Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
File:                     3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa (raw, json)
Hash identifier:          M0tR3PeMzCRtOK/Eubf18xLqQJGyaFY17/Kg/QR6iY4=
Subject key identifier:   C5:DE:04:9C:AD:52:F8:79:77:3D:B8:2B:4A:C1:9F:64:57:51:81:5E
Certificate issuer:       /CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
Certificate serial:       23D4465FF6038027BDE65D16BF1363342EB82E38
Authority key identifier: 31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa
Signing time:             Sat 16 Nov 2024 10:00:02 +0000
ROA not before:           Sat 16 Nov 2024 09:55:02 +0000
ROA not after:            Sat 15 Nov 2025 10:00:02 +0000
asID:                     141922
IP address blocks:        103.165.150.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl
                          rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 16:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:d4:46:5f:f6:03:80:27:bd:e6:5d:16:bf:13:63:34:2e:b8:2e:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52
        Validity
            Not Before: Nov 16 09:55:02 2024 GMT
            Not After : Nov 15 10:00:02 2025 GMT
        Subject: CN=C5DE049CAD52F879773DB82B4AC19F645751815E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f1:eb:e6:cf:83:cf:2c:21:c9:af:e3:70:9b:
                    4f:a4:fe:3c:01:a9:3b:45:41:be:63:2f:ae:8d:69:
                    af:64:55:b1:82:2f:59:09:f5:c1:5e:6b:b6:57:b2:
                    25:4c:d8:9d:da:46:b7:9f:60:f4:f4:9e:e2:cf:b7:
                    9d:2a:77:6f:cc:6f:fb:07:5f:a5:ce:35:96:22:89:
                    92:ec:b3:03:60:c0:b7:f8:e7:df:f6:03:1f:11:32:
                    c4:be:e1:d6:85:e0:72:d7:41:57:c6:a7:5e:33:a2:
                    ca:67:f8:b4:a1:21:9b:b5:d8:d7:f9:ed:9f:79:78:
                    5e:c3:f0:3c:47:71:fa:de:aa:06:fc:d5:a5:15:bc:
                    b6:ca:1c:93:78:32:24:23:da:ed:c6:aa:ca:7b:16:
                    60:e1:6c:94:52:fa:87:4f:ea:ab:14:3e:cb:b3:cd:
                    86:2d:52:4d:f9:88:70:e6:b6:87:20:ea:65:78:6c:
                    50:b8:c6:30:94:06:47:1c:bb:88:34:bc:e7:75:a0:
                    bc:be:a4:14:1e:a0:2c:e3:70:da:9d:c7:bc:51:8c:
                    f0:1d:0a:b8:df:7c:57:fa:44:43:92:be:f0:a5:1f:
                    e1:63:3f:d7:f6:3f:81:47:3e:82:8e:49:90:29:cf:
                    1c:f1:42:2e:83:b0:c0:8e:0f:dc:54:3d:e2:2c:a1:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:DE:04:9C:AD:52:F8:79:77:3D:B8:2B:4A:C1:9F:64:57:51:81:5E
            X509v3 Authority Key Identifier:
                keyid:31:93:6D:A0:2E:6F:1D:B9:C4:13:C2:CE:31:AF:69:7B:CB:8A:8F:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31936DA02E6F1DB9C413C2CE31AF697BCB8A8F52.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79abd869-935d-439d-8f83-dc765281cc9c/0/3130332e3136352e3135302e302f32342d3234203d3e20313431393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:8b:a5:8b:ee:97:a4:3d:ff:38:4d:f0:c2:a1:14:a7:2e:d9:
