Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa
File:                     3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa (raw, json)
Hash identifier:          Yby+RTbIG2/aiUB/1BTtxcxrbo0IJSyyRYPrIqcjGAI=
Subject key identifier:   84:F0:1E:BF:87:BC:7C:F0:2C:C7:05:00:B6:BF:24:0F:15:36:97:C6
Certificate issuer:       /CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
Certificate serial:       1E17EE5F1061AE7593AE38AD99A8D2CFE995D3F3
Authority key identifier: 6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa
Signing time:             Mon 01 Jul 2024 01:05:52 +0000
ROA not before:           Mon 01 Jul 2024 01:00:52 +0000
ROA not after:            Mon 30 Jun 2025 01:05:52 +0000
asID:                     63872
IP address blocks:        103.127.145.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl
                          rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 05:54:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:17:ee:5f:10:61:ae:75:93:ae:38:ad:99:a8:d2:cf:e9:95:d3:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19
        Validity
            Not Before: Jul  1 01:00:52 2024 GMT
            Not After : Jun 30 01:05:52 2025 GMT
        Subject: CN=84F01EBF87BC7CF02CC70500B6BF240F153697C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0a:42:ab:85:21:1d:5e:93:1f:e8:d3:e6:9e:
                    48:4a:6d:50:bb:06:e8:12:c2:77:1a:c3:7b:bc:c3:
                    29:66:c7:50:57:cd:c9:ab:89:84:53:97:9c:a3:e1:
                    48:c3:49:a0:6a:f6:c0:9c:36:c1:b2:81:c4:4c:7d:
                    70:34:4e:34:00:c1:83:95:3d:4e:0a:73:60:b4:97:
                    da:1b:46:d2:a3:a9:80:f2:ed:b5:a5:6d:29:71:73:
                    1b:5d:cb:d6:57:92:62:5b:be:ec:30:ed:e0:9d:41:
                    bd:c9:e7:f0:a0:74:f5:f9:60:1a:c8:c0:1a:79:01:
                    04:d9:df:72:37:8b:c7:37:88:f2:fc:18:bc:16:4d:
                    49:3c:73:46:12:f4:29:a2:c7:53:88:c0:57:8f:4c:
                    29:bb:3d:25:96:c5:20:dc:4c:cd:7f:74:d0:6f:e6:
                    b6:c6:ea:d7:87:93:a9:94:ee:a2:6a:1e:56:a8:e9:
                    bd:47:bf:04:f6:89:e8:20:6a:1d:31:5a:ea:be:e6:
                    8c:02:82:83:05:98:a8:c7:69:80:c3:77:9d:31:e3:
                    a2:10:65:ec:95:22:58:da:52:90:60:2d:51:f6:84:
                    f6:5d:0e:79:f1:93:52:3c:e9:ee:68:2d:d8:8d:36:
                    f1:a8:5d:0c:99:19:52:e0:01:2e:ea:ac:13:5d:65:
                    1c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:1E:BF:87:BC:7C:F0:2C:C7:05:00:B6:BF:24:0F:15:36:97:C6
            X509v3 Authority Key Identifier:
                keyid:6D:6B:AE:DB:FD:BB:AA:46:BF:3D:A2:18:55:70:77:16:27:BE:7B:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6D6BAEDBFDBBAA46BF3DA2185570771627BE7B19.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/96bb333c-982b-4fce-ac81-bc069229e243/0/3130332e3132372e3134352e302f32342d3234203d3e203633383732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.127.145.0/24

