Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
File:                     3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (raw, json)
Hash identifier:          2Te13nwELcKfxq0DNKKu6IHNtj0OQ7GRD+dYazNFcKQ=
Subject key identifier:   52:62:D3:27:48:FD:A1:CD:3E:9E:89:FF:83:BF:2C:F8:AD:59:DC:09
Certificate issuer:       /CN=D681DB990E904642A480AE9546646329FF5D0162
Certificate serial:       5DD695616B68B094C832499DFCE433C89D04F07D
Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa
Signing time:             Thu 11 Jan 2024 08:00:55 +0000
ROA not before:           Thu 11 Jan 2024 07:55:55 +0000
ROA not after:            Thu 09 Jan 2025 08:00:55 +0000
asID:                     139449
IP address blocks:        103.145.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl
                          rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d6:95:61:6b:68:b0:94:c8:32:49:9d:fc:e4:33:c8:9d:04:f0:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162
        Validity
            Not Before: Jan 11 07:55:55 2024 GMT
            Not After : Jan  9 08:00:55 2025 GMT
        Subject: CN=5262D32748FDA1CD3E9E89FF83BF2CF8AD59DC09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:9e:ab:13:a7:99:66:d4:43:59:65:04:b0:1b:
                    80:0e:9e:8d:57:66:48:f5:68:78:9d:86:a5:d1:bf:
                    6c:a2:45:03:ee:be:a9:a0:6a:98:86:46:d9:d3:f3:
                    cc:ab:9b:c2:e7:f0:26:77:f8:5b:ee:fb:9a:d1:f4:
                    7c:8d:7b:a1:c0:38:d5:73:3e:fe:16:94:02:40:f3:
                    ea:7d:9b:2d:2a:1a:b4:2b:18:c5:15:0e:a8:c2:ff:
                    9e:ab:5c:02:27:99:6d:28:02:3f:ac:c8:a5:9f:2f:
                    07:de:98:6d:14:6e:8f:86:4a:89:64:2c:be:9c:91:
                    2a:06:e9:49:48:24:63:39:cc:97:7a:c3:c3:05:27:
                    1a:22:3a:33:7a:f5:46:e8:7e:df:91:b5:62:f0:3e:
                    51:dc:07:72:f4:11:56:9e:56:43:58:5f:2d:c5:ed:
                    c4:59:5f:1a:7a:6d:dd:a8:11:93:fe:6d:f6:9f:c5:
                    5d:a8:ed:db:9b:5c:16:65:a3:49:4f:d4:cd:89:83:
                    19:f3:24:4c:33:64:6e:48:cb:04:86:e3:c0:87:a9:
                    9c:2e:02:a0:9e:b4:65:b0:b8:05:c1:f2:12:60:92:
                    28:26:17:66:8c:0c:5b:cc:6c:97:1d:ed:a5:9e:1c:
                    66:ec:4d:30:b3:22:90:76:d3:a5:f3:6c:1b:76:1d:
                    c8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:62:D3:27:48:FD:A1:CD:3E:9E:89:FF:83:BF:2C:F8:AD:59:DC:09
            X509v3 Authority Key Identifier:
                keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:c6:1a:5d:3c:3f:67:8d:79:b4:34:a9:d1:4b:5d:d8:da:c9:
         69:cc:80:36:f0:1c:94:6a:29:cf:cc:24:7f:f6:2f:d0:16:93:
         ce:e3:b0:87:69:67:1c:cc:73:57:7f:74:dd:e8:49:80:21:73:
         8a:11:d5:0f:6f:9d:84:7e:64:1e:13:c7:70:5c:8e:3f:96:4d:
         bc:38:e2:37:af:d3:7d:05:c5:86:e4:e2:34:ee:5d:f7:26:8d:
         f6:47:6c:ec:b1:1c:8e:a4:56:29:37:75:6f:30:72:4c:b0:d2:
         8a:88:97:c2:47:cc:b7:f4:cd:33:a3:ea:d6:42:6f:be:e2:b6:
         ab:37:f4:fd:40:fa:71:08:03:1e:b2:14:1f:7c:4d:75:3f:0e:
         02:89:1d:6c:13:aa:99:c8:5f:06:e8:70:89:ea:e2:84:2c:b8:
         e7:74:0b:35:38:c5:bb:20:7d:98:b4:3a:7e:a3:39:13:d3:ea:
         5a:04:c5:49:66:48:d6:16:2e:b3:8e:b0:f4:fc:ba:bc:0e:8b:
         6e:b1:23:10:38:33:cd:1a:03:61:cc:c9:79:b2:71:e7:ed:46:
         a2:09:26:fb:71:a6:1d:31:37:2a:b9:91:d3:1d:13:56:df:e9:
         9e:73:10:6c:51:0f:d7:63:13:56:05:39:be:33:0c:72:12:8c:
         5a:8e:58:d2
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXdaVYWtosJTIMkmd/OQzyJ0E8H0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG
RjVEMDE2MjAeFw0yNDAxMTEwNzU1NTVaFw0yNTAxMDkwODAwNTVaMDMxMTAvBgNV
BAMTKDUyNjJEMzI3NDhGREExQ0QzRTlFODlGRjgzQkYyQ0Y4QUQ1OURDMDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2nqsTp5lm1ENZZQSwG4AOno1X
Zkj1aHidhqXRv2yiRQPuvqmgapiGRtnT88yrm8Ln8CZ3+Fvu+5rR9HyNe6HAONVz
Pv4WlAJA8+p9my0qGrQrGMUVDqjC/56rXAInmW0oAj+syKWfLwfemG0Ubo+GSolk
LL6ckSoG6UlIJGM5zJd6w8MFJxoiOjN69Uboft+RtWLwPlHcB3L0EVaeVkNYXy3F
7cRZXxp6bd2oEZP+bfafxV2o7dubXBZlo0lP1M2JgxnzJEwzZG5IywSG48CHqZwu
AqCetGWwuAXB8hJgkigmF2aMDFvMbJcd7aWeHGbsTTCzIpB206XzbBt2HcilAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUmLTJ0j9oc0+non/g78s+K1Z3AkwHwYDVR0j
BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF
OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE
MDE2Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5ZmJlMDg4LTBkODQtNDc4OS1i
NDA1LTI1YzJlNzY5MzdmNi8wLzMxMzAzMzJlMzEzNDM1MmUzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5EiMA0GCSqG
SIb3DQEBCwUAA4IBAQBSxhpdPD9njXm0NKnRS13Y2slpzIA28ByUainPzCR/9i/Q
FpPO47CHaWcczHNXf3Td6EmAIXOKEdUPb52EfmQeE8dwXI4/lk28OOI3r9N9BcWG
5OI07l33Jo32R2zssRyOpFYpN3VvMHJMsNKKiJfCR8y39M0zo+rWQm++4rarN/T9
QPpxCAMeshQffE11Pw4CiR1sE6qZyF8G6HCJ6uKELLjndAs1OMW7IH2YtDp+ozkT
0+paBMVJZkjWFi6zjrD0/Lq8DotusSMQODPNGgNhzMl5snHn7UaiCSb7caYdMTcq
uZHTHRNW3+mecxBsUQ/XYxNWBTm+MwxyEoxajljS
-----END CERTIFICATE-----
Generated at Sat Jun 22 13:04:57 2024 by rpki-client on console-ams.rpki-client.org