Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa
File:                     3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          NfTWOpBX5TEsx2AN4GNz4kZXIBLNbd1V2CGYNCmRu/U=
Subject key identifier:   E6:F7:63:BE:C8:57:B4:61:80:62:67:DE:AC:7B:45:AE:0E:95:14:8C
Certificate issuer:       /CN=5AE57F3F97F40888F93913350A218863E705CD34
Certificate serial:       4C2FBCCBFA8499D9B08433178C3EF19593A1716B
Authority key identifier: 5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa
Signing time:             Wed 16 Oct 2024 04:00:00 +0000
ROA not before:           Wed 16 Oct 2024 03:55:00 +0000
ROA not after:            Wed 15 Oct 2025 04:00:00 +0000
asID:                     139967
IP address blocks:        103.183.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl
                          rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 23:51:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2f:bc:cb:fa:84:99:d9:b0:84:33:17:8c:3e:f1:95:93:a1:71:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AE57F3F97F40888F93913350A218863E705CD34
        Validity
            Not Before: Oct 16 03:55:00 2024 GMT
            Not After : Oct 15 04:00:00 2025 GMT
        Subject: CN=E6F763BEC857B461806267DEAC7B45AE0E95148C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1d:c3:6d:58:ee:80:a0:27:e2:f8:09:b8:f4:
                    a1:71:70:08:95:31:89:82:91:4b:6f:8e:9b:e8:d8:
                    f1:21:0b:29:21:5d:02:02:77:ad:b4:70:d7:ae:ae:
                    d1:f9:dd:e4:a2:54:6e:fa:af:d5:4b:32:28:13:03:
                    98:18:84:cf:5e:7f:f6:79:99:07:e3:7c:d6:b7:29:
                    fa:d2:95:fc:bc:a3:b4:59:4c:61:43:e1:2e:d2:22:
                    19:3b:e4:0c:bd:6f:9f:57:9b:8b:87:63:29:a1:b5:
                    c1:fb:24:5d:a2:b5:f0:12:f1:80:4e:74:4e:11:b8:
                    23:8b:c8:19:02:fc:8c:7d:d9:5f:02:49:88:86:9d:
                    23:82:e4:03:a2:28:db:69:5e:28:96:7e:5c:44:12:
                    c9:1d:8c:12:ac:33:7f:88:f3:95:97:0e:d0:d6:40:
                    27:4b:e2:a7:77:eb:ad:3e:c0:75:78:16:3b:39:3f:
                    2f:5b:e1:19:43:77:f6:43:9b:37:ba:87:67:e4:d2:
                    a7:6b:17:2d:26:68:f5:09:61:6f:26:e3:6e:4e:3b:
                    9d:98:28:ac:98:1e:8d:f3:89:75:50:08:3d:5b:93:
                    a4:84:7a:81:f9:e9:eb:18:f1:30:48:84:f6:87:04:
                    d5:17:3b:51:0b:05:51:6b:96:73:dc:02:e7:f4:1e:
                    e8:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:F7:63:BE:C8:57:B4:61:80:62:67:DE:AC:7B:45:AE:0E:95:14:8C
            X509v3 Authority Key Identifier:
