Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
File:                     3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa (raw, json)
Hash identifier:          VxyDNnudqygKgR79hpegf94Yg2WhSQlGNZ9G0Gl3Frg=
Subject key identifier:   80:63:98:14:DB:57:99:9C:25:34:A1:ED:9A:CF:AE:A3:F0:EE:DB:0B
Certificate issuer:       /CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
Certificate serial:       656C3132A1038317C1AB802A3296F33E35E326E1
Authority key identifier: 1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa
Signing time:             Tue 19 Mar 2024 15:44:56 +0000
ROA not before:           Tue 19 Mar 2024 15:39:56 +0000
ROA not after:            Tue 18 Mar 2025 15:44:56 +0000
asID:                     139365
IP address blocks:        103.141.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl
                          rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:6c:31:32:a1:03:83:17:c1:ab:80:2a:32:96:f3:3e:35:e3:26:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BA1ADD734797C0383628A8723DEBADA827B5B02
        Validity
            Not Before: Mar 19 15:39:56 2024 GMT
            Not After : Mar 18 15:44:56 2025 GMT
        Subject: CN=80639814DB57999C2534A1ED9ACFAEA3F0EEDB0B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:02:68:ef:28:58:c4:86:34:c3:c5:85:02:71:
                    c7:4e:f2:5a:ee:75:aa:11:22:68:3b:dd:1a:44:b3:
                    57:87:fb:fd:fb:00:69:e7:aa:3b:95:63:a2:0e:f9:
                    99:5d:ac:5b:63:16:d8:45:7e:63:71:d7:88:7f:cf:
                    de:d4:86:ba:e0:53:f7:54:fe:a4:ec:24:2f:95:4c:
                    63:d2:55:9b:70:ee:71:29:31:1c:7b:76:53:d4:fe:
                    8a:8d:79:f2:0e:02:9e:b4:33:39:6e:a5:99:df:d3:
                    ef:83:b1:06:26:5c:2b:5f:63:92:55:d8:bb:b9:eb:
                    ed:61:34:05:81:fa:c1:c6:c1:02:4c:78:80:dc:eb:
                    1f:f1:c7:d7:f9:ce:8d:3b:9f:38:6a:65:42:9a:4b:
                    52:d3:01:6c:71:32:18:09:11:af:36:88:2c:d2:8e:
                    56:8a:e3:e3:7f:56:93:a8:a7:95:97:28:44:cc:c9:
                    bd:a6:90:78:17:df:73:0e:fa:7e:a6:d1:04:e1:f4:
                    0c:ae:ef:7e:b3:4d:ba:2d:b7:f1:78:d2:be:91:e0:
                    82:cd:13:e9:e2:ec:d6:8e:23:f1:32:19:6d:fc:04:
                    87:0a:bc:fd:6b:43:41:c7:b4:ea:47:25:1e:f5:2c:
                    af:85:e2:3b:4b:9b:82:78:2e:e7:dd:a2:a6:41:cb:
                    98:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:63:98:14:DB:57:99:9C:25:34:A1:ED:9A:CF:AE:A3:F0:EE:DB:0B
            X509v3 Authority Key Identifier:
                keyid:1B:A1:AD:D7:34:79:7C:03:83:62:8A:87:23:DE:BA:DA:82:7B:5B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/1BA1ADD734797C0383628A8723DEBADA827B5B02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BA1ADD734797C0383628A8723DEBADA827B5B02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bed83bd-8986-4429-a011-ac590724d586/0/3130332e3134312e3234342e302f32342d3234203d3e20313339333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.141.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:62:e7:06:fd:b6:01:b9:86:65:b6:0d:1c:e7:c2:bc:02:a6:
