Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa
File:                     3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          DOjMqE4wQ2/8GJsvWxSm8AduWgssRRkV6efVskHABsQ=
Subject key identifier:   57:73:32:56:0E:FF:90:82:69:98:88:9C:10:40:28:0F:FD:DE:73:DF
Certificate issuer:       /CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
Certificate serial:       57A9C101B5A24C7BE43D40A274C83D357E3EB3C6
Authority key identifier: 39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 28 Jul 2023 07:00:02 +0000
ROA not before:           Fri 28 Jul 2023 06:55:02 +0000
ROA not after:            Fri 26 Jul 2024 07:00:02 +0000
asID:                     9341
IP address blocks:        103.137.188.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl
                          rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 17:20:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:a9:c1:01:b5:a2:4c:7b:e4:3d:40:a2:74:c8:3d:35:7e:3e:b3:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=399F84118EDEFAAD5DD93673BFD61B9F5505ED30
        Validity
            Not Before: Jul 28 06:55:02 2023 GMT
            Not After : Jul 26 07:00:02 2024 GMT
        Subject: CN=577332560EFF90826998889C1040280FFDDE73DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:08:55:31:1b:49:26:08:68:f6:0e:da:54:a7:
                    56:f0:ed:78:8b:82:16:e0:e2:3e:1b:68:e4:1d:42:
                    78:74:6d:5d:8a:b7:ad:c5:b4:58:b1:1e:d7:ac:57:
                    c2:a2:09:c5:55:a8:83:26:ad:1d:9d:32:ad:d8:96:
                    65:eb:4d:38:69:d7:b9:57:60:40:b6:c2:b2:9c:c7:
                    a1:63:6b:76:81:69:4b:df:1b:a0:80:72:b6:db:d1:
                    2f:60:b2:e3:f6:0d:70:45:be:8c:31:c7:37:45:38:
                    5c:bf:f1:c4:94:93:a9:6e:65:ac:77:1b:ab:41:fb:
                    c8:00:f4:50:8c:4a:1c:02:e7:74:aa:e3:62:37:6b:
                    35:dd:5e:0e:a1:44:9f:95:a8:e6:fa:a0:62:4f:e2:
                    c0:b5:37:98:06:5d:ba:4f:48:36:16:3c:50:f0:73:
                    82:ca:23:6c:d0:2a:32:4a:90:7f:2d:36:bd:33:21:
                    10:97:16:a1:69:08:ff:f4:25:7e:b0:19:73:d8:7f:
                    ea:b0:ec:db:67:46:4d:84:29:22:0b:05:e9:d2:be:
                    b2:dd:b4:fc:44:d5:81:21:f1:70:9f:e0:f0:1f:86:
                    d2:3b:e4:e2:aa:fa:04:c1:e7:86:45:50:b9:9d:d0:
                    16:4e:cf:91:bc:9f:4e:ab:8b:fe:60:b2:d0:41:3b:
                    75:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:73:32:56:0E:FF:90:82:69:98:88:9C:10:40:28:0F:FD:DE:73:DF
            X509v3 Authority Key Identifier:
                keyid:39:9F:84:11:8E:DE:FA:AD:5D:D9:36:73:BF:D6:1B:9F:55:05:ED:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/399F84118EDEFAAD5DD93673BFD61B9F5505ED30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6c12703-f1f7-43c9-a220-92edd86efe5e/0/3130332e3133372e3138382e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.137.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d2:c7:36:98:b4:8b:63:74:64:d9:b5:5f:e6:c1:c6:70:7a:14:
