Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
File:                     3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa (raw, json)
Hash identifier:          Wj7M1inq6nzKkGSYNAsMKNcxvsfpPzzRRsQVe4syiBI=
Subject key identifier:   4C:64:52:5B:5A:DA:78:6E:62:EF:EF:27:87:0F:5E:D9:14:D4:F7:17
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       472A7153D294091A5FA21F8B5272AFD817350AF2
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa
Signing time:             Mon 01 Jul 2024 01:02:29 +0000
ROA not before:           Mon 01 Jul 2024 00:57:29 +0000
ROA not after:            Mon 30 Jun 2025 01:02:29 +0000
asID:                     136868
IP address blocks:        103.105.98.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2a:71:53:d2:94:09:1a:5f:a2:1f:8b:52:72:af:d8:17:35:0a:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul  1 00:57:29 2024 GMT
            Not After : Jun 30 01:02:29 2025 GMT
        Subject: CN=4C64525B5ADA786E62EFEF27870F5ED914D4F717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:4c:a7:27:8d:57:18:6e:88:4d:8e:eb:00:
                    dc:25:23:0d:27:99:bb:f2:03:5a:1c:04:4b:f5:ac:
                    f5:2c:54:b9:d5:c4:f0:78:9c:55:5d:6b:b1:55:3b:
                    7c:45:73:a4:fb:1c:86:9d:35:15:ff:d3:3a:20:68:
                    ed:75:87:19:97:63:0f:43:89:15:37:3a:d5:9f:31:
                    a9:0b:85:4f:52:12:e3:c3:91:ee:b1:26:59:10:36:
                    69:35:bc:98:07:ca:18:39:df:20:ae:47:ff:47:53:
                    8b:a0:a7:c4:7d:22:b8:b0:aa:a9:81:f6:72:58:73:
                    db:e7:7d:2c:08:82:bf:75:cc:65:d4:e5:26:59:72:
                    c2:b9:af:2d:c3:16:a4:1c:aa:3a:e2:20:b8:c1:d7:
                    57:8b:a5:60:7b:32:cb:28:ba:a5:cc:69:e0:f6:64:
                    a9:8f:b7:bc:e3:d8:e3:21:6e:10:8c:5e:34:95:50:
                    55:46:1a:2c:13:88:ea:cb:bd:0a:01:f2:26:0b:8c:
                    a0:a2:b2:ce:c7:18:d0:3a:18:10:19:9d:5d:76:8a:
                    80:67:90:bf:27:62:f1:85:14:b3:d1:a3:6c:a0:a7:
                    e0:d3:d9:9c:9a:c6:54:30:8f:de:47:83:46:43:68:
                    8f:e3:29:e9:33:cc:fe:7d:43:be:27:71:df:c1:fa:
                    c1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:64:52:5B:5A:DA:78:6E:62:EF:EF:27:87:0F:5E:D9:14:D4:F7:17
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39382e302f32332d3233203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.98.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:71:30:c5:01:b8:45:d5:e1:46:7b:9b:a9:46:5d:5c:1f:96:
         56:a8:71:aa:e2:de:d6:f1:1f:8c:4e:f5:99:19:1d:59:66:66:
         cb:c3:59:6d:88:95:49:70:46:55:69:0f:ac:e7:8f:f7:18:3a:
         30:db:ae:38:d8:4d:5b:b1:61:8e:93:02:43:bb:4e:90:40:4f:
         8b:90:8d:65:b8:12:11:ac:ba:9f:40:2f:05:68:06:e6:2b:12:
         92:08:08:5e:82:e7:2c:37:30:9f:f2:73:68:47:5a:db:a9:10:
         51:32:2f:3b:00:27:eb:24:9e:86:7f:a0:3b:84:be:14:5a:ed:
         38:d6:99:6b:7e:1c:a8:47:83:99:6e:5c:0b:85:74:97:b0:6a:
         0e:98:31:b9:7e:ba:ff:ce:eb:65:d1:8b:9c:6f:9a:04:5c:de:
         b7:d1:6c:dc:be:18:fd:c6:30:42:8a:59:6e:07:fb:72:f9:20:
         eb:c8:43:4e:77:11:04:9f:34:b1:c2:d1:49:d3:9b:e8:c1:23:
         14:ca:27:f2:9c:83:3e:5d:52:84:b6:50:6f:57:a7:c7:aa:c6:
         59:72:14:a8:7b:ea:65:44:44:32:86:06:de:2a:a1:6f:15:12:
         1f:9e:3d:2e:79:c4:62:97:be:b2:91:b7:37:a2:dc:5d:ab:7e:
         e5:38:03:98
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURypxU9KUCRpfoh+LUnKv2Bc1CvIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx
QTc4M0UzNjAeFw0yNDA3MDEwMDU3MjlaFw0yNTA2MzAwMTAyMjlaMDMxMTAvBgNV
BAMTKDRDNjQ1MjVCNUFEQTc4NkU2MkVGRUYyNzg3MEY1RUQ5MTRENEY3MTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDP30ynJ41XGG6ITY7rANwlIw0n
mbvyA1ocBEv1rPUsVLnVxPB4nFVda7FVO3xFc6T7HIadNRX/0zogaO11hxmXYw9D
iRU3OtWfMakLhU9SEuPDke6xJlkQNmk1vJgHyhg53yCuR/9HU4ugp8R9IriwqqmB
9nJYc9vnfSwIgr91zGXU5SZZcsK5ry3DFqQcqjriILjB11eLpWB7MssouqXMaeD2
ZKmPt7zj2OMhbhCMXjSVUFVGGiwTiOrLvQoB8iYLjKCiss7HGNA6GBAZnV12ioBn
kL8nYvGFFLPRo2ygp+DT2ZyaxlQwj95Hg0ZDaI/jKekzzP59Q74ncd/B+sFLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTGRSW1raeG5i7+8nhw9e2RTU9xcwHwYDVR0j
BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC
NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4
M0UzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMjRhYThjLWRlZGMtNDM3Ni05
MzgxLTBhODFlNmJjYzU2NC8wLzMxMzAzMzJlMzEzMDM1MmUzOTM4MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM2MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ2liMA0GCSqG
SIb3DQEBCwUAA4IBAQA8cTDFAbhF1eFGe5upRl1cH5ZWqHGq4t7W8R+MTvWZGR1Z
ZmbLw1ltiJVJcEZVaQ+s54/3GDow26442E1bsWGOkwJDu06QQE+LkI1luBIRrLqf
QC8FaAbmKxKSCAhegucsNzCf8nNoR1rbqRBRMi87ACfrJJ6Gf6A7hL4UWu041plr
fhyoR4OZblwLhXSXsGoOmDG5frr/zutl0Yucb5oEXN630Wzcvhj9xjBCilluB/ty
+SDryENOdxEEnzSxwtFJ05vowSMUyifynIM+XVKEtlBvV6fHqsZZchSoe+plREQy
hgbeKqFvFRIfnj0uecRil76ykbc3otxdq37lOAOY
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org