Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
File:                     3130332e33392e35302e302f32332d3233203d3e203633353031.roa (raw, json)
Hash identifier:          MhctpPvahqwjuIJgmUO/q9luyCNjppdb14V4uvG2YFA=
Subject key identifier:   6C:E8:A6:3E:9E:0F:83:74:78:65:92:B9:AC:30:30:8C:94:07:34:61
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       6EB0C9001251B74982574129FEAAF06BC43BA039
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa
Signing time:             Sun 23 Jul 2023 17:00:02 +0000
ROA not before:           Sun 23 Jul 2023 16:55:02 +0000
ROA not after:            Sun 21 Jul 2024 17:00:02 +0000
asID:                     63501
IP address blocks:        103.39.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b0:c9:00:12:51:b7:49:82:57:41:29:fe:aa:f0:6b:c4:3b:a0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul 23 16:55:02 2023 GMT
            Not After : Jul 21 17:00:02 2024 GMT
        Subject: CN=6CE8A63E9E0F8374786592B9AC30308C94073461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ed:30:b7:9c:88:db:64:20:3d:ac:12:01:ff:
                    43:68:3c:e6:a9:56:9f:96:4f:a5:1d:56:f5:01:34:
                    09:55:89:f3:e8:10:14:bd:5a:a3:e2:47:bf:a7:a4:
                    40:d3:62:92:71:60:5a:70:63:cf:c5:8d:2f:a2:0b:
                    db:23:25:be:04:69:0e:23:32:0c:5b:d7:27:ff:a9:
                    30:24:79:e3:82:8c:8c:20:14:d3:11:6d:3b:3e:ea:
                    ec:6f:39:55:a0:e0:f5:b0:47:23:83:37:89:d8:dd:
                    3c:ca:41:12:22:d2:e9:f2:9a:2f:24:a6:c9:04:19:
                    1d:19:01:b3:c0:e2:3b:42:ab:7a:53:d4:f6:a5:54:
                    bb:88:9a:17:af:96:34:e4:48:d0:3f:b2:a3:b7:fe:
                    3f:de:4b:54:0a:ca:98:99:58:1c:d8:19:ef:a3:af:
                    aa:b7:56:a3:6d:9c:e8:d1:ba:9c:42:15:2d:12:37:
                    44:9e:17:ef:9f:e8:83:f2:2a:13:55:78:d0:c1:64:
                    25:8c:71:69:36:44:e9:a4:4c:6f:c7:e8:22:2e:76:
                    3e:4a:74:5e:eb:bd:f5:ed:3f:4c:f4:ac:83:28:ba:
                    08:fc:e6:69:7d:b3:cc:06:4e:34:f4:29:a6:d5:83:
                    c5:78:b0:cf:9b:fe:c0:e4:b4:5f:f0:36:69:bc:eb:
                    37:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:E8:A6:3E:9E:0F:83:74:78:65:92:B9:AC:30:30:8C:94:07:34:61
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32332d3233203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:09:80:89:9d:01:83:8e:7a:31:3e:aa:9f:07:7c:f6:66:02:
         47:76:6e:cd:30:94:49:e6:47:d7:1c:cb:7e:b0:30:6a:76:eb:
         07:0c:89:1e:da:77:8c:71:78:0e:bf:4b:f5:27:17:a0:96:6b:
         11:9f:7a:64:91:7c:f2:a1:95:da:85:b5:16:55:04:d2:75:2e:
         5a:b3:db:e6:8e:e2:e4:f2:4b:78:a7:e0:e2:e8:9f:b6:71:cd:
         b1:3b:de:8c:01:0b:55:0a:d2:a2:fe:80:9d:3f:d9:0f:d2:6d:
         61:b5:5a:e4:d3:d0:f8:b4:43:41:4a:8b:66:0b:3b:36:7e:46:
         bd:c6:4d:1b:88:9e:50:f8:b1:e9:5c:e2:8c:15:ca:5c:fa:56:
         2f:7c:fe:16:e3:e6:ed:28:13:1c:9a:0a:02:d3:b9:cc:04:8d:
         9b:fc:94:9c:7a:d5:5b:7a:d0:d6:a2:44:68:6b:53:41:0c:ce:
         a6:46:27:ec:cc:98:85:15:d4:42:e4:21:c9:3e:4c:64:6d:0a:
         f0:e6:89:0e:b8:07:b2:42:3b:a4:bd:86:63:81:31:b8:a2:68:
         20:f2:4c:49:49:b9:c3:f3:28:fc:9b:87:5c:f7:df:72:ad:db:
         77:78:d4:6a:32:db:4f:90:e9:9b:86:37:29:c4:19:bd:4a:64:
         87:42:78:1f
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbrDJABJRt0mCV0Ep/qrwa8Q7oDkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4
NTVBMThFMTAeFw0yMzA3MjMxNjU1MDJaFw0yNDA3MjExNzAwMDJaMDMxMTAvBgNV
BAMTKDZDRThBNjNFOUUwRjgzNzQ3ODY1OTJCOUFDMzAzMDhDOTQwNzM0NjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDp7TC3nIjbZCA9rBIB/0NoPOap
Vp+WT6UdVvUBNAlVifPoEBS9WqPiR7+npEDTYpJxYFpwY8/FjS+iC9sjJb4EaQ4j
Mgxb1yf/qTAkeeOCjIwgFNMRbTs+6uxvOVWg4PWwRyODN4nY3TzKQRIi0unymi8k
pskEGR0ZAbPA4jtCq3pT1PalVLuImhevljTkSNA/sqO3/j/eS1QKypiZWBzYGe+j
r6q3VqNtnOjRupxCFS0SN0SeF++f6IPyKhNVeNDBZCWMcWk2ROmkTG/H6CIudj5K
dF7rvfXtP0z0rIMougj85ml9s8wGTjT0KabVg8V4sM+b/sDktF/wNmm86zfDAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUbOimPp4Pg3R4ZZK5rDAwjJQHNGEwHwYDVR0j
BBgwFoAURVaWqB9DT5o21m9FX0s8Q4VaGOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZDkxOGIxNS1lNjNlLTRiMzgtYTA1Yy02NTBmYjQ5ZjA1OTQvMC80NTU2OTZBODFG
NDM0RjlBMzZENjZGNDU1RjRCM0M0Mzg1NUExOEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDU1Njk2QTgxRjQzNEY5QTM2RDY2RjQ1NUY0QjNDNDM4NTVB
MThFMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkOTE4YjE1LWU2M2UtNGIzOC1h
MDVjLTY1MGZiNDlmMDU5NC8wLzMxMzAzMzJlMzMzOTJlMzUzMDJlMzAyZjMyMzMy
ZDMyMzMyMDNkM2UyMDM2MzMzNTMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnJzIwDQYJKoZIhvcN
AQELBQADggEBAJEJgImdAYOOejE+qp8HfPZmAkd2bs0wlEnmR9ccy36wMGp26wcM
iR7ad4xxeA6/S/UnF6CWaxGfemSRfPKhldqFtRZVBNJ1Llqz2+aO4uTyS3in4OLo
n7ZxzbE73owBC1UK0qL+gJ0/2Q/SbWG1WuTT0Pi0Q0FKi2YLOzZ+Rr3GTRuInlD4
selc4owVylz6Vi98/hbj5u0oExyaCgLTucwEjZv8lJx61Vt60NaiRGhrU0EMzqZG
J+zMmIUV1ELkIck+TGRtCvDmiQ64B7JCO6S9hmOBMbiiaCDyTElJucPzKPybh1z3
33Kt23d41Goy20+Q6ZuGNynEGb1KZIdCeB8=
-----END CERTIFICATE-----
Generated at Sat Jun 1 20:06:33 2024 by rpki-client on console-fra.rpki-client.org