Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          TqA2uFJInM9542dyIqn2Y7m1wA10c0dFIGXRTT7zTng=
Subject key identifier:   43:01:69:8B:B8:56:9F:6B:35:51:FD:61:EF:C6:37:EA:23:71:DD:EB
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       3EE3FD38A2F078FAF5559310B1FA823154EDCDE9
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa
Signing time:             Mon 31 Jul 2023 00:08:24 +0000
ROA not before:           Mon 31 Jul 2023 00:03:24 +0000
ROA not after:            Mon 29 Jul 2024 00:08:24 +0000
asID:                     136879
IP address blocks:        103.105.217.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:e3:fd:38:a2:f0:78:fa:f5:55:93:10:b1:fa:82:31:54:ed:cd:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jul 31 00:03:24 2023 GMT
            Not After : Jul 29 00:08:24 2024 GMT
        Subject: CN=4301698BB8569F6B3551FD61EFC637EA2371DDEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:3d:10:11:68:d1:05:7d:f7:2e:25:9d:2f:5c:
                    0a:8d:9a:2c:75:f0:70:ff:0c:eb:7f:39:cd:fd:84:
                    28:a4:f5:3e:bf:b8:3a:17:0f:44:b6:50:0f:6b:7f:
                    10:58:21:29:96:98:1d:fd:92:57:a8:ac:37:8e:31:
                    f5:24:99:49:ba:74:7a:ff:32:a8:f2:d7:d9:f1:93:
                    34:9d:19:10:d1:80:e3:18:e0:d8:be:b4:90:18:ef:
                    f9:80:f8:2d:49:cc:96:71:9e:b2:ff:a5:be:51:d3:
                    5e:e2:7d:fd:4e:a0:60:cd:67:08:e4:5f:6c:35:da:
                    81:e3:fd:8b:af:83:e6:bb:c0:b3:86:86:f3:2e:34:
                    b9:1d:05:34:6d:fc:8f:5b:ea:89:5d:ab:bd:8f:49:
                    36:78:81:55:8a:c0:b6:ee:cf:65:63:b4:7c:1a:88:
                    30:f0:23:2e:1a:27:a0:e9:61:f8:c2:29:c9:3a:f8:
                    dd:6e:2b:aa:46:b2:ce:a6:ea:8c:80:dd:c9:91:fa:
                    e1:7e:7d:b2:26:ee:8b:da:6c:d7:20:29:d6:b4:d1:
                    53:b1:e5:43:33:df:5b:c1:e3:f1:5a:fe:c1:c9:b0:
                    91:57:51:c3:8a:34:d1:d0:e3:56:ca:5f:d2:8e:68:
                    1a:03:fe:da:3e:dd:72:00:cf:4e:bb:d5:48:7e:41:
                    cf:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:01:69:8B:B8:56:9F:6B:35:51:FD:61:EF:C6:37:EA:23:71:DD:EB
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130352e3231372e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.105.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         20:8e:99:e3:e0:80:5a:b9:7a:59:00:a0:31:e4:26:75:be:57:
         5e:be:31:7d:1f:65:78:3c:85:ea:c3:4d:a7:b3:07:55:b9:8c:
         4e:4f:f8:70:db:1a:9a:f0:d6:e7:52:7a:dc:a8:7a:25:77:68:
         0d:ff:6d:a4:3d:71:bc:17:e3:28:6a:40:89:01:d9:84:d0:05:
         18:4c:2e:4d:f6:f9:e6:67:c3:ab:c0:c9:5e:c7:48:70:1b:47:
         b7:29:bc:f5:10:fb:a2:ca:db:07:ea:c1:37:8c:f8:64:af:d5:
         7d:b4:4a:a2:a8:b1:48:30:e2:55:d9:01:03:86:f7:af:5f:02:
         28:89:c8:bb:ba:b2:2a:fb:a1:69:cf:49:4d:84:0d:94:0b:0d:
         60:a1:fc:38:6f:b6:a8:d5:a1:11:f2:c7:41:b4:37:54:21:21:
         a4:e4:c9:7c:c1:07:f4:e2:f9:ce:cd:30:b0:3c:3d:8c:f9:0d:
         b5:de:b4:d4:e8:29:ef:23:1b:4e:3e:cf:45:35:6f:fe:98:6f:
         79:82:f0:37:c1:ee:a7:15:54:0a:d9:55:90:b5:10:40:63:08:
         7b:d5:23:55:4c:86:4b:f4:6b:5d:cc:a5:eb:76:1a:1d:24:50:
         15:74:03:92:78:c5:d3:e4:1f:c3:dc:d2:93:1a:45:32:9b:d8:
         29:60:1c:48
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPuP9OKLwePr1VZMQsfqCMVTtzekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVD
NjJDREVCMTAeFw0yMzA3MzEwMDAzMjRaFw0yNDA3MjkwMDA4MjRaMDMxMTAvBgNV
BAMTKDQzMDE2OThCQjg1NjlGNkIzNTUxRkQ2MUVGQzYzN0VBMjM3MURERUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClPRARaNEFffcuJZ0vXAqNmix1
8HD/DOt/Oc39hCik9T6/uDoXD0S2UA9rfxBYISmWmB39kleorDeOMfUkmUm6dHr/
Mqjy19nxkzSdGRDRgOMY4Ni+tJAY7/mA+C1JzJZxnrL/pb5R017iff1OoGDNZwjk
X2w12oHj/Yuvg+a7wLOGhvMuNLkdBTRt/I9b6oldq72PSTZ4gVWKwLbuz2VjtHwa
iDDwIy4aJ6DpYfjCKck6+N1uK6pGss6m6oyA3cmR+uF+fbIm7ovabNcgKda00VOx
5UMz31vB4/Fa/sHJsJFXUcOKNNHQ41bKX9KOaBoD/to+3XIAz0671Uh+Qc9DAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUQwFpi7hWn2s1Uf1h78Y36iNx3eswHwYDVR0j
BBgwFoAUIkdSDxIIyNmsM7MDUBbcTsYs3rEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ZGRmMTgxZi0xZTg5LTQwMjItODJmOC1lMGRiYTg1OWVlMmUvMC8yMjQ3NTIwRjEy
MDhDOEQ5QUMzM0IzMDM1MDE2REM0RUM2MkNERUIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjI0NzUyMEYxMjA4QzhEOUFDMzNCMzAzNTAxNkRDNEVDNjJD
REVCMS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2FkZGYxODFmLTFlODktNDAyMi04
MmY4LWUwZGJhODU5ZWUyZS8wLzMxMzAzMzJlMzEzMDM1MmUzMjMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM3Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnadkwDQYJ
KoZIhvcNAQELBQADggEBACCOmePggFq5elkAoDHkJnW+V16+MX0fZXg8herDTaez
B1W5jE5P+HDbGprw1udSetyoeiV3aA3/baQ9cbwX4yhqQIkB2YTQBRhMLk32+eZn
w6vAyV7HSHAbR7cpvPUQ+6LK2wfqwTeM+GSv1X20SqKosUgw4lXZAQOG969fAiiJ
yLu6sir7oWnPSU2EDZQLDWCh/DhvtqjVoRHyx0G0N1QhIaTkyXzBB/Ti+c7NMLA8
PYz5DbXetNToKe8jG04+z0U1b/6Yb3mC8DfB7qcVVArZVZC1EEBjCHvVI1VMhkv0
a13Mpet2Gh0kUBV0A5J4xdPkH8Pc0pMaRTKb2ClgHEg=
-----END CERTIFICATE-----
Generated at Sun Jun 2 20:00:19 2024 by rpki-client on console-fra.rpki-client.org