Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa
File:                     3130332e35352e32322e302f32332d3234203d3e20313530343930.roa (raw, json)
Hash identifier:          7uZlkY5qq0jd+7pjR3aHWDyV9HgXxI/uz666olpzWQY=
Subject key identifier:   71:D3:7F:B5:20:FB:98:6C:CD:8E:F5:8B:54:1E:70:3A:3D:AA:E0:CB
Certificate issuer:       /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial:       5C54FF63716BB8F96DA1FCC332C7BBABD7F39BEE
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa
Signing time:             Tue 20 Feb 2024 17:00:00 +0000
ROA not before:           Tue 20 Feb 2024 16:55:00 +0000
ROA not after:            Tue 18 Feb 2025 17:00:00 +0000
asID:                     150490
IP address blocks:        103.55.22.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl
                          rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 15:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:54:ff:63:71:6b:b8:f9:6d:a1:fc:c3:32:c7:bb:ab:d7:f3:9b:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
        Validity
            Not Before: Feb 20 16:55:00 2024 GMT
            Not After : Feb 18 17:00:00 2025 GMT
        Subject: CN=71D37FB520FB986CCD8EF58B541E703A3DAAE0CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:d8:d5:58:1a:b2:ef:11:ab:d0:5a:f1:fa:
                    a9:c3:ae:18:57:55:73:f5:5a:6d:66:2e:18:1a:14:
                    f2:a2:a0:66:de:3d:3e:2d:a8:76:77:6b:97:bb:3d:
                    5b:bc:4e:bd:7a:14:b7:51:63:fd:a7:6c:77:a3:d3:
                    76:19:0f:94:3f:ef:10:b7:f8:ae:52:ea:05:56:dd:
                    6b:b1:bb:4b:c6:82:e1:df:59:83:31:71:f9:6a:02:
                    38:bb:90:3b:81:6f:8f:9a:e9:19:d7:db:1f:8e:59:
                    fd:85:18:8c:1f:3b:4d:ec:61:e7:9d:80:f7:32:4c:
                    8b:8e:c7:b9:ab:9f:b1:a7:41:2c:5f:4a:27:28:3c:
                    a3:2c:23:1c:dc:26:e0:2e:d2:68:3c:b5:04:75:19:
                    92:11:9e:79:21:3b:3d:98:95:f1:02:40:ef:d5:03:
                    88:7e:78:c9:fc:9b:69:8e:b3:ef:b0:3d:50:87:77:
                    5c:af:32:a9:e6:c1:91:2a:41:f5:26:aa:7a:a3:72:
                    3e:d7:88:67:0b:b3:79:c1:cd:5c:e3:c2:95:64:7b:
                    83:4b:2e:a6:04:d1:c0:d1:9c:6e:6e:f4:33:20:cc:
                    6c:2d:e7:bb:c1:58:83:9e:e7:25:21:76:f0:a0:6c:
                    7f:c4:7f:3c:90:ea:f3:64:f5:f9:77:8a:9f:76:d2:
                    b7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D3:7F:B5:20:FB:98:6C:CD:8E:F5:8B:54:1E:70:3A:3D:AA:E0:CB
            X509v3 Authority Key Identifier:
                keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3234203d3e20313530343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         51:6b:8c:ac:68:4e:a8:27:cd:b5:c7:0d:53:14:ae:ab:7a:35:
         48:93:6e:26:50:18:b1:f5:85:a6:dd:60:39:fa:01:e4:51:38:
         aa:90:2e:2b:0e:88:5b:62:d9:fd:0e:5b:11:86:9e:c1:87:7f:
         a4:f1:ea:fd:e3:e5:d0:e2:a2:17:71:9b:37:65:08:bb:09:9c:
         6c:56:e6:11:4e:37:4b:ae:66:2e:14:aa:ea:da:c3:81:bc:f4:
         eb:4d:9b:9c:b6:8c:63:25:1c:dd:65:1b:ea:8f:2c:a6:b6:95:
         3d:ea:83:f9:a6:1d:84:f7:9a:2f:1c:6a:af:d7:25:5b:2c:38:
         b5:bd:05:71:bd:6c:cc:c5:f6:aa:65:9f:60:06:10:b0:27:b1:
         0d:f7:7b:aa:a1:99:67:00:50:d1:2f:14:ab:89:a0:20:29:9e:
         e4:4e:ff:e3:9e:7e:c8:2c:53:29:7d:c3:76:9f:80:6e:69:33:
         42:18:d9:e4:db:3b:34:70:2c:5d:ff:45:4e:8d:e8:47:5c:0b:
         cd:eb:f2:7c:ce:9e:27:8b:71:b6:7d:32:fa:cf:c5:b3:6e:c8:
         ca:06:ed:c7:93:48:9c:17:e3:73:7b:bf:28:7e:e3:cc:b0:49:
         f5:59:32:25:80:50:c4:d9:2d:d4:20:44:c5:d9:15:eb:06:d4:
         e5:c1:98:71
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXFT/Y3FruPltofzDMse7q9fzm+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4
MTk2MTUyRDAeFw0yNDAyMjAxNjU1MDBaFw0yNTAyMTgxNzAwMDBaMDMxMTAvBgNV
BAMTKDcxRDM3RkI1MjBGQjk4NkNDRDhFRjU4QjU0MUU3MDNBM0RBQUUwQ0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtadjVWBqy7xGr0Frx+qnDrhhX
VXP1Wm1mLhgaFPKioGbePT4tqHZ3a5e7PVu8Tr16FLdRY/2nbHej03YZD5Q/7xC3
+K5S6gVW3Wuxu0vGguHfWYMxcflqAji7kDuBb4+a6RnX2x+OWf2FGIwfO03sYeed
gPcyTIuOx7mrn7GnQSxfSicoPKMsIxzcJuAu0mg8tQR1GZIRnnkhOz2YlfECQO/V
A4h+eMn8m2mOs++wPVCHd1yvMqnmwZEqQfUmqnqjcj7XiGcLs3nBzVzjwpVke4NL
LqYE0cDRnG5u9DMgzGwt57vBWIOe5yUhdvCgbH/EfzyQ6vNk9fl3ip920rfTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcdN/tSD7mGzNjvWLVB5wOj2q4MswHwYDVR0j
BBgwFoAUtKQhkvjNvpNc5ZJ+WtPGPIGWFS0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
Nzk0ZGE0MC1iMzdlLTRmZTYtOGY0MC03M2IzYjBiZTAxOWYvMC9CNEE0MjE5MkY4
Q0RCRTkzNUNFNTkyN0U1QUQzQzYzQzgxOTYxNTJELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjRBNDIxOTJGOENEQkU5MzVDRTU5MjdFNUFEM0M2M0M4MTk2
MTUyRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc3OTRkYTQwLWIzN2UtNGZlNi04
ZjQwLTczYjNiMGJlMDE5Zi8wLzMxMzAzMzJlMzUzNTJlMzIzMjJlMzAyZjMyMzMy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWc3FjANBgkqhkiG
9w0BAQsFAAOCAQEAUWuMrGhOqCfNtccNUxSuq3o1SJNuJlAYsfWFpt1gOfoB5FE4
qpAuKw6IW2LZ/Q5bEYaewYd/pPHq/ePl0OKiF3GbN2UIuwmcbFbmEU43S65mLhSq
6trDgbz0602bnLaMYyUc3WUb6o8spraVPeqD+aYdhPeaLxxqr9clWyw4tb0Fcb1s
zMX2qmWfYAYQsCexDfd7qqGZZwBQ0S8Uq4mgICme5E7/455+yCxTKX3Ddp+Abmkz
QhjZ5Ns7NHAsXf9FTo3oR1wLzevyfM6eJ4txtn0y+s/Fs27Iygbtx5NInBfjc3u/
KH7jzLBJ9VkyJYBQxNkt1CBExdkV6wbU5cGYcQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:01:44 2024 by rpki-client on console-fra.rpki-client.org