzMTRBN0QxRkNDNDE1QjVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOENCQ0UyRUUwMDYyNTZDOUE2MjA3OTQ5MzE0QTdEMUZDQzQx
NUI1QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc1OGRiODdiLTE2Y2QtNDM3YS1h
NWI1LTA4Y2IzNWRhOTdmMC8wLzMxMzAzMzJlMzEzODM3MmUzMTMxMzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzkzNzMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnu3AwDQYJ
KoZIhvcNAQELBQADggEBAJYkMilWN6gPMU1htQ+YvfH8GybVHn6LpWauRp+Ju2X0
k6eTLW2pGrvlCyGW8rvf19Gs2DHfjCbHCuzPTdTc5LioVmPyCQp1AleC8GbEm2e4
11gLOBs7ly3iqN084B3j1UxB4dc6H/b7Zxod9VX9c2ceyzTCfyGsfzBZJuD/2gXV
32ay6HBpeiPlVTXn0H6WUUiw/YXCT+ErEP8VXsMVVYe0PVpWaPPSoarQIbG6u5Ik
ss0D/Rb9s1KVJNGV4K5SU8D2HDX13cOviw76hfymr8w8QwlHH2gL0NZgl9fnMP9B
gOx3+DlV0EgycC5qTPS2MKgtkm1KMWsmOFixKVqtd0E=
-----END CERTIFICATE-----
Generated at Mon Nov 25 19:46:14 2024 by rpki-client on console-fra.rpki-client.org