                keyid:5A:E5:7F:3F:97:F4:08:88:F9:39:13:35:0A:21:88:63:E7:05:CD:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/5AE57F3F97F40888F93913350A218863E705CD34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5AE57F3F97F40888F93913350A218863E705CD34.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d8cdf5a-b9a7-4469-a653-c9ff2a003773/0/3130332e3138332e31312e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:3a:a6:b1:82:75:4f:93:57:a2:19:a7:1a:98:5e:59:57:84:
         9f:23:31:b1:28:f4:b4:55:7c:64:7d:f7:24:2d:ec:91:ee:91:
         81:31:5f:49:e4:59:d6:bf:8e:c1:c0:32:0a:1c:dd:80:f1:b1:
         52:97:7b:9b:85:c3:26:66:1e:22:cc:2e:ef:0c:26:55:f5:54:
         23:6b:ce:70:d1:b4:ad:ff:38:d7:d6:02:0a:55:a4:41:df:08:
         fe:24:14:aa:b6:e9:38:7d:28:a6:23:d6:2e:8e:c0:9a:46:2c:
         a3:0a:92:5f:67:1e:a5:4b:1e:08:af:6b:8c:4a:2f:ac:a2:78:
         01:7a:7a:7a:c3:ed:f2:02:6e:a7:82:e7:03:86:56:12:2c:f1:
         d0:8a:53:b5:6c:6f:aa:db:1e:3f:56:0a:34:17:d8:de:98:49:
         09:ff:6c:f9:48:be:4a:43:95:bc:5e:d2:92:33:74:d7:19:f6:
         b0:50:fd:87:39:23:d9:d0:1c:61:e0:52:cb:de:17:06:64:62:
         aa:66:43:5b:05:a0:02:70:e8:01:02:b5:f5:cc:90:3f:58:29:
         68:a3:95:18:a6:d6:ea:99:7c:4e:d7:42:e6:55:e4:4e:2d:e9:
         9a:ab:82:97:21:c2:a5:62:0c:d8:f5:08:e3:52:58:a7:53:1a:
         8c:91:ec:3e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTC+8y/qEmdmwhDMXjD7xlZOhcWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNF
NzA1Q0QzNDAeFw0yNDEwMTYwMzU1MDBaFw0yNTEwMTUwNDAwMDBaMDMxMTAvBgNV
BAMTKEU2Rjc2M0JFQzg1N0I0NjE4MDYyNjdERUFDN0I0NUFFMEU5NTE0OEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLHcNtWO6AoCfi+Am49KFxcAiV
MYmCkUtvjpvo2PEhCykhXQICd620cNeurtH53eSiVG76r9VLMigTA5gYhM9ef/Z5
mQfjfNa3KfrSlfy8o7RZTGFD4S7SIhk75Ay9b59Xm4uHYymhtcH7JF2itfAS8YBO
dE4RuCOLyBkC/Ix92V8CSYiGnSOC5AOiKNtpXiiWflxEEskdjBKsM3+I85WXDtDW
QCdL4qd3660+wHV4Fjs5Py9b4RlDd/ZDmze6h2fk0qdrFy0maPUJYW8m425OO52Y
KKyYHo3ziXVQCD1bk6SEeoH56esY8TBIhPaHBNUXO1ELBVFrlnPcAuf0HugjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5vdjvshXtGGAYmferHtFrg6VFIwwHwYDVR0j
BBgwFoAUWuV/P5f0CIj5ORM1CiGIY+cFzTQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDhjZGY1YS1iOWE3LTQ0NjktYTY1My1jOWZmMmEwMDM3NzMvMC81QUU1N0YzRjk3
RjQwODg4RjkzOTEzMzUwQTIxODg2M0U3MDVDRDM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUFFNTdGM0Y5N0Y0MDg4OEY5MzkxMzM1MEEyMTg4NjNFNzA1
Q0QzNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkOGNkZjVhLWI5YTctNDQ2OS1h
NjUzLWM5ZmYyYTAwMzc3My8wLzMxMzAzMzJlMzEzODMzMmUzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7cLMA0GCSqG
SIb3DQEBCwUAA4IBAQAbOqaxgnVPk1eiGacamF5ZV4SfIzGxKPS0VXxkffckLeyR
7pGBMV9J5FnWv47BwDIKHN2A8bFSl3ubhcMmZh4izC7vDCZV9VQja85w0bSt/zjX
1gIKVaRB3wj+JBSqtuk4fSimI9YujsCaRiyjCpJfZx6lSx4Ir2uMSi+songBenp6
w+3yAm6ngucDhlYSLPHQilO1bG+q2x4/Vgo0F9jemEkJ/2z5SL5KQ5W8XtKSM3TX
GfawUP2HOSPZ0Bxh4FLL3hcGZGKqZkNbBaACcOgBArX1zJA/WCloo5UYptbqmXxO
10LmVeROLemaq4KXIcKlYgzY9QjjUlinUxqMkew+
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:37:41 2024 by rpki-client on console-ams.rpki-client.org