Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa
File:                     3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier:          VuETowOEwuO/tIGxx5f2+uPEHcPGG8HKbOxn7wOEs+M=
Subject key identifier:   01:C2:99:2A:5D:81:A5:B2:D2:65:80:AD:6E:29:CA:03:10:6C:43:21
Certificate issuer:       /CN=115880D133393FF2D96A5861679B5166AFDB1248
Certificate serial:       18EEB032AA183BDFA10623E216F00016A284C50C
Authority key identifier: 11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa
Signing time:             Thu 23 May 2024 05:01:57 +0000
ROA not before:           Thu 23 May 2024 04:56:57 +0000
ROA not after:            Thu 22 May 2025 05:01:57 +0000
asID:                     59282
IP address blocks:        103.161.134.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl
                          rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ee:b0:32:aa:18:3b:df:a1:06:23:e2:16:f0:00:16:a2:84:c5:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115880D133393FF2D96A5861679B5166AFDB1248
        Validity
            Not Before: May 23 04:56:57 2024 GMT
            Not After : May 22 05:01:57 2025 GMT
        Subject: CN=01C2992A5D81A5B2D26580AD6E29CA03106C4321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:0b:fe:9d:93:99:ed:36:3a:88:2e:a3:95:a4:
                    09:4b:ef:1e:b6:aa:20:19:96:1b:70:eb:e8:ba:d5:
                    7a:71:52:97:2f:f5:c1:02:e6:de:4d:ab:ce:38:2b:
                    51:55:59:1e:b6:96:7b:ad:83:c6:7b:d3:05:b7:b7:
                    9b:19:53:4f:24:c5:66:48:1f:a7:d0:f5:53:de:22:
                    3e:e3:52:5d:fb:8a:9c:43:f1:58:c4:af:0b:4e:77:
                    b2:9e:04:00:bf:4f:3d:ce:ec:fb:59:63:4c:a1:9b:
                    87:d6:17:c0:76:9e:fb:22:7c:6d:58:8d:bc:cd:8b:
                    fd:9a:6f:65:7e:db:57:c2:0b:3a:f5:19:83:f8:b3:
                    c8:2d:2d:4d:dc:88:b4:7d:2f:3b:9f:21:2c:92:b4:
                    c9:69:2a:4c:5c:36:3d:3b:13:49:dd:a7:ad:53:ce:
                    86:4f:3b:fa:e3:d5:35:30:42:71:55:9d:57:72:0e:
                    b2:e4:1f:e3:0c:74:be:05:0e:35:2d:9d:e7:d9:eb:
                    5e:fa:5a:24:76:7a:61:18:1e:4d:35:2d:56:4e:80:
                    a2:59:69:ef:a7:81:20:88:86:10:64:1a:6c:f0:e5:
                    f0:b1:9e:92:83:c3:5a:b8:d3:51:39:be:5d:8d:59:
                    b8:e6:ef:9a:83:a5:2d:76:24:4d:40:c6:a9:b0:19:
                    66:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C2:99:2A:5D:81:A5:B2:D2:65:80:AD:6E:29:CA:03:10:6C:43:21
            X509v3 Authority Key Identifier:
                keyid:11:58:80:D1:33:39:3F:F2:D9:6A:58:61:67:9B:51:66:AF:DB:12:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/115880D133393FF2D96A5861679B5166AFDB1248.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/115880D133393FF2D96A5861679B5166AFDB1248.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8156801f-a67b-43dd-8f62-b7b0d60317af/0/3130332e3136312e3133342e302f32342d3234203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:e2:7b:f0:b9:33:b8:48:61:3a:50:74:02:af:22:be:47:d6:
         c7:46:35:c8:95:66:54:77:37:ef:40:4f:a1:fe:f4:90:3b:7e:
         6b:8e:bb:27:c0:74:0c:57:02:86:b0:f4:dc:c8:2f:72:63:27:
         23:d6:92:a3:fd:7a:33:34:36:ee:de:cb:b6:3d:86:84:86:77:
         f2:75:45:8d:8c:1c:8e:38:8f:45:17:4b:23:dc:2c:28:13:4d:
         6d:84:47:c1:a6:44:91:af:2c:fc:34:9a:fe:d3:15:23:60:b1:
         ce:a6:36:59:ad:6a:07:4a:76:4d:85:06:fa:ea:90:25:b1:ff:
         44:54:31:67:f8:f7:d5:96:27:1e:d5:5f:74:14:c3:3b:2e:80:
         d0:14:5e:67:5a:3e:6f:e4:5a:53:87:c7:67:ef:2d:28:42:44:
         41:21:61:20:e2:f5:33:d4:03:53:f8:7e:dd:44:9d:4b:40:81:
         dc:99:27:42:85:70:a7:52:ed:21:a3:ef:ae:25:11:da:4f:f4:
         cb:74:5c:bc:04:a8:18:c1:d5:28:2b:9a:7c:3d:d0:27:cb:22:
         05:9c:f3:80:0a:9e:22:8b:9c:70:79:18:ad:d4:cf:f4:67:4b:
         1e:9f:82:3c:81:44:dd:06:be:b8:06:55:20:73:72:74:db:d1:
         e5:5c:fc:3f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUGO6wMqoYO9+hBiPiFvAAFqKExQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZB
RkRCMTI0ODAeFw0yNDA1MjMwNDU2NTdaFw0yNTA1MjIwNTAxNTdaMDMxMTAvBgNV
BAMTKDAxQzI5OTJBNUQ4MUE1QjJEMjY1ODBBRDZFMjlDQTAzMTA2QzQzMjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjC/6dk5ntNjqILqOVpAlL7x62
qiAZlhtw6+i61XpxUpcv9cEC5t5Nq844K1FVWR62lnutg8Z70wW3t5sZU08kxWZI
H6fQ9VPeIj7jUl37ipxD8VjErwtOd7KeBAC/Tz3O7PtZY0yhm4fWF8B2nvsifG1Y
jbzNi/2ab2V+21fCCzr1GYP4s8gtLU3ciLR9LzufISyStMlpKkxcNj07E0ndp61T
zoZPO/rj1TUwQnFVnVdyDrLkH+MMdL4FDjUtnefZ6176WiR2emEYHk01LVZOgKJZ
ae+ngSCIhhBkGmzw5fCxnpKDw1q401E5vl2NWbjm75qDpS12JE1AxqmwGWalAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAcKZKl2BpbLSZYCtbinKAxBsQyEwHwYDVR0j
BBgwFoAUEViA0TM5P/LZalhhZ5tRZq/bEkgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MTU2ODAxZi1hNjdiLTQzZGQtOGY2Mi1iN2IwZDYwMzE3YWYvMC8xMTU4ODBEMTMz
MzkzRkYyRDk2QTU4NjE2NzlCNTE2NkFGREIxMjQ4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE1ODgwRDEzMzM5M0ZGMkQ5NkE1ODYxNjc5QjUxNjZBRkRC
MTI0OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgxNTY4MDFmLWE2N2ItNDNkZC04
ZjYyLWI3YjBkNjAzMTdhZi8wLzMxMzAzMzJlMzEzNjMxMmUzMTMzMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6GGMA0GCSqG
SIb3DQEBCwUAA4IBAQB14nvwuTO4SGE6UHQCryK+R9bHRjXIlWZUdzfvQE+h/vSQ
O35rjrsnwHQMVwKGsPTcyC9yYycj1pKj/XozNDbu3su2PYaEhnfydUWNjByOOI9F
F0sj3CwoE01thEfBpkSRryz8NJr+0xUjYLHOpjZZrWoHSnZNhQb66pAlsf9EVDFn
+PfVlice1V90FMM7LoDQFF5nWj5v5FpTh8dn7y0oQkRBIWEg4vUz1ANT+H7dRJ1L
QIHcmSdChXCnUu0ho++uJRHaT/TLdFy8BKgYwdUoK5p8PdAnyyIFnPOACp4ii5xw
eRit1M/0Z0sen4I8gUTdBr64BlUgc3J029HlXPw/
-----END CERTIFICATE-----
Generated at Sat Jun 1 06:27:30 2024 by rpki-client on console-fra.rpki-client.org