Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa
File:                     3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa (raw, json)
Hash identifier:          qXm5OxgMv4TcPXZipMM0PRQhdP1SGsd2a/YWwJZjM34=
Subject key identifier:   39:40:AB:F2:7D:34:1A:15:24:E5:13:88:D3:D8:DD:98:A9:1E:91:55
Certificate issuer:       /CN=9481EF5008E46F3618B42A0945A1522D5C041511
Certificate serial:       1BF3CE86CD8DE53E552E73CA0D83CF3B08F230F1
Authority key identifier: 94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa
Signing time:             Thu 04 Jan 2024 06:00:02 +0000
ROA not before:           Thu 04 Jan 2024 05:55:02 +0000
ROA not after:            Thu 02 Jan 2025 06:00:02 +0000
asID:                     150493
IP address blocks:        103.59.161.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl
                          rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:54:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:f3:ce:86:cd:8d:e5:3e:55:2e:73:ca:0d:83:cf:3b:08:f2:30:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9481EF5008E46F3618B42A0945A1522D5C041511
        Validity
            Not Before: Jan  4 05:55:02 2024 GMT
            Not After : Jan  2 06:00:02 2025 GMT
        Subject: CN=3940ABF27D341A1524E51388D3D8DD98A91E9155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:3d:66:58:91:10:a4:34:9c:22:5f:ce:2c:ce:
                    d4:b0:50:de:a2:4c:e7:1e:8f:6c:21:26:93:d2:65:
                    34:f9:4c:dd:58:ac:01:88:e5:02:0d:56:fd:63:f0:
                    1c:70:b4:5a:94:5e:4c:2c:bb:8b:50:0c:2a:36:6d:
                    79:0c:1f:a0:8e:6f:f9:d6:52:5b:54:b6:cc:a2:19:
                    6f:91:ec:d1:9e:9d:03:7d:a0:bf:c6:6f:79:d9:e2:
                    44:fd:58:89:5a:51:f5:cf:84:89:88:0a:6a:5e:94:
                    df:ed:57:20:01:9e:2f:e6:7f:87:c5:12:06:24:1d:
                    19:3a:e5:6e:f8:0e:ef:db:6f:4c:13:ac:ed:a9:88:
                    62:7b:7c:b4:34:be:86:68:97:01:ba:b2:da:a9:30:
                    76:b3:29:31:56:61:cc:b3:ec:f3:21:5f:5c:c6:cc:
                    7c:58:4e:80:5a:7d:fb:a6:12:18:45:15:c3:c0:e1:
                    03:d8:5b:7a:14:46:99:b1:4a:09:b5:7a:48:7a:84:
                    a9:55:74:28:87:7b:28:04:22:53:e9:b3:0d:50:3b:
                    af:54:7c:08:6c:fa:ac:bc:39:81:35:c4:13:99:bb:
                    4c:d1:a4:4e:5f:bc:e9:f8:dd:f8:14:be:d8:09:1d:
                    fb:31:c1:b3:80:34:b6:4a:d5:cf:36:fc:23:be:e3:
                    1e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:40:AB:F2:7D:34:1A:15:24:E5:13:88:D3:D8:DD:98:A9:1E:91:55
            X509v3 Authority Key Identifier:
