Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa
File:                     3130332e37372e3232362e302f32332d3233203d3e203634323938.roa (raw, json)
Hash identifier:          /xbYAaI6hwFAuMsJvVYUr3ri7s0J/jT4A8mcqLOWH08=
Subject key identifier:   3C:29:15:E6:E2:8F:20:7F:42:C5:CB:1D:59:AD:78:53:8F:4A:27:03
Certificate issuer:       /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial:       58FA87F150CB7C8B394A7195B2FD11D6899C95A6
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa
Signing time:             Mon 12 Feb 2024 08:00:00 +0000
ROA not before:           Mon 12 Feb 2024 07:55:00 +0000
ROA not after:            Mon 10 Feb 2025 08:00:00 +0000
asID:                     64298
IP address blocks:        103.77.226.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl
                          rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:fa:87:f1:50:cb:7c:8b:39:4a:71:95:b2:fd:11:d6:89:9c:95:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
        Validity
            Not Before: Feb 12 07:55:00 2024 GMT
            Not After : Feb 10 08:00:00 2025 GMT
        Subject: CN=3C2915E6E28F207F42C5CB1D59AD78538F4A2703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:91:3d:5a:1f:dc:6d:40:f7:66:1c:e4:c5:56:
                    f7:a8:b1:b4:c1:ab:43:ff:20:67:97:85:4b:e1:74:
                    5c:aa:40:68:b8:b9:67:11:cd:4e:1d:62:7b:87:3e:
                    ab:1f:ff:df:b0:17:8a:91:83:c5:c5:e9:ed:4e:58:
                    95:06:f5:e3:d2:90:da:29:cf:c9:71:8a:fa:b7:55:
                    dc:db:cc:fe:ce:7f:b0:ff:16:4a:d4:c7:de:d2:aa:
                    53:ea:55:d2:8b:08:32:27:3f:f0:3d:86:9d:81:fc:
                    92:5d:39:3c:12:ec:2c:a4:ab:b2:f5:72:1a:f4:28:
                    b0:4c:ba:ec:cc:32:ec:77:66:8f:38:8e:65:a8:3d:
                    92:0f:3d:89:95:f9:65:3c:a2:c8:9b:ac:57:65:f9:
                    06:af:90:ed:31:c9:55:9a:7f:c5:91:a2:43:67:f0:
                    c8:12:c0:d4:d3:ea:40:48:07:ed:f4:9d:77:8a:b4:
                    ca:24:76:01:d7:07:19:30:bf:38:4b:cf:b0:0f:13:
                    4a:e6:58:84:8c:d7:f6:bb:83:28:59:b3:61:0d:40:
                    03:a5:af:55:07:50:74:ab:4e:70:5c:93:6e:9b:0c:
                    10:f3:0a:22:75:8e:5d:8e:7c:b2:7c:d1:e9:12:95:
                    65:19:46:07:67:6e:a6:88:d0:f7:2f:c3:c4:d1:3d:
                    c4:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:29:15:E6:E2:8F:20:7F:42:C5:CB:1D:59:AD:78:53:8F:4A:27:03
            X509v3 Authority Key Identifier:
                keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232362e302f32332d3233203d3e203634323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.226.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:05:98:11:21:59:8c:2d:7a:cf:8c:1b:1e:db:e6:d0:d9:6f:
