Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
File:                     3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa (raw, json)
Hash identifier:          0n3I1/VBzu98cTdVFt1qC7Pkofr2BvlEzdvsLd58Im8=
Subject key identifier:   91:A6:C1:47:E0:58:84:B6:63:C8:CB:31:19:4E:0F:78:0C:2E:2B:A5
Certificate issuer:       /CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
Certificate serial:       435FE0C64C20236C531D036DC94137EB3478939C
Authority key identifier: 62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa
Signing time:             Fri 21 Jun 2024 02:00:02 +0000
ROA not before:           Fri 21 Jun 2024 01:55:02 +0000
ROA not after:            Fri 20 Jun 2025 02:00:02 +0000
asID:                     138089
IP address blocks:        103.131.19.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl
                          rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:20:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:5f:e0:c6:4c:20:23:6c:53:1d:03:6d:c9:41:37:eb:34:78:93:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62DD415142DDD76FB165A3918E09BA5891D6ADD0
        Validity
            Not Before: Jun 21 01:55:02 2024 GMT
            Not After : Jun 20 02:00:02 2025 GMT
        Subject: CN=91A6C147E05884B663C8CB31194E0F780C2E2BA5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:85:90:4e:49:bf:15:2f:c8:84:ce:4f:eb:7c:
                    9e:71:72:02:18:ef:20:9e:be:ea:ab:59:7d:fa:33:
                    49:fd:15:47:ad:c6:e7:73:b0:e7:31:8e:1b:14:df:
                    03:aa:35:d0:d3:64:6d:ad:f3:88:32:21:57:85:06:
                    72:73:eb:02:9f:dc:fe:ba:0c:20:dc:ae:b5:36:69:
                    5a:e4:ad:57:a0:34:84:cb:e9:a7:96:f8:65:7d:7b:
                    bc:fd:ac:40:6f:02:2e:10:30:7e:d5:80:03:e6:c5:
                    b3:75:a3:37:71:ea:6d:83:d3:22:08:17:91:77:a7:
                    27:05:e9:9a:1e:55:89:9a:5c:31:f0:05:d5:fd:4b:
                    47:cf:2b:f7:fe:bc:42:98:43:09:fc:6c:71:ad:61:
                    bf:d0:f9:4f:74:f6:11:a8:05:79:7c:5b:53:80:55:
                    47:7e:c8:9f:8d:15:92:e8:eb:50:18:8b:07:93:26:
                    0c:dd:36:a0:b3:f4:fc:8a:d0:8e:be:9d:f4:d7:ab:
                    52:69:79:40:79:01:5b:47:e0:fa:75:be:c5:76:bd:
                    e5:cb:32:75:9a:39:66:f5:8c:42:3d:44:eb:cc:12:
                    2f:58:39:9a:da:9e:4a:ef:ed:36:5e:cd:af:cf:db:
                    97:a7:70:e7:91:c7:38:b0:5f:da:51:02:c0:ac:f6:
                    bb:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:A6:C1:47:E0:58:84:B6:63:C8:CB:31:19:4E:0F:78:0C:2E:2B:A5
            X509v3 Authority Key Identifier:
                keyid:62:DD:41:51:42:DD:D7:6F:B1:65:A3:91:8E:09:BA:58:91:D6:AD:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/62DD415142DDD76FB165A3918E09BA5891D6ADD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/62DD415142DDD76FB165A3918E09BA5891D6ADD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9904f670-7dac-4cf4-991d-50539e3d3f5e/0/3130332e3133312e31392e302f32342d3234203d3e20313338303839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:47:6b:82:09:39:80:d1:c8:82:c7:da:96:c1:39:db:d5:4a:
         9b:6e:b0:bc:8c:59:76:71:60:b0:6e:78:ae:32:f9:95:80:95:
         08:10:31:56:db:97:ac:05:59:be:70:69:a3:2c:e0:b4:2a:2a:
         5f:d9:e7:70:86:13:0e:3d:eb:11:97:6a:17:92:32:47:be:6a:
         ba:ef:c7:a9:03:58:79:4e:43:49:16:9a:f3:2e:5d:82:31:f8:
         08:4d:50:79:92:84:1b:af:8d:5d:45:72:e7:3f:cf:48:b7:ce:
         5a:8c:c5:e5:9a:ab:9a:bc:11:fa:1e:cc:f8:25:d1:fe:07:3f:
         5d:56:90:bd:cd:fb:f4:7e:93:96:40:e4:94:33:c7:f6:c7:a9:
         cf:6e:c7:9a:dd:41:7a:2a:56:bb:61:22:da:ba:29:cd:fe:b9:
         69:45:da:de:b2:d2:d5:6f:cd:ab:e4:b3:cb:64:53:5e:f4:69:
         24:38:36:fa:d6:9c:94:18:e1:43:da:ec:7f:0f:90:fb:6d:cb:
         cd:aa:01:83:be:8e:26:a1:10:cd:9b:0c:f3:54:80:94:8f:5a:
         41:dc:d0:3c:ba:62:23:c6:48:e8:0e:3c:4f:18:83:85:8e:e7:
         27:21:ec:c5:a5:da:f8:4a:a2:b3:3e:21:68:ad:b7:09:9e:a9:
         37:0f:d4:e0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQ1/gxkwgI2xTHQNtyUE36zR4k5wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5
MUQ2QUREMDAeFw0yNDA2MjEwMTU1MDJaFw0yNTA2MjAwMjAwMDJaMDMxMTAvBgNV
BAMTKDkxQTZDMTQ3RTA1ODg0QjY2M0M4Q0IzMTE5NEUwRjc4MEMyRTJCQTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYhZBOSb8VL8iEzk/rfJ5xcgIY
7yCevuqrWX36M0n9FUetxudzsOcxjhsU3wOqNdDTZG2t84gyIVeFBnJz6wKf3P66
DCDcrrU2aVrkrVegNITL6aeW+GV9e7z9rEBvAi4QMH7VgAPmxbN1ozdx6m2D0yII
F5F3pycF6ZoeVYmaXDHwBdX9S0fPK/f+vEKYQwn8bHGtYb/Q+U909hGoBXl8W1OA
VUd+yJ+NFZLo61AYiweTJgzdNqCz9PyK0I6+nfTXq1JpeUB5AVtH4Pp1vsV2veXL
MnWaOWb1jEI9ROvMEi9YOZrankrv7TZeza/P25encOeRxziwX9pRAsCs9rtjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkabBR+BYhLZjyMsxGU4PeAwuK6UwHwYDVR0j
BBgwFoAUYt1BUULd12+xZaORjgm6WJHWrdAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTA0ZjY3MC03ZGFjLTRjZjQtOTkxZC01MDUzOWUzZDNmNWUvMC82MkRENDE1MTQy
RERENzZGQjE2NUEzOTE4RTA5QkE1ODkxRDZBREQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjJERDQxNTE0MkRERDc2RkIxNjVBMzkxOEUwOUJBNTg5MUQ2
QUREMC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5MDRmNjcwLTdkYWMtNGNmNC05
OTFkLTUwNTM5ZTNkM2Y1ZS8wLzMxMzAzMzJlMzEzMzMxMmUzMTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzODM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4MTMA0GCSqG
SIb3DQEBCwUAA4IBAQAqR2uCCTmA0ciCx9qWwTnb1UqbbrC8jFl2cWCwbniuMvmV
gJUIEDFW25esBVm+cGmjLOC0Kipf2edwhhMOPesRl2oXkjJHvmq678epA1h5TkNJ
FprzLl2CMfgITVB5koQbr41dRXLnP89It85ajMXlmquavBH6Hsz4JdH+Bz9dVpC9
zfv0fpOWQOSUM8f2x6nPbsea3UF6Kla7YSLauinN/rlpRdrestLVb82r5LPLZFNe
9GkkODb61pyUGOFD2ux/D5D7bcvNqgGDvo4moRDNmwzzVICUj1pB3NA8umIjxkjo
DjxPGIOFjucnIezFpdr4SqKzPiForbcJnqk3D9Tg
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org