         0e:a7:f6:d5:b2:53:0f:e5:20:8a:49:aa:2b:d2:f8:7d:c1:d2:
         4e:65:44:8d:2c:dd:b1:68:70:29:df:79:c4:a9:83:6f:41:f5:
         7a:9b:87:84:dd:50:cf:b8:00:46:c5:d4:6f:82:16:64:06:59:
         94:eb:23:4f:11:03:e5:bd:2b:e8:d7:f5:b4:48:6a:c8:66:5b:
         48:6a:8c:d9:81:c4:57:6e:ea:28:2c:33:3d:96:a6:60:ff:27:
         ec:34:30:20:a5:a1:9b:96:0e:40:f5:6a:3d:6f:62:af:20:56:
         01:72:81:f1:f9:da:ff:60:13:99:12:17:e0:b0:93:cc:c8:38:
         bf:d0:b3:e6:bf:eb:31:27:25:31:23:72:45:9f:de:af:7c:03:
         15:eb:92:4e:ed:c0:a5:2b:e3:56:69:ea:69:f5:90:64:28:3d:
         fb:e1:80:7b:c5:8b:94:85:37:a5:04:5b:33:63:96:d0:3a:69:
         b7:1b:f1:89:27:06:d9:a8:1d:0e:bc:9e:34:f9:49:a7:28:96:
         4d:69:25:a1:79:21:26:6e:73:22:fb:57:2f:28:e4:68:d6:d3:
         78:0d:f3:74:cd:79:28:eb:9f:c7:28:27:5b:3f:2b:27:1e:74:
         ff:85:fb:bc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUV6nBAbWiTHvkPUCidMg9NX4+s8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1
NTA1RUQzMDAeFw0yMzA3MjgwNjU1MDJaFw0yNDA3MjYwNzAwMDJaMDMxMTAvBgNV
BAMTKDU3NzMzMjU2MEVGRjkwODI2OTk4ODg5QzEwNDAyODBGRkRERTczREYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvCFUxG0kmCGj2DtpUp1bw7XiL
ghbg4j4baOQdQnh0bV2Kt63FtFixHtesV8KiCcVVqIMmrR2dMq3YlmXrTThp17lX
YEC2wrKcx6Fja3aBaUvfG6CAcrbb0S9gsuP2DXBFvowxxzdFOFy/8cSUk6luZax3
G6tB+8gA9FCMShwC53Sq42I3azXdXg6hRJ+VqOb6oGJP4sC1N5gGXbpPSDYWPFDw
c4LKI2zQKjJKkH8tNr0zIRCXFqFpCP/0JX6wGXPYf+qw7NtnRk2EKSILBenSvrLd
tPxE1YEh8XCf4PAfhtI75OKq+gTB54ZFULmd0BZOz5G8n06ri/5gstBBO3UnAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUV3MyVg7/kIJpmIicEEAoD/3ec98wHwYDVR0j
BBgwFoAUOZ+EEY7e+q1d2TZzv9Ybn1UF7TAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NmMxMjcwMy1mMWY3LTQzYzktYTIyMC05MmVkZDg2ZWZlNWUvMC8zOTlGODQxMThF
REVGQUFENUREOTM2NzNCRkQ2MUI5RjU1MDVFRDMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzk5Rjg0MTE4RURFRkFBRDVERDkzNjczQkZENjFCOUY1NTA1
RUQzMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E2YzEyNzAzLWYxZjctNDNjOS1h
MjIwLTkyZWRkODZlZmU1ZS8wLzMxMzAzMzJlMzEzMzM3MmUzMTM4MzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzOTMzMzQzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeJvDANBgkqhkiG
9w0BAQsFAAOCAQEA0sc2mLSLY3Rk2bVf5sHGcHoUDqf21bJTD+UgikmqK9L4fcHS
TmVEjSzdsWhwKd95xKmDb0H1epuHhN1Qz7gARsXUb4IWZAZZlOsjTxED5b0r6Nf1
tEhqyGZbSGqM2YHEV27qKCwzPZamYP8n7DQwIKWhm5YOQPVqPW9iryBWAXKB8fna
/2ATmRIX4LCTzMg4v9Cz5r/rMSclMSNyRZ/er3wDFeuSTu3ApSvjVmnqafWQZCg9
++GAe8WLlIU3pQRbM2OW0DpptxvxiScG2agdDryeNPlJpyiWTWkloXkhJm5zIvtX
LyjkaNbTeA3zdM15KOufxygnWz8rJx50/4X7vA==
-----END CERTIFICATE-----
Generated at Wed Jun 19 14:25:46 2024 by rpki-client on console-fra.rpki-client.org