Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa
File:                     3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa (raw, json)
Hash identifier:          IKbVUage9szVAQYG/l4n17p5kjrbb8lhF1AIOQmlQXY=
Subject key identifier:   58:75:A9:4B:AE:A3:1E:2F:63:EA:A1:C7:BB:28:7E:7E:90:2A:80:3C
Certificate issuer:       /CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
Certificate serial:       F01ED1C53009D1D163DCC07E50404F700A0E23
Authority key identifier: 4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa
Signing time:             Mon 01 Jul 2024 01:02:29 +0000
ROA not before:           Mon 01 Jul 2024 00:57:29 +0000
ROA not after:            Mon 30 Jun 2025 01:02:29 +0000
asID:                     136868
IP address blocks:        103.105.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl
                          rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            f0:1e:d1:c5:30:09:d1:d1:63:dc:c0:7e:50:40:4f:70:0a:0e:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DF415D2DB760C39855B3F3D9CF3CE441A783E36
        Validity
            Not Before: Jul  1 00:57:29 2024 GMT
            Not After : Jun 30 01:02:29 2025 GMT
        Subject: CN=5875A94BAEA31E2F63EAA1C7BB287E7E902A803C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:71:e7:92:01:99:b9:46:cd:dd:ef:4d:63:c2:
                    c0:61:b6:65:91:6b:99:4e:48:ee:11:2c:5b:c8:c2:
                    ce:e6:d2:bb:8c:61:f3:e1:13:dd:88:b8:7e:c0:c8:
                    23:21:b3:41:22:90:04:c7:f7:6e:92:a8:ae:60:77:
                    a6:46:96:b2:9b:bf:7b:15:56:4d:41:c7:9e:4e:2f:
                    60:a4:bb:46:26:5e:d3:6f:7a:9b:a2:80:56:b9:0e:
                    41:cc:65:b1:f2:37:3a:81:bc:ea:ea:aa:90:cb:e1:
                    fb:86:ee:87:7c:4e:99:32:0c:94:1a:85:69:d8:13:
                    a6:78:05:fd:9f:b8:e6:55:8c:2e:3c:b9:1a:5e:29:
                    dd:72:c0:8d:6d:8b:0f:e9:38:8c:a4:b0:3a:f7:29:
                    ba:9e:8f:65:e1:a6:0a:da:2e:cf:0b:b8:45:21:b9:
                    33:c3:d8:21:e3:ec:df:52:ed:59:1e:c9:1d:a1:3e:
                    d5:f9:36:62:0b:a1:77:4b:b3:3e:f9:1e:f9:d5:56:
                    65:da:a0:a1:96:f8:8d:0c:51:f3:1b:d9:17:f0:f4:
                    e3:d7:0e:48:6b:8f:32:45:b9:84:5a:bd:d8:f6:c1:
                    fc:fa:ac:c7:eb:59:c2:36:aa:00:0b:8b:3e:83:ff:
                    4d:cb:32:d0:e5:cb:1a:07:df:83:ff:9a:cb:34:a6:
                    cd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:75:A9:4B:AE:A3:1E:2F:63:EA:A1:C7:BB:28:7E:7E:90:2A:80:3C
            X509v3 Authority Key Identifier:
                keyid:4D:F4:15:D2:DB:76:0C:39:85:5B:3F:3D:9C:F3:CE:44:1A:78:3E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DF415D2DB760C39855B3F3D9CF3CE441A783E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a124aa8c-dedc-4376-9381-0a81e6bcc564/0/3130332e3130352e39392e302f32342d3234203d3e20313336383638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c5:c7:d1:4b:ea:0e:f2:12:01:55:f2:4f:59:bb:7a:8b:df:
