Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
File:                     3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (raw, json)
Hash identifier:          U4Z+bwQe4/9hzVZXd08kiuviVZg4+Wj747umijHOWT8=
Subject key identifier:   50:9E:57:54:4C:4D:B3:69:C1:B3:75:AE:6A:E9:8D:D2:37:69:68:21
Certificate issuer:       /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
Certificate serial:       05738A1ABD67E347F755BCEE43F0752259FBB11B
Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa
Signing time:             Fri 01 Mar 2024 02:01:50 +0000
ROA not before:           Fri 01 Mar 2024 01:56:50 +0000
ROA not after:            Fri 28 Feb 2025 02:01:50 +0000
asID:                     150926
IP address blocks:        103.203.90.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl
                          rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:73:8a:1a:bd:67:e3:47:f7:55:bc:ee:43:f0:75:22:59:fb:b1:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A
        Validity
            Not Before: Mar  1 01:56:50 2024 GMT
            Not After : Feb 28 02:01:50 2025 GMT
        Subject: CN=509E57544C4DB369C1B375AE6AE98DD237696821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:9d:ec:9f:27:de:f9:a2:bc:20:76:1c:aa:
                    7b:50:04:04:53:96:d8:76:a1:b0:8a:08:e9:4d:b4:
                    1a:10:5e:b5:0d:be:37:4d:bb:e9:c3:5e:6d:24:1a:
                    92:0e:9d:dc:ce:d9:38:29:f6:8d:2e:fd:cf:41:18:
                    3f:4e:1b:96:d4:a8:40:e2:6b:14:23:5f:34:1f:fd:
                    dc:7a:b0:c4:78:a7:68:35:e5:71:a2:15:25:2f:a9:
                    b0:ca:e9:74:5f:1b:c7:fe:b0:30:b0:04:ac:52:ae:
                    50:cb:c3:15:eb:d0:64:d2:30:ed:40:e1:de:de:8c:
                    1a:f9:88:22:c2:e5:2c:9c:a0:71:6a:0b:fb:6e:30:
                    41:52:7f:dd:79:a1:42:28:58:d9:37:33:61:c0:8d:
                    65:27:fc:bb:49:2c:35:91:27:f9:56:50:c5:b1:df:
                    55:cd:f7:f9:d2:ad:99:6e:a6:eb:17:ee:e3:51:49:
                    65:3e:b5:0e:2b:55:51:19:7b:a0:f2:39:7a:24:0f:
                    24:13:c7:dd:8f:50:e5:2b:45:58:ee:68:d3:22:ab:
                    e3:5d:fe:73:1e:a4:d4:fa:83:71:6e:17:95:64:c5:
                    4e:5c:a4:4b:05:8d:c0:f1:0e:ca:3a:ef:a3:a7:06:
                    14:cf:b5:45:3c:41:58:38:28:66:0b:06:55:d3:67:
                    d4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:9E:57:54:4C:4D:B3:69:C1:B3:75:AE:6A:E9:8D:D2:37:69:68:21
            X509v3 Authority Key Identifier:
                keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.203.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:fe:87:4c:d9:62:13:ad:81:c3:df:d1:4f:99:cc:63:7c:
         e5:d3:2d:00:4b:1b:0d:87:54:e2:64:a7:2a:07:7e:4c:ba:fa:
         44:6c:17:a1:bb:53:c7:99:82:a0:4f:de:48:d5:b7:51:a8:13:
         e0:c9:3a:0f:0e:df:54:4c:30:bc:23:d7:e3:4f:30:da:71:e9:
         c3:7b:66:49:76:df:95:96:f5:56:c8:83:9d:05:05:ad:c1:c0:
         1c:01:32:a0:92:34:78:b9:fd:18:01:d9:a1:2b:59:6f:8a:43:
         65:ae:0a:ff:37:7d:f5:20:e2:2f:62:ac:75:89:a9:09:de:bb:
         22:98:d1:21:20:93:37:bd:d0:5b:8f:1a:f4:1b:2c:ed:cb:59:
         b9:86:83:4a:15:a6:b5:0d:52:5d:e8:95:2c:1c:68:f6:a4:e1:
         6b:cf:a3:f2:ce:3a:26:78:50:19:f7:d5:09:a5:3c:e1:08:30:
         f3:5f:7f:1a:0d:3c:33:85:55:f5:3c:55:b2:a4:29:e8:52:b2:
         c2:6b:80:a5:0d:a9:61:3e:e8:0b:30:9a:70:ae:1f:87:ed:e5:
         36:a9:2e:86:1d:32:f3:ed:3c:b2:fd:89:53:c4:1c:93:8f:6c:
         37:16:60:73:1f:c9:ef:35:cb:94:f7:18:9f:0a:34:be:df:54:
         c1:1d:7a:0e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUBXOKGr1n40f3VbzuQ/B1Iln7sRswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4
RTVEQjMxQTAeFw0yNDAzMDEwMTU2NTBaFw0yNTAyMjgwMjAxNTBaMDMxMTAvBgNV
BAMTKDUwOUU1NzU0NEM0REIzNjlDMUIzNzVBRTZBRTk4REQyMzc2OTY4MjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2cp3snyfe+aK8IHYcqntQBART
lth2obCKCOlNtBoQXrUNvjdNu+nDXm0kGpIOndzO2Tgp9o0u/c9BGD9OG5bUqEDi
axQjXzQf/dx6sMR4p2g15XGiFSUvqbDK6XRfG8f+sDCwBKxSrlDLwxXr0GTSMO1A
4d7ejBr5iCLC5SycoHFqC/tuMEFSf915oUIoWNk3M2HAjWUn/LtJLDWRJ/lWUMWx
31XN9/nSrZlupusX7uNRSWU+tQ4rVVEZe6DyOXokDyQTx92PUOUrRVjuaNMiq+Nd
/nMepNT6g3FuF5VkxU5cpEsFjcDxDso676OnBhTPtUU8QVg4KGYLBlXTZ9SHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUUJ5XVExNs2nBs3WuaumN0jdpaCEwHwYDVR0j
BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF
N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE
QjMxQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlhMDEyOWE4LTI3ZTgtNDA0Ni04
OTg5LTg2NWIyNTdlYTZjYS8wLzMxMzAzMzJlMzIzMDMzMmUzOTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ8taMA0GCSqG
SIb3DQEBCwUAA4IBAQCJyv6HTNliE62Bw9/RT5nMY3zl0y0ASxsNh1TiZKcqB35M
uvpEbBehu1PHmYKgT95I1bdRqBPgyToPDt9UTDC8I9fjTzDacenDe2ZJdt+VlvVW
yIOdBQWtwcAcATKgkjR4uf0YAdmhK1lvikNlrgr/N331IOIvYqx1iakJ3rsimNEh
IJM3vdBbjxr0Gyzty1m5hoNKFaa1DVJd6JUsHGj2pOFrz6PyzjomeFAZ99UJpTzh
CDDzX38aDTwzhVX1PFWypCnoUrLCa4ClDalhPugLMJpwrh+H7eU2qS6GHTLz7Tyy
/YlTxByTj2w3FmBzH8nvNcuU9xifCjS+31TBHXoO
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org