Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
File:                     3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (raw, json)
Hash identifier:          40DjJA58XbTOYBmXZcV+8qMaxMBN7a1BtfWtDagvI/I=
Subject key identifier:   2D:A1:4E:B7:CC:EF:F5:CC:67:46:96:E2:BB:B5:B1:E9:D9:BF:E9:83
Certificate issuer:       /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
Certificate serial:       4578E3667708943359E047BEE3AAC61D2C3D33A8
Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa
Signing time:             Sun 03 Dec 2023 08:00:01 +0000
ROA not before:           Sun 03 Dec 2023 07:55:01 +0000
ROA not after:            Sun 01 Dec 2024 08:00:01 +0000
asID:                     149898
IP address blocks:        103.190.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl
                          rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:78:e3:66:77:08:94:33:59:e0:47:be:e3:aa:c6:1d:2c:3d:33:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
        Validity
            Not Before: Dec  3 07:55:01 2023 GMT
            Not After : Dec  1 08:00:01 2024 GMT
        Subject: CN=2DA14EB7CCEFF5CC674696E2BBB5B1E9D9BFE983
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:a5:93:a7:8c:06:bb:39:49:ae:4d:bf:33:
                    85:07:a5:11:0e:b1:5a:43:bb:c2:cd:55:30:f0:3f:
                    24:06:b5:8a:75:cb:96:74:4f:28:1b:5c:94:5f:d0:
                    f4:2b:f5:fc:54:16:8f:bd:32:e6:ad:7a:14:cc:57:
                    89:bf:2b:d3:f8:8f:d2:d0:36:86:69:46:c9:01:84:
                    b9:4c:77:7a:46:c4:b3:70:14:d0:30:5b:81:23:69:
                    f9:16:87:fd:db:6c:5b:f5:e6:22:56:4e:c8:de:7a:
                    5f:c4:84:c7:b2:c0:a5:29:8f:ed:38:07:3a:cf:df:
                    f9:82:5d:b5:cf:a0:c7:b2:cf:b3:d9:01:12:c5:94:
                    c6:b2:75:a7:f7:b8:d8:b7:91:eb:69:05:2c:91:c2:
                    7d:88:09:ea:bf:a5:33:8e:94:45:ea:70:e0:40:96:
                    e7:05:17:4b:b9:38:72:06:31:86:6b:c3:df:61:b8:
                    ad:1b:a1:4e:43:42:b3:5c:2c:67:38:6b:f4:4b:87:
                    fa:21:b7:dd:b7:e3:d4:29:31:dc:5c:38:87:f3:f9:
                    33:8c:76:61:59:09:0b:80:e8:db:d4:7c:f8:79:68:
                    89:97:cb:bd:eb:31:15:64:bb:43:6c:e3:7a:ea:f8:
                    54:80:73:a1:8d:ed:ae:5c:f5:a1:68:d9:12:b2:ed:
                    1e:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:A1:4E:B7:CC:EF:F5:CC:67:46:96:E2:BB:B5:B1:E9:D9:BF:E9:83
            X509v3 Authority Key Identifier:
                keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:be:11:0e:91:f7:22:51:20:14:fb:b4:7b:44:a7:45:35:e9:
         2e:6d:a3:b9:01:ea:f1:b9:63:1c:aa:f8:00:ba:51:28:ae:0f:
         5f:9c:1b:8d:13:ee:d6:72:ad:25:79:ad:4d:56:84:09:90:d9:
         40:4b:05:8e:d6:ff:06:41:8b:10:76:cd:67:3d:b6:8e:8d:3c:
         34:4e:59:92:6e:30:56:5f:33:82:bb:b3:91:e8:80:0c:f2:38:
         46:df:ed:a3:59:c8:5e:55:37:ee:b1:3f:64:b3:fc:9e:d6:86:
         6c:fd:22:7b:94:93:94:12:57:68:02:7a:d4:8b:8b:2c:2b:e5:
         60:04:15:b4:2c:7d:64:c1:c0:d9:a5:58:16:30:0e:f4:dc:ad:
         90:15:a4:7b:d5:d2:b8:c5:74:5d:09:dc:d3:b6:24:ab:41:cc:
         ce:52:33:71:5a:49:83:f4:76:c9:80:ac:76:e8:84:be:4f:e9:
         ef:ce:d1:10:bb:45:7a:d8:1d:b7:6c:31:58:9e:b9:b0:99:c9:
         3b:31:47:42:77:d9:72:e7:76:a4:b2:b4:29:c5:68:ba:2a:a3:
         1f:d2:9b:05:e5:0b:44:00:a7:d0:ef:95:ad:31:a8:05:70:c8:
         0d:34:25:4a:e7:9a:02:ce:b3:37:2c:da:4b:de:d7:d9:7d:f5:
         83:c7:d1:80
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURXjjZncIlDNZ4Ee+46rGHSw9M6gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx
NzdBMEY4QTAeFw0yMzEyMDMwNzU1MDFaFw0yNDEyMDEwODAwMDFaMDMxMTAvBgNV
BAMTKDJEQTE0RUI3Q0NFRkY1Q0M2NzQ2OTZFMkJCQjVCMUU5RDlCRkU5ODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1RqWTp4wGuzlJrk2/M4UHpREO
sVpDu8LNVTDwPyQGtYp1y5Z0TygbXJRf0PQr9fxUFo+9MuatehTMV4m/K9P4j9LQ
NoZpRskBhLlMd3pGxLNwFNAwW4EjafkWh/3bbFv15iJWTsjeel/EhMeywKUpj+04
BzrP3/mCXbXPoMeyz7PZARLFlMaydaf3uNi3ketpBSyRwn2ICeq/pTOOlEXqcOBA
lucFF0u5OHIGMYZrw99huK0boU5DQrNcLGc4a/RLh/oht92349QpMdxcOIfz+TOM
dmFZCQuA6NvUfPh5aImXy73rMRVku0Ns43rq+FSAc6GN7a5c9aFo2RKy7R4zAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQULaFOt8zv9cxnRpbiu7Wx6dm/6YMwHwYDVR0j
BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1
MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB
MEY4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2MjBiNDIzLWRkNWQtNDQ4Zi1i
YmQzLTA0NTMwZWMxNzE1ZC8wLzMxMzAzMzJlMzEzOTMwMmUzNjMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ74+MA0GCSqG
SIb3DQEBCwUAA4IBAQBVvhEOkfciUSAU+7R7RKdFNekubaO5AerxuWMcqvgAulEo
rg9fnBuNE+7Wcq0lea1NVoQJkNlASwWO1v8GQYsQds1nPbaOjTw0TlmSbjBWXzOC
u7OR6IAM8jhG3+2jWcheVTfusT9ks/ye1oZs/SJ7lJOUEldoAnrUi4ssK+VgBBW0
LH1kwcDZpVgWMA703K2QFaR71dK4xXRdCdzTtiSrQczOUjNxWkmD9HbJgKx26IS+
T+nvztEQu0V62B23bDFYnrmwmck7MUdCd9ly53aksrQpxWi6KqMf0psF5QtEAKfQ
75WtMagFcMgNNCVK55oCzrM3LNpL3tfZffWDx9GA
-----END CERTIFICATE-----
Generated at Sat Jun 22 07:22:56 2024 by rpki-client on console-fra.rpki-client.org