         a9:f7:dc:aa:da:5f:33:51:19:0d:04:bb:d9:64:ad:92:11:21:
         ff:62:37:6b:6d:52:67:f9:20:5d:4b:2f:d6:25:f2:47:b9:bc:
         62:9c:2e:8d:1c:e7:c8:92:c7:b1:32:b5:78:b6:ee:7d:a8:f4:
         6d:a0:20:ea:73:37:f4:14:30:0d:2d:e5:56:f3:36:12:70:bf:
         e2:70:35:75:90:47:91:49:b9:c4:dd:1b:59:f8:70:75:27:ae:
         6e:2a:d4:6d:fd:61:ab:11:68:12:21:7f:31:2c:32:d3:d8:43:
         69:75:4b:9b:ab:23:05:04:f0:1a:06:33:1c:01:75:9f:6f:06:
         5f:ba:a0:65:f8:82:1d:f0:78:5c:ee:42:fe:90:94:9a:b5:9e:
         88:92:b0:bb:21:a2:c2:20:c1:3d:c0:17:c5:4e:9c:4b:f8:d1:
         8f:e4:c6:d2:f1:cd:62:80:a0:d9:2a:63:d7:1d:af:c2:4d:53:
         b2:f1:75:1b:73:b2:14:ea:c2:bc:3d:7d:b0:f8:e7:8e:a9:34:
         c9:fc:a7:50:4a:fd:84:0b:e6:51:56:99:e4:21:e6:a1:37:59:
         83:bb:15:61:3d:d4:64:1f:8d:71:0f:84:e0:56:ed:b1:5a:70:
         02:92:a0:a4
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUAPAe0cUwCdHRY9zAflBAT3AKDiMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQx
QTc4M0UzNjAeFw0yNDA3MDEwMDU3MjlaFw0yNTA2MzAwMTAyMjlaMDMxMTAvBgNV
BAMTKDU4NzVBOTRCQUVBMzFFMkY2M0VBQTFDN0JCMjg3RTdFOTAyQTgwM0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZceeSAZm5Rs3d701jwsBhtmWR
a5lOSO4RLFvIws7m0ruMYfPhE92IuH7AyCMhs0EikATH926SqK5gd6ZGlrKbv3sV
Vk1Bx55OL2Cku0YmXtNvepuigFa5DkHMZbHyNzqBvOrqqpDL4fuG7od8TpkyDJQa
hWnYE6Z4Bf2fuOZVjC48uRpeKd1ywI1tiw/pOIyksDr3Kbqej2XhpgraLs8LuEUh
uTPD2CHj7N9S7VkeyR2hPtX5NmILoXdLsz75HvnVVmXaoKGW+I0MUfMb2Rfw9OPX
DkhrjzJFuYRavdj2wfz6rMfrWcI2qgALiz6D/03LMtDlyxoH34P/mss0ps19AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUWHWpS66jHi9j6qHHuyh+fpAqgDwwHwYDVR0j
BBgwFoAUTfQV0tt2DDmFWz89nPPORBp4PjYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
MTI0YWE4Yy1kZWRjLTQzNzYtOTM4MS0wYTgxZTZiY2M1NjQvMC80REY0MTVEMkRC
NzYwQzM5ODU1QjNGM0Q5Q0YzQ0U0NDFBNzgzRTM2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNERGNDE1RDJEQjc2MEMzOTg1NUIzRjNEOUNGM0NFNDQxQTc4
M0UzNi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ExMjRhYThjLWRlZGMtNDM3Ni05
MzgxLTBhODFlNmJjYzU2NC8wLzMxMzAzMzJlMzEzMDM1MmUzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM2MzgzNjM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2ljMA0GCSqG
SIb3DQEBCwUAA4IBAQCrxcfRS+oO8hIBVfJPWbt6i9+p99yq2l8zURkNBLvZZK2S
ESH/YjdrbVJn+SBdSy/WJfJHubxinC6NHOfIksexMrV4tu59qPRtoCDqczf0FDAN
LeVW8zYScL/icDV1kEeRSbnE3RtZ+HB1J65uKtRt/WGrEWgSIX8xLDLT2ENpdUub
qyMFBPAaBjMcAXWfbwZfuqBl+IId8Hhc7kL+kJSatZ6IkrC7IaLCIME9wBfFTpxL
+NGP5MbS8c1igKDZKmPXHa/CTVOy8XUbc7IU6sK8PX2w+OeOqTTJ/KdQSv2EC+ZR
VpnkIeahN1mDuxVhPdRkH41xD4TgVu2xWnACkqCk
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org