Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
File:                     AS137368.roa (raw, json)
Hash identifier:          e9qj0Tr7vFTlZVqciuxRNtjtdnzfrIJSChkoto5bEWw=
Subject key identifier:   EA:CE:D0:A5:AB:B5:33:55:06:AF:F6:FB:2D:20:2F:18:41:24:CF:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       472677F7667810FA40982FCC5849C246A847B56D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa
Signing time:             Tue 09 Jan 2024 04:00:03 +0000
ROA not before:           Tue 09 Jan 2024 03:55:03 +0000
ROA not after:            Tue 07 Jan 2025 04:00:03 +0000
asID:                     137368
IP address blocks:        103.116.210.0/24 maxlen: 24
                          2001:df3:ff00::/48 maxlen: 48
                          2001:df5:7b00::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:26:77:f7:66:78:10:fa:40:98:2f:cc:58:49:c2:46:a8:47:b5:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  9 03:55:03 2024 GMT
            Not After : Jan  7 04:00:03 2025 GMT
        Subject: CN=EACED0A5ABB5335506AFF6FB2D202F184124CFE2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:b7:7d:46:41:f4:11:93:2b:cd:d2:14:a7:86:
                    31:61:02:5f:4d:b0:0c:0d:7f:d2:8d:c7:13:c8:56:
                    40:f2:18:0e:73:f4:dd:a4:ac:fb:be:ef:78:29:3b:
                    da:c8:5b:df:b0:f8:d0:ad:f7:a9:d6:6b:2c:d9:27:
                    99:b3:ed:7a:13:d7:e3:4a:fe:22:b4:58:b5:32:7c:
                    c9:9a:a7:41:a8:72:cf:34:6e:b7:15:cd:e3:be:e9:
                    b9:f4:70:27:b7:c3:bb:ba:bf:eb:f0:d1:f3:71:4f:
                    98:be:fe:4e:1c:7c:bf:dc:4d:5b:93:75:fd:17:20:
                    be:86:75:12:8b:19:7e:87:d2:45:ae:86:91:7c:9c:
                    16:17:70:b8:12:96:dd:f4:c6:d8:ef:da:9a:2f:7b:
                    89:ab:a2:e9:cf:f1:13:5e:b7:97:30:54:61:87:b7:
                    1e:47:b5:00:96:74:9d:ea:c0:f8:b0:2b:c0:c8:92:
                    b1:d0:91:4a:1f:bb:48:d9:69:ef:03:ef:a1:2f:dd:
                    43:ae:4a:1b:74:6d:6a:8b:df:40:89:28:f2:e2:27:
                    c0:3e:fc:c0:ea:a5:19:1d:1f:bd:2b:ba:4a:92:9a:
                    4e:e2:3d:b2:c3:90:aa:96:6b:22:b2:a4:ea:01:ca:
                    34:ff:98:15:db:7e:9f:c8:1e:29:d0:71:7b:a0:03:
                    f6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:CE:D0:A5:AB:B5:33:55:06:AF:F6:FB:2D:20:2F:18:41:24:CF:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS137368.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.210.0/24
                IPv6:
                  2001:df3:ff00::/48
                  2001:df5:7b00::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:88:ca:d4:5c:79:d3:82:46:e3:f3:5c:11:3a:32:80:69:b0:
         d0:6e:0a:2e:2f:fb:5e:e3:e6:4e:b4:4d:61:e7:b8:c2:fd:28:
