Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa
File:                     3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa (raw, json)
Hash identifier:          zNIHPo3B0AztnLh2sdByDfKXNx3nuVQKy51N7w/lXAI=
Subject key identifier:   39:2B:67:30:60:24:91:1A:B4:94:F9:49:EF:9D:A2:06:40:A3:BD:B2
Certificate issuer:       /CN=7550CB259B6FC4F92E6394C525534C077F5C7D27
Certificate serial:       07B29A17B4C582D4853FEA074E56187D6F78C763
Authority key identifier: 75:50:CB:25:9B:6F:C4:F9:2E:63:94:C5:25:53:4C:07:7F:5C:7D:27
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa
Signing time:             Wed 18 Oct 2023 03:00:00 +0000
ROA not before:           Wed 18 Oct 2023 02:55:00 +0000
ROA not after:            Wed 16 Oct 2024 03:00:00 +0000
asID:                     150206
IP address blocks:        103.249.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.crl
                          rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b2:9a:17:b4:c5:82:d4:85:3f:ea:07:4e:56:18:7d:6f:78:c7:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7550CB259B6FC4F92E6394C525534C077F5C7D27
        Validity
            Not Before: Oct 18 02:55:00 2023 GMT
            Not After : Oct 16 03:00:00 2024 GMT
        Subject: CN=392B67306024911AB494F949EF9DA20640A3BDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:fd:dc:98:ee:76:69:85:cf:1d:a3:e1:f3:d3:
                    f6:4f:03:88:33:c9:46:ae:06:fb:f3:62:0e:21:43:
                    5b:de:00:44:52:88:8c:eb:c7:6e:b3:fe:e1:2f:de:
                    07:e4:de:1d:37:12:32:4d:9d:55:4d:4e:bc:cb:81:
                    80:32:7c:9e:0d:02:35:fb:04:ba:25:db:9e:28:c0:
                    76:fa:b7:f0:f5:cc:56:57:7c:84:e5:fc:48:f1:e5:
                    4a:ae:0f:db:9a:7b:c5:dc:99:9c:5f:fa:c4:87:4a:
                    ae:6a:a6:07:2a:b1:fe:27:4f:57:98:24:7a:86:e1:
                    1a:94:61:da:1a:ea:cc:0b:55:bd:05:e3:f6:4d:ea:
                    14:a3:da:a7:a4:7e:48:cc:c3:69:56:1e:ed:1f:fd:
                    5f:aa:c7:83:d7:b0:69:43:0e:70:a3:52:b5:2c:7d:
                    12:8e:19:39:a6:64:e4:23:e6:c2:e4:0f:a1:d6:c2:
                    41:1b:ce:f9:87:30:ce:e1:6b:b2:61:30:d3:10:fb:
                    7b:f8:d4:14:a9:ee:81:f3:93:fd:f7:83:15:25:bb:
                    ad:ab:32:4d:ed:fb:aa:fb:24:56:8f:3f:60:74:1f:
                    96:54:a6:04:eb:cf:74:f5:18:61:d4:59:23:7d:68:
                    11:dc:18:7d:60:bb:fd:53:d0:b5:ba:8d:2e:cc:b1:
                    ea:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:2B:67:30:60:24:91:1A:B4:94:F9:49:EF:9D:A2:06:40:A3:BD:B2
            X509v3 Authority Key Identifier:
                keyid:75:50:CB:25:9B:6F:C4:F9:2E:63:94:C5:25:53:4C:07:7F:5C:7D:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/7550CB259B6FC4F92E6394C525534C077F5C7D27.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7550CB259B6FC4F92E6394C525534C077F5C7D27.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99104c50-40ff-4aaf-a209-be31ceda679b/0/3130332e3234392e31382e302f32332d3234203d3e20313530323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.249.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0f:a0:98:bb:79:05:02:c0:d4:c1:41:0e:4a:eb:96:84:de:00:
