Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa
File:                     3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa (raw, json)
Hash identifier:          BLjMDQDkzYen2EW3xea2TvldMIcxYxV0TxQmwmMaIwY=
Subject key identifier:   19:C2:0A:D5:DE:C5:8F:04:89:AF:EB:D5:50:59:4B:BC:BE:33:95:44
Certificate issuer:       /CN=E64D2B2A02A172B64A71F75C753571C841216A21
Certificate serial:       113FE35F8EB7B3EDF7644B0B81C438A7CD03E9F7
Authority key identifier: E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa
Signing time:             Fri 16 Aug 2024 08:54:23 +0000
ROA not before:           Fri 16 Aug 2024 08:49:23 +0000
ROA not after:            Fri 15 Aug 2025 08:54:23 +0000
asID:                     147152
IP address blocks:        103.177.56.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl
                          rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:3f:e3:5f:8e:b7:b3:ed:f7:64:4b:0b:81:c4:38:a7:cd:03:e9:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E64D2B2A02A172B64A71F75C753571C841216A21
        Validity
            Not Before: Aug 16 08:49:23 2024 GMT
            Not After : Aug 15 08:54:23 2025 GMT
        Subject: CN=19C20AD5DEC58F0489AFEBD550594BBCBE339544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ab:8d:38:0b:6c:b4:12:b8:99:ce:05:21:a6:
                    ca:ee:76:5a:28:48:ef:1a:1b:4e:0d:8d:57:10:8d:
                    59:92:e2:d6:ad:71:90:69:0b:ab:8e:57:fe:2e:95:
                    65:ab:7f:4a:34:6c:99:8c:d7:31:bd:ad:61:40:29:
                    52:3e:b6:83:46:ef:e6:dd:eb:86:ab:3c:c7:6a:a3:
                    a2:35:48:a4:bf:44:07:00:65:62:d3:c3:59:d2:24:
                    a9:89:dd:2d:59:fc:d3:bf:55:cc:29:53:2b:87:22:
                    37:61:55:60:43:45:bc:22:8f:c4:17:2e:9f:f7:32:
                    ce:da:f2:8d:39:d1:e2:4e:06:a3:f1:5e:b5:66:7b:
                    06:32:1c:e9:28:71:60:69:eb:a1:b8:35:31:31:52:
                    76:b8:b7:8f:77:32:a9:b1:22:10:cc:7a:8b:ad:54:
                    b1:1b:f6:76:e8:62:07:6f:4a:fa:20:36:ee:53:ca:
                    c3:49:a8:cf:53:30:c4:cf:aa:44:84:3b:5e:a1:ba:
                    85:b9:c8:54:2c:a8:ca:db:a8:66:1e:9f:8a:b6:4b:
                    57:54:d7:53:cb:65:ad:da:e6:fb:02:cf:15:a4:49:
                    13:61:f7:f7:77:44:f9:e1:64:fd:3d:fb:81:c5:33:
                    1e:2e:92:ed:93:bb:a0:6b:7a:38:75:47:b5:9f:9d:
                    eb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C2:0A:D5:DE:C5:8F:04:89:AF:EB:D5:50:59:4B:BC:BE:33:95:44
            X509v3 Authority Key Identifier:
                keyid:E6:4D:2B:2A:02:A1:72:B6:4A:71:F7:5C:75:35:71:C8:41:21:6A:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/E64D2B2A02A172B64A71F75C753571C841216A21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E64D2B2A02A172B64A71F75C753571C841216A21.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96750bf9-9f58-428a-8952-8b5555ef7ca7/0/3130332e3137372e35362e302f32332d3234203d3e20313437313532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.56.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:16:2c:75:11:15:f8:f2:5e:a3:66:dd:7f:89:51:e6:8e:ea:
         ce:da:61:c4:a8:60:c1:3a:82:ec:0a:a7:b4:ac:49:a4:ae:e8:
         3f:c8:48:8f:cb:97:3c:2a:70:fa:04:d5:0f:76:87:64:87:c1:
         0d:4b:7f:09:3a:ff:7e:b3:da:5f:32:1e:42:9a:b0:c1:54:42:
         e9:1e:2f:e2:da:bc:af:e7:36:66:95:1d:8b:2d:74:37:da:39:
         d0:8b:9c:a2:71:80:9c:ef:2c:0e:6e:4a:41:f3:62:02:22:3c:
         22:84:e6:8b:08:6e:66:d2:d3:3b:74:e8:97:04:08:0a:4b:33:
         97:4c:e4:53:85:d6:3d:65:d0:e4:39:cf:b5:b5:31:96:7f:5a:
         41:9d:44:36:ba:cb:0a:eb:ac:7b:3c:2a:1a:41:a1:95:b5:dc:
         75:02:e7:f0:86:40:84:2a:c1:ba:b1:27:fb:9a:4a:b4:c3:66:
         2a:40:c1:20:f0:bb:2c:2c:9a:7c:e9:ce:43:12:da:f3:8c:08:
         74:de:1d:94:cc:20:08:70:82:bb:9a:56:fe:0a:1a:57:ab:13:
         21:63:6e:b9:18:56:ea:5a:d5:46:27:da:ce:10:6c:47:91:b8:
         c3:54:35:51:e7:ad:18:38:b8:3e:38:f5:07:80:d6:50:be:d6:
         0a:8d:f1:4f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUET/jX463s+33ZEsLgcQ4p80D6fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0
MTIxNkEyMTAeFw0yNDA4MTYwODQ5MjNaFw0yNTA4MTUwODU0MjNaMDMxMTAvBgNV
BAMTKDE5QzIwQUQ1REVDNThGMDQ4OUFGRUJENTUwNTk0QkJDQkUzMzk1NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPq404C2y0EriZzgUhpsrudloo
SO8aG04NjVcQjVmS4tatcZBpC6uOV/4ulWWrf0o0bJmM1zG9rWFAKVI+toNG7+bd
64arPMdqo6I1SKS/RAcAZWLTw1nSJKmJ3S1Z/NO/VcwpUyuHIjdhVWBDRbwij8QX
Lp/3Ms7a8o050eJOBqPxXrVmewYyHOkocWBp66G4NTExUna4t493MqmxIhDMeout
VLEb9nboYgdvSvogNu5TysNJqM9TMMTPqkSEO16huoW5yFQsqMrbqGYen4q2S1dU
11PLZa3a5vsCzxWkSRNh9/d3RPnhZP09+4HFMx4uku2Tu6Brejh1R7WfnevJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGcIK1d7FjwSJr+vVUFlLvL4zlUQwHwYDVR0j
BBgwFoAU5k0rKgKhcrZKcfdcdTVxyEEhaiEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
Njc1MGJmOS05ZjU4LTQyOGEtODk1Mi04YjU1NTVlZjdjYTcvMC9FNjREMkIyQTAy
QTE3MkI2NEE3MUY3NUM3NTM1NzFDODQxMjE2QTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTY0RDJCMkEwMkExNzJCNjRBNzFGNzVDNzUzNTcxQzg0MTIx
NkEyMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2NzUwYmY5LTlmNTgtNDI4YS04
OTUyLThiNTU1NWVmN2NhNy8wLzMxMzAzMzJlMzEzNzM3MmUzNTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7E4MA0GCSqG
SIb3DQEBCwUAA4IBAQBfFix1ERX48l6jZt1/iVHmjurO2mHEqGDBOoLsCqe0rEmk
rug/yEiPy5c8KnD6BNUPdodkh8ENS38JOv9+s9pfMh5CmrDBVELpHi/i2ryv5zZm
lR2LLXQ32jnQi5yicYCc7ywObkpB82ICIjwihOaLCG5m0tM7dOiXBAgKSzOXTORT
hdY9ZdDkOc+1tTGWf1pBnUQ2ussK66x7PCoaQaGVtdx1AufwhkCEKsG6sSf7mkq0
w2YqQMEg8LssLJp86c5DEtrzjAh03h2UzCAIcIK7mlb+ChpXqxMhY265GFbqWtVG
J9rOEGxHkbjDVDVR560YOLg+OPUHgNZQvtYKjfFP
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org