Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa
File:                     3130332e38352e35322e302f32342d3234203d3e20313530353535.roa (raw, json)
Hash identifier:          YVFxjyh9JwGOTUYvhKqPgehL2iwip/UIqtCfx2Ej+po=
Subject key identifier:   A7:48:3F:CA:81:A6:74:2F:81:E4:2F:E9:4E:57:5A:99:78:92:B5:8A
Certificate issuer:       /CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
Certificate serial:       64411DB173A341BB5282895B816CD14309C99D2B
Authority key identifier: EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa
Signing time:             Thu 11 Jul 2024 04:00:00 +0000
ROA not before:           Thu 11 Jul 2024 03:55:00 +0000
ROA not after:            Thu 10 Jul 2025 04:00:00 +0000
asID:                     150555
IP address blocks:        103.85.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl
                          rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:41:1d:b1:73:a3:41:bb:52:82:89:5b:81:6c:d1:43:09:c9:9d:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE12F179A5D1F52EC033677282AE7E2E72E0F2C3
        Validity
            Not Before: Jul 11 03:55:00 2024 GMT
            Not After : Jul 10 04:00:00 2025 GMT
        Subject: CN=A7483FCA81A6742F81E42FE94E575A997892B58A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a4:a0:31:fc:2b:f3:ac:1e:48:16:20:dd:6d:
                    41:67:ac:ac:2c:78:8e:9b:a6:22:28:6f:e1:56:03:
                    d9:72:07:f4:ab:30:ad:0a:55:b2:88:b2:36:6a:b7:
                    7b:c6:c9:f7:0b:f7:53:59:1f:d3:16:9a:fc:47:32:
                    16:22:2b:e4:c5:c8:48:75:96:ce:74:b2:66:12:30:
                    d0:dd:6f:de:0c:8a:47:93:5e:e6:4d:a7:26:6f:fe:
                    cf:1b:74:74:9a:f5:7b:13:86:2c:64:d8:6d:44:f4:
                    96:a0:b9:34:bb:75:0f:24:9f:7b:0e:ab:08:28:4a:
                    e9:53:4c:ac:10:21:48:97:12:16:3f:f7:2f:41:9f:
                    af:bd:5b:a2:f4:65:05:c0:66:40:cf:b1:79:fe:62:
                    f2:a9:a3:a3:f4:17:24:1d:fd:91:cb:b6:84:0b:9b:
                    45:02:8d:ed:8a:c9:58:63:35:70:05:12:f8:9d:10:
                    80:d5:90:cc:6c:1c:87:f1:76:1e:3b:f3:05:58:20:
                    de:39:8a:b8:ed:11:8f:3e:78:2c:45:98:b2:2d:5c:
                    77:a2:ee:8a:90:e3:8f:3a:77:ce:9a:a4:ad:17:4d:
                    a1:6a:00:30:67:c5:f6:e3:00:c8:4b:c6:39:7a:af:
                    50:5c:42:9a:fd:08:cf:58:3a:a1:9f:9c:1f:50:34:
                    0c:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:48:3F:CA:81:A6:74:2F:81:E4:2F:E9:4E:57:5A:99:78:92:B5:8A
            X509v3 Authority Key Identifier:
                keyid:EE:12:F1:79:A5:D1:F5:2E:C0:33:67:72:82:AE:7E:2E:72:E0:F2:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EE12F179A5D1F52EC033677282AE7E2E72E0F2C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a0d1f4ce-169b-431a-8286-c5f3a07bbbe3/0/3130332e38352e35322e302f32342d3234203d3e20313530353535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.85.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:7b:e0:bd:c8:0c:c3:e8:b8:6b:6e:c7:99:bb:0f:e0:f5:49:
