Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa
File:                     3130332e3135382e32302e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          rYJoTOD8z4DcPT/fzVnGdtXyf0wrQPHEf/e+UIXL5xY=
Subject key identifier:   B0:ED:46:FF:C4:32:5C:A7:9B:47:DD:87:B3:77:E4:69:54:77:25:41
Certificate issuer:       /CN=BE82B469998A9E829F882655C99A5A05535A1AD4
Certificate serial:       1006CC64D798A0D375A3BE1993CC5B6063C0F457
Authority key identifier: BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:40:06 +0000
ROA not before:           Mon 15 Jul 2024 02:35:06 +0000
ROA not after:            Mon 14 Jul 2025 02:40:06 +0000
asID:                     48465
IP address blocks:        103.158.20.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl
                          rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:06:cc:64:d7:98:a0:d3:75:a3:be:19:93:cc:5b:60:63:c0:f4:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE82B469998A9E829F882655C99A5A05535A1AD4
        Validity
            Not Before: Jul 15 02:35:06 2024 GMT
            Not After : Jul 14 02:40:06 2025 GMT
        Subject: CN=B0ED46FFC4325CA79B47DD87B377E46954772541
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:23:d8:d7:86:83:d5:b2:7f:29:2a:7b:31:db:
                    28:66:47:86:c9:56:d6:25:ca:78:bc:79:c7:87:49:
                    70:0f:d1:e3:54:e4:bc:c6:e2:50:de:bb:e7:d3:7b:
                    e9:fa:c4:aa:de:62:c2:57:a8:84:69:62:af:d1:dd:
                    b7:99:54:52:d5:90:1d:86:27:eb:46:7b:57:6b:e0:
                    85:65:85:6e:4f:03:65:b8:b4:9b:bc:9d:93:d4:2f:
                    3d:77:fe:4b:13:35:99:24:49:cd:6e:a3:b1:be:14:
                    52:92:bc:76:97:dc:f6:bd:c6:c3:fe:cf:a3:f8:cc:
                    c9:5b:df:a4:5f:76:8f:5c:e0:39:0e:47:95:c0:a5:
                    e4:df:8b:11:15:ef:83:fc:e4:84:f0:2e:07:65:f6:
                    c5:4c:c7:8b:95:a8:c8:28:30:0e:08:a3:ce:b7:19:
                    19:79:80:ab:dd:04:96:10:c8:c5:c9:24:5a:25:8b:
                    f7:af:bc:02:6e:23:04:68:42:ce:de:87:ff:bd:e7:
                    5c:a2:08:9e:2f:26:9f:ce:09:85:7d:5b:8e:f7:04:
                    46:66:8a:70:6a:63:c4:7d:1d:d4:03:c1:e8:7f:cc:
                    8b:15:50:e6:40:6d:80:df:7c:b3:29:d6:d8:d8:04:
                    6b:fc:29:91:1e:1d:fb:a8:65:26:8b:1a:71:34:a8:
                    3d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:ED:46:FF:C4:32:5C:A7:9B:47:DD:87:B3:77:E4:69:54:77:25:41
            X509v3 Authority Key Identifier:
                keyid:BE:82:B4:69:99:8A:9E:82:9F:88:26:55:C9:9A:5A:05:53:5A:1A:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/BE82B469998A9E829F882655C99A5A05535A1AD4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE82B469998A9E829F882655C99A5A05535A1AD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a481ac01-f302-46ed-9e1b-6593456f2d59/0/3130332e3135382e32302e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:db:a6:0c:16:40:c2:8d:16:1c:a8:45:31:db:49:ef:e0:b0:
         11:52:58:72:91:74:3d:db:b9:a0:80:88:f0:1a:06:bf:96:c5:
         7e:fc:69:70:0d:d2:a9:bb:07:a9:a8:85:04:a2:fd:4e:3e:ca:
         97:d5:16:be:9b:fa:bd:2b:61:06:0b:f9:ea:92:e1:93:23:8b:
         5d:6a:da:22:8b:83:b8:ee:52:3e:ca:f6:51:5c:2a:90:a5:f2:
         26:5e:f5:4b:31:82:12:76:7b:df:48:0f:e5:19:56:eb:13:71:
         6b:96:26:84:e4:dc:31:c7:32:1d:31:f0:c8:19:71:0a:1c:0e:
         c4:ca:8b:b4:66:83:68:12:98:98:59:04:24:b9:8b:b8:91:4b:
         73:43:ae:e3:75:35:61:ae:75:2c:c8:d0:a6:da:83:b8:9a:6e:
         03:39:c6:d3:e5:95:e3:17:f3:cf:33:3f:4d:aa:b1:70:1b:00:
         5d:38:6a:28:b0:4f:7f:32:a0:76:42:fc:d0:9d:06:36:29:61:
         1e:ef:83:f3:e8:45:17:9c:39:d9:81:ff:ee:25:34:b9:01:56:
         c8:01:13:54:b8:9b:51:50:b7:47:67:85:89:5d:19:a5:c0:f5:
         4a:95:a9:50:18:98:d0:f1:35:3b:a2:2f:4a:3e:a9:65:c9:c7:
         f9:cc:e9:78
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUEAbMZNeYoNN1o74Zk8xbYGPA9FcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1
MzVBMUFENDAeFw0yNDA3MTUwMjM1MDZaFw0yNTA3MTQwMjQwMDZaMDMxMTAvBgNV
BAMTKEIwRUQ0NkZGQzQzMjVDQTc5QjQ3REQ4N0IzNzdFNDY5NTQ3NzI1NDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmI9jXhoPVsn8pKnsx2yhmR4bJ
VtYlyni8eceHSXAP0eNU5LzG4lDeu+fTe+n6xKreYsJXqIRpYq/R3beZVFLVkB2G
J+tGe1dr4IVlhW5PA2W4tJu8nZPULz13/ksTNZkkSc1uo7G+FFKSvHaX3Pa9xsP+
z6P4zMlb36Rfdo9c4DkOR5XApeTfixEV74P85ITwLgdl9sVMx4uVqMgoMA4Io863
GRl5gKvdBJYQyMXJJFoli/evvAJuIwRoQs7eh/+951yiCJ4vJp/OCYV9W473BEZm
inBqY8R9HdQDweh/zIsVUOZAbYDffLMp1tjYBGv8KZEeHfuoZSaLGnE0qD2pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsO1G/8QyXKebR92Hs3fkaVR3JUEwHwYDVR0j
BBgwFoAUvoK0aZmKnoKfiCZVyZpaBVNaGtQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NDgxYWMwMS1mMzAyLTQ2ZWQtOWUxYi02NTkzNDU2ZjJkNTkvMC9CRTgyQjQ2OTk5
OEE5RTgyOUY4ODI2NTVDOTlBNUEwNTUzNUExQUQ0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkU4MkI0Njk5OThBOUU4MjlGODgyNjU1Qzk5QTVBMDU1MzVB
MUFENC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E0ODFhYzAxLWYzMDItNDZlZC05
ZTFiLTY1OTM0NTZmMmQ1OS8wLzMxMzAzMzJlMzEzNTM4MmUzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeeFDANBgkqhkiG
9w0BAQsFAAOCAQEAqNumDBZAwo0WHKhFMdtJ7+CwEVJYcpF0Pdu5oICI8BoGv5bF
fvxpcA3SqbsHqaiFBKL9Tj7Kl9UWvpv6vSthBgv56pLhkyOLXWraIouDuO5SPsr2
UVwqkKXyJl71SzGCEnZ730gP5RlW6xNxa5YmhOTcMccyHTHwyBlxChwOxMqLtGaD
aBKYmFkEJLmLuJFLc0Ou43U1Ya51LMjQptqDuJpuAznG0+WV4xfzzzM/TaqxcBsA
XThqKLBPfzKgdkL80J0GNilhHu+D8+hFF5w52YH/7iU0uQFWyAETVLibUVC3R2eF
iV0ZpcD1SpWpUBiY0PE1O6IvSj6pZcnH+czpeA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:03 2024 by rpki-client on console-ams.rpki-client.org