Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
File:                     3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa (raw, json)
Hash identifier:          Zbwpw/qKwPe0d3TNY1QWeExL9W/cUwjrkDmumHzLVW8=
Subject key identifier:   98:BF:F1:94:FA:44:C6:47:EC:B2:D0:42:2C:7E:3E:6C:92:D2:9E:9F
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       78910F3223EC0C05A23DD1BDC92C242F8A9C5A2B
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa
Signing time:             Mon 01 Jul 2024 01:03:55 +0000
ROA not before:           Mon 01 Jul 2024 00:58:55 +0000
ROA not after:            Mon 30 Jun 2025 01:03:55 +0000
asID:                     138100
IP address blocks:        103.125.104.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:91:0f:32:23:ec:0c:05:a2:3d:d1:bd:c9:2c:24:2f:8a:9c:5a:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jul  1 00:58:55 2024 GMT
            Not After : Jun 30 01:03:55 2025 GMT
        Subject: CN=98BFF194FA44C647ECB2D0422C7E3E6C92D29E9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0c:21:1f:ad:37:5d:22:6d:dd:56:56:db:dc:
                    31:80:13:42:b7:2f:c6:53:26:8d:db:fd:58:ac:b5:
                    4d:55:b1:07:c6:e8:24:5f:98:5c:ab:db:0e:10:af:
                    3d:5c:9e:80:f9:96:61:8f:98:49:09:48:e1:06:4e:
                    e3:f4:66:7d:c3:df:b5:c2:f3:09:5e:36:52:ae:6e:
                    6c:81:f3:25:3c:b6:12:5b:61:59:8e:93:26:a7:97:
                    0f:10:90:ee:b2:bf:a9:35:8a:90:a5:fa:c4:27:bf:
                    b8:de:8f:ff:3b:24:3d:24:7b:01:61:58:ae:56:c4:
                    55:33:fa:67:6f:df:f1:18:bc:e3:3b:8a:38:05:02:
                    27:c7:26:ce:5f:bc:15:71:68:aa:13:66:88:65:f0:
                    e2:f6:d3:40:4c:c3:ff:a2:42:11:c7:50:95:9f:f5:
                    03:85:b6:4a:e3:d3:e8:c1:fc:61:88:f2:bb:14:80:
                    5c:73:c5:f1:77:6c:7a:d2:ef:a9:c7:0c:89:8f:a3:
                    b0:d6:a5:b1:20:c0:e4:f0:bd:76:b9:45:9f:98:7e:
                    f4:d0:09:41:fb:54:b6:25:c2:75:9d:4e:b1:ab:42:
                    87:4f:c4:9c:0f:04:4a:9e:62:76:c6:f7:36:92:03:
                    f4:91:59:61:30:39:3f:73:af:84:bc:8e:2c:e8:9f:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BF:F1:94:FA:44:C6:47:EC:B2:D0:42:2C:7E:3E:6C:92:D2:9E:9F
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32322d3232203d3e20313338313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.104.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b2:a8:ad:5d:79:ff:b8:4f:c5:6b:0e:6c:59:ca:bb:e1:2b:b0:
         b8:61:37:ac:6d:e0:f6:aa:5f:cf:90:95:bc:a6:60:19:b9:15:
         97:04:da:a5:97:c6:57:19:2c:c2:b1:ea:ac:69:b2:78:07:df:
         ee:74:6a:f8:7c:13:35:db:c6:e7:78:93:f3:e5:7a:37:17:6e:
         4f:bc:82:3d:f1:a6:c5:fc:c3:c1:96:34:ec:a1:60:6c:1d:90:
         44:79:ba:27:23:3b:9a:c0:d8:cd:99:de:20:8e:b3:34:53:5d:
         c3:15:99:9b:78:94:fd:63:3c:62:19:91:98:e5:60:33:bc:60:
         f0:e6:09:b4:51:4e:de:f1:9c:07:2b:13:2c:d1:93:ce:00:32:
         5e:17:95:da:46:ce:74:10:9d:91:da:91:98:e8:b8:78:de:34:
         32:2d:6c:8d:ed:e1:c9:77:54:f6:d9:f3:e7:05:83:88:ba:fa:
         65:05:2c:e1:75:45:af:8e:40:b1:ee:2c:1e:a8:31:f9:59:69:
         7a:8a:6e:34:ba:f4:31:b8:6d:92:0d:95:03:47:a5:50:12:ee:
         e9:39:26:7e:48:42:14:b3:33:39:04:61:13:7c:b1:8c:d6:c6:
         55:df:b4:a1:8a:5e:2f:5a:89:ce:92:66:51:97:0f:48:17:4f:
         29:b7:95:6b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeJEPMiPsDAWiPdG9ySwkL4qcWiswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEy
MjU4ODc0NzAeFw0yNDA3MDEwMDU4NTVaFw0yNTA2MzAwMTAzNTVaMDMxMTAvBgNV
BAMTKDk4QkZGMTk0RkE0NEM2NDdFQ0IyRDA0MjJDN0UzRTZDOTJEMjlFOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjDCEfrTddIm3dVlbb3DGAE0K3
L8ZTJo3b/VistU1VsQfG6CRfmFyr2w4Qrz1cnoD5lmGPmEkJSOEGTuP0Zn3D37XC
8wleNlKubmyB8yU8thJbYVmOkyanlw8QkO6yv6k1ipCl+sQnv7jej/87JD0kewFh
WK5WxFUz+mdv3/EYvOM7ijgFAifHJs5fvBVxaKoTZohl8OL200BMw/+iQhHHUJWf
9QOFtkrj0+jB/GGI8rsUgFxzxfF3bHrS76nHDImPo7DWpbEgwOTwvXa5RZ+YfvTQ
CUH7VLYlwnWdTrGrQodPxJwPBEqeYnbG9zaSA/SRWWEwOT9zr4S8jizon6O1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUmL/xlPpExkfsstBCLH4+bJLSnp8wHwYDVR0j
BBgwFoAUBsB5EFqKf7U8lzcM3mNrCiJYh0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OGNhYzE2MS1mODgwLTQyMDYtOGQyYy1kYWE2MDRmZTA5MDIvMC8wNkMwNzkxMDVB
OEE3RkI1M0M5NzM3MENERTYzNkIwQTIyNTg4NzQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEyMjU4
ODc0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4Y2FjMTYxLWY4ODAtNDIwNi04
ZDJjLWRhYTYwNGZlMDkwMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTMwMzQyZTMwMmYz
MjMyMmQzMjMyMjAzZDNlMjAzMTMzMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnfWgwDQYJ
KoZIhvcNAQELBQADggEBALKorV15/7hPxWsObFnKu+ErsLhhN6xt4PaqX8+Qlbym
YBm5FZcE2qWXxlcZLMKx6qxpsngH3+50avh8EzXbxud4k/PlejcXbk+8gj3xpsX8
w8GWNOyhYGwdkER5uicjO5rA2M2Z3iCOszRTXcMVmZt4lP1jPGIZkZjlYDO8YPDm
CbRRTt7xnAcrEyzRk84AMl4XldpGznQQnZHakZjouHjeNDItbI3t4cl3VPbZ8+cF
g4i6+mUFLOF1Ra+OQLHuLB6oMflZaXqKbjS69DG4bZINlQNHpVAS7uk5Jn5IQhSz
MzkEYRN8sYzWxlXftKGKXi9aic6SZlGXD0gXTym3lWs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org