         f8:5c:06:a8:6d:ec:df:9d:69:8d:47:f2:e6:3b:41:02:1f:e5:
         fe:95:17:d4:ae:61:f7:59:22:b5:93:1a:64:45:5d:5f:7f:4e:
         62:a7:61:18:ed:40:a9:83:da:74:32:f2:22:ca:e3:ac:75:f8:
         91:57:d0:30:86:e0:51:ba:e7:be:af:9c:63:9c:c5:f1:4b:5d:
         ee:34:00:d0:e6:82:f8:f1:9c:6a:4e:5f:93:c3:a4:16:7c:04:
         85:d6:5d:54:72:dd:c4:20:d6:87:a1:01:a7:b4:43:eb:24:82:
         4e:4e:52:4e:6d:10:97:3c:42:05:0b:89:cb:21:01:eb:ae:47:
         ef:95:66:91:fa:08:a7:36:d8:f1:4e:d5:5c:29:54:e6:b2:3d:
         46:3d:44:77:97:07:c1:d2:37:c3:e5:b4:71:31:8f:9f:8e:19:
         a4:1f:84:7b:36:6b:5e:44:f4:81:8e:8f:72:73:cd:ea:42:1b:
         8a:06:69:c2:05:27:71:fa:26:ef:fc:3b:e2:67:a0:b0:40:e2:
         96:87:56:5b:25:eb:d3:cd:32:4a:a3:09:4e:48:6d:87:da:14:
         14:cd:77:e1:b2:7a:86:a7:9d:03:70:61:da:c1:14:ac:98:ff:
         70:af:49:17
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUZEEdsXOjQbtSgolbgWzRQwnJnSswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3
MkUwRjJDMzAeFw0yNDA3MTEwMzU1MDBaFw0yNTA3MTAwNDAwMDBaMDMxMTAvBgNV
BAMTKEE3NDgzRkNBODFBNjc0MkY4MUU0MkZFOTRFNTc1QTk5Nzg5MkI1OEEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpKAx/CvzrB5IFiDdbUFnrKws
eI6bpiIob+FWA9lyB/SrMK0KVbKIsjZqt3vGyfcL91NZH9MWmvxHMhYiK+TFyEh1
ls50smYSMNDdb94MikeTXuZNpyZv/s8bdHSa9XsThixk2G1E9JaguTS7dQ8kn3sO
qwgoSulTTKwQIUiXEhY/9y9Bn6+9W6L0ZQXAZkDPsXn+YvKpo6P0FyQd/ZHLtoQL
m0UCje2KyVhjNXAFEvidEIDVkMxsHIfxdh478wVYIN45irjtEY8+eCxFmLItXHei
7oqQ4486d86apK0XTaFqADBnxfbjAMhLxjl6r1BcQpr9CM9YOqGfnB9QNAxNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUp0g/yoGmdC+B5C/pTldamXiStYowHwYDVR0j
BBgwFoAU7hLxeaXR9S7AM2dygq5+LnLg8sMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MGQxZjRjZS0xNjliLTQzMWEtODI4Ni1jNWYzYTA3YmJiZTMvMC9FRTEyRjE3OUE1
RDFGNTJFQzAzMzY3NzI4MkFFN0UyRTcyRTBGMkMzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRUUxMkYxNzlBNUQxRjUyRUMwMzM2NzcyODJBRTdFMkU3MkUw
RjJDMy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2EwZDFmNGNlLTE2OWItNDMxYS04
Mjg2LWM1ZjNhMDdiYmJlMy8wLzMxMzAzMzJlMzgzNTJlMzUzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM1MzUzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdVNDANBgkqhkiG
9w0BAQsFAAOCAQEAEHvgvcgMw+i4a27HmbsP4PVJ+FwGqG3s351pjUfy5jtBAh/l
/pUX1K5h91kitZMaZEVdX39OYqdhGO1AqYPadDLyIsrjrHX4kVfQMIbgUbrnvq+c
Y5zF8Utd7jQA0OaC+PGcak5fk8OkFnwEhdZdVHLdxCDWh6EBp7RD6ySCTk5STm0Q
lzxCBQuJyyEB665H75VmkfoIpzbY8U7VXClU5rI9Rj1Ed5cHwdI3w+W0cTGPn44Z
pB+EezZrXkT0gY6PcnPN6kIbigZpwgUncfom7/w74megsEDilodWWyXr080ySqMJ
Tkhth9oUFM134bJ6hqedA3Bh2sEUrJj/cK9JFw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org