Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
File:                     3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa (raw, json)
Hash identifier:          g1C9VUrvGVCiUWTRzpqG3itWNtxPlwwtCRjAcqqK9Ak=
Subject key identifier:   A9:8E:E4:33:B8:DB:AD:39:32:2C:EB:F8:B4:32:F8:26:F0:6A:28:DA
Certificate issuer:       /CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
Certificate serial:       0B5C1E5A555290DA9A69DC66D7DE651ED7B92B1E
Authority key identifier: 01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa
Signing time:             Sat 18 Nov 2023 12:00:02 +0000
ROA not before:           Sat 18 Nov 2023 11:55:02 +0000
ROA not after:            Sat 16 Nov 2024 12:00:02 +0000
asID:                     141636
IP address blocks:        103.162.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl
                          rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 17:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:5c:1e:5a:55:52:90:da:9a:69:dc:66:d7:de:65:1e:d7:b9:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01A283E5CA4698591C4AA0127AA71B68D6B8C690
        Validity
            Not Before: Nov 18 11:55:02 2023 GMT
            Not After : Nov 16 12:00:02 2024 GMT
        Subject: CN=A98EE433B8DBAD39322CEBF8B432F826F06A28DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:f7:7f:c7:ab:4a:4f:ed:66:5b:a0:27:12:43:
                    0a:fd:52:fe:50:4e:9f:6c:c6:f1:b1:ba:82:5c:6a:
                    42:00:4f:ae:4f:0d:e5:f9:85:2f:8a:6a:bb:be:84:
                    0f:16:ad:c5:53:65:a6:32:27:d6:36:c0:79:e4:f2:
                    3a:9f:cd:af:ee:95:19:bf:85:00:a9:8e:4a:4d:dd:
                    03:f2:b4:0c:91:e9:00:ca:94:b0:5b:59:a5:15:c3:
                    34:ba:08:3a:a3:78:49:f6:9b:c1:15:ac:54:e6:a2:
                    16:34:93:65:bf:5c:8d:4d:97:a5:03:6b:f2:b1:9a:
                    56:e4:ce:4e:10:11:b4:2c:5f:4f:32:f7:6c:c4:3e:
                    4f:e4:ae:cb:7f:90:53:05:c1:c4:32:da:0a:eb:c1:
                    dd:b2:e8:b5:a2:32:f1:a8:2f:45:17:b1:d2:0e:7a:
                    72:ac:cb:96:61:d2:70:43:e6:0d:a2:c7:9d:a8:94:
                    23:2c:93:54:2a:86:29:f8:4d:df:07:91:ea:16:8d:
                    39:ba:c5:db:e3:4f:7b:8b:8d:4f:64:12:08:3f:20:
                    8f:c4:22:22:a8:a1:e5:33:2c:46:7d:eb:b6:0d:4e:
                    16:64:f4:59:80:4a:7c:40:e6:50:02:92:39:0a:37:
                    b4:70:ca:f4:40:57:63:1e:84:f6:f9:ca:b1:2a:85:
                    f5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:8E:E4:33:B8:DB:AD:39:32:2C:EB:F8:B4:32:F8:26:F0:6A:28:DA
            X509v3 Authority Key Identifier:
                keyid:01:A2:83:E5:CA:46:98:59:1C:4A:A0:12:7A:A7:1B:68:D6:B8:C6:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/01A283E5CA4698591C4AA0127AA71B68D6B8C690.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/01A283E5CA4698591C4AA0127AA71B68D6B8C690.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f3151db-1330-4e70-9cc4-9b8fcd5ed2d2/0/3130332e3136322e31362e302f32332d3234203d3e20313431363336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:b5:af:44:cb:e4:ba:40:dd:35:96:85:f5:e8:d4:1f:9c:80:
         b9:3c:3d:50:78:8a:77:2b:9c:eb:b8:b1:5b:f8:8a:f3:2a:e8:
         c1:3e:e3:45:76:ce:d0:d6:12:7a:d4:6d:c7:6e:4b:6f:60:f2:
         54:ae:38:4f:3f:d2:c8:48:ea:5f:39:fd:a8:94:f1:2b:a3:f2:
         27:fd:e4:ec:41:16:81:ab:b9:73:77:57:f6:d9:6d:9f:85:2c:
         70:9b:77:b7:be:d5:be:0c:2a:ee:e6:b2:c9:bc:58:40:a7:7e:
         70:d8:67:6d:f9:ce:43:1c:32:56:76:22:1b:28:f9:d3:47:97:
         c6:ba:19:63:55:7e:52:33:5a:94:ef:1a:fd:6e:48:22:60:85:
         e0:0b:4e:35:55:fd:83:b0:1d:f4:42:28:31:ff:40:e1:29:f7:
         e2:31:7e:5b:26:7e:ed:74:f3:94:4e:dd:1a:03:7e:40:4b:73:
         e1:d4:36:83:f4:96:88:f4:5a:c4:1b:a1:64:54:89:5c:27:fa:
         0b:ae:de:29:cb:04:4d:98:f8:7b:3d:13:eb:2f:df:69:a4:00:
         f8:99:44:83:45:50:b7:cd:eb:a5:3e:5a:f3:ff:e5:24:30:b0:
         34:64:1c:fb:84:50:9f:2b:63:19:40:70:cb:38:2e:ea:7a:2d:
         37:74:94:8a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUC1weWlVSkNqaadxm195lHte5Kx4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhE
NkI4QzY5MDAeFw0yMzExMTgxMTU1MDJaFw0yNDExMTYxMjAwMDJaMDMxMTAvBgNV
BAMTKEE5OEVFNDMzQjhEQkFEMzkzMjJDRUJGOEI0MzJGODI2RjA2QTI4REEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa93/Hq0pP7WZboCcSQwr9Uv5Q
Tp9sxvGxuoJcakIAT65PDeX5hS+Karu+hA8WrcVTZaYyJ9Y2wHnk8jqfza/ulRm/
hQCpjkpN3QPytAyR6QDKlLBbWaUVwzS6CDqjeEn2m8EVrFTmohY0k2W/XI1Nl6UD
a/Kxmlbkzk4QEbQsX08y92zEPk/krst/kFMFwcQy2grrwd2y6LWiMvGoL0UXsdIO
enKsy5Zh0nBD5g2ix52olCMsk1Qqhin4Td8HkeoWjTm6xdvjT3uLjU9kEgg/II/E
IiKooeUzLEZ967YNThZk9FmASnxA5lACkjkKN7RwyvRAV2MehPb5yrEqhfXJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqY7kM7jbrTkyLOv4tDL4JvBqKNowHwYDVR0j
BBgwFoAUAaKD5cpGmFkcSqASeqcbaNa4xpAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZjMxNTFkYi0xMzMwLTRlNzAtOWNjNC05YjhmY2Q1ZWQyZDIvMC8wMUEyODNFNUNB
NDY5ODU5MUM0QUEwMTI3QUE3MUI2OEQ2QjhDNjkwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDFBMjgzRTVDQTQ2OTg1OTFDNEFBMDEyN0FBNzFCNjhENkI4
QzY5MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhmMzE1MWRiLTEzMzAtNGU3MC05
Y2M0LTliOGZjZDVlZDJkMi8wLzMxMzAzMzJlMzEzNjMyMmUzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzYzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6IQMA0GCSqG
SIb3DQEBCwUAA4IBAQCOta9Ey+S6QN01loX16NQfnIC5PD1QeIp3K5zruLFb+Irz
KujBPuNFds7Q1hJ61G3HbktvYPJUrjhPP9LISOpfOf2olPEro/In/eTsQRaBq7lz
d1f22W2fhSxwm3e3vtW+DCru5rLJvFhAp35w2Gdt+c5DHDJWdiIbKPnTR5fGuhlj
VX5SM1qU7xr9bkgiYIXgC041Vf2DsB30Qigx/0DhKffiMX5bJn7tdPOUTt0aA35A
S3Ph1DaD9JaI9FrEG6FkVIlcJ/oLrt4pywRNmPh7PRPrL99ppAD4mUSDRVC3zeul
Plrz/+UkMLA0ZBz7hFCfK2MZQHDLOC7qei03dJSK
-----END CERTIFICATE-----
Generated at Wed Jun 19 14:25:33 2024 by rpki-client on console-fra.rpki-client.org