Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa
File:                     3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          BvednQirMsdE9Wqe4ixR538inDj4noipljhyRht7q1c=
Subject key identifier:   29:B9:C6:14:61:B4:3B:6C:CF:82:9D:32:D7:2A:B7:2E:35:B7:8A:3A
Certificate issuer:       /CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
Certificate serial:       66B1F07BD00BF3C99AF31D4478C45E0822550A6A
Authority key identifier: 5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa
Signing time:             Sat 05 Oct 2024 08:00:02 +0000
ROA not before:           Sat 05 Oct 2024 07:55:02 +0000
ROA not after:            Sat 04 Oct 2025 08:00:02 +0000
asID:                     58369
IP address blocks:        103.156.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl
                          rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b1:f0:7b:d0:0b:f3:c9:9a:f3:1d:44:78:c4:5e:08:22:55:0a:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0
        Validity
            Not Before: Oct  5 07:55:02 2024 GMT
            Not After : Oct  4 08:00:02 2025 GMT
        Subject: CN=29B9C61461B43B6CCF829D32D72AB72E35B78A3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6d:e1:62:23:9f:3c:f4:f0:31:e0:e0:00:f1:
                    7e:39:49:af:bd:ff:88:9b:8d:d4:c2:99:7f:a9:f3:
                    a2:93:18:02:12:3b:f3:04:fd:02:90:24:66:61:fd:
                    ba:5e:9e:2d:1c:ee:10:17:86:53:5f:a7:e7:d6:1b:
                    92:5e:f3:6c:c0:2f:c2:a0:d1:79:1a:c8:22:b7:d7:
                    4f:7c:ed:e5:b6:00:0f:37:29:e5:3a:f7:5a:0a:3d:
                    99:9b:b1:4d:42:0c:27:b5:ac:09:75:d5:94:5c:dd:
                    16:f6:37:23:df:a2:32:00:61:a7:d4:70:31:85:79:
                    c4:ec:8b:9b:2f:92:f6:97:4f:1a:83:a9:e8:52:e3:
                    47:23:a8:84:17:9b:04:ff:0c:23:04:02:82:9d:f3:
                    d0:ab:96:38:4c:43:aa:2f:11:f9:15:c8:1f:5d:cb:
                    ea:9c:b8:81:62:eb:34:4e:69:52:4b:41:24:ab:bd:
                    46:44:f3:3c:86:48:cd:0b:6d:e3:00:27:37:4c:93:
                    65:03:62:23:78:90:3f:0a:72:7f:44:3e:4b:19:05:
                    60:a7:92:19:19:88:96:8b:2d:d1:2b:da:94:01:a2:
                    a0:8a:98:9f:5a:89:76:5d:b8:fe:aa:2f:d2:f8:13:
                    b2:9e:e5:88:dd:b2:f5:69:e2:53:1c:74:c5:ac:22:
                    07:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:B9:C6:14:61:B4:3B:6C:CF:82:9D:32:D7:2A:B7:2E:35:B7:8A:3A
            X509v3 Authority Key Identifier:
                keyid:5E:68:3D:8B:34:5B:B6:E0:F6:3C:D1:A8:F3:2C:3B:5E:CC:B2:B9:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5E683D8B345BB6E0F63CD1A8F32C3B5ECCB2B9B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/93a7f34c-63b8-4973-8226-e10695b25d94/0/3130332e3135362e3231372e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:ea:29:f1:72:0f:80:c8:83:58:c7:ac:d7:44:03:ab:45:be:
         55:88:3f:b1:b6:ac:9b:a6:bf:66:7e:4c:ae:fb:66:0a:8e:5e:
         67:29:1f:ef:4c:95:36:49:6f:58:bf:3b:6a:7a:90:db:9a:bc:
         1f:9e:48:94:e0:d9:07:87:22:3c:be:db:ec:fd:93:28:0c:39:
         41:45:a3:bb:0b:8e:56:71:07:fd:f7:87:3e:4f:d4:fa:93:b7:
         d8:c3:4e:44:68:35:a5:f0:6a:43:d2:37:2c:bf:22:a0:f7:e5:
         1f:3d:ee:9d:12:37:24:2f:bb:9e:4e:b5:f9:d1:41:7a:7d:4b:
         97:dd:9e:98:a4:a7:ef:c9:67:fb:ef:bb:5f:42:e5:50:50:aa:
         1e:3e:ab:af:41:07:36:99:a3:1d:1c:f9:a0:38:c6:7d:5f:49:
         b0:be:96:9c:2b:58:40:66:fe:e3:c7:50:12:64:22:a4:84:30:
         e7:24:6e:12:e2:75:88:66:a0:bb:67:6c:9a:4b:0b:e1:0d:89:
         9a:74:7e:d1:9c:63:81:62:9a:21:af:58:bb:20:43:b7:9f:fb:
         48:c5:29:6b:ef:ee:d3:21:f4:96:9e:00:dc:ed:78:4d:6f:87:
         21:70:f1:49:15:84:bf:96:15:4f:e4:12:ca:eb:f6:92:81:a2:
         95:f9:96:2f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZrHwe9AL88ma8x1EeMReCCJVCmowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVD
Q0IyQjlCMDAeFw0yNDEwMDUwNzU1MDJaFw0yNTEwMDQwODAwMDJaMDMxMTAvBgNV
BAMTKDI5QjlDNjE0NjFCNDNCNkNDRjgyOUQzMkQ3MkFCNzJFMzVCNzhBM0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNbeFiI5889PAx4OAA8X45Sa+9
/4ibjdTCmX+p86KTGAISO/ME/QKQJGZh/bpeni0c7hAXhlNfp+fWG5Je82zAL8Kg
0XkayCK310987eW2AA83KeU691oKPZmbsU1CDCe1rAl11ZRc3Rb2NyPfojIAYafU
cDGFecTsi5svkvaXTxqDqehS40cjqIQXmwT/DCMEAoKd89CrljhMQ6ovEfkVyB9d
y+qcuIFi6zROaVJLQSSrvUZE8zyGSM0LbeMAJzdMk2UDYiN4kD8Kcn9EPksZBWCn
khkZiJaLLdEr2pQBoqCKmJ9aiXZduP6qL9L4E7Ke5YjdsvVp4lMcdMWsIgfbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKbnGFGG0O2zPgp0y1yq3LjW3ijowHwYDVR0j
BBgwFoAUXmg9izRbtuD2PNGo8yw7XsyyubAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
M2E3ZjM0Yy02M2I4LTQ5NzMtODIyNi1lMTA2OTViMjVkOTQvMC81RTY4M0Q4QjM0
NUJCNkUwRjYzQ0QxQThGMzJDM0I1RUNDQjJCOUIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUU2ODNEOEIzNDVCQjZFMEY2M0NEMUE4RjMyQzNCNUVDQ0Iy
QjlCMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkzYTdmMzRjLTYzYjgtNDk3My04
MjI2LWUxMDY5NWIyNWQ5NC8wLzMxMzAzMzJlMzEzNTM2MmUzMjMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNjM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5zZMA0GCSqG
SIb3DQEBCwUAA4IBAQAM6inxcg+AyINYx6zXRAOrRb5ViD+xtqybpr9mfkyu+2YK
jl5nKR/vTJU2SW9YvztqepDbmrwfnkiU4NkHhyI8vtvs/ZMoDDlBRaO7C45WcQf9
94c+T9T6k7fYw05EaDWl8GpD0jcsvyKg9+UfPe6dEjckL7ueTrX50UF6fUuX3Z6Y
pKfvyWf777tfQuVQUKoePquvQQc2maMdHPmgOMZ9X0mwvpacK1hAZv7jx1ASZCKk
hDDnJG4S4nWIZqC7Z2yaSwvhDYmadH7RnGOBYpohr1i7IEO3n/tIxSlr7+7TIfSW
ngDc7XhNb4chcPFJFYS/lhVP5BLK6/aSgaKV+ZYv
-----END CERTIFICATE-----
Generated at Fri Nov 22 00:21:42 2024 by rpki-client on console-fra.rpki-client.org