Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa
File:                     3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          2PVMT7+JuXdxiFs8M2lHxdM8cnqO4FKkgMmUElPIUPg=
Subject key identifier:   3A:15:7C:0D:07:E4:E5:C3:24:4B:E7:2F:39:64:EF:40:0C:64:9F:4B
Certificate issuer:       /CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96
Certificate serial:       4C5E6602708DAE4E284CDE39212C3D7A7E220242
Authority key identifier: 02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa
Signing time:             Tue 21 Nov 2023 06:21:25 +0000
ROA not before:           Tue 21 Nov 2023 06:16:25 +0000
ROA not after:            Tue 19 Nov 2024 06:21:25 +0000
asID:                     139456
IP address blocks:        103.167.136.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl
                          rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:5e:66:02:70:8d:ae:4e:28:4c:de:39:21:2c:3d:7a:7e:22:02:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0246DD14AF68F5E5512ABD88D1DB7507E6913C96
        Validity
            Not Before: Nov 21 06:16:25 2023 GMT
            Not After : Nov 19 06:21:25 2024 GMT
        Subject: CN=3A157C0D07E4E5C3244BE72F3964EF400C649F4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:a0:88:c5:15:19:99:fc:37:2e:85:af:98:
                    aa:fc:c9:37:78:de:c2:8e:ec:16:b7:5e:97:75:9c:
                    86:e4:4e:28:31:c3:53:d3:39:d1:41:1d:87:1f:e4:
                    d4:01:67:a6:e6:7c:6b:8c:ca:71:b3:c2:12:cf:a3:
                    f7:16:c1:21:01:15:39:91:e8:ce:2b:b4:ac:7a:24:
                    b2:20:e7:2b:b7:64:d9:9a:94:2c:af:9d:09:0a:51:
                    fa:84:39:56:db:5c:a7:ca:3c:f2:c3:d0:27:5e:56:
                    5c:da:80:f6:cd:01:69:fd:22:f1:4a:fa:9c:36:6c:
                    3d:67:9e:20:68:49:3a:d9:f6:57:e3:9a:ad:98:0b:
                    78:52:06:ac:a6:fa:dc:17:c1:1a:71:43:8a:e0:41:
                    56:f0:67:f6:0f:91:3d:32:20:8a:2f:c1:a8:c4:28:
                    5a:4d:23:9c:ae:52:d9:ce:72:2b:41:e5:56:e4:05:
                    7d:37:49:47:40:53:fb:13:f1:f8:e3:f1:5d:cd:5c:
                    20:60:6b:84:72:74:34:d4:d7:81:99:ac:7f:4d:52:
                    a5:bd:50:4e:47:52:ad:05:9b:61:9f:28:72:0a:eb:
                    2a:81:c0:82:61:7b:4f:fb:e2:0d:e9:a6:d3:54:b6:
                    ac:32:ce:d5:4f:f1:2e:ef:2e:ba:6a:72:5f:dd:a0:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:15:7C:0D:07:E4:E5:C3:24:4B:E7:2F:39:64:EF:40:0C:64:9F:4B
            X509v3 Authority Key Identifier:
                keyid:02:46:DD:14:AF:68:F5:E5:51:2A:BD:88:D1:DB:75:07:E6:91:3C:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0246DD14AF68F5E5512ABD88D1DB7507E6913C96.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dfb3992-1d2f-46ce-886a-8e22a32611f8/0/3130332e3136372e3133362e302f32332d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c6:ce:07:9d:41:e6:f4:33:78:85:65:f8:a4:e2:2e:4c:6f:fd:
         20:c9:30:7c:44:e0:16:14:b3:72:9b:ac:85:ae:40:b8:b0:10:
         ee:7c:8f:62:4f:21:d6:74:62:a6:85:3b:5d:45:51:36:48:c3:
         6e:d1:20:d8:09:74:4d:18:be:f3:76:f5:b1:e7:1f:7e:5e:a1:
         3c:4e:26:9a:26:31:c2:48:6b:9a:68:47:c7:12:48:24:f9:47:
         a9:e5:c2:67:5b:a3:92:37:8f:cd:f8:12:7c:f1:be:76:ad:29:
         a8:76:b4:84:26:7f:60:fc:cb:8a:de:92:c9:34:c5:ac:ed:c9:
         59:30:a4:d9:3d:5f:3f:68:f3:18:da:c7:ff:b0:dd:71:53:0f:
         62:82:a8:6c:46:85:5a:14:56:fb:1c:eb:9f:d6:25:34:2c:97:
         d5:b7:42:f1:21:97:cb:b2:64:69:f2:9a:06:d2:cb:81:a4:eb:
         fc:60:3b:ee:29:4e:e9:9e:17:ea:55:fc:6c:a2:e3:5c:65:b0:
         ed:17:60:9c:22:56:f6:5c:a8:21:55:ee:e3:73:83:f2:71:df:
         77:0b:ea:d9:1a:75:62:46:ae:64:54:6d:69:3c:42:91:ab:f8:
         04:39:e3:b2:53:ce:d0:17:8c:fc:fd:7c:4e:2d:55:f7:7d:f7:
         84:6d:77:b1
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTF5mAnCNrk4oTN45ISw9en4iAkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdF
NjkxM0M5NjAeFw0yMzExMjEwNjE2MjVaFw0yNDExMTkwNjIxMjVaMDMxMTAvBgNV
BAMTKDNBMTU3QzBEMDdFNEU1QzMyNDRCRTcyRjM5NjRFRjQwMEM2NDlGNEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIRKCIxRUZmfw3LoWvmKr8yTd4
3sKO7Ba3Xpd1nIbkTigxw1PTOdFBHYcf5NQBZ6bmfGuMynGzwhLPo/cWwSEBFTmR
6M4rtKx6JLIg5yu3ZNmalCyvnQkKUfqEOVbbXKfKPPLD0CdeVlzagPbNAWn9IvFK
+pw2bD1nniBoSTrZ9lfjmq2YC3hSBqym+twXwRpxQ4rgQVbwZ/YPkT0yIIovwajE
KFpNI5yuUtnOcitB5VbkBX03SUdAU/sT8fjj8V3NXCBga4RydDTU14GZrH9NUqW9
UE5HUq0Fm2GfKHIK6yqBwIJhe0/74g3pptNUtqwyztVP8S7vLrpqcl/doIPxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUOhV8DQfk5cMkS+cvOWTvQAxkn0swHwYDVR0j
BBgwFoAUAkbdFK9o9eVRKr2I0dt1B+aRPJYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGZiMzk5Mi0xZDJmLTQ2Y2UtODg2YS04ZTIyYTMyNjExZjgvMC8wMjQ2REQxNEFG
NjhGNUU1NTEyQUJEODhEMURCNzUwN0U2OTEzQzk2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDI0NkREMTRBRjY4RjVFNTUxMkFCRDg4RDFEQjc1MDdFNjkx
M0M5Ni5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkZmIzOTkyLTFkMmYtNDZjZS04
ODZhLThlMjJhMzI2MTFmOC8wLzMxMzAzMzJlMzEzNjM3MmUzMTMzMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM1MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnp4gwDQYJ
KoZIhvcNAQELBQADggEBAMbOB51B5vQzeIVl+KTiLkxv/SDJMHxE4BYUs3KbrIWu
QLiwEO58j2JPIdZ0YqaFO11FUTZIw27RINgJdE0YvvN29bHnH35eoTxOJpomMcJI
a5poR8cSSCT5R6nlwmdbo5I3j834EnzxvnatKah2tIQmf2D8y4reksk0xaztyVkw
pNk9Xz9o8xjax/+w3XFTD2KCqGxGhVoUVvsc65/WJTQsl9W3QvEhl8uyZGnymgbS
y4Gk6/xgO+4pTumeF+pV/Gyi41xlsO0XYJwiVvZcqCFV7uNzg/Jx33cL6tkadWJG
rmRUbWk8QpGr+AQ547JTztAXjPz9fE4tVfd994Rtd7E=
-----END CERTIFICATE-----
Generated at Sun Jun 23 03:50:20 2024 by rpki-client on console-ams.rpki-client.org