Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa
File:                     3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa (raw, json)
Hash identifier:          g/ChgrLQc9aKmKTkPLKvFQ82SdQEkpSXUef1u80fyvo=
Subject key identifier:   5F:93:B4:AE:A0:15:89:D4:88:4F:2A:50:76:75:9E:C6:F3:50:19:AF
Certificate issuer:       /CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
Certificate serial:       1E74BB2056477BE553C7CD4C91633FAA724F2828
Authority key identifier: 3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa
Signing time:             Fri 01 Mar 2024 07:02:25 +0000
ROA not before:           Fri 01 Mar 2024 06:57:25 +0000
ROA not after:            Fri 28 Feb 2025 07:02:25 +0000
asID:                     139432
IP address blocks:        103.51.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl
                          rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:74:bb:20:56:47:7b:e5:53:c7:cd:4c:91:63:3f:aa:72:4f:28:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FF5F93CDAB2F666B963C41BB83ED3E35130D530
        Validity
            Not Before: Mar  1 06:57:25 2024 GMT
            Not After : Feb 28 07:02:25 2025 GMT
        Subject: CN=5F93B4AEA01589D4884F2A5076759EC6F35019AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4d:ff:31:72:af:9a:5d:7b:92:cd:a7:fc:5f:
                    6c:bb:b8:fa:4c:fc:36:c0:5d:55:fb:17:14:cb:f2:
                    ec:9d:01:ec:b1:7d:0d:c7:9f:37:8c:65:d1:25:c6:
                    e9:c4:24:7a:2e:52:4f:4d:9d:3e:78:e1:ff:86:98:
                    99:92:8c:34:ef:66:ef:c1:48:cd:e0:0b:e8:dd:9d:
                    6d:e1:99:4a:e2:03:f4:de:7b:a2:0f:b0:21:56:ad:
                    f6:4b:a1:1c:c9:e7:57:80:ec:9f:4b:3d:a8:f1:c7:
                    d3:38:30:11:72:ea:0f:0f:34:c7:15:32:14:eb:fe:
                    89:0a:13:b8:23:c3:8b:03:1f:74:34:76:3a:1d:ef:
                    92:fe:64:3f:da:aa:2c:25:02:aa:54:b9:10:eb:21:
                    71:dd:7a:af:b4:15:03:88:c3:81:c6:45:76:51:32:
                    03:54:45:96:41:38:64:81:31:18:db:91:48:f0:f7:
                    0c:79:3b:48:58:29:40:8a:ab:e1:65:29:ee:e5:14:
                    f0:de:c6:44:a0:58:c2:a4:91:9f:41:55:09:48:c1:
                    8e:3a:01:49:7f:0c:7b:ef:43:f8:2b:42:88:c8:ab:
                    af:db:2d:b5:7f:f0:01:b4:cd:8f:fc:a4:b9:91:25:
                    a8:a4:82:5f:6d:57:d5:00:62:ed:e4:47:a0:7e:20:
                    d5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:93:B4:AE:A0:15:89:D4:88:4F:2A:50:76:75:9E:C6:F3:50:19:AF
            X509v3 Authority Key Identifier:
                keyid:3F:F5:F9:3C:DA:B2:F6:66:B9:63:C4:1B:B8:3E:D3:E3:51:30:D5:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3FF5F93CDAB2F666B963C41BB83ED3E35130D530.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8783ed28-5881-47da-ae66-e1db67942eb1/0/3130332e35312e3130332e302f32342d3234203d3e20313339343332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:83:7a:88:92:b4:ce:34:8b:39:f9:6d:67:81:f7:76:d6:53:
         b2:7c:86:61:29:b2:55:c8:2c:54:a7:ef:2e:a6:1a:c7:08:a8:
         56:0e:db:70:5c:5c:a9:51:41:91:c5:72:2a:8e:09:a1:65:d7:
         d7:cd:3e:a6:ec:ba:d9:75:4a:13:51:5a:df:0c:3f:50:43:d5:
         b1:39:13:4d:ba:5e:2f:d5:ee:7e:f2:e1:f6:2c:ad:04:68:fe:
         e2:b8:dc:43:83:a4:21:5d:79:ea:27:a6:41:27:1a:e0:0c:2c:
         07:ce:7e:98:eb:89:34:f2:f6:bf:f2:0b:07:16:dd:93:12:c3:
         6d:10:28:4f:48:48:70:0d:5d:d5:e6:1a:01:af:a5:0a:56:d0:
         6f:7d:2f:7e:79:c9:d4:60:4b:16:3d:7a:a6:9c:e0:ff:c5:6b:
         c2:43:b9:7f:1d:97:78:fd:14:b1:62:ae:9c:af:40:43:87:14:
         af:12:01:78:c0:3b:b4:ee:85:77:1d:92:11:91:19:2b:60:b5:
         e6:92:4c:95:c7:6e:0c:93:6b:16:b4:da:1b:0d:b0:c5:d9:1b:
         95:d9:5c:76:62:6f:7e:3f:20:2a:05:d3:a0:0c:5e:d0:17:ca:
         a2:41:aa:41:d0:78:8c:d2:e5:ca:c0:21:7a:3a:57:b3:c4:3e:
         cd:d8:88:19
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHnS7IFZHe+VTx81MkWM/qnJPKCgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1
MTMwRDUzMDAeFw0yNDAzMDEwNjU3MjVaFw0yNTAyMjgwNzAyMjVaMDMxMTAvBgNV
BAMTKDVGOTNCNEFFQTAxNTg5RDQ4ODRGMkE1MDc2NzU5RUM2RjM1MDE5QUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPTf8xcq+aXXuSzaf8X2y7uPpM
/DbAXVX7FxTL8uydAeyxfQ3HnzeMZdElxunEJHouUk9NnT544f+GmJmSjDTvZu/B
SM3gC+jdnW3hmUriA/Tee6IPsCFWrfZLoRzJ51eA7J9LPajxx9M4MBFy6g8PNMcV
MhTr/okKE7gjw4sDH3Q0djod75L+ZD/aqiwlAqpUuRDrIXHdeq+0FQOIw4HGRXZR
MgNURZZBOGSBMRjbkUjw9wx5O0hYKUCKq+FlKe7lFPDexkSgWMKkkZ9BVQlIwY46
AUl/DHvvQ/grQojIq6/bLbV/8AG0zY/8pLmRJaikgl9tV9UAYu3kR6B+INUVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUX5O0rqAVidSITypQdnWexvNQGa8wHwYDVR0j
BBgwFoAUP/X5PNqy9ma5Y8QbuD7T41Ew1TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
NzgzZWQyOC01ODgxLTQ3ZGEtYWU2Ni1lMWRiNjc5NDJlYjEvMC8zRkY1RjkzQ0RB
QjJGNjY2Qjk2M0M0MUJCODNFRDNFMzUxMzBENTMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0ZGNUY5M0NEQUIyRjY2NkI5NjNDNDFCQjgzRUQzRTM1MTMw
RDUzMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ODNlZDI4LTU4ODEtNDdkYS1h
ZTY2LWUxZGI2Nzk0MmViMS8wLzMxMzAzMzJlMzUzMTJlMzEzMDMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzNnMA0GCSqG
SIb3DQEBCwUAA4IBAQCsg3qIkrTONIs5+W1ngfd21lOyfIZhKbJVyCxUp+8uphrH
CKhWDttwXFypUUGRxXIqjgmhZdfXzT6m7LrZdUoTUVrfDD9QQ9WxORNNul4v1e5+
8uH2LK0EaP7iuNxDg6QhXXnqJ6ZBJxrgDCwHzn6Y64k08va/8gsHFt2TEsNtEChP
SEhwDV3V5hoBr6UKVtBvfS9+ecnUYEsWPXqmnOD/xWvCQ7l/HZd4/RSxYq6cr0BD
hxSvEgF4wDu07oV3HZIRkRkrYLXmkkyVx24Mk2sWtNobDbDF2RuV2Vx2Ym9+PyAq
BdOgDF7QF8qiQapB0HiM0uXKwCF6OlezxD7N2IgZ
-----END CERTIFICATE-----
Generated at Sun Nov 24 00:53:31 2024 by rpki-client on console-fra.rpki-client.org