Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
File:                     3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa (raw, json)
Hash identifier:          qNRGNwVJSjjY42PMMRnwHIe4s5qB7T+RF5+1U4jgPXQ=
Subject key identifier:   DA:A5:CB:BE:3A:CE:FB:D6:93:D4:E8:2B:FC:72:5E:84:97:BB:44:72
Certificate issuer:       /CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
Certificate serial:       44A76018CD89CAFEC10E58D6F442D9D1FD8B384A
Authority key identifier: 13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa
Signing time:             Tue 08 Aug 2023 01:00:00 +0000
ROA not before:           Tue 08 Aug 2023 00:55:00 +0000
ROA not after:            Tue 06 Aug 2024 01:00:00 +0000
asID:                     139969
IP address blocks:        103.147.220.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl
                          rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 07:28:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:a7:60:18:cd:89:ca:fe:c1:0e:58:d6:f4:42:d9:d1:fd:8b:38:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13D80EA535A5CA2E0E00F7C776A471C5E5A5A479
        Validity
            Not Before: Aug  8 00:55:00 2023 GMT
            Not After : Aug  6 01:00:00 2024 GMT
        Subject: CN=DAA5CBBE3ACEFBD693D4E82BFC725E8497BB4472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:7d:0d:5c:db:4d:a3:10:01:95:ee:a1:ff:
                    7c:ab:75:cf:69:22:fe:18:8a:c0:f4:d3:ca:c1:0e:
                    c0:97:31:db:58:4c:56:8b:e9:45:29:29:1b:73:fb:
                    36:ae:73:5d:9d:41:f8:d9:7c:b0:8f:43:18:c2:86:
                    7a:53:4c:e2:7d:c5:54:c4:89:75:9c:e7:5b:74:fd:
                    a3:e1:a1:44:de:75:1e:28:28:93:b4:4c:00:c9:8f:
                    ad:10:ab:fd:f0:cb:d7:bc:61:5f:13:35:13:85:e6:
                    50:b5:71:e8:ac:b2:cb:8e:f5:76:32:9b:49:ae:44:
                    f7:32:58:8b:e1:d5:c8:a6:42:ce:cf:bb:96:7a:be:
                    8c:2a:79:ef:13:3a:8e:2d:4d:7b:59:5b:46:15:ee:
                    f1:84:da:9a:b3:b6:d7:59:8b:b5:1c:d2:f0:2d:7c:
                    8b:65:26:84:cc:c9:aa:3a:05:47:e1:6a:b9:d1:7c:
                    ed:d5:70:17:2a:be:9a:ae:04:22:d2:ad:f7:a0:e0:
                    e9:60:c2:8b:0c:0c:eb:e0:f3:ff:e9:df:e0:98:da:
                    90:54:7d:15:99:e9:4c:fc:31:79:67:ca:b0:db:eb:
                    e0:9c:36:93:2f:49:ba:02:40:89:14:c5:5e:f5:ec:
                    08:b4:01:9a:94:94:a7:d0:14:db:af:0c:32:87:3e:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:A5:CB:BE:3A:CE:FB:D6:93:D4:E8:2B:FC:72:5E:84:97:BB:44:72
            X509v3 Authority Key Identifier:
                keyid:13:D8:0E:A5:35:A5:CA:2E:0E:00:F7:C7:76:A4:71:C5:E5:A5:A4:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13D80EA535A5CA2E0E00F7C776A471C5E5A5A479.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/95c321eb-15f8-4646-b053-f199d6fa7f53/0/3130332e3134372e3232302e302f32332d3234203d3e20313339393639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         90:82:7c:95:2e:7d:eb:da:4a:8e:9c:63:20:5d:69:1d:47:e2:
         d7:b1:b3:15:5b:2a:e5:d7:f5:85:cc:ba:b8:23:ae:dc:51:ca:
         50:b2:43:99:a3:2e:0a:13:d4:86:dc:01:01:09:2e:3c:51:dc:
         33:cb:05:ab:a2:3e:5a:e3:58:1e:47:59:b1:04:03:e8:16:18:
         68:fe:f4:45:33:5e:0d:00:6b:2c:d8:0a:2b:ef:83:e3:3c:0d:
         23:4d:0c:c8:28:ad:b0:db:2f:2b:62:18:96:4f:35:d2:c0:dc:
         99:0e:d6:76:cc:b9:04:e4:4f:0e:45:fb:56:47:e7:d7:c1:fe:
         62:e7:7a:23:d1:c1:54:44:04:b9:fe:f1:c8:1b:44:44:26:70:
         93:c6:3c:81:f8:1d:79:2b:c4:3b:55:46:9a:99:2d:87:10:9a:
         2f:1d:90:33:bd:42:ae:9f:50:35:1e:3c:8b:ea:ed:3e:29:fc:
         0f:47:71:25:d5:6d:82:60:49:f5:90:25:2b:67:d9:34:d8:08:
         32:50:54:04:ed:4a:b3:90:18:71:6e:3d:80:3b:7f:ff:ef:0b:
         de:35:c1:c4:fb:97:d7:22:40:bf:0d:eb:76:ce:16:4d:aa:2b:
         06:a8:c8:1f:4e:44:c7:70:6a:38:0d:67:32:12:9f:70:bc:4d:
         1a:29:64:50
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURKdgGM2Jyv7BDljW9ELZ0f2LOEowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVF
NUE1QTQ3OTAeFw0yMzA4MDgwMDU1MDBaFw0yNDA4MDYwMTAwMDBaMDMxMTAvBgNV
BAMTKERBQTVDQkJFM0FDRUZCRDY5M0Q0RTgyQkZDNzI1RTg0OTdCQjQ0NzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKAH0NXNtNoxABle6h/3yrdc9p
Iv4YisD008rBDsCXMdtYTFaL6UUpKRtz+zauc12dQfjZfLCPQxjChnpTTOJ9xVTE
iXWc51t0/aPhoUTedR4oKJO0TADJj60Qq/3wy9e8YV8TNROF5lC1ceisssuO9XYy
m0muRPcyWIvh1cimQs7Pu5Z6vowqee8TOo4tTXtZW0YV7vGE2pqzttdZi7Uc0vAt
fItlJoTMyao6BUfharnRfO3VcBcqvpquBCLSrfeg4OlgwosMDOvg8//p3+CY2pBU
fRWZ6Uz8MXlnyrDb6+CcNpMvSboCQIkUxV717Ai0AZqUlKfQFNuvDDKHPtopAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU2qXLvjrO+9aT1Ogr/HJehJe7RHIwHwYDVR0j
BBgwFoAUE9gOpTWlyi4OAPfHdqRxxeWlpHkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NWMzMjFlYi0xNWY4LTQ2NDYtYjA1My1mMTk5ZDZmYTdmNTMvMC8xM0Q4MEVBNTM1
QTVDQTJFMEUwMEY3Qzc3NkE0NzFDNUU1QTVBNDc5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTNEODBFQTUzNUE1Q0EyRTBFMDBGN0M3NzZBNDcxQzVFNUE1
QTQ3OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk1YzMyMWViLTE1ZjgtNDY0Ni1i
MDUzLWYxOTlkNmZhN2Y1My8wLzMxMzAzMzJlMzEzNDM3MmUzMjMyMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM2Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnk9wwDQYJ
KoZIhvcNAQELBQADggEBAJCCfJUufevaSo6cYyBdaR1H4texsxVbKuXX9YXMurgj
rtxRylCyQ5mjLgoT1IbcAQEJLjxR3DPLBauiPlrjWB5HWbEEA+gWGGj+9EUzXg0A
ayzYCivvg+M8DSNNDMgorbDbLytiGJZPNdLA3JkO1nbMuQTkTw5F+1ZH59fB/mLn
eiPRwVREBLn+8cgbREQmcJPGPIH4HXkrxDtVRpqZLYcQmi8dkDO9Qq6fUDUePIvq
7T4p/A9HcSXVbYJgSfWQJStn2TTYCDJQVATtSrOQGHFuPYA7f//vC941wcT7l9ci
QL8N63bOFk2qKwaoyB9ORMdwajgNZzISn3C8TRopZFA=
-----END CERTIFICATE-----
Generated at Sat Jun 1 05:48:31 2024 by rpki-client on console-fra.rpki-client.org