Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa
File:                     3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa (raw, json)
Hash identifier:          JQnrpdZbIEjOMrJ0gY+bWa1ZiQUgvaTVgcxr/pouQFw=
Subject key identifier:   05:6D:4D:1E:C5:55:C9:3C:30:0A:EC:1C:B7:85:C1:B5:B7:B9:FA:0A
Certificate issuer:       /CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8
Certificate serial:       401E328EB0004B298804748F66C7F87EF0C0BC68
Authority key identifier: 6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa
Signing time:             Sat 12 Oct 2024 06:02:02 +0000
ROA not before:           Sat 12 Oct 2024 05:57:02 +0000
ROA not after:            Sat 11 Oct 2025 06:02:02 +0000
asID:                     138116
IP address blocks:        103.126.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl
                          rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:1e:32:8e:b0:00:4b:29:88:04:74:8f:66:c7:f8:7e:f0:c0:bc:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8
        Validity
            Not Before: Oct 12 05:57:02 2024 GMT
            Not After : Oct 11 06:02:02 2025 GMT
        Subject: CN=056D4D1EC555C93C300AEC1CB785C1B5B7B9FA0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:39:7d:23:f8:4e:0c:71:3f:f4:be:a0:19:
                    07:49:64:65:61:bc:4c:57:b8:08:08:0d:48:66:dd:
                    28:a0:7d:d0:9a:5d:4c:5b:78:8b:b0:3c:8d:ae:39:
                    29:2b:45:07:41:df:22:b4:af:a4:d4:ad:18:7b:72:
                    b2:71:27:1b:6a:ca:8c:d3:1f:f6:67:4e:32:4e:23:
                    af:1b:a6:dc:f2:fe:3e:ad:71:25:29:28:ce:4c:1c:
                    78:0f:78:10:dd:f0:ce:08:19:f2:05:bc:d8:29:12:
                    b4:bc:45:08:25:8c:3a:68:c9:6c:2a:a3:53:2b:86:
                    b9:c7:95:39:d2:bb:2b:3e:b2:79:7d:2f:d2:31:6f:
                    49:d8:13:05:70:2a:8f:e7:2c:2a:4c:b7:14:f0:60:
                    20:4e:4f:bb:4b:4b:c0:f0:76:03:6d:07:f4:d8:93:
                    17:2a:02:b9:3d:98:f3:0d:d7:3e:e5:6b:55:aa:a0:
                    f9:23:9f:0c:70:87:08:9e:00:a9:1f:06:a8:bc:2b:
                    cd:54:fe:d3:c3:76:d3:bd:39:61:ed:65:12:81:83:
                    4d:b5:a4:ce:6f:23:11:96:b8:02:bd:33:99:45:3d:
                    67:58:c2:7d:a1:34:e0:14:41:bb:9e:d6:61:dd:be:
                    18:1e:af:8d:75:ef:e5:60:d1:60:4c:11:7b:ad:97:
                    cd:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:6D:4D:1E:C5:55:C9:3C:30:0A:EC:1C:B7:85:C1:B5:B7:B9:FA:0A
            X509v3 Authority Key Identifier:
                keyid:6D:F8:A8:73:B7:0B:A8:CC:AD:A3:1A:AD:D8:21:5F:F7:D0:2F:47:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DF8A873B70BA8CCADA31AADD8215FF7D02F47E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/97d26de0-68cf-429c-8b0e-8d64b762f824/0/3130332e3132362e3131362e302f32342d3234203d3e20313338313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.126.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:b8:92:fa:49:01:04:92:58:88:fa:54:0d:54:36:9b:d3:91:
         9a:0a:2c:ff:41:2a:62:74:a5:e6:fd:b7:62:1b:8e:04:d2:56:
         50:55:e9:32:9f:13:1b:ad:c5:09:51:4f:ab:0c:49:10:57:83:
         29:70:0a:46:2d:54:9c:17:b5:fb:e9:a9:2d:6a:c8:2b:e6:2a:
         2b:f4:dd:fb:7b:51:35:84:34:0f:b6:48:14:c3:ec:a8:02:f1:
         2d:35:08:30:ca:97:27:e8:06:55:c3:3d:b8:c5:a4:a2:3d:04:
         bc:2d:96:10:d5:db:31:cb:d5:c6:ed:66:11:71:68:69:c9:b8:
         b1:f9:cd:20:36:25:fe:42:ef:64:9b:cc:30:62:29:24:e8:47:
         f7:1b:7a:d6:da:26:8e:38:9b:6e:d5:d2:46:13:12:bc:a9:5c:
         c6:fc:8b:99:2f:49:56:b9:3b:af:c5:fd:94:15:59:06:80:10:
         a7:29:33:d7:ac:3c:4d:4b:60:2c:5d:dd:e7:62:95:66:0c:a0:
         26:4f:66:40:27:f0:9d:e8:3e:4d:9e:77:55:2f:bb:22:84:c0:
         2c:31:a8:5e:3d:56:5f:ee:8c:27:33:a1:58:f1:28:79:44:9f:
         6b:ea:0e:b9:72:39:ff:83:82:f5:6f:7a:34:a0:b4:fd:12:93:
         dc:ea:cb:9c
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQB4yjrAASymIBHSPZsf4fvDAvGgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdE
MDJGNDdFODAeFw0yNDEwMTIwNTU3MDJaFw0yNTEwMTEwNjAyMDJaMDMxMTAvBgNV
BAMTKDA1NkQ0RDFFQzU1NUM5M0MzMDBBRUMxQ0I3ODVDMUI1QjdCOUZBMEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPuTl9I/hODHE/9L6gGQdJZGVh
vExXuAgIDUhm3SigfdCaXUxbeIuwPI2uOSkrRQdB3yK0r6TUrRh7crJxJxtqyozT
H/ZnTjJOI68bptzy/j6tcSUpKM5MHHgPeBDd8M4IGfIFvNgpErS8RQgljDpoyWwq
o1MrhrnHlTnSuys+snl9L9Ixb0nYEwVwKo/nLCpMtxTwYCBOT7tLS8DwdgNtB/TY
kxcqArk9mPMN1z7la1WqoPkjnwxwhwieAKkfBqi8K81U/tPDdtO9OWHtZRKBg021
pM5vIxGWuAK9M5lFPWdYwn2hNOAUQbue1mHdvhger4117+Vg0WBMEXutl82LAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBW1NHsVVyTwwCuwct4XBtbe5+gowHwYDVR0j
BBgwFoAUbfioc7cLqMytoxqt2CFf99AvR+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
N2QyNmRlMC02OGNmLTQyOWMtOGIwZS04ZDY0Yjc2MmY4MjQvMC82REY4QTg3M0I3
MEJBOENDQURBMzFBQUREODIxNUZGN0QwMkY0N0U4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRGOEE4NzNCNzBCQThDQ0FEQTMxQUFERDgyMTVGRjdEMDJG
NDdFOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk3ZDI2ZGUwLTY4Y2YtNDI5Yy04
YjBlLThkNjRiNzYyZjgyNC8wLzMxMzAzMzJlMzEzMjM2MmUzMTMxMzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMxMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnfnQwDQYJ
KoZIhvcNAQELBQADggEBAFu4kvpJAQSSWIj6VA1UNpvTkZoKLP9BKmJ0peb9t2Ib
jgTSVlBV6TKfExutxQlRT6sMSRBXgylwCkYtVJwXtfvpqS1qyCvmKiv03ft7UTWE
NA+2SBTD7KgC8S01CDDKlyfoBlXDPbjFpKI9BLwtlhDV2zHL1cbtZhFxaGnJuLH5
zSA2Jf5C72SbzDBiKSToR/cbetbaJo44m27V0kYTErypXMb8i5kvSVa5O6/F/ZQV
WQaAEKcpM9esPE1LYCxd3edilWYMoCZPZkAn8J3oPk2ed1UvuyKEwCwxqF49Vl/u
jCczoVjxKHlEn2vqDrlyOf+DgvVvejSgtP0Sk9zqy5w=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org