Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa
File:                     3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa (raw, json)
Hash identifier:          OvK6o8IZ3BsYaAY1+YybzMeWShPTtdOJw6OdpkDqQJo=
Subject key identifier:   C4:AA:2A:E1:A6:C1:8D:16:E8:E1:FF:90:86:8B:8D:E1:80:85:76:79
Certificate issuer:       /CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
Certificate serial:       574D198BE941EC3054B39693A684AF638E759F35
Authority key identifier: 69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa
Signing time:             Fri 27 Oct 2023 03:00:02 +0000
ROA not before:           Fri 27 Oct 2023 02:55:02 +0000
ROA not after:            Fri 25 Oct 2024 03:00:02 +0000
asID:                     150211
IP address blocks:        103.196.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl
                          rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:4d:19:8b:e9:41:ec:30:54:b3:96:93:a6:84:af:63:8e:75:9f:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=69FF9AF34111CD4637ED8A6CB4351E516A59B5E7
        Validity
            Not Before: Oct 27 02:55:02 2023 GMT
            Not After : Oct 25 03:00:02 2024 GMT
        Subject: CN=C4AA2AE1A6C18D16E8E1FF90868B8DE180857679
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:19:47:2f:e7:e7:0d:ca:64:5f:af:31:57:5d:
                    07:c0:69:1f:b3:9a:41:b9:1d:8a:03:57:3b:a9:63:
                    fb:a5:68:37:dc:86:79:92:99:68:c1:86:b6:37:22:
                    c2:8d:c4:30:9d:fd:63:eb:87:8b:0f:76:b5:37:27:
                    2f:87:06:fd:1a:4f:87:7f:22:ec:d5:3c:8d:28:f9:
                    41:10:f3:8d:eb:81:f4:13:f5:c7:2d:62:10:3f:bf:
                    b1:28:7a:c2:6a:4c:c7:11:a3:11:7e:51:3c:95:2c:
                    08:b7:89:c3:96:49:de:15:7c:72:89:a5:50:a5:f2:
                    03:32:f2:c5:dc:1f:a1:e9:8a:ef:0d:1e:df:b7:26:
                    f4:50:93:3c:12:eb:60:94:5d:22:fe:13:02:de:d7:
                    73:ce:e0:ec:f9:24:18:5f:c3:5d:09:f7:dc:0f:45:
                    3f:1b:a0:e7:98:fe:01:98:a6:2c:b1:74:d1:d3:c1:
                    de:84:8a:ff:b5:b3:16:26:3a:27:b3:66:86:db:55:
                    80:0d:74:99:21:4d:56:41:a0:8f:16:66:c6:71:90:
                    c4:64:14:01:ce:00:69:d2:d9:3b:57:01:f6:bb:d0:
                    97:75:9c:bf:f5:05:e0:97:7d:0d:57:ee:17:d0:bf:
                    33:2c:17:00:47:96:d3:0b:49:4d:c0:e9:db:57:c9:
                    c4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:2A:E1:A6:C1:8D:16:E8:E1:FF:90:86:8B:8D:E1:80:85:76:79
            X509v3 Authority Key Identifier:
                keyid:69:FF:9A:F3:41:11:CD:46:37:ED:8A:6C:B4:35:1E:51:6A:59:B5:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/69FF9AF34111CD4637ED8A6CB4351E516A59B5E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a640abe6-8dee-4bd1-814c-2af31a3d9cdf/0/3130332e3139362e3131382e302f32332d3234203d3e20313530323131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.196.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:a8:2b:b1:c5:bb:1e:2a:8f:49:22:93:55:c0:a3:14:f9:67:
