Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
File:                     3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa (raw, json)
Hash identifier:          lcb3CST2WQrjBxQeRcu5tZR5ebnjipm5n/soI8xPL4k=
Subject key identifier:   FE:36:E8:66:28:35:36:23:04:5E:98:12:FB:49:59:AF:DE:0D:34:33
Certificate issuer:       /CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
Certificate serial:       509774B093DD3D3A895512CA120AB9529ACD18A4
Authority key identifier: D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa
Signing time:             Wed 10 Jan 2024 03:48:39 +0000
ROA not before:           Wed 10 Jan 2024 03:43:39 +0000
ROA not after:            Wed 08 Jan 2025 03:48:39 +0000
asID:                     141657
IP address blocks:        103.161.228.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl
                          rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:97:74:b0:93:dd:3d:3a:89:55:12:ca:12:0a:b9:52:9a:cd:18:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79DCFAD73DC86775F136607372499D1F2C9E25C
        Validity
            Not Before: Jan 10 03:43:39 2024 GMT
            Not After : Jan  8 03:48:39 2025 GMT
        Subject: CN=FE36E86628353623045E9812FB4959AFDE0D3433
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d0:e6:0e:cc:b8:b8:f6:ec:70:e8:bd:72:b8:
                    a6:bc:67:b9:b1:eb:58:78:0c:e7:c9:43:8e:c9:b7:
                    b3:64:c7:3e:3c:4b:70:87:23:77:7f:13:69:e1:db:
                    ea:3b:ee:37:09:7c:de:7d:23:de:3b:0c:af:89:3b:
                    1c:ec:1b:bd:fd:d0:07:c3:d7:e5:7a:1a:eb:cd:26:
                    26:46:cd:33:af:be:43:c6:04:42:f2:52:26:a5:a6:
                    42:98:55:10:01:62:5f:3d:6b:d3:64:69:59:cb:17:
                    ad:06:84:20:e7:7c:b7:4d:e0:28:5b:1a:82:65:6c:
                    00:46:97:1a:e7:82:1b:dd:3d:1e:e2:f1:98:e7:40:
                    d2:6f:4e:8a:b3:09:52:c6:c5:78:96:0f:0f:3b:a3:
                    1a:dd:73:d2:b9:91:5b:03:6d:99:c1:ad:fb:d3:44:
                    94:48:3f:a6:5e:f3:5d:4d:76:2d:af:88:82:27:a5:
                    ba:a4:fc:9b:2b:96:df:b6:0c:8a:ba:f1:b9:12:30:
                    55:d1:80:41:a6:44:c6:34:71:c7:54:ff:53:42:ae:
                    5d:db:80:57:a0:7b:59:4c:18:0d:8d:a8:fd:63:cc:
                    66:a2:87:e6:32:7e:21:60:d2:89:a8:c3:61:31:9b:
                    f8:93:60:ca:cd:e3:fb:08:6e:47:f1:bf:32:25:c2:
                    78:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:E8:66:28:35:36:23:04:5E:98:12:FB:49:59:AF:DE:0D:34:33
            X509v3 Authority Key Identifier:
                keyid:D7:9D:CF:AD:73:DC:86:77:5F:13:66:07:37:24:99:D1:F2:C9:E2:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/D79DCFAD73DC86775F136607372499D1F2C9E25C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D79DCFAD73DC86775F136607372499D1F2C9E25C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/92e95493-ae76-4cef-a08c-a20dfc9d2619/0/3130332e3136312e3232382e302f32342d3234203d3e20313431363537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:f0:fb:e3:7a:70:fd:67:0a:5a:59:63:13:5b:a5:b0:a3:25:
         95:4b:57:92:8c:59:bc:ab:a9:87:11:fe:c7:0a:96:a4:8e:07:
         86:49:9b:30:d6:20:70:8b:d3:ec:25:25:1e:1f:5d:3e:d9:8e:
         4b:f8:14:fa:78:52:ff:41:87:f2:1d:19:44:47:3e:0d:18:2a:
         3f:0a:eb:ba:43:af:fc:e5:04:24:e9:dc:21:d2:26:c3:b3:f7:
         0f:31:da:3e:43:13:43:94:3c:c1:9f:16:9c:fc:75:2c:7e:11:
         76:85:72:ce:0a:f3:60:2e:36:04:42:fe:25:cb:be:63:c9:75:
         50:94:d9:82:7c:ef:08:54:97:9a:39:a6:7b:5a:85:5e:d9:22:
         06:b3:5c:bd:3f:af:ca:5d:e3:a7:29:ad:6c:fd:11:52:87:3e:
         48:7d:bd:9d:2d:96:ac:15:98:e0:9b:10:9d:e4:b6:b2:67:05:
         58:4f:e3:f8:65:30:86:7d:e1:af:ea:41:73:d2:35:f7:0a:68:
         31:a5:00:9a:72:17:ad:08:ab:45:c1:64:95:75:4c:0c:3b:e5:
         b3:1f:47:e5:b0:9b:47:20:0f:61:e1:af:f3:7d:84:48:99:92:
         9d:5c:1e:ce:a5:57:0b:2d:57:82:54:28:a8:d9:a3:00:5c:f6:
         f2:75:93:e1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUUJd0sJPdPTqJVRLKEgq5UprNGKQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRDc5RENGQUQ3M0RDODY3NzVGMTM2NjA3MzcyNDk5RDFG
MkM5RTI1QzAeFw0yNDAxMTAwMzQzMzlaFw0yNTAxMDgwMzQ4MzlaMDMxMTAvBgNV
BAMTKEZFMzZFODY2MjgzNTM2MjMwNDVFOTgxMkZCNDk1OUFGREUwRDM0MzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80OYOzLi49uxw6L1yuKa8Z7mx
61h4DOfJQ47Jt7Nkxz48S3CHI3d/E2nh2+o77jcJfN59I947DK+JOxzsG7390AfD
1+V6GuvNJiZGzTOvvkPGBELyUialpkKYVRABYl89a9NkaVnLF60GhCDnfLdN4Chb
GoJlbABGlxrnghvdPR7i8ZjnQNJvToqzCVLGxXiWDw87oxrdc9K5kVsDbZnBrfvT
RJRIP6Ze811Ndi2viIInpbqk/Jsrlt+2DIq68bkSMFXRgEGmRMY0ccdU/1NCrl3b
gFege1lMGA2NqP1jzGaih+YyfiFg0omow2Exm/iTYMrN4/sIbkfxvzIlwnhpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU/jboZig1NiMEXpgS+0lZr94NNDMwHwYDVR0j
BBgwFoAU153PrXPchndfE2YHNySZ0fLJ4lwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MmU5NTQ5My1hZTc2LTRjZWYtYTA4Yy1hMjBkZmM5ZDI2MTkvMC9ENzlEQ0ZBRDcz
REM4Njc3NUYxMzY2MDczNzI0OTlEMUYyQzlFMjVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRDc5RENGQUQ3M0RDODY3NzVGMTM2NjA3MzcyNDk5RDFGMkM5
RTI1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyZTk1NDkzLWFlNzYtNGNlZi1h
MDhjLWEyMGRmYzlkMjYxOS8wLzMxMzAzMzJlMzEzNjMxMmUzMjMyMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM1Mzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoeQwDQYJ
KoZIhvcNAQELBQADggEBAEnw++N6cP1nClpZYxNbpbCjJZVLV5KMWbyrqYcR/scK
lqSOB4ZJmzDWIHCL0+wlJR4fXT7Zjkv4FPp4Uv9Bh/IdGURHPg0YKj8K67pDr/zl
BCTp3CHSJsOz9w8x2j5DE0OUPMGfFpz8dSx+EXaFcs4K82AuNgRC/iXLvmPJdVCU
2YJ87whUl5o5pntahV7ZIgazXL0/r8pd46cprWz9EVKHPkh9vZ0tlqwVmOCbEJ3k
trJnBVhP4/hlMIZ94a/qQXPSNfcKaDGlAJpyF60Iq0XBZJV1TAw75bMfR+Wwm0cg
D2Hhr/N9hEiZkp1cHs6lVwstV4JUKKjZowBc9vJ1k+E=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org