         ce:f8:18:31:d1:ad:13:4f:9b:c9:5a:a4:a0:15:3f:f8:33:f7:
         4d:25:ec:eb:6c:bc:ae:67:bb:80:6d:0d:ad:04:a9:e2:0b:4c:
         49:13:a4:82:2e:b3:04:82:78:ee:8c:37:d2:64:fd:91:10:0b:
         04:26:ca:99:1c:56:98:31:f0:0c:06:eb:54:89:78:a1:f8:fa:
         1e:3f:e4:70:63:62:1c:1a:f4:a3:04:ff:11:24:9e:69:af:b1:
         cf:80:9f:81:66:a0:d0:87:66:3f:cf:57:d1:36:2d:b5:d0:49:
         12:bc:53:4a:2e:6d:7f:38:5a:51:74:35:c8:e7:6a:a7:3c:15:
         7e:e1:9d:54:6f:ad:29:e7:9f:e5:61:6f:86:2a:36:aa:08:67:
         94:3f:36:1b:61:51:75:15:08:a4:2d:0c:9d:9b:54:a7:51:c9:
         55:f2:66:ce:6e:c7:04:21:c5:c6:1d:08:c3:27:49:51:cd:a8:
         44:15:eb:83:39:20:f0:6a:f6:e4:4f:40:53:38:a7:81:d1:9b:
         5a:80:56:ac:69:4d:2e:4d:bc:36:3b:d6:0c:37:0a:39:8b:5b:
         1e:57:81:a5:25:c4:5d:f3:03:f3:d3:5d:9f:14:f0:ee:37:27:
         a3:f8:47:55
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUB7KaF7TFgtSFP+oHTlYYfW94x2MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzU1MENCMjU5QjZGQzRGOTJFNjM5NEM1MjU1MzRDMDc3
RjVDN0QyNzAeFw0yMzEwMTgwMjU1MDBaFw0yNDEwMTYwMzAwMDBaMDMxMTAvBgNV
BAMTKDM5MkI2NzMwNjAyNDkxMUFCNDk0Rjk0OUVGOURBMjA2NDBBM0JEQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC/dyY7nZphc8do+Hz0/ZPA4gz
yUauBvvzYg4hQ1veAERSiIzrx26z/uEv3gfk3h03EjJNnVVNTrzLgYAyfJ4NAjX7
BLol254owHb6t/D1zFZXfITl/Ejx5UquD9uae8XcmZxf+sSHSq5qpgcqsf4nT1eY
JHqG4RqUYdoa6swLVb0F4/ZN6hSj2qekfkjMw2lWHu0f/V+qx4PXsGlDDnCjUrUs
fRKOGTmmZOQj5sLkD6HWwkEbzvmHMM7ha7JhMNMQ+3v41BSp7oHzk/33gxUlu62r
Mk3t+6r7JFaPP2B0H5ZUpgTrz3T1GGHUWSN9aBHcGH1gu/1T0LW6jS7MserJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOStnMGAkkRq0lPlJ752iBkCjvbIwHwYDVR0j
BBgwFoAUdVDLJZtvxPkuY5TFJVNMB39cfScwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OTEwNGM1MC00MGZmLTRhYWYtYTIwOS1iZTMxY2VkYTY3OWIvMC83NTUwQ0IyNTlC
NkZDNEY5MkU2Mzk0QzUyNTUzNEMwNzdGNUM3RDI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzU1MENCMjU5QjZGQzRGOTJFNjM5NEM1MjU1MzRDMDc3RjVD
N0QyNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5MTA0YzUwLTQwZmYtNGFhZi1h
MjA5LWJlMzFjZWRhNjc5Yi8wLzMxMzAzMzJlMzIzNDM5MmUzMTM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzIzMDM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/kSMA0GCSqG
SIb3DQEBCwUAA4IBAQAPoJi7eQUCwNTBQQ5K65aE3gDO+Bgx0a0TT5vJWqSgFT/4
M/dNJezrbLyuZ7uAbQ2tBKniC0xJE6SCLrMEgnjujDfSZP2REAsEJsqZHFaYMfAM
ButUiXih+PoeP+RwY2IcGvSjBP8RJJ5pr7HPgJ+BZqDQh2Y/z1fRNi210EkSvFNK
Lm1/OFpRdDXI52qnPBV+4Z1Ub60p55/lYW+GKjaqCGeUPzYbYVF1FQikLQydm1Sn
UclV8mbObscEIcXGHQjDJ0lRzahEFeuDOSDwavbkT0BTOKeB0ZtagFasaU0uTbw2
O9YMNwo5i1seV4GlJcRd8wPz012fFPDuNyej+EdV
-----END CERTIFICATE-----
Generated at Sat Jun 22 20:36:51 2024 by rpki-client on console-ams.rpki-client.org