Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
File:                     3130332e3133362e342e302f32322d3234203d3e203338333230.roa (raw, json)
Hash identifier:          Od90bLh3eJOp10+0iiqoVvDhfMxL4qvpEKDq91pd9ig=
Subject key identifier:   39:A2:F8:9B:31:71:42:C0:D4:50:30:34:C1:04:E4:5F:36:AE:C4:7D
Certificate issuer:       /CN=1F56B4FADE1163027086547FBCB424EDF45191FD
Certificate serial:       2C0C1799BC86613EB68D6755D786FCBF39565060
Authority key identifier: 1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa
Signing time:             Thu 16 May 2024 03:01:05 +0000
ROA not before:           Thu 16 May 2024 02:56:05 +0000
ROA not after:            Thu 15 May 2025 03:01:05 +0000
asID:                     38320
IP address blocks:        103.136.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl
                          rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:0c:17:99:bc:86:61:3e:b6:8d:67:55:d7:86:fc:bf:39:56:50:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F56B4FADE1163027086547FBCB424EDF45191FD
        Validity
            Not Before: May 16 02:56:05 2024 GMT
            Not After : May 15 03:01:05 2025 GMT
        Subject: CN=39A2F89B317142C0D4503034C104E45F36AEC47D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:ff:b1:24:79:d3:ec:84:4b:e8:d0:da:b6:
                    98:55:ae:b8:f5:f6:e8:21:70:56:0e:ad:b6:f5:4c:
                    e1:90:a0:3c:9f:1f:aa:86:59:4b:88:d5:2e:a3:50:
                    5d:94:bd:5f:3e:4f:81:2e:a1:34:fa:20:1c:61:9c:
                    5d:1f:1b:64:2f:fa:0c:7e:83:9d:60:b6:57:20:eb:
                    b0:db:df:83:ca:60:4a:0d:bf:79:7c:40:f4:f4:50:
                    34:f1:d8:65:1d:86:a5:5e:d8:03:b9:c8:08:9b:c3:
                    37:33:6e:fd:da:31:08:0c:f4:a0:f2:34:75:a6:3b:
                    d2:40:4a:bd:7f:3e:79:f4:d1:7d:2d:e2:19:67:64:
                    2a:57:ab:6c:63:c8:4c:96:87:a0:c0:b8:9e:d3:fa:
                    88:8e:19:1c:ec:01:aa:e2:d8:86:b5:66:f5:78:07:
                    c5:07:c8:12:35:2f:30:eb:30:42:bf:15:86:28:a4:
                    26:eb:18:77:3d:fe:49:ed:e3:8e:d9:e8:6c:1d:19:
                    5a:78:61:d2:ac:80:8e:e7:54:5a:65:c1:3a:18:f9:
                    fc:4e:17:62:24:af:1f:a9:a6:1e:a7:c6:d2:e6:34:
                    3f:49:1d:57:d5:20:23:81:83:3a:e6:f5:9d:3e:2e:
                    90:6b:47:e7:71:fd:f8:89:0a:88:a4:95:69:d2:7f:
                    79:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:A2:F8:9B:31:71:42:C0:D4:50:30:34:C1:04:E4:5F:36:AE:C4:7D
            X509v3 Authority Key Identifier:
                keyid:1F:56:B4:FA:DE:11:63:02:70:86:54:7F:BC:B4:24:ED:F4:51:91:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/1F56B4FADE1163027086547FBCB424EDF45191FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F56B4FADE1163027086547FBCB424EDF45191FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ac45c22c-275b-4295-b453-60a783b9c42a/0/3130332e3133362e342e302f32322d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.136.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:2e:f1:bc:19:a3:b4:fd:12:f2:34:36:75:73:22:30:f0:
         2d:a7:f5:cc:b8:90:53:1e:eb:85:34:ce:cd:69:51:ab:78:7d:
         72:ec:14:84:3d:aa:67:0e:a2:24:2c:f3:62:2f:e1:94:cb:fd:
         87:96:77:6d:88:bf:4c:49:67:a0:d6:49:5c:57:9f:ca:c6:a1:
         cb:96:e3:f2:0b:aa:1a:25:8a:64:86:9f:eb:55:81:63:d1:d8:
         66:4a:c0:17:61:e9:fb:78:95:66:08:1e:7c:a1:10:84:c2:95:
         8f:9c:ee:3a:08:bc:9a:3a:05:ab:b1:f2:d3:37:df:75:8b:7d:
         06:99:f6:3e:f4:c8:1f:6c:5b:8f:0c:ca:e9:a0:60:be:f6:e4:
         32:10:1f:dc:7b:ce:26:57:a1:e8:d4:79:ef:f0:38:69:1e:49:
         54:b1:e9:52:3e:2e:cf:83:80:f2:e6:49:d2:b2:6b:24:61:5f:
         58:ed:65:ce:ba:6f:11:54:96:ba:6c:e8:d5:74:8c:54:a9:cd:
         f1:65:d2:0b:e7:5d:98:29:7b:d0:9b:8a:13:f9:42:8a:e8:8f:
         f3:99:41:2a:25:35:71:ae:d2:c0:1c:2c:71:e1:20:db:54:b4:
         b8:41:ca:35:92:e0:79:c4:14:ed:86:65:71:c1:be:f8:2e:74:
         e3:2e:64:3a
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULAwXmbyGYT62jWdV14b8vzlWUGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURG
NDUxOTFGRDAeFw0yNDA1MTYwMjU2MDVaFw0yNTA1MTUwMzAxMDVaMDMxMTAvBgNV
BAMTKDM5QTJGODlCMzE3MTQyQzBENDUwMzAzNEMxMDRFNDVGMzZBRUM0N0QwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlS/+xJHnT7IRL6NDatphVrrj1
9ughcFYOrbb1TOGQoDyfH6qGWUuI1S6jUF2UvV8+T4EuoTT6IBxhnF0fG2Qv+gx+
g51gtlcg67Db34PKYEoNv3l8QPT0UDTx2GUdhqVe2AO5yAibwzczbv3aMQgM9KDy
NHWmO9JASr1/Pnn00X0t4hlnZCpXq2xjyEyWh6DAuJ7T+oiOGRzsAari2Ia1ZvV4
B8UHyBI1LzDrMEK/FYYopCbrGHc9/knt447Z6GwdGVp4YdKsgI7nVFplwToY+fxO
F2Ikrx+pph6nxtLmND9JHVfVICOBgzrm9Z0+LpBrR+dx/fiJCoiklWnSf3lfAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUOaL4mzFxQsDUUDA0wQTkXzauxH0wHwYDVR0j
BBgwFoAUH1a0+t4RYwJwhlR/vLQk7fRRkf0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
YzQ1YzIyYy0yNzViLTQyOTUtYjQ1My02MGE3ODNiOWM0MmEvMC8xRjU2QjRGQURF
MTE2MzAyNzA4NjU0N0ZCQ0I0MjRFREY0NTE5MUZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUY1NkI0RkFERTExNjMwMjcwODY1NDdGQkNCNDI0RURGNDUx
OTFGRC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FjNDVjMjJjLTI3NWItNDI5NS1i
NDUzLTYwYTc4M2I5YzQyYS8wLzMxMzAzMzJlMzEzMzM2MmUzNDJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMzMzgzMzMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJniAQwDQYJKoZIhvcN
AQELBQADggEBALMlLvG8GaO0/RLyNDZ1cyIw8C2n9cy4kFMe64U0zs1pUat4fXLs
FIQ9qmcOoiQs82Iv4ZTL/YeWd22Iv0xJZ6DWSVxXn8rGocuW4/ILqholimSGn+tV
gWPR2GZKwBdh6ft4lWYIHnyhEITClY+c7joIvJo6Baux8tM333WLfQaZ9j70yB9s
W48MyumgYL725DIQH9x7ziZXoejUee/wOGkeSVSx6VI+Ls+DgPLmSdKyayRhX1jt
Zc66bxFUlrps6NV0jFSpzfFl0gvnXZgpe9CbihP5Qoroj/OZQSolNXGu0sAcLHHh
INtUtLhByjWS4HnEFO2GZXHBvvgudOMuZDo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:20 2024 by rpki-client on console-fra.rpki-client.org