         47:b6:27:df:12:76:55:05:20:c3:d5:c6:95:3c:4e:da:d3:8f:
         2a:49:fb:f1:a9:e0:b2:e8:ef:e9:17:eb:2e:8c:22:0e:98:e5:
         57:9b:47:03:8c:86:9f:28:ce:4b:2a:80:5f:ce:46:00:7e:53:
         19:83:15:cf:73:96:4f:e9:ca:a3:2d:d9:ac:35:67:65:c4:76:
         4e:ae:97:cb:65:76:9b:cc:41:fb:dd:99:80:d3:58:ca:59:6e:
         b6:39:02:49:25:a1:b9:22:2b:85:24:dd:fc:d5:6e:e2:47:8b:
         69:22:05:f3:4a:bf:63:03:d1:80:91:ff:e4:c8:65:1c:62:ba:
         63:fc:33:3f:10:48:b0:78:a8:c2:ff:e2:77:25:df:7b:1c:d1:
         4e:00:3e:fd:4c:84:01:87:5c:c7:eb:65:95:66:c9:64:7c:26:
         a6:ca:9a:d7:c9:b2:e9:49:63:e2:2f:4b:8a:2f:67:70:d4:3d:
         70:8c:5c:f8:fb:25:06:bd:fb:08:d0:a9:b7:72:cc:6d:67:2c:
         6f:34:89:59:c1:64:ae:47:87:c4:87:13:09:04:8e:db:58:75:
         28:4e:92:9f:f9:34:c8:8c:95:2f:1b:86:42:a8:d7:c0:44:66:
         42:ea:8d:9e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUV00Zi+lB7DBUs5aTpoSvY451nzUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2
QTU5QjVFNzAeFw0yMzEwMjcwMjU1MDJaFw0yNDEwMjUwMzAwMDJaMDMxMTAvBgNV
BAMTKEM0QUEyQUUxQTZDMThEMTZFOEUxRkY5MDg2OEI4REUxODA4NTc2NzkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdGUcv5+cNymRfrzFXXQfAaR+z
mkG5HYoDVzupY/ulaDfchnmSmWjBhrY3IsKNxDCd/WPrh4sPdrU3Jy+HBv0aT4d/
IuzVPI0o+UEQ843rgfQT9cctYhA/v7EoesJqTMcRoxF+UTyVLAi3icOWSd4VfHKJ
pVCl8gMy8sXcH6Hpiu8NHt+3JvRQkzwS62CUXSL+EwLe13PO4Oz5JBhfw10J99wP
RT8boOeY/gGYpiyxdNHTwd6Eiv+1sxYmOiezZobbVYANdJkhTVZBoI8WZsZxkMRk
FAHOAGnS2TtXAfa70Jd1nL/1BeCXfQ1X7hfQvzMsFwBHltMLSU3A6dtXycSZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUxKoq4abBjRbo4f+QhouN4YCFdnkwHwYDVR0j
BBgwFoAUaf+a80ERzUY37YpstDUeUWpZtecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NjQwYWJlNi04ZGVlLTRiZDEtODE0Yy0yYWYzMWEzZDljZGYvMC82OUZGOUFGMzQx
MTFDRDQ2MzdFRDhBNkNCNDM1MUU1MTZBNTlCNUU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjlGRjlBRjM0MTExQ0Q0NjM3RUQ4QTZDQjQzNTFFNTE2QTU5
QjVFNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2NDBhYmU2LThkZWUtNGJkMS04
MTRjLTJhZjMxYTNkOWNkZi8wLzMxMzAzMzJlMzEzOTM2MmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM1MzAzMjMxMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnxHYwDQYJ
KoZIhvcNAQELBQADggEBACWoK7HFux4qj0kik1XAoxT5Z0e2J98SdlUFIMPVxpU8
TtrTjypJ+/Gp4LLo7+kX6y6MIg6Y5VebRwOMhp8ozksqgF/ORgB+UxmDFc9zlk/p
yqMt2aw1Z2XEdk6ul8tldpvMQfvdmYDTWMpZbrY5AkklobkiK4Uk3fzVbuJHi2ki
BfNKv2MD0YCR/+TIZRxiumP8Mz8QSLB4qML/4ncl33sc0U4APv1MhAGHXMfrZZVm
yWR8JqbKmtfJsulJY+IvS4ovZ3DUPXCMXPj7JQa9+wjQqbdyzG1nLG80iVnBZK5H
h8SHEwkEjttYdShOkp/5NMiMlS8bhkKo18BEZkLqjZ4=
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:38:32 2024 by rpki-client on console-ams.rpki-client.org