Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
File:                     3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa (raw, json)
Hash identifier:          UxiK+DwxML33GG12P4iUxA7UjVEpP8gB6xQUqo8diLY=
Subject key identifier:   D7:14:E8:D8:99:7C:24:35:8B:9C:61:A5:CA:0C:35:59:A0:9B:53:9E
Certificate issuer:       /CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
Certificate serial:       21056C827CA51022B20FC87CC6A8CC117F2F5B20
Authority key identifier: 36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa
Signing time:             Wed 06 Mar 2024 14:00:00 +0000
ROA not before:           Wed 06 Mar 2024 13:55:00 +0000
ROA not after:            Wed 05 Mar 2025 14:00:00 +0000
asID:                     150232
IP address blocks:        103.13.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl
                          rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:05:6c:82:7c:a5:10:22:b2:0f:c8:7c:c6:a8:cc:11:7f:2f:5b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=361B6D7E16A02B7316B6F91ED34B22A907EE866B
        Validity
            Not Before: Mar  6 13:55:00 2024 GMT
            Not After : Mar  5 14:00:00 2025 GMT
        Subject: CN=D714E8D8997C24358B9C61A5CA0C3559A09B539E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:8c:8a:7d:75:d6:68:93:8a:df:9a:07:a3:
                    c1:61:81:91:8d:90:04:60:f6:d1:f5:11:21:c4:ed:
                    f6:8b:73:87:99:7c:15:77:b9:f1:4f:ec:bb:64:96:
                    0d:9c:ea:f0:6c:7d:27:87:b9:76:55:e6:0f:7a:58:
                    ab:07:f9:a5:83:f8:6c:e4:4e:62:57:3a:7e:1f:8d:
                    e9:06:72:97:aa:d6:64:7f:0b:98:31:87:c1:f0:4c:
                    58:0b:08:ac:1b:75:41:47:01:e0:41:9c:b4:59:ba:
                    6a:fc:83:fe:28:71:c3:e5:13:78:6e:3e:71:ca:18:
                    22:2a:44:64:3f:5e:ed:55:dd:42:36:c0:74:9a:44:
                    ce:9e:1a:8f:0e:ab:a7:b4:05:9b:6d:ee:66:07:c8:
                    b0:dd:66:ea:b8:bc:d6:ff:76:d7:41:1c:bc:07:5a:
                    4e:8a:53:ca:6b:92:12:7f:a0:c3:6d:60:21:ca:0d:
                    5f:fa:ff:83:39:ef:0c:2f:40:ef:cc:6b:d8:b8:3e:
                    5f:02:a3:81:d1:4d:13:72:bb:f3:a5:69:4a:81:a9:
                    8f:c1:0b:7f:0a:97:7b:0d:e7:0c:5a:8f:e6:4f:8a:
                    78:ea:78:4b:20:46:f3:b1:be:f4:d9:f6:c2:31:68:
                    aa:c2:38:06:9a:11:a4:f9:b5:08:62:10:b7:f4:14:
                    27:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:14:E8:D8:99:7C:24:35:8B:9C:61:A5:CA:0C:35:59:A0:9B:53:9E
            X509v3 Authority Key Identifier:
                keyid:36:1B:6D:7E:16:A0:2B:73:16:B6:F9:1E:D3:4B:22:A9:07:EE:86:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/361B6D7E16A02B7316B6F91ED34B22A907EE866B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/361B6D7E16A02B7316B6F91ED34B22A907EE866B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7ac4d75e-3da8-4990-8042-7e0ecf59f13b/0/3130332e31332e3233342e302f32342d3234203d3e20313530323332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:3d:18:8c:90:54:ad:5c:72:6d:e8:ed:d3:03:b8:99:82:
         c6:9e:81:bd:c8:2a:09:7d:1f:d5:84:dd:67:4b:12:67:82:1d:
         b7:5b:a5:ad:dc:03:7e:60:8f:7e:18:89:e2:d6:36:c5:82:65:
         d7:1b:07:27:5d:c2:31:38:5c:51:98:b3:6a:70:6f:d9:cb:14:
         80:44:d8:30:a0:24:1f:8c:d9:55:9d:94:77:61:74:88:1d:9d:
         fa:90:c4:2a:78:2a:4a:94:27:aa:ea:40:e3:40:50:ef:cc:88:
         07:f3:d5:8e:5a:44:87:48:e6:55:1b:76:68:80:99:54:25:89:
         53:e0:35:11:94:22:65:12:3c:ab:e2:ca:39:f7:77:76:f1:e3:
         f9:10:d1:51:ef:d4:93:4f:ad:8d:39:1b:2e:d5:fd:e8:91:cd:
         25:a1:a9:eb:51:fd:de:f4:fe:87:ea:79:2d:8d:81:1e:4c:47:
         a2:dc:5a:31:0b:43:67:48:65:15:a5:54:c8:03:8d:27:07:a8:
         55:a0:86:8f:2d:f1:58:af:93:57:7f:9b:b1:60:e7:be:ca:60:
         8a:5d:9e:12:84:31:8c:a5:1f:88:6f:b0:3f:fb:82:07:93:0d:
         a6:f1:50:4d:e9:77:75:57:b0:ef:9a:a4:dd:b3:5f:ce:c8:6d:
         a0:e8:7e:a7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIQVsgnylECKyD8h8xqjMEX8vWyAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkw
N0VFODY2QjAeFw0yNDAzMDYxMzU1MDBaFw0yNTAzMDUxNDAwMDBaMDMxMTAvBgNV
BAMTKEQ3MTRFOEQ4OTk3QzI0MzU4QjlDNjFBNUNBMEMzNTU5QTA5QjUzOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpaoyKfXXWaJOK35oHo8FhgZGN
kARg9tH1ESHE7faLc4eZfBV3ufFP7Ltklg2c6vBsfSeHuXZV5g96WKsH+aWD+Gzk
TmJXOn4fjekGcpeq1mR/C5gxh8HwTFgLCKwbdUFHAeBBnLRZumr8g/4occPlE3hu
PnHKGCIqRGQ/Xu1V3UI2wHSaRM6eGo8Oq6e0BZtt7mYHyLDdZuq4vNb/dtdBHLwH
Wk6KU8prkhJ/oMNtYCHKDV/6/4M57wwvQO/Ma9i4Pl8Co4HRTRNyu/OlaUqBqY/B
C38Kl3sN5wxaj+ZPinjqeEsgRvOxvvTZ9sIxaKrCOAaaEaT5tQhiELf0FCdhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU1xTo2Jl8JDWLnGGlygw1WaCbU54wHwYDVR0j
BBgwFoAUNhttfhagK3MWtvke00siqQfuhmswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YWM0ZDc1ZS0zZGE4LTQ5OTAtODA0Mi03ZTBlY2Y1OWYxM2IvMC8zNjFCNkQ3RTE2
QTAyQjczMTZCNkY5MUVEMzRCMjJBOTA3RUU4NjZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzYxQjZEN0UxNkEwMkI3MzE2QjZGOTFFRDM0QjIyQTkwN0VF
ODY2Qi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdhYzRkNzVlLTNkYTgtNDk5MC04
MDQyLTdlMGVjZjU5ZjEzYi8wLzMxMzAzMzJlMzEzMzJlMzIzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw3qMA0GCSqG
SIb3DQEBCwUAA4IBAQCXHT0YjJBUrVxybejt0wO4mYLGnoG9yCoJfR/VhN1nSxJn
gh23W6Wt3AN+YI9+GIni1jbFgmXXGwcnXcIxOFxRmLNqcG/ZyxSARNgwoCQfjNlV
nZR3YXSIHZ36kMQqeCpKlCeq6kDjQFDvzIgH89WOWkSHSOZVG3ZogJlUJYlT4DUR
lCJlEjyr4so593d28eP5ENFR79STT62NORsu1f3okc0loanrUf3e9P6H6nktjYEe
TEei3FoxC0NnSGUVpVTIA40nB6hVoIaPLfFYr5NXf5uxYOe+ymCKXZ4ShDGMpR+I
b7A/+4IHkw2m8VBN6Xd1V7DvmqTds1/OyG2g6H6n
-----END CERTIFICATE-----
Generated at Fri Nov 22 23:37:26 2024 by rpki-client on console-fra.rpki-client.org