Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa
File:                     3130332e3234352e33382e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          oGbgr5rAuO5/J6hihuXmCT2HWwKFHcNvVH06dZqJ3NM=
Subject key identifier:   D0:7B:82:F0:3C:24:3E:04:62:BB:D9:CB:5D:C5:48:E0:B4:97:07:36
Certificate issuer:       /CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
Certificate serial:       2D4111F5EE941C8EF761D5A13B010A4DD70F73D3
Authority key identifier: 4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa
Signing time:             Mon 13 Nov 2023 01:16:40 +0000
ROA not before:           Mon 13 Nov 2023 01:11:40 +0000
ROA not after:            Mon 11 Nov 2024 01:16:40 +0000
asID:                     55688
IP address blocks:        103.245.38.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl
                          rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Apr 2024 14:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:41:11:f5:ee:94:1c:8e:f7:61:d5:a1:3b:01:0a:4d:d7:0f:73:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A9E8C61BE3670D865B8A79D7D32798550E64F2B
        Validity
            Not Before: Nov 13 01:11:40 2023 GMT
            Not After : Nov 11 01:16:40 2024 GMT
        Subject: CN=D07B82F03C243E0462BBD9CB5DC548E0B4970736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:a0:d8:5d:f7:dc:f7:22:f5:fa:80:5d:78:74:
                    39:6d:f8:cf:da:93:17:2d:5c:cc:ca:8e:08:78:25:
                    b1:3e:61:69:b1:fe:18:13:91:7b:8a:c5:82:9d:7c:
                    2a:07:cc:51:04:17:36:e7:5b:26:45:31:d6:70:70:
                    7e:c7:51:6a:08:e2:54:ce:2f:4f:54:88:10:b3:e2:
                    f6:b4:3a:ae:35:9a:2e:fe:23:df:78:15:96:0f:fd:
                    af:2c:ac:09:9d:b9:b5:17:d2:93:0f:f3:3a:58:91:
                    24:d4:9e:69:da:a0:1c:f0:73:98:54:54:c2:ae:cb:
                    2c:fa:c1:3a:e3:1f:9b:c4:01:89:64:c0:01:a3:33:
                    45:eb:c8:cb:82:a4:41:51:b4:75:0f:b2:91:a1:7e:
                    de:3f:a4:b1:1e:06:05:ed:2d:5f:67:e4:50:bb:66:
                    8e:e1:f7:bc:9a:ca:dd:75:7e:c1:15:48:ff:9d:67:
                    e5:f8:f9:71:4c:a5:c7:0d:f9:30:40:e3:37:17:54:
                    85:e9:77:fa:80:97:94:00:16:52:20:f0:39:97:d8:
                    27:eb:80:d9:75:4f:0a:ba:1e:86:ad:09:53:00:a3:
                    13:be:ff:b8:7f:25:70:a1:1b:24:1a:3d:fb:cd:a4:
                    b3:1c:bb:a3:ec:f1:bf:56:4a:7f:16:68:76:92:2f:
                    90:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:7B:82:F0:3C:24:3E:04:62:BB:D9:CB:5D:C5:48:E0:B4:97:07:36
            X509v3 Authority Key Identifier:
                keyid:4A:9E:8C:61:BE:36:70:D8:65:B8:A7:9D:7D:32:79:85:50:E6:4F:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A9E8C61BE3670D865B8A79D7D32798550E64F2B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c4935d8-96a2-4564-85a3-32a53189367e/0/3130332e3234352e33382e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.245.38.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:8f:14:3d:f5:e8:1d:aa:62:78:43:f1:a8:51:1c:87:3d:d2:
         b7:4b:9c:19:49:30:84:00:ce:05:f6:0d:05:94:81:a9:7f:32:
         5f:f8:81:77:e4:70:59:f1:91:bd:93:cb:7b:28:e3:67:2c:13:
         41:88:ed:c4:14:77:7f:c5:8b:1c:65:c0:34:bf:58:73:38:d8:
         72:49:9a:b9:63:1e:2b:81:c2:44:e9:7b:bf:41:05:f3:cb:c0:
         09:86:ea:82:18:79:95:92:08:77:b2:c7:82:cb:b5:e9:20:4b:
         42:93:e6:12:01:1b:f8:af:84:87:69:60:93:94:2d:69:db:42:
         26:28:41:d7:4f:50:81:0f:50:d2:dd:ef:79:96:1b:fe:05:e2:
         58:68:4c:bc:1e:33:de:45:43:f9:c1:1c:72:6a:6a:95:60:fa:
         7a:e1:52:db:5a:28:22:85:74:52:e7:63:b7:6c:52:20:d6:af:
         fe:29:3c:ec:55:63:ba:98:9d:cd:1e:53:73:5b:3c:38:05:4c:
         b1:4c:89:a9:ee:19:29:0e:3d:ff:27:67:ee:ca:5e:64:ac:3c:
         e2:52:97:f9:92:25:90:98:e3:fa:f2:a9:d2:65:63:82:09:d7:
         1b:fb:ee:51:80:4e:3c:d3:6d:36:f8:10:a6:76:62:d6:2e:61:
         93:23:54:8a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIULUER9e6UHI73YdWhOwEKTdcPc9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1
MEU2NEYyQjAeFw0yMzExMTMwMTExNDBaFw0yNDExMTEwMTE2NDBaMDMxMTAvBgNV
BAMTKEQwN0I4MkYwM0MyNDNFMDQ2MkJCRDlDQjVEQzU0OEUwQjQ5NzA3MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKoNhd99z3IvX6gF14dDlt+M/a
kxctXMzKjgh4JbE+YWmx/hgTkXuKxYKdfCoHzFEEFzbnWyZFMdZwcH7HUWoI4lTO
L09UiBCz4va0Oq41mi7+I994FZYP/a8srAmdubUX0pMP8zpYkSTUnmnaoBzwc5hU
VMKuyyz6wTrjH5vEAYlkwAGjM0XryMuCpEFRtHUPspGhft4/pLEeBgXtLV9n5FC7
Zo7h97yayt11fsEVSP+dZ+X4+XFMpccN+TBA4zcXVIXpd/qAl5QAFlIg8DmX2Cfr
gNl1Twq6HoatCVMAoxO+/7h/JXChGyQaPfvNpLMcu6Ps8b9WSn8WaHaSL5DTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU0HuC8DwkPgRiu9nLXcVI4LSXBzYwHwYDVR0j
BBgwFoAUSp6MYb42cNhluKedfTJ5hVDmTyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
YzQ5MzVkOC05NmEyLTQ1NjQtODVhMy0zMmE1MzE4OTM2N2UvMC80QTlFOEM2MUJF
MzY3MEQ4NjVCOEE3OUQ3RDMyNzk4NTUwRTY0RjJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEE5RThDNjFCRTM2NzBEODY1QjhBNzlEN0QzMjc5ODU1MEU2
NEYyQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdjNDkzNWQ4LTk2YTItNDU2NC04
NWEzLTMyYTUzMTg5MzY3ZS8wLzMxMzAzMzJlMzIzNDM1MmUzMzM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWf1JjANBgkqhkiG
9w0BAQsFAAOCAQEAgI8UPfXoHapieEPxqFEchz3St0ucGUkwhADOBfYNBZSBqX8y
X/iBd+RwWfGRvZPLeyjjZywTQYjtxBR3f8WLHGXANL9YczjYckmauWMeK4HCROl7
v0EF88vACYbqghh5lZIId7LHgsu16SBLQpPmEgEb+K+Eh2lgk5QtadtCJihB109Q
gQ9Q0t3veZYb/gXiWGhMvB4z3kVD+cEccmpqlWD6euFS21ooIoV0Uudjt2xSINav
/ik87FVjupidzR5Tc1s8OAVMsUyJqe4ZKQ49/ydn7speZKw84lKX+ZIlkJjj+vKp
0mVjggnXG/vuUYBOPNNtNvgQpnZi1i5hkyNUig==
-----END CERTIFICATE-----
Generated at Sat Apr 27 13:32:23 2024 by rpki-client on console-ams.rpki-client.org