         b1:80:8d:36:f5:5c:76:b9:a2:0c:59:00:b3:23:3c:13:a3:40:
         e1:96:d6:7e:fc:34:16:d5:f0:31:7f:12:31:c9:00:6b:38:23:
         09:de:92:1b:37:2d:94:00:e4:b4:18:ba:33:b4:53:71:80:f9:
         4f:a1:ba:6f:ae:de:b8:6b:13:a2:89:55:eb:ef:37:57:4f:eb:
         e1:70:2a:51:a7:3c:5c:89:1a:80:35:8f:c0:00:ac:ba:d1:d6:
         20:e1:e9:34:c2:19:cb:5b:84:1a:8f:22:25:af:34:00:31:f5:
         c3:84:57:fd:3b:b6:7c:3a:65:96:85:81:e9:14:4f:64:d7:e1:
         a4:cc:6c:ce:dd:16:ce:0f:19:8d:eb:d3:37:3a:10:8a:11:c0:
         5e:c9:c1:3f:50:6b:35:32:b3:73:79:17:18:bf:37:40:f7:e2:
         9c:73:3c:6e:ef:1f:46:fc:d4:bc:1c:8c:68:2f:53:8f:53:f5:
         02:d5:4c:35:13:68:02:90:44:14:fa:17:3e:cf:e7:42:24:c9:
         4f:8b:d2:8a:56:30:b1:fc:2e:bc:2e:3f:af:84:8c:5a:ff:61:
         11:52:00:da:4b:2e:f6:5e:c2:04:0a:76:b2:a5:0a:7d:ae:b3:
         32:e5:b2:75
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUZWwxMqEDgxfBq4AqMpbzPjXjJuEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4
MjdCNUIwMjAeFw0yNDAzMTkxNTM5NTZaFw0yNTAzMTgxNTQ0NTZaMDMxMTAvBgNV
BAMTKDgwNjM5ODE0REI1Nzk5OUMyNTM0QTFFRDlBQ0ZBRUEzRjBFRURCMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCAmjvKFjEhjTDxYUCccdO8lru
daoRImg73RpEs1eH+/37AGnnqjuVY6IO+ZldrFtjFthFfmNx14h/z97UhrrgU/dU
/qTsJC+VTGPSVZtw7nEpMRx7dlPU/oqNefIOAp60MzlupZnf0++DsQYmXCtfY5JV
2Lu56+1hNAWB+sHGwQJMeIDc6x/xx9f5zo07nzhqZUKaS1LTAWxxMhgJEa82iCzS
jlaK4+N/VpOop5WXKETMyb2mkHgX33MO+n6m0QTh9Ayu736zTbott/F40r6R4ILN
E+ni7NaOI/EyGW38BIcKvP1rQ0HHtOpHJR71LK+F4jtLm4J4LufdoqZBy5jHAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUgGOYFNtXmZwlNKHtms+uo/Du2wswHwYDVR0j
BBgwFoAUG6Gt1zR5fAODYoqHI9662oJ7WwIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YmVkODNiZC04OTg2LTQ0MjktYTAxMS1hYzU5MDcyNGQ1ODYvMC8xQkExQURENzM0
Nzk3QzAzODM2MjhBODcyM0RFQkFEQTgyN0I1QjAyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJBMUFERDczNDc5N0MwMzgzNjI4QTg3MjNERUJBREE4MjdC
NUIwMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdiZWQ4M2JkLTg5ODYtNDQyOS1h
MDExLWFjNTkwNzI0ZDU4Ni8wLzMxMzAzMzJlMzEzNDMxMmUzMjM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM2MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnjfQwDQYJ
KoZIhvcNAQELBQADggEBADVi5wb9tgG5hmW2DRznwrwCprGAjTb1XHa5ogxZALMj
PBOjQOGW1n78NBbV8DF/EjHJAGs4Iwnekhs3LZQA5LQYujO0U3GA+U+hum+u3rhr
E6KJVevvN1dP6+FwKlGnPFyJGoA1j8AArLrR1iDh6TTCGctbhBqPIiWvNAAx9cOE
V/07tnw6ZZaFgekUT2TX4aTMbM7dFs4PGY3r0zc6EIoRwF7JwT9QazUys3N5Fxi/
N0D34pxzPG7vH0b81LwcjGgvU49T9QLVTDUTaAKQRBT6Fz7P50IkyU+L0opWMLH8
LrwuP6+EjFr/YRFSANpLLvZewgQKdrKlCn2uszLlsnU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org