Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa
File:                     3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa (raw, json)
Hash identifier:          /xLUYxwy8MvT9VX3ZK6ZpsVoMgqvrnLo4l4JN2ANVRw=
Subject key identifier:   5D:20:9C:94:6C:68:8E:8D:09:94:4B:67:80:EE:24:1F:16:05:C0:45
Certificate issuer:       /CN=06C079105A8A7FB53C97370CDE636B0A22588747
Certificate serial:       73F96C6733CF5E9D5CF31A33EC986D72CF59E09C
Authority key identifier: 06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa
Signing time:             Mon 01 Jul 2024 01:03:55 +0000
ROA not before:           Mon 01 Jul 2024 00:58:55 +0000
ROA not after:            Mon 30 Jun 2025 01:03:55 +0000
asID:                     138100
IP address blocks:        103.125.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl
                          rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f9:6c:67:33:cf:5e:9d:5c:f3:1a:33:ec:98:6d:72:cf:59:e0:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06C079105A8A7FB53C97370CDE636B0A22588747
        Validity
            Not Before: Jul  1 00:58:55 2024 GMT
            Not After : Jun 30 01:03:55 2025 GMT
        Subject: CN=5D209C946C688E8D09944B6780EE241F1605C045
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:da:a6:12:3e:58:85:ed:ea:95:f1:aa:d1:29:
                    12:f9:f6:a6:dd:db:f6:9a:a6:ac:7b:dd:b9:92:09:
                    cd:8d:91:bd:2c:38:dd:33:8e:e2:0e:b5:9a:6f:bd:
                    a2:5e:91:5f:96:2a:73:ea:b8:42:c0:7c:5a:e1:52:
                    6e:17:a8:46:a3:69:28:85:d6:ab:03:2a:33:e2:f2:
                    a5:60:92:47:04:c1:45:ae:4e:de:af:00:35:9c:29:
                    b6:73:da:22:b8:a0:4b:2e:72:d1:05:47:17:bd:aa:
                    8a:96:d0:38:bc:5f:2d:20:d3:c7:8e:18:a0:0f:25:
                    83:44:f0:cd:1b:97:51:52:97:8e:8a:8d:d4:a0:bb:
                    4e:4e:75:78:eb:a3:03:bb:8e:37:a9:03:b5:5b:07:
                    32:5f:de:12:de:be:67:f0:15:f2:6c:57:63:8b:cd:
                    ab:49:e1:c1:ad:21:b7:44:e9:c9:17:53:29:ed:4b:
                    4b:61:10:16:f5:3f:23:f4:a2:e5:2c:55:ba:f0:cf:
                    f2:36:46:9c:e7:b5:7b:82:3c:0a:6d:66:45:dd:e2:
                    e8:98:4f:39:7f:94:b9:fe:ef:8b:af:4e:2a:aa:22:
                    b1:38:96:a3:97:7e:14:66:d9:bc:87:a6:d7:2a:cd:
                    e8:ee:6d:cc:3b:3c:95:44:e9:8c:1f:11:00:28:a3:
                    54:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:20:9C:94:6C:68:8E:8D:09:94:4B:67:80:EE:24:1F:16:05:C0:45
            X509v3 Authority Key Identifier:
                keyid:06:C0:79:10:5A:8A:7F:B5:3C:97:37:0C:DE:63:6B:0A:22:58:87:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/06C079105A8A7FB53C97370CDE636B0A22588747.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/06C079105A8A7FB53C97370CDE636B0A22588747.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88cac161-f880-4206-8d2c-daa604fe0902/0/3130332e3132352e3130342e302f32342d3234203d3e20313338313030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:c9:91:39:dd:5a:52:ae:19:b7:24:45:c2:72:89:10:f8:7b:
         da:9d:a3:51:f6:fb:3a:28:c1:3f:61:08:c6:8d:b5:e7:08:c0:
         93:f5:48:f2:c6:78:87:5d:0f:38:23:dc:52:ac:66:bd:be:de:
         40:84:3d:f3:d9:3b:7c:dd:ac:78:a3:41:87:24:98:92:47:34:
         40:58:f1:a0:36:68:f6:e6:5b:45:1a:77:24:3e:60:f2:57:74:
         2a:86:bb:03:d3:1d:38:0b:8d:c6:4f:41:ca:bf:54:d3:b7:47:
         d5:02:54:ce:a0:10:7f:99:11:b5:1b:10:9d:4e:e7:3f:31:b4:
         6c:6e:27:40:ec:aa:ae:16:b3:d8:e3:c3:6a:81:0c:d9:25:65:
         fd:eb:87:b7:cc:ac:15:ad:80:36:32:36:15:e8:62:dc:47:04:
         8b:cd:38:97:b2:46:be:a6:f7:8e:51:e2:86:fb:bb:c1:c2:12:
         5c:31:03:3d:ca:2f:ac:29:de:1b:f4:cc:07:3c:30:9c:aa:ec:
         c7:bd:a1:d4:c8:dc:df:00:0f:15:5e:95:90:5c:91:26:0c:ec:
         5b:ed:25:c0:8f:a1:89:af:01:d6:5e:21:0c:a4:57:aa:03:a4:
         a4:cd:9c:32:7b:67:d2:59:04:fc:de:55:0d:64:82:f6:6f:02:
         5f:bd:78:9b
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUc/lsZzPPXp1c8xoz7Jhtcs9Z4JwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEy
MjU4ODc0NzAeFw0yNDA3MDEwMDU4NTVaFw0yNTA2MzAwMTAzNTVaMDMxMTAvBgNV
BAMTKDVEMjA5Qzk0NkM2ODhFOEQwOTk0NEI2NzgwRUUyNDFGMTYwNUMwNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM2qYSPliF7eqV8arRKRL59qbd
2/aapqx73bmSCc2Nkb0sON0zjuIOtZpvvaJekV+WKnPquELAfFrhUm4XqEajaSiF
1qsDKjPi8qVgkkcEwUWuTt6vADWcKbZz2iK4oEsuctEFRxe9qoqW0Di8Xy0g08eO
GKAPJYNE8M0bl1FSl46KjdSgu05OdXjrowO7jjepA7VbBzJf3hLevmfwFfJsV2OL
zatJ4cGtIbdE6ckXUyntS0thEBb1PyP0ouUsVbrwz/I2RpzntXuCPAptZkXd4uiY
Tzl/lLn+74uvTiqqIrE4lqOXfhRm2byHptcqzejubcw7PJVE6YwfEQAoo1RzAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUXSCclGxojo0JlEtngO4kHxYFwEUwHwYDVR0j
BBgwFoAUBsB5EFqKf7U8lzcM3mNrCiJYh0cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OGNhYzE2MS1mODgwLTQyMDYtOGQyYy1kYWE2MDRmZTA5MDIvMC8wNkMwNzkxMDVB
OEE3RkI1M0M5NzM3MENERTYzNkIwQTIyNTg4NzQ3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDZDMDc5MTA1QThBN0ZCNTNDOTczNzBDREU2MzZCMEEyMjU4
ODc0Ny5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4Y2FjMTYxLWY4ODAtNDIwNi04
ZDJjLWRhYTYwNGZlMDkwMi8wLzMxMzAzMzJlMzEzMjM1MmUzMTMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfWgwDQYJ
KoZIhvcNAQELBQADggEBADbJkTndWlKuGbckRcJyiRD4e9qdo1H2+zoowT9hCMaN
tecIwJP1SPLGeIddDzgj3FKsZr2+3kCEPfPZO3zdrHijQYckmJJHNEBY8aA2aPbm
W0UadyQ+YPJXdCqGuwPTHTgLjcZPQcq/VNO3R9UCVM6gEH+ZEbUbEJ1O5z8xtGxu
J0Dsqq4Ws9jjw2qBDNklZf3rh7fMrBWtgDYyNhXoYtxHBIvNOJeyRr6m945R4ob7
u8HCElwxAz3KL6wp3hv0zAc8MJyq7Me9odTI3N8ADxVelZBckSYM7FvtJcCPoYmv
AdZeIQykV6oDpKTNnDJ7Z9JZBPzeVQ1kgvZvAl+9eJs=
-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org