Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
File:                     3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa (raw, json)
Hash identifier:          6o6UV6EWnqRog88zjUO/wi78skrQiDZC+hAAPPWcQ8Y=
Subject key identifier:   28:59:DB:22:2A:4C:14:28:14:0C:7C:90:26:BC:E8:68:ED:0F:77:48
Certificate issuer:       /CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
Certificate serial:       16F8C8F98A40AF1CB952CE08BBB5C463444B4E2B
Authority key identifier: 5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa
Signing time:             Fri 29 Dec 2023 02:00:01 +0000
ROA not before:           Fri 29 Dec 2023 01:55:01 +0000
ROA not after:            Fri 27 Dec 2024 02:00:01 +0000
asID:                     149391
IP address blocks:        103.181.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl
                          rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:f8:c8:f9:8a:40:af:1c:b9:52:ce:08:bb:b5:c4:63:44:4b:4e:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A
        Validity
            Not Before: Dec 29 01:55:01 2023 GMT
            Not After : Dec 27 02:00:01 2024 GMT
        Subject: CN=2859DB222A4C1428140C7C9026BCE868ED0F7748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:e5:d3:1c:2c:32:db:fb:b2:7c:24:1a:51:
                    54:cc:f2:9f:21:e3:db:36:66:6e:bd:79:43:f1:de:
                    8e:07:00:c8:31:4b:d1:d3:de:af:cb:4f:73:9c:25:
                    9d:de:a5:66:b9:cd:f3:ab:8c:6f:a4:27:a9:f1:8c:
                    d0:f1:ae:93:d8:a5:1c:ee:af:e1:d5:ca:d1:ca:e5:
                    c1:83:29:b1:40:ba:f8:0c:f1:37:75:3b:9a:0e:bd:
                    d8:41:85:81:74:cc:c7:28:36:1d:09:d3:e6:f8:a8:
                    63:34:43:52:7c:63:40:d7:2f:78:30:9d:cb:89:35:
                    1e:f4:88:c8:2e:3a:ee:e6:18:6c:b3:59:e1:a3:f1:
                    14:ef:fb:5b:18:bc:32:29:fb:2b:87:32:7d:70:d1:
                    a3:4f:97:8c:3d:42:69:62:47:c3:42:23:d3:d3:38:
                    b8:00:82:ec:06:3c:e4:0b:18:74:ce:41:6b:7d:23:
                    bb:75:31:99:77:69:51:2f:11:32:8c:35:a1:8e:b3:
                    c8:3b:6a:fc:73:b8:9c:3b:8d:89:d4:c9:3f:8b:30:
                    22:4d:2d:f5:78:b9:c8:cd:11:61:33:e7:ea:6f:fa:
                    d5:f4:cf:6b:13:a3:9f:01:38:78:bd:96:72:84:76:
                    f7:8c:a8:13:5b:a6:71:ac:37:f5:fb:36:5c:83:a0:
                    04:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:59:DB:22:2A:4C:14:28:14:0C:7C:90:26:BC:E8:68:ED:0F:77:48
            X509v3 Authority Key Identifier:
                keyid:5C:9F:B8:0D:F9:C5:DB:E8:91:6F:73:49:A5:DD:8E:06:99:EA:3B:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C9FB80DF9C5DBE8916F7349A5DD8E0699EA3B7A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/82c2f48d-5185-41f9-b6d2-228fbcac4e29/0/3130332e3138312e3138322e302f32342d3234203d3e20313439333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:7c:27:b0:23:d7:47:3b:a2:ac:ad:95:7c:7c:0e:40:6f:cd:
         60:7e:74:80:d0:c8:f2:a7:9e:11:9c:49:67:db:96:6a:26:17:
         76:85:9c:cc:26:e4:01:53:f6:af:87:35:97:4c:64:90:0b:d9:
         39:37:6d:31:6b:cd:6a:f5:fa:17:ab:c5:db:aa:f3:53:85:32:
         27:b9:59:de:eb:62:d5:5c:4a:f3:f2:a2:9c:ad:7f:08:63:42:
         14:a6:ca:64:d4:08:61:3c:62:7a:71:43:a7:2a:c0:51:ea:74:
         80:1d:f3:de:11:80:06:a8:f2:96:8d:c8:53:9a:8d:ef:78:e0:
         6d:c0:45:73:b0:28:56:62:63:3b:38:fc:bb:5b:98:01:52:b1:
         73:c3:a9:d6:74:d8:a2:9d:0d:c3:85:1b:d0:68:de:16:2a:cd:
         0b:21:9b:98:b9:1e:4e:ee:1a:8d:52:f2:bb:da:81:a6:55:9b:
         0e:9b:18:91:e6:ac:b4:e3:b7:bb:4c:32:f6:2c:05:1e:f8:b6:
         18:f3:c9:54:f6:a2:94:ec:ed:e3:72:cc:39:ca:b3:2e:cb:4c:
         42:d0:c1:84:42:aa:e0:13:c8:6b:78:d2:c8:99:ce:e6:0a:93:
         df:97:f2:95:25:cf:0c:aa:f9:48:6f:eb:ea:11:49:88:d5:c0:
         71:81:6f:d7
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUFvjI+YpArxy5Us4Iu7XEY0RLTiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5
OUVBM0I3QTAeFw0yMzEyMjkwMTU1MDFaFw0yNDEyMjcwMjAwMDFaMDMxMTAvBgNV
BAMTKDI4NTlEQjIyMkE0QzE0MjgxNDBDN0M5MDI2QkNFODY4RUQwRjc3NDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBa+XTHCwy2/uyfCQaUVTM8p8h
49s2Zm69eUPx3o4HAMgxS9HT3q/LT3OcJZ3epWa5zfOrjG+kJ6nxjNDxrpPYpRzu
r+HVytHK5cGDKbFAuvgM8Td1O5oOvdhBhYF0zMcoNh0J0+b4qGM0Q1J8Y0DXL3gw
ncuJNR70iMguOu7mGGyzWeGj8RTv+1sYvDIp+yuHMn1w0aNPl4w9QmliR8NCI9PT
OLgAguwGPOQLGHTOQWt9I7t1MZl3aVEvETKMNaGOs8g7avxzuJw7jYnUyT+LMCJN
LfV4ucjNEWEz5+pv+tX0z2sTo58BOHi9lnKEdveMqBNbpnGsN/X7NlyDoASnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKFnbIipMFCgUDHyQJrzoaO0Pd0gwHwYDVR0j
BBgwFoAUXJ+4DfnF2+iRb3NJpd2OBpnqO3owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
MmMyZjQ4ZC01MTg1LTQxZjktYjZkMi0yMjhmYmNhYzRlMjkvMC81QzlGQjgwREY5
QzVEQkU4OTE2RjczNDlBNUREOEUwNjk5RUEzQjdBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUM5RkI4MERGOUM1REJFODkxNkY3MzQ5QTVERDhFMDY5OUVB
M0I3QS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzgyYzJmNDhkLTUxODUtNDFmOS1i
NmQyLTIyOGZiY2FjNGUyOS8wLzMxMzAzMzJlMzEzODMxMmUzMTM4MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzM5MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABntbYwDQYJ
KoZIhvcNAQELBQADggEBAIp8J7Aj10c7oqytlXx8DkBvzWB+dIDQyPKnnhGcSWfb
lmomF3aFnMwm5AFT9q+HNZdMZJAL2Tk3bTFrzWr1+herxduq81OFMie5Wd7rYtVc
SvPyopytfwhjQhSmymTUCGE8YnpxQ6cqwFHqdIAd894RgAao8paNyFOaje944G3A
RXOwKFZiYzs4/LtbmAFSsXPDqdZ02KKdDcOFG9Bo3hYqzQshm5i5Hk7uGo1S8rva
gaZVmw6bGJHmrLTjt7tMMvYsBR74thjzyVT2opTs7eNyzDnKsy7LTELQwYRCquAT
yGt40siZzuYKk9+X8pUlzwyq+Uhv6+oRSYjVwHGBb9c=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org