Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e33302e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          4sTd2X4FOXy4PdvdlHDxpBKq/1wYaJJlKcvDxQsphwU=
Subject key identifier:   A6:52:CC:A0:D4:52:52:07:9B:26:D3:CB:5A:C6:5D:59:3A:6A:CB:6F
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       5DE7B96A6AC416A705C8EC9CE4FA7B6EECA1E0BA
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 01 Jul 2024 01:06:08 +0000
ROA not before:           Mon 01 Jul 2024 01:01:08 +0000
ROA not after:            Mon 30 Jun 2025 01:06:08 +0000
asID:                     63862
IP address blocks:        103.49.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:e7:b9:6a:6a:c4:16:a7:05:c8:ec:9c:e4:fa:7b:6e:ec:a1:e0:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul  1 01:01:08 2024 GMT
            Not After : Jun 30 01:06:08 2025 GMT
        Subject: CN=A652CCA0D45252079B26D3CB5AC65D593A6ACB6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ca:c1:af:07:a7:fa:61:c0:55:bc:e2:30:82:
                    b5:48:ba:f3:c3:6f:f7:22:f2:a5:a8:cf:4c:1f:71:
                    de:7e:85:3d:79:1e:a6:18:b5:90:f5:05:5f:2e:ed:
                    b5:cd:33:c5:c5:25:59:98:23:73:64:8c:b1:8d:3f:
                    74:07:ec:68:6f:8b:e1:f2:15:ff:7f:87:50:91:07:
                    ea:41:40:5d:a5:54:77:b3:c7:5a:b6:73:73:3f:1d:
                    d7:79:81:c4:ee:ff:34:d8:97:0f:ba:58:b4:47:a6:
                    24:fb:11:34:ae:2d:e6:c5:a8:3a:dd:f4:4b:68:a1:
                    61:cc:5e:46:71:3c:8e:f4:39:43:29:64:da:3c:80:
                    0c:9d:8d:5c:ca:98:7c:5a:7b:05:56:b1:35:f2:f9:
                    02:b5:8f:34:a0:63:2b:3c:9a:82:92:d7:cd:fc:a2:
                    50:46:d4:67:21:28:ed:e9:50:d7:7e:3e:a9:83:98:
                    ec:18:34:3e:49:55:64:36:cc:42:ba:ad:8b:fd:5b:
                    a5:f6:ee:27:d8:2e:20:ee:6f:e2:43:7f:ce:23:a0:
                    27:ec:e4:d6:ad:8a:2d:82:3a:1c:d4:25:9f:ae:86:
                    16:13:c4:85:21:37:d8:2f:0a:e0:9b:2f:bf:f4:a3:
                    cb:ce:a3:0b:07:6d:2e:ae:82:bc:72:be:cb:c7:3f:
                    d5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:52:CC:A0:D4:52:52:07:9B:26:D3:CB:5A:C6:5D:59:3A:6A:CB:6F
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33302e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:0f:a2:62:9a:82:ad:ee:68:2c:e6:94:4f:73:0a:b8:00:1e:
         df:67:0f:cd:e1:d6:50:82:5a:f8:ee:d1:9c:f4:6e:4a:e9:63:
         08:6f:7d:c1:21:ea:7b:79:f9:b6:9c:80:ba:55:70:ea:48:0b:
         ef:62:eb:e2:09:45:00:f8:fa:0c:ef:72:33:06:e7:1d:63:e4:
         cd:34:9e:5e:be:ea:2a:d5:60:25:78:0e:34:3c:8c:47:94:b3:
         ee:3c:86:b9:04:33:e7:1d:01:7b:e9:9b:2c:f8:a9:9a:a6:c7:
         fe:47:d2:ba:43:11:84:26:96:e1:c3:3d:d7:64:fe:da:a1:d5:
         20:40:f9:ca:51:a4:6f:db:68:3b:2c:5e:65:f9:3d:2f:65:f7:
         1c:1e:d0:70:f4:3f:f6:c3:cd:66:5b:80:b9:77:74:d6:b7:48:
         5b:b1:a3:02:c4:0c:c8:97:1a:e3:dc:8e:5e:35:a6:9a:98:64:
         b8:38:15:51:f0:c4:5e:d3:aa:8c:30:b7:8e:bc:cf:3a:46:35:
         c8:e2:5e:8f:19:12:17:b7:12:b5:1b:4b:23:aa:7b:e1:42:25:
         f7:73:2d:31:00:34:55:46:c7:fb:95:3e:43:b2:88:f2:cb:33:
         77:fd:3a:07:05:27:30:54:ae:46:48:56:82:49:4f:bf:b4:8a:
         ee:1f:34:75
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUXee5amrEFqcFyOyc5Pp7buyh4LowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFF
MDFENjBDOTAeFw0yNDA3MDEwMTAxMDhaFw0yNTA2MzAwMTA2MDhaMDMxMTAvBgNV
BAMTKEE2NTJDQ0EwRDQ1MjUyMDc5QjI2RDNDQjVBQzY1RDU5M0E2QUNCNkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOysGvB6f6YcBVvOIwgrVIuvPD
b/ci8qWoz0wfcd5+hT15HqYYtZD1BV8u7bXNM8XFJVmYI3NkjLGNP3QH7Ghvi+Hy
Ff9/h1CRB+pBQF2lVHezx1q2c3M/Hdd5gcTu/zTYlw+6WLRHpiT7ETSuLebFqDrd
9EtooWHMXkZxPI70OUMpZNo8gAydjVzKmHxaewVWsTXy+QK1jzSgYys8moKS1838
olBG1GchKO3pUNd+PqmDmOwYND5JVWQ2zEK6rYv9W6X27ifYLiDub+JDf84joCfs
5Natii2COhzUJZ+uhhYTxIUhN9gvCuCbL7/0o8vOowsHbS6ugrxyvsvHP9V/AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUplLMoNRSUgebJtPLWsZdWTpqy28wHwYDVR0j
BBgwFoAUdksj62xj/8qjBfN9vpuQSuAdYMkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
N2U4MzBjOC1kNTU5LTQ1NmEtODgzNS00ZjZlYjU1MjdhYTIvMC83NjRCMjNFQjZD
NjNGRkNBQTMwNUYzN0RCRTlCOTA0QUUwMUQ2MEM5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzY0QjIzRUI2QzYzRkZDQUEzMDVGMzdEQkU5QjkwNEFFMDFE
NjBDOS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg3ZTgzMGM4LWQ1NTktNDU2YS04
ODM1LTRmNmViNTUyN2FhMi8wLzMxMzAzMzJlMzQzOTJlMzMzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMR4wDQYJKoZIhvcN
AQELBQADggEBAEcPomKagq3uaCzmlE9zCrgAHt9nD83h1lCCWvju0Zz0bkrpYwhv
fcEh6nt5+bacgLpVcOpIC+9i6+IJRQD4+gzvcjMG5x1j5M00nl6+6irVYCV4DjQ8
jEeUs+48hrkEM+cdAXvpmyz4qZqmx/5H0rpDEYQmluHDPddk/tqh1SBA+cpRpG/b
aDssXmX5PS9l9xwe0HD0P/bDzWZbgLl3dNa3SFuxowLEDMiXGuPcjl41ppqYZLg4
FVHwxF7Tqowwt468zzpGNcjiXo8ZEhe3ErUbSyOqe+FCJfdzLTEANFVGx/uVPkOy
iPLLM3f9OgcFJzBUrkZIVoJJT7+0iu4fNHU=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:24 2024 by rpki-client on console-ams.rpki-client.org