Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
File:                     3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (raw, json)
Hash identifier:          vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=
Subject key identifier:   9C:D8:0B:33:33:79:07:48:BD:A0:F0:CF:00:9B:3D:7C:67:4D:A3:B2
Certificate issuer:       /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
Certificate serial:       1BF41AFAED1F1BC8720E81401FADA11B1F887079
Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa
Signing time:             Fri 14 Jun 2024 11:01:30 +0000
ROA not before:           Fri 14 Jun 2024 10:56:30 +0000
ROA not after:            Fri 13 Jun 2025 11:01:30 +0000
asID:                     136061
IP address blocks:        103.82.180.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl
                          rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:05:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f4:1a:fa:ed:1f:1b:c8:72:0e:81:40:1f:ad:a1:1b:1f:88:70:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428
        Validity
            Not Before: Jun 14 10:56:30 2024 GMT
            Not After : Jun 13 11:01:30 2025 GMT
        Subject: CN=9CD80B3333790748BDA0F0CF009B3D7C674DA3B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:0e:0e:1f:08:a6:2c:e2:b6:4a:89:d0:08:e6:
                    5f:01:d3:c9:e4:26:5f:e3:14:1d:d6:91:eb:3f:14:
                    cd:48:74:23:f1:15:a9:da:82:d9:a0:83:0f:c2:fa:
                    45:b9:e1:71:b9:50:c5:9a:36:d6:7b:f6:38:ed:59:
                    13:5a:78:58:bd:72:b3:ed:d9:44:8c:00:15:07:8b:
                    7a:14:93:61:31:b0:e9:55:1c:2b:40:dc:6e:90:e4:
                    ce:4a:90:cf:93:49:09:9c:0f:49:7a:77:f3:a5:f6:
                    58:e1:28:78:7e:58:a8:a6:ff:6b:0c:6b:49:42:03:
                    2c:de:71:7e:db:bc:f0:0a:5a:56:46:47:22:86:62:
                    2b:2a:fe:46:60:87:e5:78:a3:d5:bd:5a:eb:34:b6:
                    4c:61:c5:78:45:ef:8a:45:32:4b:13:23:06:cc:aa:
                    5a:7a:f8:ae:f9:47:b9:1e:3e:56:f9:be:45:29:a4:
                    47:28:4d:c4:48:34:3c:a9:82:79:2e:a3:23:5f:a1:
                    4f:46:13:b7:c0:ab:87:43:2a:2f:e2:e1:d0:24:ab:
                    66:4e:5c:ff:a5:b8:f0:6e:b2:53:c4:4b:b8:5f:3d:
                    e5:29:27:4d:0e:45:17:93:0d:eb:9b:ff:be:46:85:
                    22:f8:87:5e:c4:c1:4c:e0:e7:17:8c:f0:f3:0b:16:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:D8:0B:33:33:79:07:48:BD:A0:F0:CF:00:9B:3D:7C:67:4D:A3:B2
            X509v3 Authority Key Identifier:
                keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:6a:f6:9e:49:94:99:34:da:f6:ac:ce:10:8c:aa:30:d8:
         56:e6:24:52:32:66:3a:27:03:76:cb:22:d3:49:d2:5a:fa:64:
         35:64:37:94:47:1f:ca:25:31:f8:71:e2:26:04:7d:ac:fc:ed:
         e9:60:cd:84:66:c3:f7:7a:4c:b4:56:81:52:75:15:f4:7d:d7:
         08:0b:59:5d:8b:6c:7e:b0:ee:44:29:44:12:5c:71:ff:d1:a6:
         d3:59:70:70:2b:16:8b:87:0c:60:e3:df:2c:ea:8d:84:e9:63:
         a1:42:d4:64:5e:56:d7:3c:e4:ec:5a:ee:cf:1a:86:2b:2e:4d:
         51:a2:fd:53:ef:e9:c2:01:bf:7d:ad:73:13:ed:97:c1:a8:38:
         f1:35:a2:c7:a5:52:c2:7f:a6:22:30:da:6b:bb:80:28:59:aa:
         c2:8e:85:87:7c:d8:45:c0:37:9f:70:e1:81:a9:d9:9d:71:d3:
         5a:cb:83:bf:da:59:d4:e9:b4:16:1a:d1:49:b6:ca:c2:87:c8:
         e2:7c:86:7e:8b:44:45:af:07:df:5e:4e:23:09:1b:7b:15:f4:
         de:1a:56:66:39:3f:35:b3:dd:14:c4:82:a0:69:60:ec:95:07:
         ff:61:bf:b6:6b:9a:56:78:b9:fd:32:f0:c1:4f:9f:c7:b2:ee:
         34:c7:f2:ea
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG/Qa+u0fG8hyDoFAH62hGx+IcHkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD
QjNBMzQyODAeFw0yNDA2MTQxMDU2MzBaFw0yNTA2MTMxMTAxMzBaMDMxMTAvBgNV
BAMTKDlDRDgwQjMzMzM3OTA3NDhCREEwRjBDRjAwOUIzRDdDNjc0REEzQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaDg4fCKYs4rZKidAI5l8B08nk
Jl/jFB3Wkes/FM1IdCPxFanagtmggw/C+kW54XG5UMWaNtZ79jjtWRNaeFi9crPt
2USMABUHi3oUk2ExsOlVHCtA3G6Q5M5KkM+TSQmcD0l6d/Ol9ljhKHh+WKim/2sM
a0lCAyzecX7bvPAKWlZGRyKGYisq/kZgh+V4o9W9Wus0tkxhxXhF74pFMksTIwbM
qlp6+K75R7kePlb5vkUppEcoTcRINDypgnkuoyNfoU9GE7fAq4dDKi/i4dAkq2ZO
XP+luPBuslPES7hfPeUpJ00ORReTDeub/75GhSL4h17EwUzg5xeM8PMLFojxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUnNgLMzN5B0i9oPDPAJs9fGdNo7IwHwYDVR0j
BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw
Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB
MzQyOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgwNzU4ZjE1LTVkZTgtNDg3ZC05
OTQ1LWMzZWEyMDdlNDRhZC8wLzMxMzAzMzJlMzgzMjJlMzEzODMwMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzAzNjMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ1K0MA0GCSqG
SIb3DQEBCwUAA4IBAQAY/Wr2nkmUmTTa9qzOEIyqMNhW5iRSMmY6JwN2yyLTSdJa
+mQ1ZDeURx/KJTH4ceImBH2s/O3pYM2EZsP3eky0VoFSdRX0fdcIC1ldi2x+sO5E
KUQSXHH/0abTWXBwKxaLhwxg498s6o2E6WOhQtRkXlbXPOTsWu7PGoYrLk1Rov1T
7+nCAb99rXMT7ZfBqDjxNaLHpVLCf6YiMNpru4AoWarCjoWHfNhFwDefcOGBqdmd
cdNay4O/2lnU6bQWGtFJtsrCh8jifIZ+i0RFrwffXk4jCRt7FfTeGlZmOT81s90U
xIKgaWDslQf/Yb+2a5pWeLn9MvDBT5/Hsu40x/Lq
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:26 2024 by rpki-client on console-ams.rpki-client.org