Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
File:                     3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa (raw, json)
Hash identifier:          b7/Qq8bjV0D8BYZjzR1O/qUmag9DM47j5/ej6qfmzqc=
Subject key identifier:   79:18:E3:86:AD:47:9D:95:53:FC:4F:E5:56:8D:BD:6E:D1:38:BE:10
Certificate issuer:       /CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
Certificate serial:       3962FF32E06A7D90165B7B4DA7A44519839A0663
Authority key identifier: C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa
Signing time:             Mon 16 Dec 2024 22:00:00 +0000
ROA not before:           Mon 16 Dec 2024 21:55:00 +0000
ROA not after:            Mon 15 Dec 2025 22:00:00 +0000
asID:                     147170
IP address blocks:        103.178.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl
                          rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 09 Apr 2025 04:59:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:62:ff:32:e0:6a:7d:90:16:5b:7b:4d:a7:a4:45:19:83:9a:06:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70
        Validity
            Not Before: Dec 16 21:55:00 2024 GMT
            Not After : Dec 15 22:00:00 2025 GMT
        Subject: CN=7918E386AD479D9553FC4FE5568DBD6ED138BE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:11:09:7f:33:1c:4a:1b:84:2b:a4:d6:c4:3f:
                    69:eb:42:67:aa:81:98:ed:3d:fe:8c:0a:76:67:9e:
                    47:2b:50:6e:54:f1:67:9a:b8:14:d4:d0:28:8e:f6:
                    23:9d:3a:90:1c:5b:f5:66:34:b9:3a:59:4f:b8:cf:
                    b8:4d:35:bd:66:c3:b5:bf:29:68:c6:ea:0b:fa:85:
                    3c:72:e5:45:fc:f4:31:0f:a6:95:ba:db:53:87:53:
                    40:af:8c:f7:64:c6:7c:ac:3a:a6:66:fc:aa:9d:7f:
                    fb:71:c5:14:8e:01:76:1f:94:87:da:8d:b8:08:7b:
                    8e:37:ad:a5:1e:0e:3e:e4:97:3b:c3:85:f9:8b:ad:
                    2d:ad:12:fc:6e:0c:09:be:85:47:78:43:ba:51:33:
                    6d:7e:23:5b:f6:d5:a7:fe:bd:80:98:42:57:10:d0:
                    d7:d8:5a:1e:26:88:a2:1b:82:77:ba:82:18:2a:3f:
                    0d:de:4a:f3:46:be:1e:be:7a:fc:2a:4b:33:ac:fb:
                    ff:e5:11:1d:0a:ac:9c:6e:d5:d2:1f:7d:0a:a1:66:
                    ad:8c:ca:c4:14:e9:d8:d4:91:bf:58:80:b4:38:4f:
                    1e:03:81:e7:e6:d3:e4:4c:5d:c4:7e:6e:95:b9:54:
                    09:d3:c1:d6:15:50:09:f0:6f:a7:b4:c5:d4:67:3d:
                    82:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:E3:86:AD:47:9D:95:53:FC:4F:E5:56:8D:BD:6E:D1:38:BE:10
            X509v3 Authority Key Identifier:
                keyid:C7:84:C8:EE:6F:7C:E3:C8:47:FC:BD:1C:CD:F2:32:72:00:EF:5C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C784C8EE6F7CE3C847FCBD1CCDF2327200EF5C70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9fde1f0e-231f-44ce-90c3-32acdf9d26c0/0/3130332e3137382e38332e302f32342d3234203d3e20313437313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:b2:ee:aa:a3:87:b9:af:c3:89:83:c6:f6:40:d5:d7:94:9d:
