Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa
File:                     3130332e39302e36342e302f32342d3234203d3e20313336313031.roa (raw, json)
Hash identifier:          F0/eqGKUxlZeu9rWns4dROm70sRgqzogFZZRNuTrrv8=
Subject key identifier:   7E:B9:BD:57:FD:1B:9E:96:05:B1:EF:27:D7:5A:0E:77:2D:99:13:43
Certificate issuer:       /CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
Certificate serial:       6F6B6458956332288FC292DD543E380B6DD1BC16
Authority key identifier: 01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa
Signing time:             Thu 16 May 2024 02:25:47 +0000
ROA not before:           Thu 16 May 2024 02:20:47 +0000
ROA not after:            Thu 15 May 2025 02:25:47 +0000
asID:                     136101
IP address blocks:        103.90.64.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl
                          rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 01 Oct 2024 06:59:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:6b:64:58:95:63:32:28:8f:c2:92:dd:54:3e:38:0b:6d:d1:bc:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0104E70C07F39CF9F3B1D592DF9043B5EABBD171
        Validity
            Not Before: May 16 02:20:47 2024 GMT
            Not After : May 15 02:25:47 2025 GMT
        Subject: CN=7EB9BD57FD1B9E9605B1EF27D75A0E772D991343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:cb:21:b8:ce:79:02:1a:29:2d:45:14:10:
                    51:90:9a:0b:1e:24:3b:43:40:07:41:a2:17:c1:9d:
                    93:0c:45:a7:47:92:68:94:84:5c:01:a7:da:98:4d:
                    f9:d9:7b:99:c5:49:a0:8c:da:5f:92:b3:c2:d4:5b:
                    da:e1:18:bf:be:6b:e2:7f:cf:27:2d:05:23:24:b4:
                    46:2e:53:75:77:3b:60:e4:2b:ff:7a:ee:ec:f4:c8:
                    dc:b2:e2:3e:20:fa:5a:64:1b:4a:95:2d:15:44:71:
                    92:bc:e1:6f:b1:62:5c:58:de:76:d2:80:bb:92:e7:
                    3f:9d:37:72:df:05:44:d5:e8:d0:7e:b4:b1:92:af:
                    e6:8e:a0:45:69:f6:d1:c0:8b:ef:98:6c:7e:78:72:
                    29:ff:4e:a1:fe:7c:25:6c:36:68:8f:8c:6a:6b:88:
                    59:08:35:c3:bc:fb:1c:fb:a8:7f:f2:f1:b9:d7:2d:
                    49:d0:8a:1e:16:44:a0:1b:97:d8:6d:5e:cf:fd:73:
                    c4:c2:04:81:dd:aa:99:d6:50:2f:96:0d:3a:b9:43:
                    dc:6b:4f:5d:6f:a4:14:ce:d8:7f:7a:52:2f:02:5e:
                    29:3a:2b:10:f8:eb:dc:8a:0f:df:af:4c:52:1f:18:
                    9c:38:6d:01:e5:2a:4f:68:b6:88:46:c4:25:57:3e:
                    ee:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:B9:BD:57:FD:1B:9E:96:05:B1:EF:27:D7:5A:0E:77:2D:99:13:43
            X509v3 Authority Key Identifier:
                keyid:01:04:E7:0C:07:F3:9C:F9:F3:B1:D5:92:DF:90:43:B5:EA:BB:D1:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0104E70C07F39CF9F3B1D592DF9043B5EABBD171.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7f3404e6-bb2a-44b0-bede-a8b35014612d/0/3130332e39302e36342e302f32342d3234203d3e20313336313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:25:cb:f9:be:64:2d:de:58:66:e1:76:0d:9f:2e:16:f4:cb:
         99:e8:04:d3:64:ab:ed:29:3a:95:2a:85:1f:75:65:2d:1c:29:
         36:16:ba:a0:a3:0a:b8:74:b5:fa:13:7d:a9:22:8f:80:2a:fd:
         52:c2:f3:0f:50:58:63:ca:f9:45:cf:3d:d2:3f:c1:ab:4c:51:
         62:2d:e9:bf:d2:ba:56:8a:00:7e:45:c9:ab:86:ac:0c:c9:04:
         7f:53:16:e3:4f:60:01:73:5d:6f:28:3f:de:f7:ab:0e:8b:35:
         06:4a:f8:4d:28:0a:34:1c:b9:5d:25:d6:7e:ba:af:cd:98:81:
         01:6c:f8:e8:25:fe:7f:e7:7b:5d:d5:43:8d:81:67:dc:85:5e:
         7c:d2:fd:e4:6c:8e:34:a2:8c:85:c5:26:5b:a4:b8:17:40:c4:
         f5:6f:ec:d9:70:cd:6f:0b:a0:16:77:5a:35:c9:e5:49:0f:cf:
         af:24:f8:2c:8b:85:de:1d:9d:2c:e7:cd:b7:b7:05:7e:26:ba:
         fa:9a:64:5f:2e:1d:d9:79:32:0b:5e:41:be:cd:51:f8:21:10:
         e5:ea:02:e0:ce:05:c5:94:08:ab:8c:71:de:ff:94:11:c3:10:
         dd:b0:ca:b3:a0:9c:a7:61:fd:03:1c:bc:27:a5:e7:f9:c1:a5:
         ae:d9:eb:be
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUb2tkWJVjMiiPwpLdVD44C23RvBYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVF
QUJCRDE3MTAeFw0yNDA1MTYwMjIwNDdaFw0yNTA1MTUwMjI1NDdaMDMxMTAvBgNV
BAMTKDdFQjlCRDU3RkQxQjlFOTYwNUIxRUYyN0Q3NUEwRTc3MkQ5OTEzNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNA8shuM55AhopLUUUEFGQmgse
JDtDQAdBohfBnZMMRadHkmiUhFwBp9qYTfnZe5nFSaCM2l+Ss8LUW9rhGL++a+J/
zyctBSMktEYuU3V3O2DkK/967uz0yNyy4j4g+lpkG0qVLRVEcZK84W+xYlxY3nbS
gLuS5z+dN3LfBUTV6NB+tLGSr+aOoEVp9tHAi++YbH54cin/TqH+fCVsNmiPjGpr
iFkINcO8+xz7qH/y8bnXLUnQih4WRKAbl9htXs/9c8TCBIHdqpnWUC+WDTq5Q9xr
T11vpBTO2H96Ui8CXik6KxD469yKD9+vTFIfGJw4bQHlKk9otohGxCVXPu4rAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUfrm9V/0bnpYFse8n11oOdy2ZE0MwHwYDVR0j
BBgwFoAUAQTnDAfznPnzsdWS35BDteq70XEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
ZjM0MDRlNi1iYjJhLTQ0YjAtYmVkZS1hOGIzNTAxNDYxMmQvMC8wMTA0RTcwQzA3
RjM5Q0Y5RjNCMUQ1OTJERjkwNDNCNUVBQkJEMTcxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDEwNEU3MEMwN0YzOUNGOUYzQjFENTkyREY5MDQzQjVFQUJC
RDE3MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzdmMzQwNGU2LWJiMmEtNDRiMC1i
ZWRlLWE4YjM1MDE0NjEyZC8wLzMxMzAzMzJlMzkzMDJlMzYzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNjMxMzAzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdaQDANBgkqhkiG
9w0BAQsFAAOCAQEAcyXL+b5kLd5YZuF2DZ8uFvTLmegE02Sr7Sk6lSqFH3VlLRwp
Nha6oKMKuHS1+hN9qSKPgCr9UsLzD1BYY8r5Rc890j/Bq0xRYi3pv9K6VooAfkXJ
q4asDMkEf1MW409gAXNdbyg/3verDos1Bkr4TSgKNBy5XSXWfrqvzZiBAWz46CX+
f+d7XdVDjYFn3IVefNL95GyONKKMhcUmW6S4F0DE9W/s2XDNbwugFndaNcnlSQ/P
ryT4LIuF3h2dLOfNt7cFfia6+ppkXy4d2XkyC15Bvs1R+CEQ5eoC4M4FxZQIq4xx
3v+UEcMQ3bDKs6Ccp2H9Axy8J6Xn+cGlrtnrvg==
-----END CERTIFICATE-----
Generated at Sat Sep 28 02:14:02 2024 by rpki-client on console-fra.rpki-client.org