Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
File:                     3130332e312e35302e302f32332d3233203d3e20313432333532.roa (raw, json)
Hash identifier:          d6srWhtN2X4dAgieAJSpS+NBBm4W2wQmwak3mZ73rds=
Subject key identifier:   80:D7:93:87:D1:0F:C6:84:9D:FD:70:FE:A8:5E:23:F0:B9:45:9B:B6
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       6D3CA4A90E2A3435D833CE90E76A2B27C6D65CFB
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa
Signing time:             Tue 28 Nov 2023 09:00:01 +0000
ROA not before:           Tue 28 Nov 2023 08:55:01 +0000
ROA not after:            Tue 26 Nov 2024 09:00:01 +0000
asID:                     142352
IP address blocks:        103.1.50.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:3c:a4:a9:0e:2a:34:35:d8:33:ce:90:e7:6a:2b:27:c6:d6:5c:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Nov 28 08:55:01 2023 GMT
            Not After : Nov 26 09:00:01 2024 GMT
        Subject: CN=80D79387D10FC6849DFD70FEA85E23F0B9459BB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:04:2f:a4:a2:cf:e4:f4:43:fb:4d:19:dc:10:
                    4f:b6:04:cb:b1:3d:e3:41:a4:d4:90:81:ea:0d:26:
                    e3:c7:9a:5a:f1:00:df:7b:59:c9:b2:94:ec:16:62:
                    40:b9:fa:f9:2e:5a:fb:b0:a6:76:e3:7e:61:21:ee:
                    7f:ad:51:73:ec:88:e4:12:af:f1:62:de:d6:43:ed:
                    c9:3a:5b:2b:10:1b:d7:09:48:20:ae:73:2c:3f:32:
                    00:a2:eb:af:fb:fe:be:44:ba:d7:03:a9:17:82:ef:
                    66:53:cc:2c:02:ce:35:c9:d1:0f:76:88:c0:4f:bb:
                    d0:c0:a7:1f:80:d6:bf:8c:d9:99:5e:1b:98:bd:0f:
                    d9:08:76:87:95:2c:bb:e2:78:df:bc:52:db:b8:00:
                    f0:bb:38:57:3b:40:6e:66:2e:a7:31:46:88:eb:8b:
                    5d:0f:60:e0:78:13:45:e4:69:eb:d9:d9:c9:ee:53:
                    8c:02:5c:a3:bf:31:82:91:0b:70:c1:94:9b:5c:9c:
                    e1:39:61:57:1b:f1:80:80:b5:00:30:43:2f:ae:13:
                    e0:44:6c:a4:4e:21:fd:df:8a:d6:b9:bb:06:9f:74:
                    e6:d7:46:6b:80:c3:76:b5:62:e1:98:b4:0e:3f:b1:
                    7f:a4:a5:ba:72:fa:ae:3b:42:a2:72:07:76:80:09:
                    ee:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:D7:93:87:D1:0F:C6:84:9D:FD:70:FE:A8:5E:23:F0:B9:45:9B:B6
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32332d3233203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         83:de:a9:35:d6:50:1d:30:5d:6a:fe:37:4b:25:02:ec:48:cd:
         2d:f6:23:68:f8:41:a2:18:4b:53:18:dc:97:0b:7a:13:5a:05:
         2e:da:7e:9f:40:1d:85:f8:1c:fa:2c:21:c6:40:33:c4:50:90:
         d4:d6:c2:3f:35:6b:f3:05:f0:0c:a6:62:f4:73:bd:33:10:f9:
         5e:56:f7:4b:3d:f7:9a:87:3c:c8:4e:70:7e:1d:b9:87:e8:69:
         5b:e9:ca:73:e9:a7:27:95:29:34:96:8b:57:53:a1:c7:5f:5a:
         bc:01:a2:6d:19:6a:44:f5:75:fa:35:fa:c9:20:3f:d4:2e:d8:
         cb:0d:4f:ad:92:7d:e5:d6:84:1e:61:54:e1:42:39:ad:07:79:
         d3:0c:be:3c:4a:4a:c2:f9:34:83:45:2b:ba:28:e3:a2:68:f0:
         79:c3:71:ff:d5:66:e0:85:dd:4f:24:47:6c:f9:c4:2d:0e:08:
         5b:a4:40:84:e2:db:c6:50:85:de:8c:ce:e3:45:c8:e8:b0:a1:
         59:3a:1e:5f:ce:89:78:bc:67:10:5f:d9:08:69:58:1b:0f:f9:
         18:96:cd:80:ed:b4:5a:46:c5:45:39:1b:93:b0:26:0c:73:ab:
         f1:06:b6:eb:a5:06:a3:d5:0a:eb:18:12:d1:74:4e:62:74:47:
         39:e6:b1:a8
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUbTykqQ4qNDXYM86Q52orJ8bWXPswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJB
MDk5MzA5NDAeFw0yMzExMjgwODU1MDFaFw0yNDExMjYwOTAwMDFaMDMxMTAvBgNV
BAMTKDgwRDc5Mzg3RDEwRkM2ODQ5REZENzBGRUE4NUUyM0YwQjk0NTlCQjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkBC+kos/k9EP7TRncEE+2BMux
PeNBpNSQgeoNJuPHmlrxAN97WcmylOwWYkC5+vkuWvuwpnbjfmEh7n+tUXPsiOQS
r/Fi3tZD7ck6WysQG9cJSCCucyw/MgCi66/7/r5EutcDqReC72ZTzCwCzjXJ0Q92
iMBPu9DApx+A1r+M2ZleG5i9D9kIdoeVLLvieN+8Utu4APC7OFc7QG5mLqcxRojr
i10PYOB4E0XkaevZ2cnuU4wCXKO/MYKRC3DBlJtcnOE5YVcb8YCAtQAwQy+uE+BE
bKROIf3fita5uwafdObXRmuAw3a1YuGYtA4/sX+kpbpy+q47QqJyB3aACe7zAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUgNeTh9EPxoSd/XD+qF4j8LlFm7YwHwYDVR0j
BBgwFoAUtINF9/n7TxT//ovFt0aF0qCZMJQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NjUyYmY5Yy02MzRiLTQwYjktYWMwYy1hODdiNDdkNTlmOTEvMC9CNDgzNDVGN0Y5
RkI0RjE0RkZGRThCQzVCNzQ2ODVEMkEwOTkzMDk0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjQ4MzQ1RjdGOUZCNEYxNEZGRkU4QkM1Qjc0Njg1RDJBMDk5
MzA5NC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2NTJiZjljLTYzNGItNDBiOS1h
YzBjLWE4N2I0N2Q1OWY5MS8wLzMxMzAzMzJlMzEyZTM1MzAyZTMwMmYzMjMzMmQz
MjMzMjAzZDNlMjAzMTM0MzIzMzM1MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnATIwDQYJKoZIhvcN
AQELBQADggEBAIPeqTXWUB0wXWr+N0slAuxIzS32I2j4QaIYS1MY3JcLehNaBS7a
fp9AHYX4HPosIcZAM8RQkNTWwj81a/MF8AymYvRzvTMQ+V5W90s995qHPMhOcH4d
uYfoaVvpynPppyeVKTSWi1dTocdfWrwBom0ZakT1dfo1+skgP9Qu2MsNT62SfeXW
hB5hVOFCOa0HedMMvjxKSsL5NINFK7oo46Jo8HnDcf/VZuCF3U8kR2z5xC0OCFuk
QITi28ZQhd6MzuNFyOiwoVk6Hl/OiXi8ZxBf2QhpWBsP+RiWzYDttFpGxUU5G5Ow
Jgxzq/EGtuulBqPVCusYEtF0TmJ0Rznmsag=
-----END CERTIFICATE-----
Generated at Mon Jun 24 05:42:50 2024 by rpki-client on console-fra.rpki-client.org