         1d:a4:b7:e8:f6:4b:6e:79:f5:d8:b6:0c:da:a7:5b:9d:f2:e1:
         49:a1:62:c2:14:5d:b9:07:6b:68:c8:26:d2:0a:f6:36:a1:02:
         5a:49:0e:ac:12:91:f7:3e:2e:dc:67:b3:2c:8d:08:da:22:5a:
         59:ec:fb:a9:77:15:ca:61:d1:aa:3c:d7:fa:28:cc:74:7d:02:
         e8:42:b1:71:d4:cc:b6:e3:78:39:86:7b:ea:65:39:3d:f7:e1:
         f5:d6:3e:6d:fe:6f:bf:96:5e:24:ad:69:3e:e9:35:18:31:a4:
         04:a0:4a:99:dd:2f:30:eb:a5:9d:12:b3:c7:fa:b9:1d:2b:35:
         08:ed:7b:0a:05:44:93:05:59:6d:e5:db:47:11:41:3c:27:c4:
         23:de:de:ac:42:e5:3d:a9:05:47:85:b1:74:8b:70:29:f9:2c:
         e5:59:f5:85:1c:3b:75:cc:49:e9:ce:8f:ea:ec:67:43:b9:89:
         65:a0:d6:25:0c:2f:ff:2b:dc:43:c1:55:11:8e:26:82:fa:c1:
         67:96:77:4d:fa:b1:ef:81:81:66:11:52:95:5b:bd:ac:64:d5:
         6d:ae:35:02:9c:da:52:e9:a9:c0:c9:7c:8f:aa:b4:0b:a3:56:
         61:af:79:63
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWPqH8VDLfIs5SnGVsv0R1omclaYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5
MzY0NEU0MzAeFw0yNDAyMTIwNzU1MDBaFw0yNTAyMTAwODAwMDBaMDMxMTAvBgNV
BAMTKDNDMjkxNUU2RTI4RjIwN0Y0MkM1Q0IxRDU5QUQ3ODUzOEY0QTI3MDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHkT1aH9xtQPdmHOTFVveosbTB
q0P/IGeXhUvhdFyqQGi4uWcRzU4dYnuHPqsf/9+wF4qRg8XF6e1OWJUG9ePSkNop
z8lxivq3VdzbzP7Of7D/FkrUx97SqlPqVdKLCDInP/A9hp2B/JJdOTwS7Cykq7L1
chr0KLBMuuzMMux3Zo84jmWoPZIPPYmV+WU8osibrFdl+QavkO0xyVWaf8WRokNn
8MgSwNTT6kBIB+30nXeKtMokdgHXBxkwvzhLz7APE0rmWISM1/a7gyhZs2ENQAOl
r1UHUHSrTnBck26bDBDzCiJ1jl2OfLJ80ekSlWUZRgdnbqaI0Pcvw8TRPcQhAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUPCkV5uKPIH9CxcsdWa14U49KJwMwHwYDVR0j
BBgwFoAUBl+DHw4H4ojTPs9N+qGOLJNkTkMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjMxNjE2NS1kYTUwLTQ3M2ItYmY3Yy1jNzdlYmFiYzZkMGIvMC8wNjVGODMxRjBF
MDdFMjg4RDMzRUNGNERGQUExOEUyQzkzNjQ0RTQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDY1RjgzMUYwRTA3RTI4OEQzM0VDRjRERkFBMThFMkM5MzY0
NEU0My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2MzE2MTY1LWRhNTAtNDczYi1i
ZjdjLWM3N2ViYWJjNmQwYi8wLzMxMzAzMzJlMzczNzJlMzIzMjM2MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzYzNDMyMzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdN4jANBgkqhkiG
9w0BAQsFAAOCAQEADwWYESFZjC16z4wbHtvm0NlvHaS36PZLbnn12LYM2qdbnfLh
SaFiwhRduQdraMgm0gr2NqECWkkOrBKR9z4u3GezLI0I2iJaWez7qXcVymHRqjzX
+ijMdH0C6EKxcdTMtuN4OYZ76mU5Pffh9dY+bf5vv5ZeJK1pPuk1GDGkBKBKmd0v
MOulnRKzx/q5HSs1CO17CgVEkwVZbeXbRxFBPCfEI97erELlPakFR4WxdItwKfks
5Vn1hRw7dcxJ6c6P6uxnQ7mJZaDWJQwv/yvcQ8FVEY4mgvrBZ5Z3Tfqx74GBZhFS
lVu9rGTVba41ApzaUumpwMl8j6q0C6NWYa95Yw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org