Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232362e302f32342d3234203d3e203536323431.roa
File:                     3130332e33372e3232362e302f32342d3234203d3e203536323431.roa (raw, json)
Hash identifier:          Kd6lbqfT1RBZ7TFebToOIO4foLVr0hxqsz+9vL5vL6c=
Subject key identifier:   27:A4:E7:26:73:6E:28:92:37:9D:E9:F8:8A:99:19:01:20:4F:BA:12
Certificate issuer:       /CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
Certificate serial:       590F5C0070E54A037049CD822514A6B2BE5F4435
Authority key identifier: C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232362e302f32342d3234203d3e203536323431.roa
Signing time:             Thu 13 Jun 2024 08:00:02 +0000
ROA not before:           Thu 13 Jun 2024 07:55:02 +0000
ROA not after:            Thu 12 Jun 2025 08:00:02 +0000
asID:                     56241
IP address blocks:        103.37.226.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl
                          rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 01:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:0f:5c:00:70:e5:4a:03:70:49:cd:82:25:14:a6:b2:be:5f:44:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9B3FF3FB070C3B99526356576F10FFA3FBDF658
        Validity
            Not Before: Jun 13 07:55:02 2024 GMT
            Not After : Jun 12 08:00:02 2025 GMT
        Subject: CN=27A4E726736E2892379DE9F88A991901204FBA12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b2:46:bf:2d:0f:27:6e:36:1c:28:16:b3:6c:
                    e3:b3:c1:67:fb:90:20:0d:92:eb:55:69:ca:e8:b5:
                    cf:e8:45:72:f1:82:b9:1a:85:4f:c6:fb:e1:f4:03:
                    11:e2:65:e3:21:b3:72:57:6e:f1:1b:08:bd:73:17:
                    ae:d6:9d:7e:b5:64:6b:fb:b3:7a:c6:de:bf:49:5c:
                    fc:fc:a0:87:c6:a8:42:77:e5:d4:3a:3d:bb:11:80:
                    16:57:b0:f1:70:2e:24:d1:ef:d9:15:4b:e0:aa:db:
                    99:ec:99:a9:85:17:89:df:b4:d4:60:e9:87:20:fb:
                    a9:f4:70:b2:b7:3d:26:9a:07:e9:2f:a8:40:e7:0a:
                    cb:89:d4:ff:22:3b:ce:e7:c4:ad:08:cd:4c:79:c6:
                    ea:50:1f:17:72:57:28:2f:68:5f:52:4e:b2:26:3a:
                    51:f6:8d:79:b9:b8:70:4c:24:e1:34:ef:7c:ae:6d:
                    b8:3e:e5:f2:51:29:4a:fd:7a:7f:23:55:b9:e8:7f:
                    30:d4:f2:65:25:63:80:52:03:95:73:a2:cd:0a:b4:
                    9e:22:5f:58:4c:3b:f2:b0:08:8a:27:18:fd:94:99:
                    2e:6d:df:55:9e:9e:8c:01:98:b7:e3:8c:11:36:13:
                    f6:52:da:30:87:75:57:af:2c:3e:48:49:0d:b8:58:
                    92:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:A4:E7:26:73:6E:28:92:37:9D:E9:F8:8A:99:19:01:20:4F:BA:12
            X509v3 Authority Key Identifier:
                keyid:C9:B3:FF:3F:B0:70:C3:B9:95:26:35:65:76:F1:0F:FA:3F:BD:F6:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C9B3FF3FB070C3B99526356576F10FFA3FBDF658.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e59db7e-94f6-4002-99ef-5e96d8e37e50/0/3130332e33372e3232362e302f32342d3234203d3e203536323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.37.226.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:fe:b4:a4:2a:d4:3c:22:64:53:b5:9d:25:0c:20:b7:10:41:
         93:e8:e7:27:8e:ef:cc:40:0b:d9:1a:ac:c3:6a:11:28:ab:bb:
         cf:6b:ce:7f:bf:3f:96:d2:d9:d0:7c:0e:13:d6:6d:d6:28:d3:
         e2:97:e1:20:8e:24:6b:f5:e4:17:26:5d:51:54:c4:46:17:af:
         5b:03:db:81:1b:ef:f6:30:94:45:8a:11:a7:cb:75:99:26:8d:
         23:8d:4e:6c:c5:50:f3:d6:a7:cf:56:31:76:0b:b8:0c:73:d3:
         28:8f:10:9b:53:8f:00:b1:8b:fc:08:0a:61:e7:70:6b:dd:ae:
         b1:14:86:83:67:ba:01:2b:e5:b3:34:f9:66:89:d0:19:8a:b4:
         d5:55:f9:c0:cf:91:1f:bf:f3:cc:ee:77:8c:51:e8:12:25:8d:
         6a:a9:6a:c8:15:07:3e:fd:a1:fe:6e:a0:51:38:06:a5:a2:fc:
         55:54:b7:a0:c4:a9:3e:4e:ef:38:eb:36:b2:d2:9b:06:7a:ad:
         61:3c:df:ec:cd:40:f1:c4:9f:f9:f9:7b:a6:28:04:bb:d9:46:
         cc:83:4b:1e:2b:dd:c5:be:60:63:18:4d:13:d7:e5:13:db:9d:
         32:2e:bc:77:3e:cc:87:c4:33:9d:8a:cc:a7:01:19:b1:94:94:
         ae:12:0c:f1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWQ9cAHDlSgNwSc2CJRSmsr5fRDUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEz
RkJERjY1ODAeFw0yNDA2MTMwNzU1MDJaFw0yNTA2MTIwODAwMDJaMDMxMTAvBgNV
BAMTKDI3QTRFNzI2NzM2RTI4OTIzNzlERTlGODhBOTkxOTAxMjA0RkJBMTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKska/LQ8nbjYcKBazbOOzwWf7
kCANkutVacrotc/oRXLxgrkahU/G++H0AxHiZeMhs3JXbvEbCL1zF67WnX61ZGv7
s3rG3r9JXPz8oIfGqEJ35dQ6PbsRgBZXsPFwLiTR79kVS+Cq25nsmamFF4nftNRg
6Ycg+6n0cLK3PSaaB+kvqEDnCsuJ1P8iO87nxK0IzUx5xupQHxdyVygvaF9STrIm
OlH2jXm5uHBMJOE073yubbg+5fJRKUr9en8jVbnofzDU8mUlY4BSA5Vzos0KtJ4i
X1hMO/KwCIonGP2UmS5t31WenowBmLfjjBE2E/ZS2jCHdVevLD5ISQ24WJKFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUJ6TnJnNuKJI3nen4ipkZASBPuhIwHwYDVR0j
BBgwFoAUybP/P7Bww7mVJjVldvEP+j+99lgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZTU5ZGI3ZS05NGY2LTQwMDItOTllZi01ZTk2ZDhlMzdlNTAvMC9DOUIzRkYzRkIw
NzBDM0I5OTUyNjM1NjU3NkYxMEZGQTNGQkRGNjU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzlCM0ZGM0ZCMDcwQzNCOTk1MjYzNTY1NzZGMTBGRkEzRkJE
RjY1OC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdlNTlkYjdlLTk0ZjYtNDAwMi05
OWVmLTVlOTZkOGUzN2U1MC8wLzMxMzAzMzJlMzMzNzJlMzIzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcl4jANBgkqhkiG
9w0BAQsFAAOCAQEAYf60pCrUPCJkU7WdJQwgtxBBk+jnJ47vzEAL2Rqsw2oRKKu7
z2vOf78/ltLZ0HwOE9Zt1ijT4pfhII4ka/XkFyZdUVTERhevWwPbgRvv9jCURYoR
p8t1mSaNI41ObMVQ89anz1Yxdgu4DHPTKI8Qm1OPALGL/AgKYedwa92usRSGg2e6
ASvlszT5ZonQGYq01VX5wM+RH7/zzO53jFHoEiWNaqlqyBUHPv2h/m6gUTgGpaL8
VVS3oMSpPk7vOOs2stKbBnqtYTzf7M1A8cSf+fl7pigEu9lGzINLHivdxb5gYxhN
E9flE9udMi68dz7Mh8QznYrMpwEZsZSUrhIM8Q==
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:06 2024 by rpki-client on console-ams.rpki-client.org