         dc:35:82:81:36:11:7c:04:73:28:ec:c7:a5:94:4b:26:8e:38:
         e6:42:22:82:6e:96:8c:eb:c0:d0:b3:33:83:5b:2a:01:98:c6:
         2a:f5:a7:8b:02:5f:93:c6:2b:77:93:28:c0:32:36:a5:4b:d8:
         93:21:aa:4c:7a:f9:e6:40:0c:eb:58:93:ca:bc:0d:1a:a2:37:
         68:8b:6a:c1:9c:de:21:4f:2d:eb:a3:d0:44:4c:91:6b:16:02:
         e7:e8:ef:83:b2:7e:04:3f:76:72:d9:73:0a:52:6e:11:54:ca:
         00:0c:60:84:a9:27:9f:22:64:f3:0f:f4:66:9b:46:19:93:a7:
         b9:74:fb:82:bf:51:e9:86:36:27:c7:3b:60:14:78:47:40:13:
         ce:69:58:7e:8a:88:0a:e6:da:40:99:fc:6a:e8:29:70:97:85:
         36:21:a9:4d:99:c2:26:88:46:9e:75:a7:f7:38:73:55:5a:dd:
         b7:06:3c:d4:05:44:32:2a:43:40:01:35:e7:1a:46:4f:39:17:
         36:b5:fe:c7:a0:9a:e5:ae:6b:c1:f1:3f:93:ce:d8:e4:4d:e7:
         46:71:b0:15:69:30:68:78:33:31:30:79:dc:e1:91:4c:52:69:
         ce:84:f4:d7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOWL/MuBqfZAWW3tNp6RFGYOaBmMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIw
MEVGNUM3MDAeFw0yNDEyMTYyMTU1MDBaFw0yNTEyMTUyMjAwMDBaMDMxMTAvBgNV
BAMTKDc5MThFMzg2QUQ0NzlEOTU1M0ZDNEZFNTU2OERCRDZFRDEzOEJFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjEQl/MxxKG4QrpNbEP2nrQmeq
gZjtPf6MCnZnnkcrUG5U8WeauBTU0CiO9iOdOpAcW/VmNLk6WU+4z7hNNb1mw7W/
KWjG6gv6hTxy5UX89DEPppW621OHU0CvjPdkxnysOqZm/Kqdf/txxRSOAXYflIfa
jbgIe443raUeDj7klzvDhfmLrS2tEvxuDAm+hUd4Q7pRM21+I1v21af+vYCYQlcQ
0NfYWh4miKIbgne6ghgqPw3eSvNGvh6+evwqSzOs+//lER0KrJxu1dIffQqhZq2M
ysQU6djUkb9YgLQ4Tx4Dgefm0+RMXcR+bpW5VAnTwdYVUAnwb6e0xdRnPYJJAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUeRjjhq1HnZVT/E/lVo29btE4vhAwHwYDVR0j
BBgwFoAUx4TI7m9848hH/L0czfIycgDvXHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZmRlMWYwZS0yMzFmLTQ0Y2UtOTBjMy0zMmFjZGY5ZDI2YzAvMC9DNzg0QzhFRTZG
N0NFM0M4NDdGQ0JEMUNDREYyMzI3MjAwRUY1QzcwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzc4NEM4RUU2RjdDRTNDODQ3RkNCRDFDQ0RGMjMyNzIwMEVG
NUM3MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlmZGUxZjBlLTIzMWYtNDRjZS05
MGMzLTMyYWNkZjlkMjZjMC8wLzMxMzAzMzJlMzEzNzM4MmUzODMzMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM3MzEzNzMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7JTMA0GCSqG
SIb3DQEBCwUAA4IBAQBOsu6qo4e5r8OJg8b2QNXXlJ3cNYKBNhF8BHMo7MellEsm
jjjmQiKCbpaM68DQszODWyoBmMYq9aeLAl+Txit3kyjAMjalS9iTIapMevnmQAzr
WJPKvA0aojdoi2rBnN4hTy3ro9BETJFrFgLn6O+Dsn4EP3Zy2XMKUm4RVMoADGCE
qSefImTzD/Rmm0YZk6e5dPuCv1HphjYnxztgFHhHQBPOaVh+iogK5tpAmfxq6Clw
l4U2IalNmcImiEaedaf3OHNVWt23BjzUBUQyKkNAATXnGkZPORc2tf7HoJrlrmvB
8T+TztjkTedGcbAVaTBoeDMxMHnc4ZFMUmnOhPTX
-----END CERTIFICATE-----
Generated at Sun Apr 6 05:57:02 2025 by rpki-client