Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa
File:                     3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (raw, json)
Hash identifier:          F+PPkcGu7dt3v5/ygEutR5kwCJMPDoB2mAth7Wc1KQQ=
Subject key identifier:   F8:FE:99:43:4F:EB:A4:85:DF:49:EA:DE:87:8D:7C:D7:4C:CD:FA:97
Certificate issuer:       /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
Certificate serial:       03D36FB4395F0F00D51548996B2E7BE4236A6139
Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa
Signing time:             Mon 01 Jul 2024 01:02:48 +0000
ROA not before:           Mon 01 Jul 2024 00:57:48 +0000
ROA not after:            Mon 30 Jun 2025 01:02:48 +0000
asID:                     140401
IP address blocks:        103.150.218.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl
                          rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:d3:6f:b4:39:5f:0f:00:d5:15:48:99:6b:2e:7b:e4:23:6a:61:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5
        Validity
            Not Before: Jul  1 00:57:48 2024 GMT
            Not After : Jun 30 01:02:48 2025 GMT
        Subject: CN=F8FE99434FEBA485DF49EADE878D7CD74CCDFA97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:62:54:9f:6c:83:53:d1:63:89:fb:a3:7e:55:
                    b5:7a:83:f9:a2:5e:57:5d:0a:06:e4:c7:97:db:73:
                    54:3a:01:7c:40:ce:69:3e:5b:40:6a:56:28:0a:ac:
                    c5:bb:9e:2f:55:28:54:0a:6d:4a:22:14:7d:8a:c4:
                    08:9c:15:87:f8:79:0d:f8:5e:06:e3:86:6e:67:22:
                    f9:62:cc:73:2a:ae:68:7f:56:d5:bb:db:ee:0f:2d:
                    ef:41:c2:a0:99:ca:e4:67:ee:f0:ff:7c:1b:fb:8c:
                    42:9f:dd:5f:fb:09:f0:3d:7c:b7:1c:8c:84:0a:36:
                    8d:76:84:82:02:dd:f8:b2:01:56:d4:2b:a0:64:75:
                    00:17:93:91:86:33:19:f4:b0:52:4e:ea:fa:9a:ad:
                    f3:d3:8e:8d:df:01:e9:09:67:7b:b1:a5:a9:ec:4a:
                    a3:cb:44:24:bf:72:44:fb:bd:21:f2:62:da:31:ff:
                    08:7e:9d:1a:38:f5:59:83:0f:03:70:9c:30:ba:6f:
                    7a:18:bc:52:7b:ec:ac:88:b8:dc:00:2c:15:01:90:
                    2a:da:99:c5:dd:4b:27:e6:a0:e1:43:21:13:23:2f:
                    44:ed:a5:17:f9:21:0b:20:22:6c:b3:5d:1c:28:b0:
                    6d:4f:56:a8:90:d7:66:13:40:49:2a:a2:73:28:54:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:99:43:4F:EB:A4:85:DF:49:EA:DE:87:8D:7C:D7:4C:CD:FA:97
            X509v3 Authority Key Identifier:
                keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:17:e2:b6:12:83:de:87:2e:dc:ca:74:96:50:a1:a7:47:b0:
         11:8a:72:64:65:ab:36:e2:fd:99:30:44:27:09:ff:54:bd:90:
         43:53:15:93:88:30:8d:b4:90:eb:cb:de:bb:c4:03:96:27:6f:
         1d:fd:78:e5:03:c1:0e:7c:6f:90:19:e1:a4:68:06:6e:36:b0:
         9c:b8:c7:68:7b:41:59:ca:79:aa:88:ec:26:99:59:c1:4f:f9:
         75:00:37:d3:bb:a0:01:2e:cd:e5:93:78:eb:2e:16:fc:91:68:
         d5:80:fd:d2:16:98:48:c7:8a:ee:cc:4c:eb:d6:cf:5f:ea:38:
         b5:12:fa:45:91:b7:68:e0:c7:14:86:e2:19:fc:ca:70:6b:f8:
         9c:99:00:f7:12:ec:33:15:f4:6e:ae:f6:89:0f:7a:1a:24:de:
         d1:fd:f8:99:d8:ec:1b:a9:16:f7:1b:93:81:47:20:4d:ed:fe:
         5d:7e:6a:83:74:cf:ea:55:8d:97:f9:f6:19:d7:17:6a:07:e6:
         73:62:47:ab:ff:84:04:74:5f:66:91:d9:eb:4f:a0:c7:25:b8:
         8b:8e:85:f5:21:b9:67:06:6b:83:e9:c8:d5:bd:20:24:72:43:
         ee:42:2c:22:7e:c3:26:72:17:d3:b7:33:20:60:b8:53:74:b7:
         9d:0a:ed:8f
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUA9NvtDlfDwDVFUiZay575CNqYTkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB
RUYwNjdDNTAeFw0yNDA3MDEwMDU3NDhaFw0yNTA2MzAwMTAyNDhaMDMxMTAvBgNV
BAMTKEY4RkU5OTQzNEZFQkE0ODVERjQ5RUFERTg3OEQ3Q0Q3NENDREZBOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDYlSfbINT0WOJ+6N+VbV6g/mi
XlddCgbkx5fbc1Q6AXxAzmk+W0BqVigKrMW7ni9VKFQKbUoiFH2KxAicFYf4eQ34
Xgbjhm5nIvlizHMqrmh/VtW72+4PLe9BwqCZyuRn7vD/fBv7jEKf3V/7CfA9fLcc
jIQKNo12hIIC3fiyAVbUK6BkdQAXk5GGMxn0sFJO6vqarfPTjo3fAekJZ3uxpans
SqPLRCS/ckT7vSHyYtox/wh+nRo49VmDDwNwnDC6b3oYvFJ77KyIuNwALBUBkCra
mcXdSyfmoOFDIRMjL0TtpRf5IQsgImyzXRwosG1PVqiQ12YTQEkqonMoVFaJAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU+P6ZQ0/rpIXfSereh41810zN+pcwHwYDVR0j
BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy
RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw
NjdDNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiNWQ3MmYzLTJkYjItNGJjYy05
Zjc3LWQxNDQyYjYzMmQwNC8wLzMxMzAzMzJlMzEzNTMwMmUzMjMxMzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzNDMwMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnltowDQYJ
KoZIhvcNAQELBQADggEBAIYX4rYSg96HLtzKdJZQoadHsBGKcmRlqzbi/ZkwRCcJ
/1S9kENTFZOIMI20kOvL3rvEA5Ynbx39eOUDwQ58b5AZ4aRoBm42sJy4x2h7QVnK
eaqI7CaZWcFP+XUAN9O7oAEuzeWTeOsuFvyRaNWA/dIWmEjHiu7MTOvWz1/qOLUS
+kWRt2jgxxSG4hn8ynBr+JyZAPcS7DMV9G6u9okPehok3tH9+JnY7BupFvcbk4FH
IE3t/l1+aoN0z+pVjZf59hnXF2oH5nNiR6v/hAR0X2aR2etPoMcluIuOhfUhuWcG
a4PpyNW9ICRyQ+5CLCJ+wyZyF9O3MyBguFN0t50K7Y8=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org