Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
File:                     3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (raw, json)
Hash identifier:          azDSVX9i8HZjqEfBIl+w+5YuBBlGa6YC2bdRufGVGvU=
Subject key identifier:   70:01:02:F0:67:52:B3:51:A0:75:B9:64:86:C5:B9:17:3C:8B:7F:71
Certificate issuer:       /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
Certificate serial:       79C756D2DB384C011B7C22737D0612FCB10052FB
Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa
Signing time:             Tue 16 Apr 2024 07:00:02 +0000
ROA not before:           Tue 16 Apr 2024 06:55:02 +0000
ROA not after:            Tue 15 Apr 2025 07:00:02 +0000
asID:                     141907
IP address blocks:        103.163.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl
                          rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:c7:56:d2:db:38:4c:01:1b:7c:22:73:7d:06:12:fc:b1:00:52:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319
        Validity
            Not Before: Apr 16 06:55:02 2024 GMT
            Not After : Apr 15 07:00:02 2025 GMT
        Subject: CN=700102F06752B351A075B96486C5B9173C8B7F71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ea:57:6d:a4:af:98:6c:b9:da:db:00:65:7f:
                    9f:f2:09:36:5f:a1:b6:28:6e:d7:00:63:95:67:28:
                    74:2d:e0:ed:2a:d2:0f:40:d2:d9:8b:d6:e0:31:20:
                    0e:91:b4:21:b8:17:71:5e:67:90:6c:d5:a0:36:03:
                    1a:82:18:cf:b9:17:7a:ca:36:51:4a:3d:36:04:12:
                    c8:3f:44:9e:04:c1:a5:07:00:5c:ff:52:19:86:18:
                    2f:4e:fe:84:c7:f8:9c:6e:ec:c7:66:a8:19:5d:f2:
                    00:5f:43:f8:a9:8e:c2:33:f0:ab:22:d0:d3:a3:db:
                    77:97:50:85:38:43:8c:b1:25:f3:08:d4:29:87:54:
                    8e:8c:0d:f5:e9:3b:9d:5b:5a:c7:b4:81:46:19:31:
                    18:38:6e:ea:f7:23:15:6c:14:3f:d4:44:dd:3d:b2:
                    21:d3:e6:32:2b:8e:88:3b:ef:aa:79:89:49:95:23:
                    be:e3:85:0c:1f:2b:ad:91:14:be:f5:53:88:23:b6:
                    ac:94:36:b7:f6:2a:21:08:68:67:76:89:ec:1c:6e:
                    18:64:bc:0c:45:de:25:a0:da:76:2e:cc:d5:2e:b6:
                    c7:20:6b:ca:e7:dc:4b:e6:b2:ca:d5:94:ff:27:a0:
                    f6:8e:bd:78:6c:f6:c8:12:d4:f1:bb:4c:6e:d0:51:
                    c3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:01:02:F0:67:52:B3:51:A0:75:B9:64:86:C5:B9:17:3C:8B:7F:71
            X509v3 Authority Key Identifier:
                keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:e4:e0:29:8d:c5:e3:40:cf:2a:27:d0:f7:ca:2e:51:e3:fa:
         25:4f:52:31:23:d9:56:ec:de:5c:f9:46:1d:1f:7e:4f:43:5e:
         41:b1:e1:00:71:38:70:12:3e:f5:d0:fa:f9:09:12:ee:c4:5a:
         61:b7:61:01:70:9b:d9:88:40:cf:63:62:30:6a:3a:8c:ba:25:
         46:ba:f6:ea:c8:e7:97:06:89:d0:3e:1d:74:b6:95:cb:32:1f:
         90:4c:ce:c4:8e:29:21:df:e5:52:a7:18:4f:fc:00:6b:62:59:
         3e:34:01:ab:43:19:6d:42:a1:e5:e3:e6:b0:fb:f2:e9:5f:56:
         ad:4b:4d:86:e7:5d:73:79:36:68:de:0e:9f:ce:d9:3f:9e:68:
         95:11:98:1d:8c:0f:02:af:4f:f8:a3:cd:02:10:32:03:ca:a6:
         a1:b3:04:cb:e2:de:2f:96:be:9f:81:0b:cb:65:cb:f6:6b:99:
         5f:81:a5:66:47:df:db:51:9c:7b:b6:45:3a:d0:f0:3f:48:2e:
         0f:97:ba:83:16:31:c1:a6:f1:e9:f5:ce:49:3c:5a:28:26:34:
         6c:d7:8f:c7:69:1a:44:ec:88:5d:ef:e1:c4:41:59:ae:17:bc:
         dd:36:42:50:a8:82:62:47:50:8f:a5:a2:23:f2:bf:3e:b1:57:
         30:a1:dd:23
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUecdW0ts4TAEbfCJzfQYS/LEAUvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4
QjZCRDMxOTAeFw0yNDA0MTYwNjU1MDJaFw0yNTA0MTUwNzAwMDJaMDMxMTAvBgNV
BAMTKDcwMDEwMkYwNjc1MkIzNTFBMDc1Qjk2NDg2QzVCOTE3M0M4QjdGNzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk6ldtpK+YbLna2wBlf5/yCTZf
obYobtcAY5VnKHQt4O0q0g9A0tmL1uAxIA6RtCG4F3FeZ5Bs1aA2AxqCGM+5F3rK
NlFKPTYEEsg/RJ4EwaUHAFz/UhmGGC9O/oTH+Jxu7MdmqBld8gBfQ/ipjsIz8Ksi
0NOj23eXUIU4Q4yxJfMI1CmHVI6MDfXpO51bWse0gUYZMRg4bur3IxVsFD/URN09
siHT5jIrjog776p5iUmVI77jhQwfK62RFL71U4gjtqyUNrf2KiEIaGd2iewcbhhk
vAxF3iWg2nYuzNUutscga8rn3EvmssrVlP8noPaOvXhs9sgS1PG7TG7QUcOjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUcAEC8GdSs1GgdblkhsW5FzyLf3EwHwYDVR0j
BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5
RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC
RDMxOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdkMDM1YjNiLWU2YzUtNDdmOC05
OWI0LTFjYjAzMjZlZGFlNS8wLzMxMzAzMzJlMzEzNjMzMmUzMjMzMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABno+cwDQYJ
KoZIhvcNAQELBQADggEBALPk4CmNxeNAzyon0PfKLlHj+iVPUjEj2Vbs3lz5Rh0f
fk9DXkGx4QBxOHASPvXQ+vkJEu7EWmG3YQFwm9mIQM9jYjBqOoy6JUa69urI55cG
idA+HXS2lcsyH5BMzsSOKSHf5VKnGE/8AGtiWT40AatDGW1CoeXj5rD78ulfVq1L
TYbnXXN5NmjeDp/O2T+eaJURmB2MDwKvT/ijzQIQMgPKpqGzBMvi3i+Wvp+BC8tl
y/ZrmV+BpWZH39tRnHu2RTrQ8D9ILg+XuoMWMcGm8en1zkk8WigmNGzXj8dpGkTs
iF3v4cRBWa4XvN02QlCogmJHUI+loiPyvz6xVzCh3SM=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org