Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa
File:                     3130332e31302e3133382e302f32342d3234203d3e203137363731.roa (raw, json)
Hash identifier:          KG5C5OSmp72x7xeR9nMhsmzrEaQVUQnhdnC2AViDqqc=
Subject key identifier:   4D:58:04:55:EE:5E:0B:07:46:EC:39:AC:9C:C5:30:16:51:67:9D:14
Certificate issuer:       /CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
Certificate serial:       2BA7371CA58C675F81A717F11245D704FF8E5F04
Authority key identifier: D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa
Signing time:             Thu 13 Jun 2024 11:00:03 +0000
ROA not before:           Thu 13 Jun 2024 10:55:03 +0000
ROA not after:            Thu 12 Jun 2025 11:00:03 +0000
asID:                     17671
IP address blocks:        103.10.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl
                          rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:a7:37:1c:a5:8c:67:5f:81:a7:17:f1:12:45:d7:04:ff:8e:5f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D0C90407CCD53717DFEA21D51A8921F20564AB25
        Validity
            Not Before: Jun 13 10:55:03 2024 GMT
            Not After : Jun 12 11:00:03 2025 GMT
        Subject: CN=4D580455EE5E0B0746EC39AC9CC5301651679D14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ac:a1:36:aa:ef:4a:b5:7b:12:0f:5b:f4:4a:
                    d8:1f:90:05:ad:c1:46:67:b4:ec:dd:86:00:a8:9f:
                    ce:1e:66:dd:bc:d7:b7:13:6a:56:1d:98:db:16:dd:
                    57:8e:80:c3:f3:31:f2:50:1f:bd:6d:36:f3:91:ea:
                    b4:f8:40:4b:f6:83:41:5b:81:38:8f:0d:cd:a7:24:
                    67:34:11:6f:1c:52:d7:77:8e:2c:98:d9:d3:f9:6c:
                    c3:0b:a2:4d:70:dc:17:b8:d2:8d:ae:13:61:2c:65:
                    5e:50:cf:c1:fa:c2:4d:be:ad:24:dd:04:0c:a7:ef:
                    a0:15:ec:47:a2:a6:6c:61:60:c7:e8:5a:c3:ce:9b:
                    90:d3:59:c6:24:7e:ba:b1:14:16:fd:80:f9:c2:fd:
                    18:28:a9:3d:33:2c:35:1c:b9:37:f8:f0:89:1e:01:
                    7f:85:42:0b:f5:25:ce:03:b0:89:dd:6f:17:ef:ca:
                    b9:60:a4:75:a0:0b:0a:94:8d:de:32:e2:98:db:4e:
                    f3:70:18:d4:55:26:34:d4:af:07:7c:dd:fd:f2:2f:
                    8c:c4:66:b6:bf:5b:e7:b8:12:fb:b0:b6:fe:bb:93:
                    a6:9e:35:cb:5f:e9:d1:a2:59:dd:b5:b8:33:5a:bb:
                    c3:e7:95:b0:f1:f1:34:b2:05:ec:37:41:e7:97:d0:
                    4a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:58:04:55:EE:5E:0B:07:46:EC:39:AC:9C:C5:30:16:51:67:9D:14
            X509v3 Authority Key Identifier:
                keyid:D0:C9:04:07:CC:D5:37:17:DF:EA:21:D5:1A:89:21:F2:05:64:AB:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/D0C90407CCD53717DFEA21D51A8921F20564AB25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0C90407CCD53717DFEA21D51A8921F20564AB25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8cebf116-fe2a-491b-aac8-220ead0b54e2/0/3130332e31302e3133382e302f32342d3234203d3e203137363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:2a:b7:b9:a4:a5:c9:8f:6b:66:c5:cf:80:da:17:b3:02:64:
         10:d0:15:8c:7b:e2:c4:ef:f3:63:a6:0a:92:3e:df:b0:ba:3a:
         15:a5:87:2e:3e:22:09:3c:73:c1:e2:32:0d:81:33:cd:bb:21:
         ba:2a:34:65:5e:d2:79:4f:6c:db:df:78:1e:70:84:1e:05:15:
         1b:e0:f1:2d:81:e9:15:92:46:ec:06:1a:9f:f0:68:05:c2:87:
         9e:1a:67:1c:1a:ff:a7:b7:1c:0f:75:4d:2d:a1:a3:b4:91:f8:
         0c:91:19:2f:9a:eb:c9:0e:96:04:e2:9b:0c:3b:f0:9d:21:25:
         4d:e5:c7:ee:0f:f5:bd:d7:a6:d5:af:ef:88:93:2d:18:43:6b:
         aa:61:28:0c:88:16:a2:38:0a:dd:f9:96:35:bb:a8:98:b5:bf:
         e6:f3:e4:15:d3:fc:b0:e0:bb:83:99:0b:5b:2a:5b:9f:f9:87:
         fc:a6:e7:7b:c8:f1:7f:ae:98:eb:f9:54:1a:96:e4:4f:94:63:
         54:a4:15:44:6d:87:50:03:14:3c:d6:e2:28:0e:28:73:85:97:
         6f:4a:fb:4a:d2:11:7a:8d:56:6f:95:4a:a7:82:0f:e7:d6:7d:
         ea:67:c4:d4:f1:a4:c9:5a:1b:91:3c:7b:56:28:1a:7f:6a:53:
         6d:5f:37:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUK6c3HKWMZ1+BpxfxEkXXBP+OXwQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIw
NTY0QUIyNTAeFw0yNDA2MTMxMDU1MDNaFw0yNTA2MTIxMTAwMDNaMDMxMTAvBgNV
BAMTKDRENTgwNDU1RUU1RTBCMDc0NkVDMzlBQzlDQzUzMDE2NTE2NzlEMTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rKE2qu9KtXsSD1v0StgfkAWt
wUZntOzdhgCon84eZt2817cTalYdmNsW3VeOgMPzMfJQH71tNvOR6rT4QEv2g0Fb
gTiPDc2nJGc0EW8cUtd3jiyY2dP5bMMLok1w3Be40o2uE2EsZV5Qz8H6wk2+rSTd
BAyn76AV7EeipmxhYMfoWsPOm5DTWcYkfrqxFBb9gPnC/RgoqT0zLDUcuTf48Ike
AX+FQgv1Jc4DsIndbxfvyrlgpHWgCwqUjd4y4pjbTvNwGNRVJjTUrwd83f3yL4zE
Zra/W+e4Evuwtv67k6aeNctf6dGiWd21uDNau8PnlbDx8TSyBew3QeeX0Ep/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTVgEVe5eCwdG7DmsnMUwFlFnnRQwHwYDVR0j
BBgwFoAU0MkEB8zVNxff6iHVGokh8gVkqyUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
Y2ViZjExNi1mZTJhLTQ5MWItYWFjOC0yMjBlYWQwYjU0ZTIvMC9EMEM5MDQwN0ND
RDUzNzE3REZFQTIxRDUxQTg5MjFGMjA1NjRBQjI1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDBDOTA0MDdDQ0Q1MzcxN0RGRUEyMUQ1MUE4OTIxRjIwNTY0
QUIyNS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhjZWJmMTE2LWZlMmEtNDkxYi1h
YWM4LTIyMGVhZDBiNTRlMi8wLzMxMzAzMzJlMzEzMDJlMzEzMzM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM2MzczMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKijANBgkqhkiG
9w0BAQsFAAOCAQEATSq3uaSlyY9rZsXPgNoXswJkENAVjHvixO/zY6YKkj7fsLo6
FaWHLj4iCTxzweIyDYEzzbshuio0ZV7SeU9s2994HnCEHgUVG+DxLYHpFZJG7AYa
n/BoBcKHnhpnHBr/p7ccD3VNLaGjtJH4DJEZL5rryQ6WBOKbDDvwnSElTeXH7g/1
vdem1a/viJMtGENrqmEoDIgWojgK3fmWNbuomLW/5vPkFdP8sOC7g5kLWypbn/mH
/Kbne8jxf66Y6/lUGpbkT5RjVKQVRG2HUAMUPNbiKA4oc4WXb0r7StIReo1Wb5VK
p4IP59Z96mfE1PGkyVobkTx7Vigaf2pTbV83xw==
-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:17 2024 by rpki-client on console-fra.rpki-client.org