Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa
File:                     3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (raw, json)
Hash identifier:          vZps53S9h1BnSZoitUW6NSla+4Sd5IFzDyt7UQvpK88=
Subject key identifier:   C4:10:CF:68:CB:FA:D3:81:C8:3E:02:07:9E:20:14:81:CA:1E:B3:91
Certificate issuer:       /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
Certificate serial:       5E326BAB9F8C34FD005C8F43376EFAA3EA57CF9B
Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa
Signing time:             Sat 13 Jul 2024 13:00:01 +0000
ROA not before:           Sat 13 Jul 2024 12:55:01 +0000
ROA not after:            Sat 12 Jul 2025 13:00:01 +0000
asID:                     137367
IP address blocks:        103.116.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl
                          rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:32:6b:ab:9f:8c:34:fd:00:5c:8f:43:37:6e:fa:a3:ea:57:cf:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3
        Validity
            Not Before: Jul 13 12:55:01 2024 GMT
            Not After : Jul 12 13:00:01 2025 GMT
        Subject: CN=C410CF68CBFAD381C83E02079E201481CA1EB391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2f:41:24:ce:69:37:6b:7e:c9:c0:b1:67:a1:
                    fd:fb:72:eb:8e:51:bc:bc:b1:4b:c0:13:4c:78:eb:
                    98:70:f1:a3:2e:01:f0:1b:34:72:1c:1f:47:75:12:
                    46:fe:56:be:0a:c0:ee:f4:77:89:6b:4e:77:55:51:
                    40:99:41:77:02:ab:e9:17:19:fb:5e:fa:7e:94:95:
                    b9:27:cf:70:14:66:fd:44:54:74:e0:15:3a:53:03:
                    36:d7:eb:9e:0e:20:e6:6d:e1:f7:b0:6c:0c:1f:ff:
                    1e:62:17:24:42:ee:e1:a1:48:b9:43:9c:b8:c7:c0:
                    c3:df:a4:e7:55:b0:e0:47:17:44:41:a9:47:15:c3:
                    42:19:20:52:b8:32:a0:2c:9e:17:cb:92:38:b8:7d:
                    04:65:66:fb:47:95:3c:ee:e4:7f:25:84:2a:0c:17:
                    ee:a3:7c:a1:f6:1e:1f:03:7f:ed:a7:a2:e4:d5:90:
                    dc:10:98:ed:5d:f0:60:95:ef:71:c7:92:82:82:c2:
                    d7:73:a5:af:3e:cf:c5:7d:0b:65:b3:04:5e:df:bf:
                    02:00:b1:52:9f:51:d4:c3:3e:58:bc:e1:da:b4:8a:
                    f4:0c:64:e0:77:3c:c0:f1:7e:e2:ee:8a:5f:50:be:
                    4f:6d:a2:76:ef:ee:e3:52:a2:f7:7b:48:d9:37:09:
                    53:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:10:CF:68:CB:FA:D3:81:C8:3E:02:07:9E:20:14:81:CA:1E:B3:91
            X509v3 Authority Key Identifier:
                keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:ce:f6:76:69:c8:7f:9f:6f:21:8f:42:52:5a:e7:3e:a2:31:
         1e:a2:f8:8a:33:96:64:ef:c9:dd:8a:af:6b:7b:5d:63:6b:7b:
         38:2c:27:e5:e5:e4:f1:4d:40:80:2e:c3:05:46:b0:37:1b:a9:
         6e:bf:9c:2c:71:39:5d:9a:38:7a:e1:af:cc:c5:9b:ac:c1:c2:
         76:7e:5a:9d:ff:47:08:fd:5b:37:c3:19:b2:11:b4:a3:61:18:
         06:0c:9b:3b:16:f4:38:b5:32:d0:80:3b:80:57:5d:f7:84:51:
         02:bd:6c:16:09:38:f8:63:75:96:1c:f1:7f:23:c5:33:4d:61:
         83:42:12:23:aa:ec:1d:c6:d6:75:f2:f2:33:d9:21:ff:a2:90:
         81:4e:b5:09:5e:17:56:18:e2:76:84:66:4a:93:14:bb:f6:10:
         d8:13:e3:11:74:a0:91:5a:9d:e0:79:e5:ff:ce:1e:c5:e3:dc:
         fd:a9:46:45:41:7e:5f:e3:31:f2:cb:5b:79:b1:91:ff:ac:44:
         48:a1:c4:6d:20:46:50:f6:a7:46:c7:2a:c1:61:87:0a:4f:8a:
         6c:5b:ec:2a:7a:0b:1a:43:47:0d:3c:f3:c4:5d:12:af:c1:12:
         b7:f1:eb:ef:5d:f0:2f:02:0d:6f:8f:28:e8:43:01:c3:8a:12:
         3b:92:bb:d9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXjJrq5+MNP0AXI9DN276o+pXz5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy
REMyRDdGMzAeFw0yNDA3MTMxMjU1MDFaFw0yNTA3MTIxMzAwMDFaMDMxMTAvBgNV
BAMTKEM0MTBDRjY4Q0JGQUQzODFDODNFMDIwNzlFMjAxNDgxQ0ExRUIzOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTL0Ekzmk3a37JwLFnof37cuuO
Uby8sUvAE0x465hw8aMuAfAbNHIcH0d1Ekb+Vr4KwO70d4lrTndVUUCZQXcCq+kX
Gfte+n6Ulbknz3AUZv1EVHTgFTpTAzbX654OIOZt4fewbAwf/x5iFyRC7uGhSLlD
nLjHwMPfpOdVsOBHF0RBqUcVw0IZIFK4MqAsnhfLkji4fQRlZvtHlTzu5H8lhCoM
F+6jfKH2Hh8Df+2nouTVkNwQmO1d8GCV73HHkoKCwtdzpa8+z8V9C2WzBF7fvwIA
sVKfUdTDPli84dq0ivQMZOB3PMDxfuLuil9Qvk9tonbv7uNSovd7SNk3CVOnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxBDPaMv604HIPgIHniAUgcoes5EwHwYDVR0j
BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx
NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy
RDdGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZDcyMGQ1LWI3ZDQtNDM5NS1h
MDZiLTE5OTA0YTYzZjk0OC8wLzMxMzAzMzJlMzEzMTM2MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM2Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndNswDQYJ
KoZIhvcNAQELBQADggEBAI7O9nZpyH+fbyGPQlJa5z6iMR6i+IozlmTvyd2Kr2t7
XWNrezgsJ+Xl5PFNQIAuwwVGsDcbqW6/nCxxOV2aOHrhr8zFm6zBwnZ+Wp3/Rwj9
WzfDGbIRtKNhGAYMmzsW9Di1MtCAO4BXXfeEUQK9bBYJOPhjdZYc8X8jxTNNYYNC
EiOq7B3G1nXy8jPZIf+ikIFOtQleF1YY4naEZkqTFLv2ENgT4xF0oJFaneB55f/O
HsXj3P2pRkVBfl/jMfLLW3mxkf+sREihxG0gRlD2p0bHKsFhhwpPimxb7Cp6CxpD
Rw0888RdEq/BErfx6+9d8C8CDW+PKOhDAcOKEjuSu9k=
-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org