                keyid:94:81:EF:50:08:E4:6F:36:18:B4:2A:09:45:A1:52:2D:5C:04:15:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/9481EF5008E46F3618B42A0945A1522D5C041511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9481EF5008E46F3618B42A0945A1522D5C041511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/adbd3a50-832e-4127-94e1-48ace164cf26/0/3130332e35392e3136312e302f32342d3234203d3e20313530343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.59.161.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:b5:9b:0e:12:d8:c4:37:b9:58:7f:00:3b:db:62:e9:f5:48:
         a7:fa:a1:ec:72:aa:2c:94:67:76:7a:75:19:69:05:68:b5:6e:
         21:49:2d:78:76:2a:0a:ee:6a:85:8c:be:f8:18:a5:dd:a7:6e:
         fc:61:a1:09:53:00:70:ac:cc:af:3b:43:f7:c2:85:88:54:dc:
         f7:4a:13:fa:9b:d9:ad:01:0d:48:f5:9b:c2:e5:be:bd:f9:24:
         54:b1:6d:53:b3:8f:fc:3c:e6:e6:81:a5:7a:54:4e:21:6c:ae:
         b7:72:bb:dc:27:da:a0:d8:e1:7f:e7:6f:3a:f5:b3:73:e7:c6:
         99:28:2d:54:c3:e5:58:e0:7b:62:63:cb:5c:62:3e:c4:df:b8:
         20:33:0b:d4:c8:dd:20:89:ca:af:2f:98:13:f0:aa:04:d0:b8:
         26:c2:09:7d:15:92:e5:7e:b9:ef:2d:31:9b:3f:79:9b:c7:a5:
         1e:22:45:2c:c2:af:fd:65:e8:bb:66:77:8c:37:0c:aa:37:e3:
         cc:e4:51:15:75:e2:33:e0:31:69:32:ef:39:8b:c8:82:85:31:
         c9:63:cd:9c:14:cf:13:41:88:a0:b8:d5:1e:ba:76:05:59:24:
         b6:3d:13:59:de:1d:ea:64:8b:0e:a4:0a:94:63:8e:ec:0f:96:
         69:ff:6b:0d
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG/POhs2N5T5VLnPKDYPPOwjyMPEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ4MUVGNTAwOEU0NkYzNjE4QjQyQTA5NDVBMTUyMkQ1
QzA0MTUxMTAeFw0yNDAxMDQwNTU1MDJaFw0yNTAxMDIwNjAwMDJaMDMxMTAvBgNV
BAMTKDM5NDBBQkYyN0QzNDFBMTUyNEU1MTM4OEQzRDhERDk4QTkxRTkxNTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVPWZYkRCkNJwiX84sztSwUN6i
TOcej2whJpPSZTT5TN1YrAGI5QINVv1j8BxwtFqUXkwsu4tQDCo2bXkMH6COb/nW
UltUtsyiGW+R7NGenQN9oL/Gb3nZ4kT9WIlaUfXPhImICmpelN/tVyABni/mf4fF
EgYkHRk65W74Du/bb0wTrO2piGJ7fLQ0voZolwG6stqpMHazKTFWYcyz7PMhX1zG
zHxYToBaffumEhhFFcPA4QPYW3oURpmxSgm1ekh6hKlVdCiHeygEIlPpsw1QO69U
fAhs+qy8OYE1xBOZu0zRpE5fvOn43fgUvtgJHfsxwbOANLZK1c82/CO+4x6zAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOUCr8n00GhUk5ROI09jdmKkekVUwHwYDVR0j
BBgwFoAUlIHvUAjkbzYYtCoJRaFSLVwEFREwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZGJkM2E1MC04MzJlLTQxMjctOTRlMS00OGFjZTE2NGNmMjYvMC85NDgxRUY1MDA4
RTQ2RjM2MThCNDJBMDk0NUExNTIyRDVDMDQxNTExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ4MUVGNTAwOEU0NkYzNjE4QjQyQTA5NDVBMTUyMkQ1QzA0
MTUxMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkYmQzYTUwLTgzMmUtNDEyNy05
NGUxLTQ4YWNlMTY0Y2YyNi8wLzMxMzAzMzJlMzUzOTJlMzEzNjMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzOTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzuhMA0GCSqG
SIb3DQEBCwUAA4IBAQAgtZsOEtjEN7lYfwA722Lp9Uin+qHscqoslGd2enUZaQVo
tW4hSS14dioK7mqFjL74GKXdp278YaEJUwBwrMyvO0P3woWIVNz3ShP6m9mtAQ1I
9ZvC5b69+SRUsW1Ts4/8PObmgaV6VE4hbK63crvcJ9qg2OF/52869bNz58aZKC1U
w+VY4HtiY8tcYj7E37ggMwvUyN0gicqvL5gT8KoE0Lgmwgl9FZLlfrnvLTGbP3mb
x6UeIkUswq/9Zei7ZneMNwyqN+PM5FEVdeIz4DFpMu85i8iChTHJY82cFM8TQYig
uNUeunYFWSS2PRNZ3h3qZIsOpAqUY47sD5Zp/2sN
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org