Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
File:                     3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa (raw, json)
Hash identifier:          BbYhckcrefYvQqJwHjD2zpCslW8j+S28SWA5um3FxNE=
Subject key identifier:   8D:8D:D3:BF:F5:83:18:AA:B8:47:A5:5D:C2:3F:92:11:C6:54:4A:27
Certificate issuer:       /CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
Certificate serial:       7B6513839F30BF790B1C9EE58464D1168DBAEFD8
Authority key identifier: FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa
Signing time:             Tue 20 Feb 2024 07:02:01 +0000
ROA not before:           Tue 20 Feb 2024 06:57:01 +0000
ROA not after:            Tue 18 Feb 2025 07:02:01 +0000
asID:                     139446
IP address blocks:        103.145.108.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl
                          rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:65:13:83:9f:30:bf:79:0b:1c:9e:e5:84:64:d1:16:8d:ba:ef:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FE4F0E88F020271FABB0940107AF13E80DCCA4CE
        Validity
            Not Before: Feb 20 06:57:01 2024 GMT
            Not After : Feb 18 07:02:01 2025 GMT
        Subject: CN=8D8DD3BFF58318AAB847A55DC23F9211C6544A27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4a:a5:4f:f6:08:39:fb:cd:c2:ce:41:4a:42:
                    e3:3f:de:4a:35:36:84:19:4a:5b:51:7e:fe:77:60:
                    82:cb:d5:5d:b9:32:4e:b5:59:3f:d9:b8:68:56:df:
                    71:54:90:51:67:0d:8e:b2:70:41:e5:13:70:87:14:
                    c7:64:aa:7b:b2:cb:b7:f5:f8:aa:a9:f1:cc:01:37:
                    f0:68:da:9d:12:d3:cb:c1:0f:f6:05:23:4d:ac:52:
                    2c:d2:44:03:98:54:a6:21:69:dd:8b:7c:de:79:7b:
                    e5:30:5b:16:28:1e:93:a4:ad:fd:e3:3c:c6:78:ea:
                    2f:53:7a:14:d8:8c:8e:43:71:22:3d:1b:42:ef:67:
                    0a:00:4f:cd:c9:93:5c:60:90:4d:7a:6a:86:d3:6d:
                    a9:30:71:89:ec:11:1d:83:33:86:c8:e4:d6:2e:b2:
                    59:9b:8c:3b:00:cf:66:91:07:66:19:9a:ea:32:e3:
                    2e:84:1b:37:2c:67:48:19:66:70:ef:cd:a1:cf:7f:
                    b2:5a:4f:a9:ae:d7:dc:f0:3b:53:da:64:b2:c6:eb:
                    ef:d7:75:76:18:3e:c6:81:ff:cb:5f:26:55:4d:32:
                    eb:19:11:dc:92:79:6d:fe:ea:8f:87:b3:2a:91:a7:
                    6a:28:d8:7d:f5:54:3b:5a:56:a1:00:ed:25:6d:33:
                    d1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:8D:D3:BF:F5:83:18:AA:B8:47:A5:5D:C2:3F:92:11:C6:54:4A:27
            X509v3 Authority Key Identifier:
                keyid:FE:4F:0E:88:F0:20:27:1F:AB:B0:94:01:07:AF:13:E8:0D:CC:A4:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FE4F0E88F020271FABB0940107AF13E80DCCA4CE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8c068da-f9c5-4036-854b-922caa93f324/0/3130332e3134352e3130382e302f32342d3234203d3e20313339343436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.108.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:2e:63:d1:8d:5c:de:75:06:0b:44:1c:89:6f:e8:d3:24:65:
         82:af:66:ef:77:20:ee:b3:57:72:5e:77:33:e6:52:13:39:73:
         df:c1:25:65:26:2f:5a:93:8e:25:69:4d:b5:24:db:c4:ec:f3:
         21:7a:f3:8c:17:0a:6a:94:f8:5c:df:64:59:f4:3c:4c:28:89:
         33:3b:f2:4b:ae:ec:e1:5e:25:e1:31:e1:d7:4b:ef:47:74:b0:
         f7:bf:db:f3:f8:ae:8e:60:c3:21:1d:7a:c8:fb:38:ec:90:59:
         5f:16:91:f7:9b:93:4d:e5:6a:e1:3d:46:43:cb:a1:c7:69:79:
         8a:f6:6e:4f:80:48:63:85:48:e7:01:a7:dd:c6:03:96:d4:2f:
         b6:3f:db:06:c4:73:c2:7f:20:2f:2b:73:6a:0e:00:9b:7f:30:
         f3:61:b3:34:52:92:d4:7d:c4:e5:93:ed:7b:8b:be:22:72:5f:
         f6:42:13:3f:ca:74:d9:d0:96:4b:2a:ad:2a:ae:37:f5:89:ab:
         0f:c0:d0:77:ce:22:71:db:15:13:73:bc:ae:44:04:43:65:46:
         35:71:b2:a5:be:67:c9:76:b2:36:42:1e:e9:ce:98:7f:34:32:
         f8:e7:58:89:d1:91:c7:d4:95:e2:e2:fb:d6:64:ba:94:5a:03:
         0d:78:70:75
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUe2UTg58wv3kLHJ7lhGTRFo2679gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgw
RENDQTRDRTAeFw0yNDAyMjAwNjU3MDFaFw0yNTAyMTgwNzAyMDFaMDMxMTAvBgNV
BAMTKDhEOEREM0JGRjU4MzE4QUFCODQ3QTU1REMyM0Y5MjExQzY1NDRBMjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2SqVP9gg5+83CzkFKQuM/3ko1
NoQZSltRfv53YILL1V25Mk61WT/ZuGhW33FUkFFnDY6ycEHlE3CHFMdkqnuyy7f1
+Kqp8cwBN/Bo2p0S08vBD/YFI02sUizSRAOYVKYhad2LfN55e+UwWxYoHpOkrf3j
PMZ46i9TehTYjI5DcSI9G0LvZwoAT83Jk1xgkE16aobTbakwcYnsER2DM4bI5NYu
slmbjDsAz2aRB2YZmuoy4y6EGzcsZ0gZZnDvzaHPf7JaT6mu19zwO1PaZLLG6+/X
dXYYPsaB/8tfJlVNMusZEdySeW3+6o+HsyqRp2oo2H31VDtaVqEA7SVtM9HLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUjY3Tv/WDGKq4R6Vdwj+SEcZUSicwHwYDVR0j
BBgwFoAU/k8OiPAgJx+rsJQBB68T6A3MpM4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
OGMwNjhkYS1mOWM1LTQwMzYtODU0Yi05MjJjYWE5M2YzMjQvMC9GRTRGMEU4OEYw
MjAyNzFGQUJCMDk0MDEwN0FGMTNFODBEQ0NBNENFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkU0RjBFODhGMDIwMjcxRkFCQjA5NDAxMDdBRjEzRTgwREND
QTRDRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4YzA2OGRhLWY5YzUtNDAzNi04
NTRiLTkyMmNhYTkzZjMyNC8wLzMxMzAzMzJlMzEzNDM1MmUzMTMwMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDM0MzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkWwwDQYJ
KoZIhvcNAQELBQADggEBAFsuY9GNXN51BgtEHIlv6NMkZYKvZu93IO6zV3JedzPm
UhM5c9/BJWUmL1qTjiVpTbUk28Ts8yF684wXCmqU+FzfZFn0PEwoiTM78kuu7OFe
JeEx4ddL70d0sPe/2/P4ro5gwyEdesj7OOyQWV8Wkfebk03lauE9RkPLocdpeYr2
bk+ASGOFSOcBp93GA5bUL7Y/2wbEc8J/IC8rc2oOAJt/MPNhszRSktR9xOWT7XuL
viJyX/ZCEz/KdNnQlksqrSquN/WJqw/A0HfOInHbFRNzvK5EBENlRjVxsqW+Z8l2
sjZCHunOmH80MvjnWInRkcfUleLi+9ZkupRaAw14cHU=
-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org