Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
File:                     3130332e33392e34382e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          xAj5k4gQH36iwnsSHbT7ZuwohzTRhZXNulaieAkFS4E=
Subject key identifier:   AB:27:1C:EA:A9:94:38:04:DB:8E:AE:1D:BF:CC:51:81:6C:1D:D4:18
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       792379D9E7F36BDA737238A51FA95D90F6AFA9F5
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 23 Jun 2024 17:00:02 +0000
ROA not before:           Sun 23 Jun 2024 16:55:02 +0000
ROA not after:            Sun 22 Jun 2025 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.48.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:23:79:d9:e7:f3:6b:da:73:72:38:a5:1f:a9:5d:90:f6:af:a9:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun 23 16:55:02 2024 GMT
            Not After : Jun 22 17:00:02 2025 GMT
        Subject: CN=AB271CEAA9943804DB8EAE1DBFCC51816C1DD418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:54:1f:a7:78:cb:97:28:21:fa:de:94:5b:1b:
                    1e:9b:4e:43:05:2c:18:ae:a9:89:41:fd:86:85:0e:
                    37:3d:13:e6:0a:87:29:31:d5:5f:13:c6:ea:90:15:
                    54:7e:a2:e5:78:b1:29:19:b4:a6:2d:33:17:c3:50:
                    fd:cb:82:9e:22:07:3c:d9:da:86:d2:3f:ad:8f:ae:
                    ca:20:00:85:48:18:ff:74:e8:aa:f4:b9:10:2f:89:
                    44:87:d5:68:b8:e9:90:7b:84:80:57:da:56:4d:12:
                    2c:12:74:df:d1:14:1c:16:f5:48:ff:ea:76:d3:e2:
                    90:bf:dc:59:66:cc:f6:7e:9e:2d:90:ed:ce:56:59:
                    cb:7e:92:da:02:ce:4e:86:f3:3c:15:d0:0a:28:77:
                    bf:7d:9f:79:03:24:d7:29:de:b0:6b:c5:5c:d4:2c:
                    e9:4a:ab:6a:fc:38:6f:65:f7:bb:53:5a:f1:61:e4:
                    94:b1:24:b3:a9:e4:74:03:68:0a:2b:e8:61:c6:ee:
                    75:41:6c:41:58:d6:44:d2:7e:e3:01:50:e3:2f:d0:
                    44:ff:5d:df:b1:2a:1c:d1:53:67:cf:3a:20:3e:00:
                    f4:e9:6c:74:53:28:4d:94:f7:e4:47:1d:a8:d1:98:
                    c5:53:cf:13:59:88:72:98:06:f6:92:6f:97:a2:27:
                    9f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:27:1C:EA:A9:94:38:04:DB:8E:AE:1D:BF:CC:51:81:6C:1D:D4:18
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e34382e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         48:f3:b0:3a:3c:ad:ae:39:ec:f3:4c:7a:66:5e:37:06:64:17:
         6c:ec:ac:66:e0:0a:af:a3:09:d8:53:59:4b:b9:86:06:97:03:
         aa:db:4e:0a:13:56:e8:2f:9d:7d:51:83:4e:38:3a:b5:2d:fa:
         da:96:49:5e:3f:f1:61:44:8b:41:c5:59:7a:09:7c:42:2c:f5:
         b7:97:3a:a8:4e:e6:f2:b3:ae:97:c9:59:2b:74:51:35:2b:bc:
         35:33:6f:d8:da:b3:d1:ba:de:43:95:f2:36:0e:c9:34:2c:cd:
         ca:67:9e:3e:e5:e3:cb:7a:6b:a1:e3:35:73:0e:25:a0:09:fd:
         24:f9:b8:bb:c1:ce:75:cf:18:46:3f:05:d9:35:4e:3c:42:4a:
         80:90:50:84:b5:47:48:9f:c9:93:16:f3:4f:9c:ea:87:63:fb:
         36:c1:59:22:59:e9:1f:3b:46:46:28:34:fb:23:30:7e:17:17:
         3d:c1:2a:51:20:ec:86:99:88:25:43:67:ba:3a:82:f4:2b:bf:
         c5:c7:fa:e7:bc:0a:70:4e:61:0e:dc:c8:3a:9d:e1:22:28:e1:
         9f:64:99:0f:d3:85:b7:88:f5:fa:8c:8f:01:c4:c0:bc:55:8f:
         8c:42:06:a3:23:88:88:1b:89:99:f1:69:1e:c9:77:88:bb:f6:
         68:6b:f8:25
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUeSN52efza9pzcjilH6ldkPavqfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yNDA2MjMxNjU1MDJaFw0yNTA2MjIxNzAwMDJaMDMxMTAvBgNV
BAMTKEFCMjcxQ0VBQTk5NDM4MDREQjhFQUUxREJGQ0M1MTgxNkMxREQ0MTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjVB+neMuXKCH63pRbGx6bTkMF
LBiuqYlB/YaFDjc9E+YKhykx1V8TxuqQFVR+ouV4sSkZtKYtMxfDUP3Lgp4iBzzZ
2obSP62PrsogAIVIGP906Kr0uRAviUSH1Wi46ZB7hIBX2lZNEiwSdN/RFBwW9Uj/
6nbT4pC/3FlmzPZ+ni2Q7c5WWct+ktoCzk6G8zwV0Aood799n3kDJNcp3rBrxVzU
LOlKq2r8OG9l97tTWvFh5JSxJLOp5HQDaAor6GHG7nVBbEFY1kTSfuMBUOMv0ET/
Xd+xKhzRU2fPOiA+APTpbHRTKE2U9+RHHajRmMVTzxNZiHKYBvaSb5eiJ5/tAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUqycc6qmUOATbjq4dv8xRgWwd1BgwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzQzODJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJzAwDQYJKoZIhvcN
AQELBQADggEBAEjzsDo8ra457PNMemZeNwZkF2zsrGbgCq+jCdhTWUu5hgaXA6rb
TgoTVugvnX1Rg044OrUt+tqWSV4/8WFEi0HFWXoJfEIs9beXOqhO5vKzrpfJWSt0
UTUrvDUzb9jas9G63kOV8jYOyTQszcpnnj7l48t6a6HjNXMOJaAJ/ST5uLvBznXP
GEY/Bdk1TjxCSoCQUIS1R0ifyZMW80+c6odj+zbBWSJZ6R87RkYoNPsjMH4XFz3B
KlEg7IaZiCVDZ7o6gvQrv8XH+ue8CnBOYQ7cyDqd4SIo4Z9kmQ/ThbeI9fqMjwHE
wLxVj4xCBqMjiIgbiZnxaR7Jd4i79mhr+CU=
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org