         be:c3:3e:ef:a2:f3:54:4f:4e:67:a6:20:d7:6f:6c:7a:5e:07:
         55:89:4a:93:f9:9e:37:4a:75:91:ce:c8:36:f9:89:63:ec:88:
         e3:cd:f6:a9:d5:a0:c0:b9:e5:4e:9a:dd:cc:7e:22:5a:b2:0f:
         c3:77:fa:35:4f:25:a9:73:64:b0:bb:4e:6f:76:d6:46:40:1c:
         9c:f4:9a:6e:54:ca:f8:47:22:58:8d:61:a5:fe:17:67:1f:cd:
         df:f9:f8:10:81:c5:68:eb:94:f6:b7:dc:b8:c8:88:bd:eb:5e:
         44:50:4d:b6:11:e1:2e:78:c9:19:a7:fe:af:6a:99:55:f3:47:
         bc:42:4a:de:86:89:9c:04:7a:ea:58:85:9b:18:db:a0:fd:13:
         49:49:77:31:16:49:a4:10:3a:53:19:13:c2:a3:05:2b:b9:73:
         27:ce:bb:36:a8:cb:79:9a:a4:8c:d5:19:29:71:29:d8:12:70:
         69:99:af:66:51:f8:8c:2c:c4:08:34:1e:ed:f6:54:0f:b9:a3:
         46:b5:bb:39:47:6d:7e:94:00:71:fa:b3:0b:d9:05:87:d1:ce:
         fd:b9:98:28
-----BEGIN CERTIFICATE-----
MIIE9zCCA9+gAwIBAgIURyZ392Z4EPpAmC/MWEnCRqhHtW0wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTI0MDEwOTAzNTUwM1oX
DTI1MDEwNzA0MDAwM1owMzExMC8GA1UEAxMoRUFDRUQwQTVBQkI1MzM1NTA2QUZG
NkZCMkQyMDJGMTg0MTI0Q0ZFMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBANS3fUZB9BGTK83SFKeGMWECX02wDA1/0o3HE8hWQPIYDnP03aSs+77veCk7
2shb37D40K33qdZrLNknmbPtehPX40r+IrRYtTJ8yZqnQahyzzRutxXN477pufRw
J7fDu7q/6/DR83FPmL7+Thx8v9xNW5N1/RcgvoZ1EosZfofSRa6GkXycFhdwuBKW
3fTG2O/ami97iaui6c/xE163lzBUYYe3Hke1AJZ0nerA+LArwMiSsdCRSh+7SNlp
7wPvoS/dQ65KG3RtaovfQIko8uInwD78wOqlGR0fvSu6SpKaTuI9ssOQqpZrIrKk
6gHKNP+YFdt+n8geKdBxe6AD9r0CAwEAAaOCAeowggHmMB0GA1UdDgQWBBTqztCl
q7UzVQav9vstIC8YQSTP4jAfBgNVHSMEGDAWgBS6j3fSHlj+nJOaa3DiWFYX4YM3
azAOBgNVHQ8BAf8EBAMCB4AwaQYDVR0fBGIwYDBeoFygWoZYcnN5bmM6Ly9yZXBv
LXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9CQThGNzdEMjFFNThGRTlD
OTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCLmNybDB+BggrBgEFBQcBAQRyMHAwbgYI
KwYBBQUHMAKGYnJzeW5jOi8vcnBraS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3
RUY1ODFENjYxMUUyQkI0NjhGN0M3MkZEMUZGMi91bzkzMGg1WV9weVRtbXR3NGxo
V0YtR0ROMnMuY2VyMFQGCCsGAQUFBwELBEgwRjBEBggrBgEFBQcwC4Y4cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vSUROSUMtSUQvMi9BUzEzNzM2OC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA5BggrBgEFBQcBBwEB/wQqMCgw
DAQCAAEwBgMEAGd00jAYBAIAAjASAwcAIAEN8/8AAwcAIAEN9XsAMA0GCSqGSIb3
DQEBCwUAA4IBAQAZiMrUXHnTgkbj81wROjKAabDQbgouL/te4+ZOtE1h57jC/Si+
wz7vovNUT05npiDXb2x6XgdViUqT+Z43SnWRzsg2+Ylj7Ijjzfap1aDAueVOmt3M
fiJasg/Dd/o1TyWpc2Swu05vdtZGQByc9JpuVMr4RyJYjWGl/hdnH83f+fgQgcVo
65T2t9y4yIi9615EUE22EeEueMkZp/6vaplV80e8QkrehomcBHrqWIWbGNug/RNJ
SXcxFkmkEDpTGRPCowUruXMnzrs2qMt5mqSM1RkpcSnYEnBpma9mUfiMLMQINB7t
9lQPuaNGtbs5R21+lABx+rML2QWH0c79uZgo
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:26 2024 by rpki-client on console-ams.rpki-client.org