         96:62:59:e1:15:3d:a1:59:e9:fe:d9:dd:f9:12:15:6c:d3:d8:
         c1:9f:7f:e7:74:38:f8:27:8c:ca:cd:61:84:ca:70:94:e5:d1:
         1c:7c:ef:e0:8e:91:b0:dd:37:6b:14:64:84:50:6a:2a:80:af:
         21:5b:73:fc:c1:e2:61:d7:3e:d1:99:02:4b:41:7e:16:5d:7b:
         30:6f:fa:da:c1:e1:51:9b:3a:c2:18:db:a7:ec:a7:90:75:a6:
         ba:48:88:39:fc:c0:60:ee:e5:83:87:5b:32:c3:22:c5:a5:a7:
         fc:ea:d7:07:ed:eb:9f:68:cd:69:38:b7:86:a2:5b:23:7d:7b:
         68:dc:16:fb:8f:18:b8:05:1a:68:c9:6f:38:98:12:a9:a0:a7:
         d3:fb:61:e2:aa:11:04:e9:65:21:2d:db:b6:ec:6b:2e:c8:0d:
         71:bb:9b:47:da:97:23:34:29:80:54:fd:52:95:cd:1c:52:90:
         0f:88:f3:d2:dc:52:cb:44:1c:51:dc:ad:39:69:dc:3d:4d:9f:
         79:36:82:ba:8c:44:b3:8d:91:45:45:2c:72:60:28:84:fb:d4:
         9d:cb:c8:40:ef:3f:24:12:9b:38:20:f3:82:a0:55:65:be:69:
         09:2c:16:e5
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUI9RGX/YDgCe95l0WvxNjNC64LjgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JD
QjhBOEY1MjAeFw0yNDExMTYwOTU1MDJaFw0yNTExMTUxMDAwMDJaMDMxMTAvBgNV
BAMTKEM1REUwNDlDQUQ1MkY4Nzk3NzNEQjgyQjRBQzE5RjY0NTc1MTgxNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv8evmz4PPLCHJr+Nwm0+k/jwB
qTtFQb5jL66Naa9kVbGCL1kJ9cFea7ZXsiVM2J3aRrefYPT0nuLPt50qd2/Mb/sH
X6XONZYiiZLsswNgwLf459/2Ax8RMsS+4daF4HLXQVfGp14zospn+LShIZu12Nf5
7Z95eF7D8DxHcfreqgb81aUVvLbKHJN4MiQj2u3Gqsp7FmDhbJRS+odP6qsUPsuz
zYYtUk35iHDmtocg6mV4bFC4xjCUBkccu4g0vOd1oLy+pBQeoCzjcNqdx7xRjPAd
CrjffFf6REOSvvClH+FjP9f2P4FHPoKOSZApzxzxQi6DsMCOD9xUPeIsoUOTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxd4EnK1S+Hl3PbgrSsGfZFdRgV4wHwYDVR0j
BBgwFoAUMZNtoC5vHbnEE8LOMa9pe8uKj1IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWFiZDg2OS05MzVkLTQzOWQtOGY4My1kYzc2NTI4MWNjOWMvMC8zMTkzNkRBMDJF
NkYxREI5QzQxM0MyQ0UzMUFGNjk3QkNCOEE4RjUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzE5MzZEQTAyRTZGMURCOUM0MTNDMkNFMzFBRjY5N0JDQjhB
OEY1Mi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5YWJkODY5LTkzNWQtNDM5ZC04
ZjgzLWRjNzY1MjgxY2M5Yy8wLzMxMzAzMzJlMzEzNjM1MmUzMTM1MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMyMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpZYwDQYJ
KoZIhvcNAQELBQADggEBAAmLpYvul6Q9/zhN8MKhFKcu2ZZiWeEVPaFZ6f7Z3fkS
FWzT2MGff+d0OPgnjMrNYYTKcJTl0Rx87+COkbDdN2sUZIRQaiqAryFbc/zB4mHX
PtGZAktBfhZdezBv+trB4VGbOsIY26fsp5B1prpIiDn8wGDu5YOHWzLDIsWlp/zq
1wft659ozWk4t4aiWyN9e2jcFvuPGLgFGmjJbziYEqmgp9P7YeKqEQTpZSEt27bs
ay7IDXG7m0falyM0KYBU/VKVzRxSkA+I89LcUstEHFHcrTlp3D1Nn3k2grqMRLON
kUVFLHJgKIT71J3LyEDvPyQSmzgg84KgVWW+aQksFuU=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org