    Signature Algorithm: sha256WithRSAEncryption
         87:fb:ca:ae:89:16:92:95:d0:ae:cd:80:25:a6:5a:fb:ec:ed:
         28:34:00:cd:31:dd:a0:46:fb:9c:ab:1a:6e:88:49:49:18:06:
         82:1f:2d:5a:cd:d7:37:df:22:45:ce:22:bb:7f:8c:b4:ce:a8:
         c0:ce:f5:cc:fc:fe:9b:99:1c:54:cb:0a:d9:fd:45:fc:0f:10:
         08:53:06:c4:7d:63:ac:34:d0:15:83:7d:c9:05:71:ed:8f:2e:
         ff:6e:9f:d7:68:82:07:15:c3:1b:5e:48:bb:f8:3d:0a:ff:17:
         09:13:47:04:7e:81:83:e5:35:a5:61:18:f2:ba:f8:f6:f1:4d:
         29:25:e0:77:a6:35:44:f4:95:db:8c:a6:01:35:3b:dd:ba:9a:
         f7:6f:f0:e7:27:25:5c:3f:59:82:20:59:30:86:1c:f7:4f:96:
         f7:3d:9e:19:3d:b4:6c:2e:cf:10:63:e4:fc:56:1b:b5:46:c2:
         74:90:82:93:ab:fc:32:52:72:a1:6e:f3:89:f2:33:a1:ee:02:
         5d:cc:9c:f5:06:8a:ff:c7:98:3f:c1:4b:6e:6e:00:83:f9:be:
         94:47:2b:a7:29:6a:92:df:9d:24:aa:17:f4:5f:4f:96:6d:a6:
         a6:c9:71:2a:a6:2b:f7:b4:5b:d5:fb:8c:39:d2:c7:52:be:9d:
         aa:7d:9a:13
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHhfuXxBhrnWTrjitmajSz+mV0/MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYy
N0JFN0IxOTAeFw0yNDA3MDEwMTAwNTJaFw0yNTA2MzAwMTA1NTJaMDMxMTAvBgNV
BAMTKDg0RjAxRUJGODdCQzdDRjAyQ0M3MDUwMEI2QkYyNDBGMTUzNjk3QzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtCkKrhSEdXpMf6NPmnkhKbVC7
BugSwncaw3u8wylmx1BXzcmriYRTl5yj4UjDSaBq9sCcNsGygcRMfXA0TjQAwYOV
PU4Kc2C0l9obRtKjqYDy7bWlbSlxcxtdy9ZXkmJbvuww7eCdQb3J5/CgdPX5YBrI
wBp5AQTZ33I3i8c3iPL8GLwWTUk8c0YS9Cmix1OIwFePTCm7PSWWxSDcTM1/dNBv
5rbG6teHk6mU7qJqHlao6b1HvwT2ieggah0xWuq+5owCgoMFmKjHaYDDd50x46IQ
ZeyVIljaUpBgLVH2hPZdDnnxk1I86e5oLdiNNvGoXQyZGVLgAS7qrBNdZRzXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUhPAev4e8fPAsxwUAtr8kDxU2l8YwHwYDVR0j
BBgwFoAUbWuu2/27qka/PaIYVXB3Fie+exkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
NmJiMzMzYy05ODJiLTRmY2UtYWM4MS1iYzA2OTIyOWUyNDMvMC82RDZCQUVEQkZE
QkJBQTQ2QkYzREEyMTg1NTcwNzcxNjI3QkU3QjE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkQ2QkFFREJGREJCQUE0NkJGM0RBMjE4NTU3MDc3MTYyN0JF
N0IxOS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk2YmIzMzNjLTk4MmItNGZjZS1h
YzgxLWJjMDY5MjI5ZTI0My8wLzMxMzAzMzJlMzEzMjM3MmUzMTM0MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzgzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3+RMA0GCSqG
SIb3DQEBCwUAA4IBAQCH+8quiRaSldCuzYAlplr77O0oNADNMd2gRvucqxpuiElJ
GAaCHy1azdc33yJFziK7f4y0zqjAzvXM/P6bmRxUywrZ/UX8DxAIUwbEfWOsNNAV
g33JBXHtjy7/bp/XaIIHFcMbXki7+D0K/xcJE0cEfoGD5TWlYRjyuvj28U0pJeB3
pjVE9JXbjKYBNTvdupr3b/DnJyVcP1mCIFkwhhz3T5b3PZ4ZPbRsLs8QY+T8Vhu1
RsJ0kIKTq/wyUnKhbvOJ8jOh7gJdzJz1Bor/x5g/wUtubgCD+b6URyunKWqS350k
qhf0X0+WbaamyXEqpiv3tFvV+4w50sdSvp2qfZoT
-----END CERTIFICATE-----
Generated at Tue Nov 26 04:35:17 2024 by rpki-client on console-fra.rpki-client.org