Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa
File:                     3130332e33392e31322e302f32332d3233203d3e203633383237.roa (raw, json)
Hash identifier:          zBk/qnKjk7L1MQfiL9ancyY3N8P2wBn4ZO9y51XCA/k=
Subject key identifier:   B5:AE:69:4F:89:1F:2E:68:37:87:7C:D9:E9:A7:66:CB:9A:D9:96:26
Certificate issuer:       /CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
Certificate serial:       2FB415DE779B4E9D7C49050ECB9C743A7D761849
Authority key identifier: F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa
Signing time:             Sat 28 Oct 2023 04:00:01 +0000
ROA not before:           Sat 28 Oct 2023 03:55:01 +0000
ROA not after:            Sat 26 Oct 2024 04:00:01 +0000
asID:                     63827
IP address blocks:        103.39.12.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl
                          rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 20:30:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:b4:15:de:77:9b:4e:9d:7c:49:05:0e:cb:9c:74:3a:7d:76:18:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F69B637EA94DE4CC9150BDFD5327BE03A033784B
        Validity
            Not Before: Oct 28 03:55:01 2023 GMT
            Not After : Oct 26 04:00:01 2024 GMT
        Subject: CN=B5AE694F891F2E6837877CD9E9A766CB9AD99626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f4:a4:1b:f1:c9:8d:13:42:c1:70:76:62:70:
                    50:a0:0b:5d:e1:c0:4a:2b:22:cb:fe:e0:bd:96:e4:
                    fb:78:2f:08:e4:83:24:fb:49:a0:6f:77:52:06:33:
                    52:3a:0b:ba:49:bb:fe:d6:33:52:d8:00:21:95:5e:
                    fe:2e:81:f6:53:1a:23:3a:ec:bf:9f:c7:44:67:13:
                    93:90:22:c4:1e:fa:92:7c:b0:f9:c9:04:25:64:e5:
                    28:6f:6b:ac:7f:ad:36:d8:80:6a:61:62:2d:58:bc:
                    43:2f:3a:3d:6b:8e:5a:b8:da:c7:51:1b:e0:1f:90:
                    bb:d0:75:01:7f:b4:6d:8e:ff:9a:1c:54:7c:3e:f0:
                    02:be:fc:b1:d5:29:df:c7:b9:44:68:91:69:a5:82:
                    c8:d1:8c:68:d9:9f:74:6c:6f:5d:43:b2:f0:29:2f:
                    ca:38:2d:b4:3a:b9:73:25:e4:70:95:1b:59:5b:0b:
                    d1:f5:42:36:a5:16:96:3e:58:5d:e7:06:d7:ea:df:
                    ae:a1:f9:f1:c3:3d:4d:06:05:2c:5d:40:77:a2:1c:
                    39:19:16:91:94:1f:a4:02:4e:52:88:fb:77:89:c8:
                    25:ae:b9:22:5c:c5:f3:54:45:49:8d:27:ac:a8:c3:
                    43:2b:e0:6c:45:8e:9a:af:94:ee:c2:c6:93:9a:d9:
                    c6:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AE:69:4F:89:1F:2E:68:37:87:7C:D9:E9:A7:66:CB:9A:D9:96:26
            X509v3 Authority Key Identifier:
                keyid:F6:9B:63:7E:A9:4D:E4:CC:91:50:BD:FD:53:27:BE:03:A0:33:78:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/F69B637EA94DE4CC9150BDFD5327BE03A033784B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F69B637EA94DE4CC9150BDFD5327BE03A033784B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91a68712-1d9a-4143-82f1-1c82c33165ea/0/3130332e33392e31322e302f32332d3233203d3e203633383237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:79:91:6b:d2:bf:de:66:e1:e4:d6:fa:00:65:34:7e:86:01:
         04:61:5c:ad:de:36:2a:3c:a6:bd:df:62:d2:67:f9:ba:da:a2:
         c2:6b:d1:cd:9e:4c:2d:cc:2d:3d:a5:16:52:52:10:26:88:bc:
         e0:2b:e0:bb:31:04:f7:52:81:e0:73:22:d9:e7:b8:54:d6:46:
         b0:c5:5e:a1:be:fb:05:b2:1a:cc:81:31:53:d2:78:4d:cc:c7:
         cf:40:0a:0b:90:f4:a4:82:e2:63:00:82:a5:7a:b2:f5:46:92:
         fa:7c:a9:62:0f:07:be:b1:cd:15:e4:fa:99:2b:0b:bb:3d:65:
         01:7d:a6:9f:c7:1c:40:ae:a5:17:c7:a0:19:05:b7:79:64:43:
         4a:5d:8f:09:92:87:c5:53:ed:b0:84:63:a9:cc:e2:ad:a6:fc:
         40:40:ee:7f:b5:3a:da:ae:79:52:91:27:d5:39:20:c3:cd:c0:
         4d:cc:50:b9:39:16:43:88:6a:85:87:ff:59:97:ed:eb:fa:80:
         9e:2f:3b:8f:6f:69:30:84:88:82:77:51:b6:36:5f:a9:fb:c3:
         37:46:27:a7:39:a7:53:1e:1a:e2:0a:75:0c:17:b1:a2:c0:88:
         09:2b:04:db:99:30:6f:80:c1:47:4d:e4:7e:2d:35:91:00:c5:
         1e:4b:ed:a9
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUL7QV3nebTp18SQUOy5x0On12GEkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNB
MDMzNzg0QjAeFw0yMzEwMjgwMzU1MDFaFw0yNDEwMjYwNDAwMDFaMDMxMTAvBgNV
BAMTKEI1QUU2OTRGODkxRjJFNjgzNzg3N0NEOUU5QTc2NkNCOUFEOTk2MjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc9KQb8cmNE0LBcHZicFCgC13h
wEorIsv+4L2W5Pt4LwjkgyT7SaBvd1IGM1I6C7pJu/7WM1LYACGVXv4ugfZTGiM6
7L+fx0RnE5OQIsQe+pJ8sPnJBCVk5Shva6x/rTbYgGphYi1YvEMvOj1rjlq42sdR
G+AfkLvQdQF/tG2O/5ocVHw+8AK+/LHVKd/HuURokWmlgsjRjGjZn3Rsb11DsvAp
L8o4LbQ6uXMl5HCVG1lbC9H1QjalFpY+WF3nBtfq366h+fHDPU0GBSxdQHeiHDkZ
FpGUH6QCTlKI+3eJyCWuuSJcxfNURUmNJ6yow0Mr4GxFjpqvlO7CxpOa2cbjAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUta5pT4kfLmg3h3zZ6admy5rZliYwHwYDVR0j
BBgwFoAU9ptjfqlN5MyRUL39Uye+A6AzeEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MWE2ODcxMi0xZDlhLTQxNDMtODJmMS0xYzgyYzMzMTY1ZWEvMC9GNjlCNjM3RUE5
NERFNENDOTE1MEJERkQ1MzI3QkUwM0EwMzM3ODRCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjY5QjYzN0VBOTRERTRDQzkxNTBCREZENTMyN0JFMDNBMDMz
Nzg0Qi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxYTY4NzEyLTFkOWEtNDE0My04
MmYxLTFjODJjMzMxNjVlYS8wLzMxMzAzMzJlMzMzOTJlMzEzMjJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzODMyMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJwwwDQYJKoZIhvcN
AQELBQADggEBAJR5kWvSv95m4eTW+gBlNH6GAQRhXK3eNio8pr3fYtJn+braosJr
0c2eTC3MLT2lFlJSECaIvOAr4LsxBPdSgeBzItnnuFTWRrDFXqG++wWyGsyBMVPS
eE3Mx89ACguQ9KSC4mMAgqV6svVGkvp8qWIPB76xzRXk+pkrC7s9ZQF9pp/HHECu
pRfHoBkFt3lkQ0pdjwmSh8VT7bCEY6nM4q2m/EBA7n+1OtqueVKRJ9U5IMPNwE3M
ULk5FkOIaoWH/1mX7ev6gJ4vO49vaTCEiIJ3UbY2X6n7wzdGJ6c5p1MeGuIKdQwX
saLAiAkrBNuZMG+AwUdN5H4tNZEAxR5L7ak=
-----END CERTIFICATE-----
Generated at Thu Jun 20 17:47:54 2024 by rpki-client on console-fra.rpki-client.org