Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
File:                     3130332e37302e31392e302f32342d3234203d3e20313335343632.roa (raw, json)
Hash identifier:          YRe6enaJqWVTJR1Jjaj35/a7biuZfOw432b2vxqaDoU=
Subject key identifier:   2F:EF:C0:5F:A2:F7:08:4E:FC:11:10:6F:AD:60:BD:B6:3D:53:E1:9F
Certificate issuer:       /CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
Certificate serial:       380BA2285D9F179D9F736BBCA78316A5E2AD93C0
Authority key identifier: 27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa
Signing time:             Sat 30 Mar 2024 04:00:37 +0000
ROA not before:           Sat 30 Mar 2024 03:55:37 +0000
ROA not after:            Sat 29 Mar 2025 04:00:37 +0000
asID:                     135462
IP address blocks:        103.70.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl
                          rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:12:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0b:a2:28:5d:9f:17:9d:9f:73:6b:bc:a7:83:16:a5:e2:ad:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27B773A173E0400FBC0D7FEDFCFF7809B53695FC
        Validity
            Not Before: Mar 30 03:55:37 2024 GMT
            Not After : Mar 29 04:00:37 2025 GMT
        Subject: CN=2FEFC05FA2F7084EFC11106FAD60BDB63D53E19F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:74:e3:35:60:99:29:9a:8b:9f:3e:92:b7:bc:
                    85:47:2a:6f:53:20:b5:8b:92:96:de:91:e7:19:a2:
                    a7:ef:a9:d2:6f:db:04:18:5e:37:1c:c0:72:6a:eb:
                    6d:fd:9e:9f:fd:86:df:b4:97:86:85:8a:d4:4b:4a:
                    b6:cf:e8:fe:03:1c:a8:d3:8b:d9:b3:b4:d1:35:5f:
                    80:64:47:a7:59:6d:17:ac:4d:56:72:05:bc:db:21:
                    0b:17:20:eb:3d:b8:0d:34:29:f6:43:ed:4f:ca:08:
                    91:7d:e3:8c:d3:bc:cb:0f:6a:dd:f4:bb:eb:98:fe:
                    e7:5f:96:6c:cc:4e:e6:f0:38:39:99:98:d7:84:44:
                    79:44:2d:9f:6f:97:47:52:ab:c6:13:47:32:74:61:
                    7c:83:01:38:df:e8:96:4f:a5:d5:ca:c2:c3:d3:e8:
                    19:c4:d1:76:ae:54:1f:20:61:1c:08:51:bd:09:45:
                    97:b3:1d:82:f8:5a:a0:44:01:6a:2d:de:2b:4e:3a:
                    d7:f4:09:cb:ef:9e:27:31:fa:95:1e:41:53:2d:a6:
                    5f:6a:29:f8:e0:fb:26:53:bb:37:b6:32:76:5f:c3:
                    55:eb:a6:f8:83:69:44:40:7b:53:b8:64:56:a6:35:
                    31:36:d1:69:9f:77:63:23:14:5a:91:43:82:00:96:
                    7f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EF:C0:5F:A2:F7:08:4E:FC:11:10:6F:AD:60:BD:B6:3D:53:E1:9F
            X509v3 Authority Key Identifier:
                keyid:27:B7:73:A1:73:E0:40:0F:BC:0D:7F:ED:FC:FF:78:09:B5:36:95:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27B773A173E0400FBC0D7FEDFCFF7809B53695FC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86f4d4f1-b36c-4a46-8844-4e6c7a3c97d9/0/3130332e37302e31392e302f32342d3234203d3e20313335343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.70.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:a2:f5:14:ba:11:5c:0d:70:1b:e3:05:4b:86:3c:4a:9f:13:
         81:98:d6:74:51:7d:80:8d:7d:cc:b0:42:74:1c:eb:ad:5d:17:
         88:45:2c:3d:f8:1f:b7:56:07:56:9e:1e:1e:0f:a6:a8:fe:e4:
         cb:6b:66:3f:16:87:f4:d1:02:4b:da:37:25:49:9d:3b:b4:80:
         48:84:e3:4a:98:0f:20:f6:8c:58:e8:7f:5c:6d:58:9d:cd:de:
         e3:79:0f:c3:df:bd:4b:8d:30:4e:b0:99:ff:96:9b:32:92:44:
         49:82:2c:68:0c:13:39:a6:91:a9:45:dd:a1:79:b6:4b:25:69:
         0c:55:22:4d:fe:6d:b5:e8:e2:02:99:d0:93:a7:b0:1d:05:bc:
         af:a3:c0:6e:dd:11:cf:b1:46:a0:77:db:10:e4:01:1e:3f:e7:
         e3:22:db:a5:f7:eb:73:fe:25:e0:e3:c9:12:07:ce:8e:02:71:
         5a:89:90:4c:14:28:6c:c3:07:14:04:58:12:a6:5e:1f:5c:b0:
         58:71:19:b6:06:ac:c5:ba:c6:e2:34:6f:61:b8:f2:c3:c7:42:
         e9:78:f6:97:04:1f:22:eb:40:68:34:eb:53:f9:75:3d:2a:51:
         8e:b9:21:65:a6:76:02:c2:e4:16:ec:e3:d4:93:40:3b:2c:59:
         c1:cd:28:45
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUOAuiKF2fF52fc2u8p4MWpeKtk8AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlC
NTM2OTVGQzAeFw0yNDAzMzAwMzU1MzdaFw0yNTAzMjkwNDAwMzdaMDMxMTAvBgNV
BAMTKDJGRUZDMDVGQTJGNzA4NEVGQzExMTA2RkFENjBCREI2M0Q1M0UxOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcdOM1YJkpmoufPpK3vIVHKm9T
ILWLkpbekecZoqfvqdJv2wQYXjccwHJq6239np/9ht+0l4aFitRLSrbP6P4DHKjT
i9mztNE1X4BkR6dZbResTVZyBbzbIQsXIOs9uA00KfZD7U/KCJF944zTvMsPat30
u+uY/udflmzMTubwODmZmNeERHlELZ9vl0dSq8YTRzJ0YXyDATjf6JZPpdXKwsPT
6BnE0XauVB8gYRwIUb0JRZezHYL4WqBEAWot3itOOtf0Ccvvnicx+pUeQVMtpl9q
Kfjg+yZTuze2MnZfw1XrpviDaURAe1O4ZFamNTE20Wmfd2MjFFqRQ4IAln8JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUL+/AX6L3CE78ERBvrWC9tj1T4Z8wHwYDVR0j
BBgwFoAUJ7dzoXPgQA+8DX/t/P94CbU2lfwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NmY0ZDRmMS1iMzZjLTRhNDYtODg0NC00ZTZjN2EzYzk3ZDkvMC8yN0I3NzNBMTcz
RTA0MDBGQkMwRDdGRURGQ0ZGNzgwOUI1MzY5NUZDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjdCNzczQTE3M0UwNDAwRkJDMEQ3RkVERkNGRjc4MDlCNTM2
OTVGQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg2ZjRkNGYxLWIzNmMtNGE0Ni04
ODQ0LTRlNmM3YTNjOTdkOS8wLzMxMzAzMzJlMzczMDJlMzEzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzYzMi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdGEzANBgkqhkiG
9w0BAQsFAAOCAQEAXqL1FLoRXA1wG+MFS4Y8Sp8TgZjWdFF9gI19zLBCdBzrrV0X
iEUsPfgft1YHVp4eHg+mqP7ky2tmPxaH9NECS9o3JUmdO7SASITjSpgPIPaMWOh/
XG1Ync3e43kPw9+9S40wTrCZ/5abMpJESYIsaAwTOaaRqUXdoXm2SyVpDFUiTf5t
tejiApnQk6ewHQW8r6PAbt0Rz7FGoHfbEOQBHj/n4yLbpffrc/4l4OPJEgfOjgJx
WomQTBQobMMHFARYEqZeH1ywWHEZtgasxbrG4jRvYbjyw8dC6Xj2lwQfIutAaDTr
U/l1PSpRjrkhZaZ2AsLkFuzj1JNAOyxZwc0oRQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:51 2024 by rpki-client on console-fra.rpki-client.org