Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa
File:                     3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa (raw, json)
Hash identifier:          mwjD2LGHW3Cilo7ziAOiGuvgXcADHTHeFkP5Svz/juQ=
Subject key identifier:   30:45:77:BD:B3:75:1D:43:CF:EB:B3:12:43:BC:64:E1:07:A6:53:24
Certificate issuer:       /CN=6862B9697E607C0C4861E56917A18D87AC33A721
Certificate serial:       049B7FA82BEBC39A905B6EBA717121EE969132C1
Authority key identifier: 68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa
Signing time:             Sun 14 Jan 2024 13:00:00 +0000
ROA not before:           Sun 14 Jan 2024 12:55:00 +0000
ROA not after:            Sun 12 Jan 2025 13:00:00 +0000
asID:                     150504
IP address blocks:        103.60.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl
                          rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:35:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:9b:7f:a8:2b:eb:c3:9a:90:5b:6e:ba:71:71:21:ee:96:91:32:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6862B9697E607C0C4861E56917A18D87AC33A721
        Validity
            Not Before: Jan 14 12:55:00 2024 GMT
            Not After : Jan 12 13:00:00 2025 GMT
        Subject: CN=304577BDB3751D43CFEBB31243BC64E107A65324
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:c8:98:cb:18:fa:48:af:f2:ac:dd:c4:1d:26:
                    7a:42:cd:f3:07:3f:c7:77:ff:e3:24:2b:82:6c:19:
                    48:e5:66:2a:a1:ff:be:bb:04:60:ba:e1:a4:33:81:
                    27:3e:14:f5:4f:93:c7:de:5c:08:95:6c:f3:b6:85:
                    63:f8:88:7e:d2:54:71:4b:75:5a:8f:99:50:61:d4:
                    ab:a3:b3:97:b9:27:0d:1a:20:75:ff:38:cf:41:5f:
                    21:62:60:39:a0:be:ba:37:36:21:4a:4a:b5:31:4f:
                    24:38:b4:0c:a1:ec:de:bf:f5:1c:6b:54:a0:10:20:
                    9e:98:70:4f:35:11:2c:5b:cb:1f:3f:30:6c:08:14:
                    7b:8b:32:2b:1a:ff:12:19:01:bd:6c:66:1c:b9:8c:
                    b9:e3:7c:bf:f8:5f:02:e5:a3:6c:2d:4d:c5:f5:53:
                    2b:5c:55:b0:1e:ca:36:c0:a6:27:67:bc:19:74:73:
                    c2:83:e5:12:50:bc:16:94:20:a2:61:06:e1:ae:1e:
                    8a:4f:16:22:4a:7e:a6:b7:bb:1d:d4:6f:a0:68:bb:
                    30:f3:cb:37:2a:20:58:21:32:f4:7c:08:c2:14:98:
                    b0:00:ed:91:45:a4:69:e7:ef:76:74:98:ef:1c:e9:
                    cf:cf:b4:3b:6a:64:c6:a0:96:82:23:7b:3c:6c:fd:
                    b8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:45:77:BD:B3:75:1D:43:CF:EB:B3:12:43:BC:64:E1:07:A6:53:24
            X509v3 Authority Key Identifier:
                keyid:68:62:B9:69:7E:60:7C:0C:48:61:E5:69:17:A1:8D:87:AC:33:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/6862B9697E607C0C4861E56917A18D87AC33A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6862B9697E607C0C4861E56917A18D87AC33A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925e88bd-75e2-45df-8867-45402fc7c4b1/0/3130332e36302e3233322e302f32342d3234203d3e20313530353034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.60.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:a7:7c:79:94:59:f6:0e:fd:5a:1e:d5:dc:bf:33:41:f1:08:
         6f:9e:ea:c2:1f:0d:13:91:4a:23:6a:1c:45:f2:69:55:72:8b:
         0f:2d:d7:f6:6d:aa:06:bb:fc:5c:fa:9b:a7:58:38:94:c1:69:
         e0:7c:26:b1:7c:b4:4d:99:a9:f5:1e:1c:2d:1a:3f:02:a9:10:
         c6:42:58:70:03:cf:64:56:c1:84:f0:ea:e0:8c:de:ee:11:e7:
         b1:5a:fd:10:3c:71:6a:53:76:53:62:9d:54:ca:d9:72:bd:3b:
         d6:cd:66:df:a2:15:52:00:34:ba:cb:70:d4:76:51:1f:f3:da:
         90:b3:1f:83:90:20:de:f7:c2:d6:83:58:92:45:0f:9b:b9:bc:
         05:0f:ee:99:4e:b9:8b:ea:c3:fe:d7:d1:16:a4:77:6c:b5:70:
         1f:87:54:0a:a4:24:fa:44:c9:fd:79:7d:5e:7b:2e:f0:84:1e:
         1b:a1:ce:bf:4b:8b:d1:14:3f:8b:96:05:21:d5:a4:1a:bb:fb:
         49:a3:e6:21:e0:b5:39:b7:32:dd:f2:0a:03:a5:66:6c:c7:94:
         27:96:ce:c0:55:37:b6:58:ea:08:c9:0c:dd:88:2a:af:27:0d:
         dd:63:91:6f:83:6f:4c:be:55:b2:54:91:11:f6:26:34:53:d1:
         ae:f1:25:dd
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBJt/qCvrw5qQW266cXEh7paRMsEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdB
QzMzQTcyMTAeFw0yNDAxMTQxMjU1MDBaFw0yNTAxMTIxMzAwMDBaMDMxMTAvBgNV
BAMTKDMwNDU3N0JEQjM3NTFENDNDRkVCQjMxMjQzQkM2NEUxMDdBNjUzMjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSyJjLGPpIr/Ks3cQdJnpCzfMH
P8d3/+MkK4JsGUjlZiqh/767BGC64aQzgSc+FPVPk8feXAiVbPO2hWP4iH7SVHFL
dVqPmVBh1Kujs5e5Jw0aIHX/OM9BXyFiYDmgvro3NiFKSrUxTyQ4tAyh7N6/9Rxr
VKAQIJ6YcE81ESxbyx8/MGwIFHuLMisa/xIZAb1sZhy5jLnjfL/4XwLlo2wtTcX1
UytcVbAeyjbApidnvBl0c8KD5RJQvBaUIKJhBuGuHopPFiJKfqa3ux3Ub6BouzDz
yzcqIFghMvR8CMIUmLAA7ZFFpGnn73Z0mO8c6c/PtDtqZMagloIjezxs/bgBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUMEV3vbN1HUPP67MSQ7xk4QemUyQwHwYDVR0j
BBgwFoAUaGK5aX5gfAxIYeVpF6GNh6wzpyEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjVlODhiZC03NWUyLTQ1ZGYtODg2Ny00NTQwMmZjN2M0YjEvMC82ODYyQjk2OTdF
NjA3QzBDNDg2MUU1NjkxN0ExOEQ4N0FDMzNBNzIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjg2MkI5Njk3RTYwN0MwQzQ4NjFFNTY5MTdBMThEODdBQzMz
QTcyMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyNWU4OGJkLTc1ZTItNDVkZi04
ODY3LTQ1NDAyZmM3YzRiMS8wLzMxMzAzMzJlMzYzMDJlMzIzMzMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzUzMDM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzzoMA0GCSqG
SIb3DQEBCwUAA4IBAQBWp3x5lFn2Dv1aHtXcvzNB8QhvnurCHw0TkUojahxF8mlV
cosPLdf2baoGu/xc+punWDiUwWngfCaxfLRNman1HhwtGj8CqRDGQlhwA89kVsGE
8OrgjN7uEeexWv0QPHFqU3ZTYp1UytlyvTvWzWbfohVSADS6y3DUdlEf89qQsx+D
kCDe98LWg1iSRQ+bubwFD+6ZTrmL6sP+19EWpHdstXAfh1QKpCT6RMn9eX1eey7w
hB4boc6/S4vRFD+LlgUh1aQau/tJo+Yh4LU5tzLd8goDpWZsx5Qnls7AVTe2WOoI
yQzdiCqvJw3dY5Fvg29MvlWyVJER9iY0U9Gu8SXd
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org