Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
File:                     3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa (raw, json)
Hash identifier:          8sJKsw/fDPv13/svxBpHPVU/zVog9IUfQQ75/T/6M/w=
Subject key identifier:   70:74:39:C2:F3:91:44:75:7D:04:08:A4:A1:B7:2D:EB:BA:AA:23:15
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       3C804EFD8ED9F257A7B583F7F5C07C088D24373A
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa
Signing time:             Sat 05 Aug 2023 07:00:01 +0000
ROA not before:           Sat 05 Aug 2023 06:55:01 +0000
ROA not after:            Sat 03 Aug 2024 07:00:01 +0000
asID:                     131735
IP address blocks:        103.231.82.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl
                          rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:80:4e:fd:8e:d9:f2:57:a7:b5:83:f7:f5:c0:7c:08:8d:24:37:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Aug  5 06:55:01 2023 GMT
            Not After : Aug  3 07:00:01 2024 GMT
        Subject: CN=707439C2F39144757D0408A4A1B72DEBBAAA2315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d7:14:cc:35:9f:9f:ed:60:ab:34:67:55:8e:
                    84:e2:6d:ee:73:21:fa:1c:81:f1:09:a2:43:a7:aa:
                    02:d0:c3:f8:1d:ad:70:6d:7d:17:ba:68:22:88:69:
                    10:d8:68:84:22:68:74:f8:f3:c9:78:1d:b2:45:ef:
                    88:14:71:50:a8:0b:c4:0b:4a:e1:71:29:9f:86:c3:
                    c7:54:fe:c6:20:52:d6:4d:cd:97:e2:c6:39:0c:d5:
                    5d:42:be:c1:76:8a:33:be:ca:3e:00:56:83:96:73:
                    e5:fd:39:5b:a3:22:35:81:0d:b2:eb:0e:e9:91:d8:
                    d8:82:6a:eb:c5:a5:66:3a:6f:9b:b4:0b:fb:39:ab:
                    c5:69:51:c3:1b:df:58:fc:79:a2:f3:67:bd:0e:b7:
                    eb:93:37:38:9d:a5:8c:2c:69:31:cb:11:4c:b3:32:
                    fd:1b:70:dd:6f:a9:a2:24:ac:8c:ab:f1:ae:ff:d2:
                    8a:b1:69:a2:98:b9:98:3c:25:71:84:74:d0:37:43:
                    63:24:2a:ce:bf:09:6f:e3:f2:1a:ca:89:c3:e7:70:
                    e5:94:02:c2:6d:80:b2:47:90:83:bf:38:32:83:9c:
                    fc:97:66:1a:0c:2c:20:cf:14:9d:cd:a0:58:f9:9d:
                    1d:20:27:c2:16:37:40:3e:39:4c:16:7d:30:61:0f:
                    c6:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:74:39:C2:F3:91:44:75:7D:04:08:A4:A1:B7:2D:EB:BA:AA:23:15
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38322e302f32342d3234203d3e20313331373335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:8d:1a:7a:8c:70:fc:66:34:47:fd:2f:33:e4:8a:74:c3:f2:
         04:f2:b9:7b:44:0d:4b:16:49:87:de:66:6f:a9:9c:d4:f8:4f:
         e2:ce:60:b1:54:d4:0e:9d:99:1b:83:e9:eb:8a:56:11:a4:a2:
         e2:20:5b:39:8f:39:6b:1f:61:5f:09:26:5c:11:e4:cc:59:eb:
         87:0b:84:8d:e5:93:4f:de:b2:bf:bd:14:c5:60:bd:f3:32:91:
         06:7b:97:06:bd:47:05:5a:91:20:1a:9a:94:96:ce:77:a6:75:
         69:f5:da:a4:43:31:27:6f:82:b0:a0:ce:8a:67:bc:91:12:fc:
         bc:38:b5:ee:26:a7:f6:de:f1:7e:bc:9a:7e:1d:89:1d:a4:3d:
         8c:e7:b6:53:b5:72:e8:30:81:64:bb:57:2a:a3:30:01:5e:e2:
         2f:ff:38:e5:4c:3c:3d:f0:b4:1f:68:66:3e:42:8c:93:17:23:
         62:40:51:80:a1:25:87:51:d0:bc:51:ad:15:0f:b7:22:9b:9d:
         26:29:59:55:8e:39:2f:80:19:07:44:78:f5:ff:43:e0:1a:50:
         42:d0:ac:80:dc:8b:fc:1e:15:5c:f6:36:e8:19:88:f7:0a:f3:
         7f:64:2b:3a:f1:bd:bb:ab:91:08:ea:18:af:a2:d1:76:14:74:
         c9:ae:72:43
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUPIBO/Y7Z8lentYP39cB8CI0kNzowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1
RDdBNjNBNjAeFw0yMzA4MDUwNjU1MDFaFw0yNDA4MDMwNzAwMDFaMDMxMTAvBgNV
BAMTKDcwNzQzOUMyRjM5MTQ0NzU3RDA0MDhBNEExQjcyREVCQkFBQTIzMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1xTMNZ+f7WCrNGdVjoTibe5z
IfocgfEJokOnqgLQw/gdrXBtfRe6aCKIaRDYaIQiaHT488l4HbJF74gUcVCoC8QL
SuFxKZ+Gw8dU/sYgUtZNzZfixjkM1V1CvsF2ijO+yj4AVoOWc+X9OVujIjWBDbLr
DumR2NiCauvFpWY6b5u0C/s5q8VpUcMb31j8eaLzZ70Ot+uTNzidpYwsaTHLEUyz
Mv0bcN1vqaIkrIyr8a7/0oqxaaKYuZg8JXGEdNA3Q2MkKs6/CW/j8hrKicPncOWU
AsJtgLJHkIO/ODKDnPyXZhoMLCDPFJ3NoFj5nR0gJ8IWN0A+OUwWfTBhD8aLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcHQ5wvORRHV9BAikobct67qqIxUwHwYDVR0j
BBgwFoAUK7E4J0I1dRQdoPHFezPn3l16Y6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8yQkIxMzgyNzQy
MzU3NTE0MURBMEYxQzU3QjMzRTdERTVEN0E2M0E2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1RDdB
NjNBNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhNDkzYmUxLWYwNjQtNDllNi05
NDlhLWNiM2VjYmZjOGY0Ni8wLzMxMzAzMzJlMzIzMzMxMmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+dSMA0GCSqG
SIb3DQEBCwUAA4IBAQBajRp6jHD8ZjRH/S8z5Ip0w/IE8rl7RA1LFkmH3mZvqZzU
+E/izmCxVNQOnZkbg+nrilYRpKLiIFs5jzlrH2FfCSZcEeTMWeuHC4SN5ZNP3rK/
vRTFYL3zMpEGe5cGvUcFWpEgGpqUls53pnVp9dqkQzEnb4KwoM6KZ7yREvy8OLXu
Jqf23vF+vJp+HYkdpD2M57ZTtXLoMIFku1cqozABXuIv/zjlTDw98LQfaGY+QoyT
FyNiQFGAoSWHUdC8Ua0VD7cim50mKVlVjjkvgBkHRHj1/0PgGlBC0KyA3Iv8HhVc
9jboGYj3CvN/ZCs68b27q5EI6hivotF2FHTJrnJD
-----END CERTIFICATE-----
Generated at Sun Jun 23 17:59:19 2024 by rpki-client on console-fra.rpki-client.org