Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
File:                     3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa (raw, json)
Hash identifier:          8VCbSt8sf1ira304Yivk2um0uX8Ou0NBiN+oeimWTgo=
Subject key identifier:   C9:53:9E:30:29:C7:E3:2A:7E:8F:63:0B:81:EE:20:7C:15:A0:F2:B1
Certificate issuer:       /CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
Certificate serial:       070451D30297404F873C4DEC10E647616BA7411B
Authority key identifier: 5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa
Signing time:             Fri 12 Apr 2024 19:00:00 +0000
ROA not before:           Fri 12 Apr 2024 18:55:00 +0000
ROA not after:            Fri 11 Apr 2025 19:00:00 +0000
asID:                     140389
IP address blocks:        103.150.60.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl
                          rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:29:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:04:51:d3:02:97:40:4f:87:3c:4d:ec:10:e6:47:61:6b:a7:41:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C413D56294D9D20E64978B7296A9DA893C32CAB
        Validity
            Not Before: Apr 12 18:55:00 2024 GMT
            Not After : Apr 11 19:00:00 2025 GMT
        Subject: CN=C9539E3029C7E32A7E8F630B81EE207C15A0F2B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:27:9e:03:13:02:4e:bc:8d:84:9b:39:4d:28:
                    a0:ca:9d:59:6a:b1:f9:f8:5f:57:ae:d3:49:f9:84:
                    ba:7d:b5:00:0a:10:2f:ba:06:a5:8c:57:d0:5e:fb:
                    94:a6:10:6a:4c:7f:70:f6:30:05:ef:f2:34:e8:12:
                    05:00:8c:1e:9f:bf:64:c3:70:8e:3b:3f:95:cc:9f:
                    13:07:3c:90:4e:ac:a1:83:24:fa:6e:b6:e0:2a:35:
                    0d:17:b7:70:48:d6:80:49:c0:e0:9f:03:00:25:01:
                    ba:82:db:b9:17:26:e7:1b:4e:ac:e6:f3:c1:79:53:
                    b0:57:0f:62:2c:d1:b2:cb:1e:9f:f6:c9:44:41:2f:
                    52:27:05:7f:d9:e3:2e:ad:0e:60:1b:77:e1:d6:7c:
                    65:7a:00:23:3b:e7:53:78:64:77:87:ce:b5:2d:38:
                    37:a7:b1:aa:4d:b9:9d:73:46:e1:35:53:29:20:1a:
                    21:5c:b7:e7:b8:de:67:fe:31:be:d8:f0:fc:b8:35:
                    ad:94:12:37:79:bb:ba:d0:1c:09:2c:e5:c7:43:60:
                    e4:c3:30:12:15:45:fc:60:3f:61:a7:a4:b6:96:a7:
                    47:5c:19:f2:f0:8b:7e:65:2b:72:ff:6c:2a:2e:d0:
                    d4:f3:78:cd:83:2a:65:34:78:e1:85:c7:70:4b:0d:
                    f0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:53:9E:30:29:C7:E3:2A:7E:8F:63:0B:81:EE:20:7C:15:A0:F2:B1
            X509v3 Authority Key Identifier:
                keyid:5C:41:3D:56:29:4D:9D:20:E6:49:78:B7:29:6A:9D:A8:93:C3:2C:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/5C413D56294D9D20E64978B7296A9DA893C32CAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C413D56294D9D20E64978B7296A9DA893C32CAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b3eabb4-4db3-4373-a348-fb1ed7055651/0/3130332e3135302e36302e302f32342d3234203d3e20313430333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.60.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:2e:df:59:87:e5:7c:7c:7d:cb:bb:46:45:5d:ab:0c:04:19:
         d1:30:22:05:46:a8:76:18:97:20:c3:9e:d2:4c:04:aa:58:02:
         eb:61:e6:61:0b:66:1c:fc:3e:9c:aa:a5:5e:ac:3b:ab:dd:07:
         77:40:8e:bd:bf:7b:74:89:4f:48:f9:f8:68:ab:c2:c1:73:19:
         e9:ca:84:47:c0:0d:55:05:3f:72:33:de:af:61:29:97:20:af:
         77:df:58:3a:f0:d8:ba:fd:52:56:22:bf:b4:62:8b:e9:57:16:
         05:f4:6e:4e:42:e5:9b:30:97:69:fe:a8:17:6d:c0:61:64:f7:
         13:9d:41:73:77:fd:c2:fc:7d:51:5d:ed:1d:43:be:ee:ad:31:
         78:13:76:be:b1:16:a9:35:c6:55:8d:5c:11:6d:26:f7:5c:fe:
         eb:1b:88:ce:df:82:8f:62:58:9f:5b:90:ab:f7:68:a8:fd:79:
         c7:76:da:d6:e6:53:3c:9c:6e:98:c3:9a:ac:a1:81:3a:bd:05:
         3b:4e:32:d4:86:19:53:15:a5:29:ad:e4:4d:09:74:50:db:14:
         37:bc:96:64:95:a5:18:8c:81:f5:f4:af:d9:5a:99:fc:2d:b1:
         b3:c6:de:9a:ef:f8:30:27:a5:71:dc:c9:25:94:83:27:14:20:
         3e:d9:72:a5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBwRR0wKXQE+HPE3sEOZHYWunQRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5
M0MzMkNBQjAeFw0yNDA0MTIxODU1MDBaFw0yNTA0MTExOTAwMDBaMDMxMTAvBgNV
BAMTKEM5NTM5RTMwMjlDN0UzMkE3RThGNjMwQjgxRUUyMDdDMTVBMEYyQjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXJ54DEwJOvI2EmzlNKKDKnVlq
sfn4X1eu00n5hLp9tQAKEC+6BqWMV9Be+5SmEGpMf3D2MAXv8jToEgUAjB6fv2TD
cI47P5XMnxMHPJBOrKGDJPputuAqNQ0Xt3BI1oBJwOCfAwAlAbqC27kXJucbTqzm
88F5U7BXD2Is0bLLHp/2yURBL1InBX/Z4y6tDmAbd+HWfGV6ACM751N4ZHeHzrUt
ODensapNuZ1zRuE1UykgGiFct+e43mf+Mb7Y8Py4Na2UEjd5u7rQHAks5cdDYOTD
MBIVRfxgP2GnpLaWp0dcGfLwi35lK3L/bCou0NTzeM2DKmU0eOGFx3BLDfDFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUyVOeMCnH4yp+j2MLge4gfBWg8rEwHwYDVR0j
BBgwFoAUXEE9VilNnSDmSXi3KWqdqJPDLKswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjNlYWJiNC00ZGIzLTQzNzMtYTM0OC1mYjFlZDcwNTU2NTEvMC81QzQxM0Q1NjI5
NEQ5RDIwRTY0OTc4QjcyOTZBOURBODkzQzMyQ0FCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUM0MTNENTYyOTREOUQyMEU2NDk3OEI3Mjk2QTlEQTg5M0Mz
MkNBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiM2VhYmI0LTRkYjMtNDM3My1h
MzQ4LWZiMWVkNzA1NTY1MS8wLzMxMzAzMzJlMzEzNTMwMmUzNjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzMzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5Y8MA0GCSqG
SIb3DQEBCwUAA4IBAQBaLt9Zh+V8fH3Lu0ZFXasMBBnRMCIFRqh2GJcgw57STASq
WALrYeZhC2Yc/D6cqqVerDur3Qd3QI69v3t0iU9I+fhoq8LBcxnpyoRHwA1VBT9y
M96vYSmXIK9331g68Ni6/VJWIr+0YovpVxYF9G5OQuWbMJdp/qgXbcBhZPcTnUFz
d/3C/H1RXe0dQ77urTF4E3a+sRapNcZVjVwRbSb3XP7rG4jO34KPYlifW5Cr92io
/XnHdtrW5lM8nG6Yw5qsoYE6vQU7TjLUhhlTFaUpreRNCXRQ2xQ3vJZklaUYjIH1
9K/ZWpn8LbGzxt6a7/gwJ6Vx3MkllIMnFCA+2XKl
-----END CERTIFICATE-----
Generated at Sat Jun 1 23:43:21 2024 by rpki-client on console-fra.rpki-client.org