Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa
File:                     3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa (raw, json)
Hash identifier:          aX7gesHYLCeC6NLf5R/Zua7L+YzwLrYNTuJyg69SwmA=
Subject key identifier:   CA:87:C0:7D:99:74:27:E0:1A:06:BA:6B:6E:63:67:80:AE:A9:28:A5
Certificate issuer:       /CN=6969B3009665224541D322068C9E3444C78F90F9
Certificate serial:       53D18EF7C2F4A8CE380FD767CF4B290F34CFD626
Authority key identifier: 69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa
Signing time:             Sun 05 Nov 2023 08:00:00 +0000
ROA not before:           Sun 05 Nov 2023 07:55:00 +0000
ROA not after:            Sun 03 Nov 2024 08:00:00 +0000
asID:                     139972
IP address blocks:        103.147.246.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl
                          rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d1:8e:f7:c2:f4:a8:ce:38:0f:d7:67:cf:4b:29:0f:34:cf:d6:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6969B3009665224541D322068C9E3444C78F90F9
        Validity
            Not Before: Nov  5 07:55:00 2023 GMT
            Not After : Nov  3 08:00:00 2024 GMT
        Subject: CN=CA87C07D997427E01A06BA6B6E636780AEA928A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:10:05:f9:4b:f4:c6:5c:0a:4d:ff:a3:59:2f:
                    fe:5c:0b:2f:ca:cb:44:72:89:65:21:cc:f5:2a:f5:
                    f6:47:d3:f4:3e:fe:f9:53:e6:38:f1:37:51:6a:1f:
                    d1:0a:ea:3f:0a:fb:0a:41:dc:09:22:5f:49:80:f2:
                    d1:d7:b7:f3:0e:90:1a:4c:69:e6:37:30:be:af:39:
                    26:ca:cf:57:84:b0:07:04:87:80:1a:27:23:5b:71:
                    8b:a5:c4:92:ec:db:2f:f0:4b:c3:1d:33:23:6a:ea:
                    ed:ea:30:b0:d0:b9:8a:a7:2f:09:ae:0b:c7:8e:4b:
                    50:1d:96:09:cb:35:bd:e9:fa:7e:6c:e5:d8:06:03:
                    56:d3:b6:28:7e:e4:67:c8:69:5c:89:08:ed:d4:af:
                    0d:e3:01:a3:09:22:93:d8:bc:69:ac:b7:f2:4e:1a:
                    5b:42:ae:eb:c0:87:6f:f0:c9:8a:cf:19:15:d5:a3:
                    bc:65:1f:15:52:f3:bd:c3:f1:6c:f1:dc:cd:8c:54:
                    e2:38:84:60:8d:a2:5d:aa:f0:53:da:6e:59:1c:1b:
                    d5:c6:bf:e9:bb:0c:a0:0f:7c:80:ea:7f:a3:55:4b:
                    1e:15:0f:86:08:18:9f:5c:f5:e0:4f:e4:a4:1a:a3:
                    52:e9:f2:b5:b5:a4:3a:38:f9:c2:58:f1:e4:93:58:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:87:C0:7D:99:74:27:E0:1A:06:BA:6B:6E:63:67:80:AE:A9:28:A5
            X509v3 Authority Key Identifier:
                keyid:69:69:B3:00:96:65:22:45:41:D3:22:06:8C:9E:34:44:C7:8F:90:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/6969B3009665224541D322068C9E3444C78F90F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6969B3009665224541D322068C9E3444C78F90F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99eebf7c-fe38-46a9-8311-e053fca50dfd/0/3130332e3134372e3234362e302f32342d3234203d3e20313339393732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.147.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:d8:ad:57:8e:ed:ac:0e:ae:bd:35:00:43:e4:f9:4c:be:19:
         ce:2a:a6:7b:61:6d:a5:6b:61:85:74:f5:e0:58:14:7b:90:fa:
         1d:e5:19:38:cb:29:37:d0:55:47:81:16:3e:42:dd:48:52:4e:
         2a:45:6c:2d:5b:52:86:fc:e8:d4:c8:7d:c7:8a:81:2c:7f:4d:
         21:be:13:53:3a:6d:60:5a:9d:c5:04:c3:6f:1b:f0:7f:14:c7:
         48:19:a5:54:42:31:19:65:d8:13:4d:62:96:f2:9c:8d:64:2d:
         36:cc:5f:dc:3a:c8:96:e5:3e:c3:7b:ac:cd:27:77:5a:00:9d:
         63:4f:98:44:fc:c6:aa:18:93:38:1c:fc:46:09:26:d4:cf:f7:
         1e:df:68:3f:0f:e9:91:8f:2d:11:6f:6d:af:9c:70:ab:13:79:
         51:26:0a:ca:67:1d:ad:6f:98:bd:11:91:4f:52:a6:e9:89:4e:
         c0:78:f8:cf:ec:3e:a2:99:9d:31:bf:aa:68:e0:a0:1c:b9:c9:
         dd:cd:b3:47:f7:be:6d:f4:39:d3:b3:69:4b:fe:19:99:0b:fa:
         01:37:80:fa:e1:a0:7b:a8:89:e2:4b:d8:55:88:37:5d:72:f0:
         fa:c8:c9:98:c7:f7:96:b6:d7:64:8d:51:98:f3:90:fa:97:0b:
         8a:e9:ef:f6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUU9GO98L0qM44D9dnz0spDzTP1iYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRD
NzhGOTBGOTAeFw0yMzExMDUwNzU1MDBaFw0yNDExMDMwODAwMDBaMDMxMTAvBgNV
BAMTKENBODdDMDdEOTk3NDI3RTAxQTA2QkE2QjZFNjM2NzgwQUVBOTI4QTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUEAX5S/TGXApN/6NZL/5cCy/K
y0RyiWUhzPUq9fZH0/Q+/vlT5jjxN1FqH9EK6j8K+wpB3AkiX0mA8tHXt/MOkBpM
aeY3ML6vOSbKz1eEsAcEh4AaJyNbcYulxJLs2y/wS8MdMyNq6u3qMLDQuYqnLwmu
C8eOS1AdlgnLNb3p+n5s5dgGA1bTtih+5GfIaVyJCO3Urw3jAaMJIpPYvGmst/JO
GltCruvAh2/wyYrPGRXVo7xlHxVS873D8Wzx3M2MVOI4hGCNol2q8FPablkcG9XG
v+m7DKAPfIDqf6NVSx4VD4YIGJ9c9eBP5KQao1Lp8rW1pDo4+cJY8eSTWC1jAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUyofAfZl0J+AaBrprbmNngK6pKKUwHwYDVR0j
BBgwFoAUaWmzAJZlIkVB0yIGjJ40RMePkPkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OWVlYmY3Yy1mZTM4LTQ2YTktODMxMS1lMDUzZmNhNTBkZmQvMC82OTY5QjMwMDk2
NjUyMjQ1NDFEMzIyMDY4QzlFMzQ0NEM3OEY5MEY5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjk2OUIzMDA5NjY1MjI0NTQxRDMyMjA2OEM5RTM0NDRDNzhG
OTBGOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk5ZWViZjdjLWZlMzgtNDZhOS04
MzExLWUwNTNmY2E1MGRmZC8wLzMxMzAzMzJlMzEzNDM3MmUzMjM0MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM3MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnk/YwDQYJ
KoZIhvcNAQELBQADggEBAJvYrVeO7awOrr01AEPk+Uy+Gc4qpnthbaVrYYV09eBY
FHuQ+h3lGTjLKTfQVUeBFj5C3UhSTipFbC1bUob86NTIfceKgSx/TSG+E1M6bWBa
ncUEw28b8H8Ux0gZpVRCMRll2BNNYpbynI1kLTbMX9w6yJblPsN7rM0nd1oAnWNP
mET8xqoYkzgc/EYJJtTP9x7faD8P6ZGPLRFvba+ccKsTeVEmCspnHa1vmL0RkU9S
pumJTsB4+M/sPqKZnTG/qmjgoBy5yd3Ns0f3vm30OdOzaUv+GZkL+gE3gPrhoHuo
ieJL2FWIN11y8PrIyZjH95a212SNUZjzkPqXC4rp7/Y=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:16 2024 by rpki-client on console-ams.rpki-client.org