Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa
File:                     3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa (raw, json)
Hash identifier:          KQ3p9CiCu1QeSKAF7Qynno9v6emmU/LNSMNOOshbQ5E=
Subject key identifier:   E0:BC:3B:F4:53:02:0D:A5:FD:7A:03:D8:CD:FB:3F:23:F3:DE:12:CC
Certificate issuer:       /CN=285A5330FE006D3660B306BEE40EC7FEABA96574
Certificate serial:       32D188F361BD83BE5699B2CF179AC398B5CA1B1E
Authority key identifier: 28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa
Signing time:             Fri 24 May 2024 05:00:00 +0000
ROA not before:           Fri 24 May 2024 04:55:00 +0000
ROA not after:            Fri 23 May 2025 05:00:00 +0000
asID:                     149920
IP address blocks:        103.191.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl
                          rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:d1:88:f3:61:bd:83:be:56:99:b2:cf:17:9a:c3:98:b5:ca:1b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=285A5330FE006D3660B306BEE40EC7FEABA96574
        Validity
            Not Before: May 24 04:55:00 2024 GMT
            Not After : May 23 05:00:00 2025 GMT
        Subject: CN=E0BC3BF453020DA5FD7A03D8CDFB3F23F3DE12CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:14:2e:8e:0a:53:b7:a8:60:7e:ec:ba:fc:e0:
                    e9:34:33:20:2d:a8:b3:54:27:61:5d:ac:fd:b0:a7:
                    88:43:0e:af:29:10:b7:74:05:6c:49:97:bf:c1:7e:
                    0a:9b:82:00:14:5a:a6:d9:b2:c5:da:12:cd:ac:bd:
                    60:66:b6:6e:df:a2:a4:f4:f5:9f:52:c7:49:a1:e7:
                    cc:0c:8d:5b:d5:03:e5:30:a7:7c:76:00:78:e0:58:
                    4f:f2:d2:81:33:a2:44:d5:26:df:a9:b8:72:56:67:
                    d2:f5:ee:19:bf:31:0c:18:13:01:19:f7:08:3f:8b:
                    15:2e:3e:c4:d0:2f:93:a4:02:f5:f8:4b:c3:98:82:
                    12:bb:6c:5e:70:6d:e9:10:b8:b9:78:aa:10:03:bf:
                    e0:9a:93:96:fc:21:40:9b:19:3b:53:33:af:66:da:
                    32:d6:89:ce:4d:b2:e9:20:90:d2:f6:b4:03:c8:10:
                    64:cf:9a:29:c3:c9:58:3c:53:aa:9e:9e:84:40:bb:
                    50:23:04:6f:49:0c:df:02:53:6c:6c:39:ab:a7:05:
                    43:da:f6:d2:ce:81:8e:e3:7b:3e:20:36:8a:c4:6d:
                    3e:a9:bb:a6:f8:31:27:fe:d4:7e:ed:03:a9:3e:ea:
                    2b:ce:ca:c6:15:b5:24:3f:e2:be:9b:61:e7:c5:be:
                    6a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:BC:3B:F4:53:02:0D:A5:FD:7A:03:D8:CD:FB:3F:23:F3:DE:12:CC
            X509v3 Authority Key Identifier:
                keyid:28:5A:53:30:FE:00:6D:36:60:B3:06:BE:E4:0E:C7:FE:AB:A9:65:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/285A5330FE006D3660B306BEE40EC7FEABA96574.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/285A5330FE006D3660B306BEE40EC7FEABA96574.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ad33770-f151-43f3-9569-6a27d7504240/0/3130332e3139312e3132392e302f32342d3234203d3e20313439393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:0b:33:34:95:8f:30:0d:bb:b1:e3:40:38:5c:74:04:cb:06:
         4f:6f:e9:60:3d:0d:69:91:53:37:20:c9:8c:51:ce:5e:93:7e:
         fe:3a:49:a8:7e:0c:e3:05:b5:fb:07:b3:75:50:20:e7:61:7d:
         40:2e:6c:3a:b3:4a:fb:71:b5:55:40:49:f6:f8:c7:4a:93:cd:
         11:8c:b6:e2:df:4e:2b:d8:7f:91:37:ac:9b:91:5c:e6:df:e2:
         ce:49:6f:98:61:41:ed:93:30:de:e4:58:e9:39:22:f5:8f:16:
         70:1c:17:b1:15:ab:ad:76:fe:ae:6e:eb:1f:89:2a:76:91:ee:
         2b:e6:33:f4:2d:65:17:ab:bf:fa:0e:f9:3c:64:98:1e:d7:8b:
         d8:80:c8:56:5f:db:fc:35:43:92:69:42:6d:7e:69:4a:8e:2d:
         3a:f5:ce:c2:91:1d:7e:3b:b4:d6:b2:4a:e4:f2:ee:35:ab:cf:
         e3:90:f9:09:8d:ab:55:d6:f0:a6:ff:fc:ed:e2:83:3a:0d:1b:
         7d:4c:ba:be:ed:1d:54:29:7f:0e:37:3b:23:52:0f:2d:a6:92:
         5d:b6:c6:31:c9:b2:e3:74:30:91:46:42:16:d0:9b:51:7a:8f:
         cb:d0:ca:1a:cf:76:a9:cf:55:e9:b2:23:3a:88:5b:51:e8:97:
         5c:41:5c:4c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUMtGI82G9g75WmbLPF5rDmLXKGx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVB
QkE5NjU3NDAeFw0yNDA1MjQwNDU1MDBaFw0yNTA1MjMwNTAwMDBaMDMxMTAvBgNV
BAMTKEUwQkMzQkY0NTMwMjBEQTVGRDdBMDNEOENERkIzRjIzRjNERTEyQ0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgFC6OClO3qGB+7Lr84Ok0MyAt
qLNUJ2FdrP2wp4hDDq8pELd0BWxJl7/BfgqbggAUWqbZssXaEs2svWBmtm7foqT0
9Z9Sx0mh58wMjVvVA+Uwp3x2AHjgWE/y0oEzokTVJt+puHJWZ9L17hm/MQwYEwEZ
9wg/ixUuPsTQL5OkAvX4S8OYghK7bF5wbekQuLl4qhADv+Cak5b8IUCbGTtTM69m
2jLWic5NsukgkNL2tAPIEGTPminDyVg8U6qenoRAu1AjBG9JDN8CU2xsOaunBUPa
9tLOgY7jez4gNorEbT6pu6b4MSf+1H7tA6k+6ivOysYVtSQ/4r6bYefFvmqxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU4Lw79FMCDaX9egPYzfs/I/PeEswwHwYDVR0j
BBgwFoAUKFpTMP4AbTZgswa+5A7H/qupZXQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YWQzMzc3MC1mMTUxLTQzZjMtOTU2OS02YTI3ZDc1MDQyNDAvMC8yODVBNTMzMEZF
MDA2RDM2NjBCMzA2QkVFNDBFQzdGRUFCQTk2NTc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg1QTUzMzBGRTAwNkQzNjYwQjMwNkJFRTQwRUM3RkVBQkE5
NjU3NC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhZDMzNzcwLWYxNTEtNDNmMy05
NTY5LTZhMjdkNzUwNDI0MC8wLzMxMzAzMzJlMzEzOTMxMmUzMTMyMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv4EwDQYJ
KoZIhvcNAQELBQADggEBACELMzSVjzANu7HjQDhcdATLBk9v6WA9DWmRUzcgyYxR
zl6Tfv46Sah+DOMFtfsHs3VQIOdhfUAubDqzSvtxtVVASfb4x0qTzRGMtuLfTivY
f5E3rJuRXObf4s5Jb5hhQe2TMN7kWOk5IvWPFnAcF7EVq612/q5u6x+JKnaR7ivm
M/QtZRerv/oO+TxkmB7Xi9iAyFZf2/w1Q5JpQm1+aUqOLTr1zsKRHX47tNaySuTy
7jWrz+OQ+QmNq1XW8Kb//O3igzoNG31Mur7tHVQpfw43OyNSDy2mkl22xjHJsuN0
MJFGQhbQm1F6j8vQyhrPdqnPVemyIzqIW1Hol1xBXEw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:24 2024 by rpki-client on console-ams.rpki-client.org