Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
File:                     3130332e39312e302e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier:          i87TyACWQ7ZhbVvoIz5FiY6rt+QM7cK6vcvZ8nf5D/w=
Subject key identifier:   6D:AE:8B:6E:92:9E:ED:04:90:B9:4F:F2:EB:A0:43:2E:BE:2B:50:72
Certificate issuer:       /CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
Certificate serial:       78164DD90B6A2042E8DCB4ED25B91BACEEE2482A
Authority key identifier: 12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa
Signing time:             Tue 02 Apr 2024 05:02:50 +0000
ROA not before:           Tue 02 Apr 2024 04:57:50 +0000
ROA not after:            Tue 01 Apr 2025 05:02:50 +0000
asID:                     38496
IP address blocks:        103.91.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl
                          rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:16:4d:d9:0b:6a:20:42:e8:dc:b4:ed:25:b9:1b:ac:ee:e2:48:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=129AAEFC08D204E9BE5439C807FF840DC3CE57F9
        Validity
            Not Before: Apr  2 04:57:50 2024 GMT
            Not After : Apr  1 05:02:50 2025 GMT
        Subject: CN=6DAE8B6E929EED0490B94FF2EBA0432EBE2B5072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d2:19:72:69:b0:01:f2:21:8e:1f:a5:19:9c:
                    3b:e1:f6:62:29:b5:c1:b0:d0:dd:0e:47:93:5f:7e:
                    69:0d:d2:d5:d9:09:ae:9a:74:95:e0:f7:4f:87:be:
                    da:30:83:f9:1b:c5:ef:3e:32:a6:8c:04:ed:7e:2b:
                    f3:93:58:0d:f0:cd:96:e5:11:af:f8:f3:94:26:97:
                    80:17:3c:86:5e:88:75:4e:d3:89:5b:46:b4:27:ce:
                    12:54:fe:98:87:4f:b8:be:9d:1a:44:9f:f4:d6:a8:
                    11:93:a8:48:01:f5:b3:c6:94:96:32:67:aa:cd:74:
                    17:b2:24:56:e5:92:41:a0:81:d3:4e:87:37:30:2f:
                    09:40:cd:d7:a4:8d:83:57:fe:1d:f4:85:39:7d:3c:
                    b3:dc:b1:21:ba:86:4b:7d:12:39:31:eb:88:4f:c8:
                    21:f6:a3:7d:c2:7a:41:db:39:1c:42:44:e7:44:f3:
                    d7:e6:9d:f0:7f:25:47:8d:b8:26:27:1d:4f:69:40:
                    94:8c:3b:36:52:0b:47:0a:2a:a8:58:42:2c:03:f8:
                    4e:3e:6f:e6:f2:e1:9d:83:d7:73:51:6f:0b:1e:73:
                    b9:1b:85:e6:fb:2c:66:72:72:61:a8:97:1e:ae:b5:
                    1f:fe:ec:df:eb:19:16:d7:5f:0f:a8:c6:de:1c:35:
                    20:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:AE:8B:6E:92:9E:ED:04:90:B9:4F:F2:EB:A0:43:2E:BE:2B:50:72
            X509v3 Authority Key Identifier:
                keyid:12:9A:AE:FC:08:D2:04:E9:BE:54:39:C8:07:FF:84:0D:C3:CE:57:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/129AAEFC08D204E9BE5439C807FF840DC3CE57F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a63655f1-38b6-4415-8faf-2b5b9153e52d/0/3130332e39312e302e302f32322d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:78:c2:54:a3:b8:c9:dc:7d:5c:ab:50:9e:0e:7e:7c:28:a9:
         60:c9:5f:3e:86:35:f7:9e:b3:fa:ff:54:0e:19:16:a4:9b:d6:
         22:85:2a:20:86:20:22:e6:dd:75:f1:77:07:4d:b3:e3:8d:29:
         cc:26:4b:f0:70:fb:d8:fe:42:c1:33:91:3e:26:9f:6a:c3:d1:
         6f:e8:6d:17:c4:23:2f:5c:d1:69:4b:d0:39:d1:b9:99:3e:af:
         f4:db:1d:ea:1e:ae:24:92:f1:be:57:35:29:1b:2d:95:52:4f:
         44:ba:d0:cf:ee:98:2a:b3:36:bb:e1:14:c5:ee:ce:59:41:12:
         6d:51:94:84:fe:89:e2:7c:94:04:58:18:88:d5:1b:55:76:cd:
         d2:3b:79:f9:3b:d9:63:34:9c:e0:0d:73:b3:34:ca:8b:6e:da:
         ce:89:c9:9b:e6:8c:4c:30:e4:d3:6e:26:b8:05:62:be:b0:9e:
         de:64:06:0d:1e:4c:aa:c5:c7:88:68:cd:ad:ba:03:f5:dc:6b:
         01:7b:67:bc:73:36:28:15:c6:ba:13:8d:02:f2:6a:9e:b9:37:
         48:02:44:a4:aa:c2:43:5f:d2:8d:9d:ae:3e:4d:50:5f:63:de:
         8f:d2:6b:6f:0b:f9:33:a8:4d:3a:f6:9c:bf:7a:00:71:f4:80:
         9a:1d:eb:85
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUeBZN2QtqIELo3LTtJbkbrO7iSCowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERD
M0NFNTdGOTAeFw0yNDA0MDIwNDU3NTBaFw0yNTA0MDEwNTAyNTBaMDMxMTAvBgNV
BAMTKDZEQUU4QjZFOTI5RUVEMDQ5MEI5NEZGMkVCQTA0MzJFQkUyQjUwNzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR0hlyabAB8iGOH6UZnDvh9mIp
tcGw0N0OR5NffmkN0tXZCa6adJXg90+Hvtowg/kbxe8+MqaMBO1+K/OTWA3wzZbl
Ea/485Qml4AXPIZeiHVO04lbRrQnzhJU/piHT7i+nRpEn/TWqBGTqEgB9bPGlJYy
Z6rNdBeyJFblkkGggdNOhzcwLwlAzdekjYNX/h30hTl9PLPcsSG6hkt9Ejkx64hP
yCH2o33CekHbORxCROdE89fmnfB/JUeNuCYnHU9pQJSMOzZSC0cKKqhYQiwD+E4+
b+by4Z2D13NRbwsec7kbheb7LGZycmGolx6utR/+7N/rGRbXXw+oxt4cNSAlAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUba6LbpKe7QSQuU/y66BDLr4rUHIwHwYDVR0j
BBgwFoAUEpqu/AjSBOm+VDnIB/+EDcPOV/kwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjM2NTVmMS0zOGI2LTQ0MTUtOGZhZi0yYjViOTE1M2U1MmQvMC8xMjlBQUVGQzA4
RDIwNEU5QkU1NDM5QzgwN0ZGODQwREMzQ0U1N0Y5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTI5QUFFRkMwOEQyMDRFOUJFNTQzOUM4MDdGRjg0MERDM0NF
NTdGOS5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYzNjU1ZjEtMzhiNi00NDE1LThm
YWYtMmI1YjkxNTNlNTJkLzAvMzEzMDMzMmUzOTMxMmUzMDJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDMzMzgzNDM5MzYucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJnWwAwDQYJKoZIhvcNAQEL
BQADggEBAI14wlSjuMncfVyrUJ4OfnwoqWDJXz6GNfees/r/VA4ZFqSb1iKFKiCG
ICLm3XXxdwdNs+ONKcwmS/Bw+9j+QsEzkT4mn2rD0W/obRfEIy9c0WlL0DnRuZk+
r/TbHeoeriSS8b5XNSkbLZVST0S60M/umCqzNrvhFMXuzllBEm1RlIT+ieJ8lARY
GIjVG1V2zdI7efk72WM0nOANc7M0yotu2s6JyZvmjEww5NNuJrgFYr6wnt5kBg0e
TKrFx4hoza26A/XcawF7Z7xzNigVxroTjQLyap65N0gCRKSqwkNf0o2drj5NUF9j
3o/Sa28L+TOoTTr2nL96AHH0gJod64U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:50 2024 by rpki-client on console-ams.rpki-client.org