Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa
File:                     3130332e3134332e352e302f32342d3234203d3e20313339343034.roa (raw, json)
Hash identifier:          1PR8k35uBdtWKJbRwobyFaxAhGMR+zfYhfWD/SSaHfs=
Subject key identifier:   BA:A2:60:E3:1D:01:EE:D3:18:E9:9B:30:9B:2E:FF:8F:0A:BD:EE:D3
Certificate issuer:       /CN=03F45A130990D1072FE172E1EF64AAFAEC347834
Certificate serial:       223EBD3A942F6A5E0B68EFCBC35DFB8568B5494B
Authority key identifier: 03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa
Signing time:             Mon 23 Oct 2023 09:00:00 +0000
ROA not before:           Mon 23 Oct 2023 08:55:00 +0000
ROA not after:            Mon 21 Oct 2024 09:00:00 +0000
asID:                     139404
IP address blocks:        103.143.5.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl
                          rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3e:bd:3a:94:2f:6a:5e:0b:68:ef:cb:c3:5d:fb:85:68:b5:49:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03F45A130990D1072FE172E1EF64AAFAEC347834
        Validity
            Not Before: Oct 23 08:55:00 2023 GMT
            Not After : Oct 21 09:00:00 2024 GMT
        Subject: CN=BAA260E31D01EED318E99B309B2EFF8F0ABDEED3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:32:1e:23:ff:1f:2b:2d:81:62:5d:77:6a:2d:
                    94:2b:da:b2:4e:15:fd:60:6a:9d:a4:84:dd:46:6c:
                    04:16:f0:71:f6:83:66:fc:19:c8:19:f5:c8:b3:d8:
                    44:95:fc:fb:c3:4b:de:4e:bb:77:41:7a:52:3f:19:
                    28:ae:da:fb:ab:97:d4:d1:12:d4:64:a6:57:17:b9:
                    6e:b3:1e:35:3f:f2:e8:a7:91:ba:5b:ce:2f:9e:a4:
                    5e:1f:c5:a7:c8:d4:d1:87:91:27:44:0f:46:31:9e:
                    fd:3c:da:c9:70:b5:6b:61:6c:8b:d0:f6:32:0f:0e:
                    86:6d:70:28:da:61:13:d4:c8:07:ad:c9:35:9c:c6:
                    80:0a:95:cb:1b:9d:fc:48:8a:cb:2d:e0:b4:c8:fb:
                    f0:fc:d2:f7:0c:73:a3:2c:8f:79:a3:ac:fd:ab:ed:
                    d5:4f:c4:5b:3c:85:0d:67:8f:8b:cc:c5:ab:b0:b5:
                    a6:f4:8a:d5:c4:ce:af:59:df:49:a8:23:45:46:f5:
                    05:3b:3d:21:66:ee:a0:9e:35:b8:ed:c0:2b:ae:46:
                    ba:9c:61:d4:eb:a2:17:a7:85:3f:29:c5:65:36:aa:
                    b4:88:5c:a5:14:5b:19:68:98:3e:e4:1f:36:d5:0b:
                    0f:42:61:10:3a:41:1c:95:35:1a:ae:81:dc:15:18:
                    9a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A2:60:E3:1D:01:EE:D3:18:E9:9B:30:9B:2E:FF:8F:0A:BD:EE:D3
            X509v3 Authority Key Identifier:
                keyid:03:F4:5A:13:09:90:D1:07:2F:E1:72:E1:EF:64:AA:FA:EC:34:78:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/03F45A130990D1072FE172E1EF64AAFAEC347834.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/03F45A130990D1072FE172E1EF64AAFAEC347834.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7998d6ee-6fd7-4e2d-ae41-6939fdb153ee/0/3130332e3134332e352e302f32342d3234203d3e20313339343034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:69:47:90:1f:26:e6:64:c2:ee:18:96:90:2c:4d:9e:a7:5b:
         7a:60:11:99:22:67:e8:a4:0f:4d:63:ae:a3:79:3a:79:5f:91:
         8c:4d:fe:09:37:8e:bb:c2:21:b1:bb:44:6b:22:92:5b:fd:cc:
         ff:07:ac:35:6b:9c:06:3e:f5:d3:b9:0a:36:e6:e9:8f:c1:9d:
         de:d3:47:b4:73:39:66:82:d5:9d:de:d8:5a:87:4a:ba:db:f7:
         ea:69:2a:47:fc:39:82:ac:24:86:60:22:b0:a7:70:d4:71:39:
         b8:a0:c4:83:ee:b4:c0:6a:f7:9b:84:1f:75:d2:09:6c:d7:63:
         8c:52:9f:80:93:76:ce:ab:fa:37:3e:18:df:5c:27:6a:19:a6:
         ab:7c:36:7a:f4:1c:f4:fc:d6:d1:b1:77:5a:49:eb:44:6a:4f:
         4b:93:d3:de:f7:d3:da:20:df:0c:d6:0b:d7:ca:eb:d4:26:7d:
         0a:c9:b4:55:45:77:72:0a:a1:c2:12:90:8f:1a:7d:09:15:f7:
         20:52:f1:16:1d:fb:ae:b7:e6:2a:c8:70:cc:48:c5:76:e2:a1:
         e5:cf:9f:66:46:25:aa:4a:82:1e:b8:cb:67:71:73:44:b0:32:
         86:f4:0c:f3:b0:1d:ed:8f:1b:99:e9:31:5c:df:1d:d7:be:fd:
         25:d0:cf:8d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIj69OpQval4LaO/Lw137hWi1SUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFF
QzM0NzgzNDAeFw0yMzEwMjMwODU1MDBaFw0yNDEwMjEwOTAwMDBaMDMxMTAvBgNV
BAMTKEJBQTI2MEUzMUQwMUVFRDMxOEU5OUIzMDlCMkVGRjhGMEFCREVFRDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMh4j/x8rLYFiXXdqLZQr2rJO
Ff1gap2khN1GbAQW8HH2g2b8GcgZ9ciz2ESV/PvDS95Ou3dBelI/GSiu2vurl9TR
EtRkplcXuW6zHjU/8uinkbpbzi+epF4fxafI1NGHkSdED0Yxnv082slwtWthbIvQ
9jIPDoZtcCjaYRPUyAetyTWcxoAKlcsbnfxIisst4LTI+/D80vcMc6Msj3mjrP2r
7dVPxFs8hQ1nj4vMxauwtab0itXEzq9Z30moI0VG9QU7PSFm7qCeNbjtwCuuRrqc
YdTrohenhT8pxWU2qrSIXKUUWxlomD7kHzbVCw9CYRA6QRyVNRqugdwVGJoVAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUuqJg4x0B7tMY6Zswmy7/jwq97tMwHwYDVR0j
BBgwFoAUA/RaEwmQ0Qcv4XLh72Sq+uw0eDQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OTk4ZDZlZS02ZmQ3LTRlMmQtYWU0MS02OTM5ZmRiMTUzZWUvMC8wM0Y0NUExMzA5
OTBEMTA3MkZFMTcyRTFFRjY0QUFGQUVDMzQ3ODM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDNGNDVBMTMwOTkwRDEwNzJGRTE3MkUxRUY2NEFBRkFFQzM0
NzgzNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5OThkNmVlLTZmZDctNGUyZC1h
ZTQxLTY5MzlmZGIxNTNlZS8wLzMxMzAzMzJlMzEzNDMzMmUzNTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzOTM0MzAzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGePBTANBgkqhkiG
9w0BAQsFAAOCAQEAoGlHkB8m5mTC7hiWkCxNnqdbemARmSJn6KQPTWOuo3k6eV+R
jE3+CTeOu8IhsbtEayKSW/3M/wesNWucBj7107kKNubpj8Gd3tNHtHM5ZoLVnd7Y
WodKutv36mkqR/w5gqwkhmAisKdw1HE5uKDEg+60wGr3m4QfddIJbNdjjFKfgJN2
zqv6Nz4Y31wnahmmq3w2evQc9PzW0bF3WknrRGpPS5PT3vfT2iDfDNYL18rr1CZ9
Csm0VUV3cgqhwhKQjxp9CRX3IFLxFh37rrfmKshwzEjFduKh5c+fZkYlqkqCHrjL
Z3FzRLAyhvQM87Ad7Y8bmekxXN8d1779JdDPjQ==
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:29 2024 by rpki-client on console-fra.rpki-client.org