Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
File:                     3130332e3232342e37362e302f32342d3234203d3e203536323535.roa (raw, json)
Hash identifier:          Zqpcy0ugk8HAE+GYWRNcHEByrdTEefMutc7Cf14qofA=
Subject key identifier:   C6:30:43:AB:B6:CE:DA:92:D2:58:35:88:D8:4F:0C:A8:DD:10:0E:46
Certificate issuer:       /CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
Certificate serial:       E67C511BDBD4EB8183D93042F6BF70E4E6995C
Authority key identifier: E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa
Signing time:             Thu 12 Sep 2024 07:00:00 +0000
ROA not before:           Thu 12 Sep 2024 06:55:00 +0000
ROA not after:            Thu 11 Sep 2025 07:00:00 +0000
asID:                     56255
IP address blocks:        103.224.76.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl
                          rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            e6:7c:51:1b:db:d4:eb:81:83:d9:30:42:f6:bf:70:e4:e6:99:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5B2AB049E75667C8F00ECB0EBF617859558571D
        Validity
            Not Before: Sep 12 06:55:00 2024 GMT
            Not After : Sep 11 07:00:00 2025 GMT
        Subject: CN=C63043ABB6CEDA92D2583588D84F0CA8DD100E46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:ea:d9:f6:17:26:c6:28:f4:d4:7d:dd:0e:
                    1f:e1:24:3d:f1:b0:b0:fc:34:e9:3a:8d:e2:eb:2f:
                    61:45:b3:65:60:82:9a:6d:c9:4d:26:44:74:f7:b0:
                    6e:fd:96:57:e3:a6:4a:2f:e1:45:bc:f4:e8:42:de:
                    84:22:66:7a:63:49:17:87:c8:a0:92:46:d7:a3:5c:
                    af:c2:28:93:6e:ff:56:e1:73:60:96:14:55:70:13:
                    63:c7:ad:cf:6e:f1:98:73:73:f0:8a:68:26:b0:7e:
                    8d:e2:89:ba:1b:f5:eb:73:99:60:49:38:53:e9:d1:
                    11:76:c1:8b:56:88:a7:e1:85:de:70:8b:d5:f1:0a:
                    61:2c:1a:27:0e:90:79:59:4a:d5:85:c6:94:f9:6a:
                    08:a6:66:ee:62:7b:d9:ae:12:de:5b:0a:fc:31:9a:
                    07:f0:46:59:2f:bd:80:b9:31:01:c5:a7:e6:ac:23:
                    09:68:71:be:eb:03:37:c3:16:42:57:2a:e7:47:48:
                    73:d0:29:e7:29:b0:aa:4f:5a:1a:bb:b9:23:a1:e4:
                    cf:aa:5c:74:5f:ab:ef:54:17:e7:cc:a3:97:36:37:
                    df:38:a0:b7:0f:73:f4:a9:16:b5:91:e0:6d:f7:72:
                    69:2e:da:b0:30:53:19:b5:35:71:74:1d:60:fe:b1:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:30:43:AB:B6:CE:DA:92:D2:58:35:88:D8:4F:0C:A8:DD:10:0E:46
            X509v3 Authority Key Identifier:
                keyid:E5:B2:AB:04:9E:75:66:7C:8F:00:EC:B0:EB:F6:17:85:95:58:57:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/E5B2AB049E75667C8F00ECB0EBF617859558571D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5B2AB049E75667C8F00ECB0EBF617859558571D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8226b3e1-d7f6-465e-8302-7d52f5c340ff/0/3130332e3232342e37362e302f32342d3234203d3e203536323535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:90:4a:92:5b:7d:34:13:e7:ec:9d:72:24:10:fb:00:06:db:
         72:fa:36:fe:7f:2c:b4:a5:0e:65:5f:e3:45:75:d9:b7:e8:c0:
         00:ce:90:60:62:74:f0:a5:7a:80:30:12:32:5a:c2:0a:36:ab:
         80:17:48:d6:d1:01:5d:56:ca:1e:ea:d2:78:fd:e6:46:18:90:
         db:6e:4e:df:0f:97:82:bc:e1:01:c8:9a:ab:83:0b:3a:af:e8:
         58:21:aa:de:ba:33:2b:ca:c9:26:27:3b:e7:fc:1f:9d:35:95:
         ae:2e:a7:e6:1e:9d:16:15:12:a6:81:05:e0:04:6d:a5:7f:78:
         4e:15:13:04:8f:ee:df:8c:15:67:9a:68:a7:1c:96:9b:ed:90:
         3d:b4:02:37:80:3b:69:8f:15:60:73:07:ee:95:ab:31:e8:f2:
         cf:30:b4:3b:bc:b8:4d:ff:d8:d4:18:7b:2b:81:66:61:c9:db:
         59:5d:76:a1:85:75:41:0c:8d:18:c5:5e:fc:32:dc:02:29:ab:
         98:fd:10:ad:56:47:0a:df:ca:74:77:a5:de:18:d2:69:26:c5:
         2a:48:75:6d:f7:81:2d:c7:c6:8e:c0:f0:d2:93:aa:ab:31:7d:
         46:69:5e:98:18:0b:a3:75:1c:60:ab:5c:b6:6e:26:51:f4:e2:
         aa:58:84:0f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUAOZ8URvb1OuBg9kwQva/cOTmmVwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5
NTU4NTcxRDAeFw0yNDA5MTIwNjU1MDBaFw0yNTA5MTEwNzAwMDBaMDMxMTAvBgNV
BAMTKEM2MzA0M0FCQjZDRURBOTJEMjU4MzU4OEQ4NEYwQ0E4REQxMDBFNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56urZ9hcmxij01H3dDh/hJD3x
sLD8NOk6jeLrL2FFs2VggpptyU0mRHT3sG79llfjpkov4UW89OhC3oQiZnpjSReH
yKCSRtejXK/CKJNu/1bhc2CWFFVwE2PHrc9u8Zhzc/CKaCawfo3iibob9etzmWBJ
OFPp0RF2wYtWiKfhhd5wi9XxCmEsGicOkHlZStWFxpT5agimZu5ie9muEt5bCvwx
mgfwRlkvvYC5MQHFp+asIwlocb7rAzfDFkJXKudHSHPQKecpsKpPWhq7uSOh5M+q
XHRfq+9UF+fMo5c2N984oLcPc/SpFrWR4G33cmku2rAwUxm1NXF0HWD+se1jAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxjBDq7bO2pLSWDWI2E8MqN0QDkYwHwYDVR0j
BBgwFoAU5bKrBJ51ZnyPAOyw6/YXhZVYVx0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MjI2YjNlMS1kN2Y2LTQ2NWUtODMwMi03ZDUyZjVjMzQwZmYvMC9FNUIyQUIwNDlF
NzU2NjdDOEYwMEVDQjBFQkY2MTc4NTk1NTg1NzFELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVCMkFCMDQ5RTc1NjY3QzhGMDBFQ0IwRUJGNjE3ODU5NTU4
NTcxRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyMjZiM2UxLWQ3ZjYtNDY1ZS04
MzAyLTdkNTJmNWMzNDBmZi8wLzMxMzAzMzJlMzIzMjM0MmUzNzM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNjMyMzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfgTDANBgkqhkiG
9w0BAQsFAAOCAQEALZBKklt9NBPn7J1yJBD7AAbbcvo2/n8stKUOZV/jRXXZt+jA
AM6QYGJ08KV6gDASMlrCCjargBdI1tEBXVbKHurSeP3mRhiQ225O3w+XgrzhAcia
q4MLOq/oWCGq3rozK8rJJic75/wfnTWVri6n5h6dFhUSpoEF4ARtpX94ThUTBI/u
34wVZ5popxyWm+2QPbQCN4A7aY8VYHMH7pWrMejyzzC0O7y4Tf/Y1Bh7K4FmYcnb
WV12oYV1QQyNGMVe/DLcAimrmP0QrVZHCt/KdHel3hjSaSbFKkh1bfeBLcfGjsDw
0pOqqzF9RmlemBgLo3UcYKtctm4mUfTiqliEDw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 07:29:53 2024 by rpki-client on console-fra.rpki-client.org