Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31362e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          KeyqYwWRulk+OFOsVfZqlpRSGJ0ZS+rCEYgeptsrcsk=
Subject key identifier:   AC:55:0A:89:A9:B8:44:CF:56:C8:3F:F2:4A:02:09:F3:58:21:A2:5A
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       1DEC4A45E44E365EBD2D88F5E81ECCA7CC29B4FB
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 30 Mar 2024 04:00:37 +0000
ROA not before:           Sat 30 Mar 2024 03:55:37 +0000
ROA not after:            Sat 29 Mar 2025 04:00:37 +0000
asID:                     135462
IP address blocks:        103.70.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:ec:4a:45:e4:4e:36:5e:bd:2d:88:f5:e8:1e:cc:a7:cc:29:b4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Mar 30 03:55:37 2024 GMT
            Not After : Mar 29 04:00:37 2025 GMT
        Subject: CN=AC550A89A9B844CF56C83FF24A0209F35821A25A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:55:83:91:ba:24:83:bd:3c:18:52:2d:e6:22:
                    93:61:dd:58:07:bd:15:b6:a8:84:a9:36:df:aa:d3:
                    44:92:30:f0:a2:17:4b:e7:91:6d:50:31:fb:73:b9:
                    5a:61:57:5a:a9:80:e3:6d:52:8d:1e:34:62:c5:6d:
                    be:db:40:6c:d2:07:79:fd:79:b8:bd:e4:aa:b7:13:
                    1c:3d:6c:7c:18:6e:98:8b:63:d1:2f:b4:39:c7:2e:
                    4b:ea:c3:e0:0e:70:52:16:d9:94:e1:f8:2f:21:c2:
                    74:0c:a3:e9:03:6e:46:c9:90:50:e3:59:64:27:d0:
                    45:48:e9:46:e4:9c:63:b3:34:51:d9:e2:20:24:d1:
                    78:57:c9:af:59:4a:dd:16:d8:ea:8d:e2:2a:6c:d0:
                    59:f8:cc:d5:4a:ae:5e:e7:d4:1a:64:ee:1a:19:d5:
                    f1:cb:54:8d:68:ec:7d:de:1a:c9:dd:74:9a:2b:7f:
                    d9:af:e0:c1:75:19:f5:f7:b5:6e:f2:5e:72:59:3e:
                    ca:1a:3d:15:c0:bb:30:5c:4f:ae:c2:a2:1b:94:7a:
                    3f:f4:5e:5e:9a:50:3f:4e:c0:3a:47:d6:48:66:3f:
                    28:fe:f1:be:ae:fb:7d:f4:c3:06:5d:d1:56:13:f1:
                    8a:82:56:69:a8:fc:30:17:dd:a5:b8:49:51:a0:01:
                    ee:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:55:0A:89:A9:B8:44:CF:56:C8:3F:F2:4A:02:09:F3:58:21:A2:5A
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31362e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         15:46:96:04:ee:00:71:74:c2:c5:73:95:0f:53:b0:9d:64:1b:
         7c:0c:e7:94:e5:7b:37:42:55:aa:0e:27:1b:bc:18:ad:75:2e:
         0d:db:60:93:d6:ee:83:3f:03:16:8b:05:fe:3b:59:e0:06:4e:
         21:c7:8e:cd:05:f1:4b:5f:5d:83:29:ad:71:46:60:02:93:bb:
         b8:3a:5e:16:42:4f:17:ab:27:15:5f:9e:27:04:89:fa:62:9a:
         12:81:0d:d3:ca:8c:b0:01:03:f3:a1:33:0c:6d:8f:18:72:3a:
         f9:ee:8f:34:2a:08:72:5d:80:de:f4:4b:a2:f7:50:4f:24:ec:
         65:5c:d8:4d:6b:4c:07:7c:58:2d:f9:c7:4b:06:6f:8d:14:ab:
         5b:22:46:e3:5d:aa:53:c2:de:e3:f3:a9:9f:8b:03:ff:d0:1c:
         97:af:2a:ec:5c:73:a6:28:76:b0:66:35:9b:9b:d3:6f:66:cc:
         5b:c8:2c:b9:67:24:4f:7d:4e:0d:19:da:6f:b9:af:e7:32:9e:
         93:43:42:3c:42:ca:67:b1:17:f4:50:f9:80:f4:d6:59:ef:b0:
         26:3e:22:b6:83:c5:64:78:ff:06:44:8f:36:a7:f8:33:54:01:
         7d:db:49:04:ad:3e:dc:55:c7:89:08:d7:d9:10:eb:8b:40:8f:
         7b:0d:1f:eb
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUHexKReRONl69LYj16B7Mp8wptPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC
NTM2OTVGQzAeFw0yNDAzMzAwMzU1MzdaFw0yNTAzMjkwNDAwMzdaMDMxMTAvBgNV
BAMTKEFDNTUwQTg5QTlCODQ0Q0Y1NkM4M0ZGMjRBMDIwOUYzNTgyMUEyNUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0VYORuiSDvTwYUi3mIpNh3VgH
vRW2qISpNt+q00SSMPCiF0vnkW1QMftzuVphV1qpgONtUo0eNGLFbb7bQGzSB3n9
ebi95Kq3Exw9bHwYbpiLY9EvtDnHLkvqw+AOcFIW2ZTh+C8hwnQMo+kDbkbJkFDj
WWQn0EVI6UbknGOzNFHZ4iAk0XhXya9ZSt0W2OqN4ips0Fn4zNVKrl7n1Bpk7hoZ
1fHLVI1o7H3eGsnddJorf9mv4MF1GfX3tW7yXnJZPsoaPRXAuzBcT67CohuUej/0
Xl6aUD9OwDpH1khmPyj+8b6u+330wwZd0VYT8YqCVmmo/DAX3aW4SVGgAe7pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUrFUKiam4RM9WyD/ySgIJ81gholowHwYDVR0j
BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz
RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2
OTVGQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04
ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzNjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGEDANBgkqhkiG
9w0BAQsFAAOCAQEAFUaWBO4AcXTCxXOVD1OwnWQbfAznlOV7N0JVqg4nG7wYrXUu
Ddtgk9bugz8DFosF/jtZ4AZOIceOzQXxS19dgymtcUZgApO7uDpeFkJPF6snFV+e
JwSJ+mKaEoEN08qMsAED86EzDG2PGHI6+e6PNCoIcl2A3vRLovdQTyTsZVzYTWtM
B3xYLfnHSwZvjRSrWyJG412qU8Le4/Opn4sD/9Acl68q7Fxzpih2sGY1m5vTb2bM
W8gsuWckT31ODRnab7mv5zKek0NCPELKZ7EX9FD5gPTWWe+wJj4itoPFZHj/BkSP
Nqf4M1QBfdtJBK0+3FXHiQjX2RDri0CPew0f6w==
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:33 2024 by rpki-client on console-ams.rpki-client.org