Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
File:                     3130332e3138342e36342e302f32332d3234203d3e203539323738.roa (raw, json)
Hash identifier:          SPAwpGkaSWc0uNdATDp1XNpucbYxl6+PHS3pp5iqZpw=
Subject key identifier:   F2:D8:8B:5C:47:B5:A6:FC:4D:48:3B:3E:22:DE:B7:17:46:A2:AB:99
Certificate issuer:       /CN=3D93688202931D72322A7EE0053964A2DD8EB457
Certificate serial:       7DD3AC9EE0F9A5F5E78A482256168D6EEA24ABDC
Authority key identifier: 3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa
Signing time:             Tue 12 Mar 2024 09:00:53 +0000
ROA not before:           Tue 12 Mar 2024 08:55:53 +0000
ROA not after:            Tue 11 Mar 2025 09:00:53 +0000
asID:                     59278
IP address blocks:        103.184.64.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl
                          rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:d3:ac:9e:e0:f9:a5:f5:e7:8a:48:22:56:16:8d:6e:ea:24:ab:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3D93688202931D72322A7EE0053964A2DD8EB457
        Validity
            Not Before: Mar 12 08:55:53 2024 GMT
            Not After : Mar 11 09:00:53 2025 GMT
        Subject: CN=F2D88B5C47B5A6FC4D483B3E22DEB71746A2AB99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:aa:e6:5c:2c:07:14:76:5b:77:92:2d:e0:82:
                    96:70:bf:bc:da:2c:57:84:13:61:a0:7b:77:d8:d6:
                    3d:62:d8:ca:53:96:4f:0b:36:ca:1c:9f:03:d5:ec:
                    8c:0c:22:86:de:7d:26:80:21:c1:2b:2e:5c:8a:7b:
                    73:11:0a:cc:08:22:ae:79:11:d6:c9:a7:74:7a:ec:
                    31:16:4b:0a:97:f1:d0:0e:e9:a4:88:1f:d7:a4:b9:
                    97:bd:d4:15:e0:40:26:60:27:89:95:ec:41:cf:9b:
                    b3:ec:03:d8:01:4c:ec:a4:a0:3d:8e:88:a1:fa:01:
                    9f:3b:33:d6:d0:0e:cb:70:eb:68:52:9c:91:f9:2c:
                    f6:cd:a1:99:64:75:55:8d:ba:72:c6:69:8b:77:71:
                    69:be:3f:67:c4:3b:c4:0f:5b:12:e7:06:e6:b1:56:
                    2b:e1:2f:d7:27:e3:b1:50:7f:04:e2:43:32:76:5b:
                    00:c0:22:85:a2:d9:29:62:49:da:3d:4d:75:4b:3d:
                    07:1c:fc:05:48:79:35:9e:ac:aa:4e:d4:1b:45:77:
                    99:89:9e:ea:53:72:7b:9f:92:f3:84:b3:2b:99:e3:
                    0e:a7:31:63:80:a7:15:15:1a:c2:e9:c8:96:c2:0d:
                    c4:d6:e4:1d:fd:ed:da:85:83:50:1c:f8:62:61:04:
                    76:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D8:8B:5C:47:B5:A6:FC:4D:48:3B:3E:22:DE:B7:17:46:A2:AB:99
            X509v3 Authority Key Identifier:
                keyid:3D:93:68:82:02:93:1D:72:32:2A:7E:E0:05:39:64:A2:DD:8E:B4:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3D93688202931D72322A7EE0053964A2DD8EB457.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3D93688202931D72322A7EE0053964A2DD8EB457.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b6d88496-b2ba-4d13-9825-ae38aff1da15/0/3130332e3138342e36342e302f32332d3234203d3e203539323738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         50:b5:d9:ed:f4:cf:2f:3a:ec:fe:75:73:7c:38:cb:f6:6f:c1:
         0b:9d:99:91:6b:08:22:59:b1:f3:25:bd:3a:a9:8b:1a:bd:92:
         8d:ee:7a:26:ef:e5:d3:6d:24:36:f4:f1:6b:32:55:bc:1f:2f:
         aa:fe:3a:2a:02:f2:6f:d7:59:d7:9b:cf:60:89:77:36:85:40:
         6b:ba:9b:7a:69:88:6c:5b:15:45:27:95:8a:46:99:e7:64:38:
         94:0e:5d:c6:2c:2e:bd:20:44:54:91:a6:28:07:4e:68:c1:c6:
         d2:8e:ac:b2:c6:dc:aa:a8:81:3e:6a:0a:b6:b3:56:0f:87:45:
         ea:ba:31:9e:35:ea:59:b1:29:ec:12:ff:cd:a2:83:32:40:59:
         77:b7:1b:1e:42:8d:c8:97:6f:9e:4d:50:c4:47:83:81:ae:54:
         c0:5a:67:db:f6:b0:3c:36:74:6a:94:cd:5b:12:38:b5:a2:b6:
         f0:36:a1:d3:78:1d:b0:9b:e0:2f:06:08:a1:82:19:63:6b:68:
         fb:88:93:d3:c4:fd:15:23:a9:a3:9f:92:e6:52:29:a7:53:79:
         d1:7e:e9:ca:e7:29:d0:b4:d9:c3:42:cb:1f:1d:a4:9a:52:fa:
         83:5a:df:59:a6:a7:6c:e4:bf:07:43:e8:ae:5a:18:f0:de:38:
         e1:56:ff:e1
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfdOsnuD5pfXnikgiVhaNbuokq9wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJE
RDhFQjQ1NzAeFw0yNDAzMTIwODU1NTNaFw0yNTAzMTEwOTAwNTNaMDMxMTAvBgNV
BAMTKEYyRDg4QjVDNDdCNUE2RkM0RDQ4M0IzRTIyREVCNzE3NDZBMkFCOTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFquZcLAcUdlt3ki3ggpZwv7za
LFeEE2Gge3fY1j1i2MpTlk8LNsocnwPV7IwMIobefSaAIcErLlyKe3MRCswIIq55
EdbJp3R67DEWSwqX8dAO6aSIH9ekuZe91BXgQCZgJ4mV7EHPm7PsA9gBTOykoD2O
iKH6AZ87M9bQDstw62hSnJH5LPbNoZlkdVWNunLGaYt3cWm+P2fEO8QPWxLnBuax
VivhL9cn47FQfwTiQzJ2WwDAIoWi2SliSdo9TXVLPQcc/AVIeTWerKpO1BtFd5mJ
nupTcnufkvOEsyuZ4w6nMWOApxUVGsLpyJbCDcTW5B397dqFg1Ac+GJhBHbFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU8tiLXEe1pvxNSDs+It63F0aiq5kwHwYDVR0j
BBgwFoAUPZNoggKTHXIyKn7gBTlkot2OtFcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NmQ4ODQ5Ni1iMmJhLTRkMTMtOTgyNS1hZTM4YWZmMWRhMTUvMC8zRDkzNjg4MjAy
OTMxRDcyMzIyQTdFRTAwNTM5NjRBMkREOEVCNDU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0Q5MzY4ODIwMjkzMUQ3MjMyMkE3RUUwMDUzOTY0QTJERDhF
QjQ1Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I2ZDg4NDk2LWIyYmEtNGQxMy05
ODI1LWFlMzhhZmYxZGExNS8wLzMxMzAzMzJlMzEzODM0MmUzNjM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzOTMyMzczOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWe4QDANBgkqhkiG
9w0BAQsFAAOCAQEAULXZ7fTPLzrs/nVzfDjL9m/BC52ZkWsIIlmx8yW9OqmLGr2S
je56Ju/l020kNvTxazJVvB8vqv46KgLyb9dZ15vPYIl3NoVAa7qbemmIbFsVRSeV
ikaZ52Q4lA5dxiwuvSBEVJGmKAdOaMHG0o6sssbcqqiBPmoKtrNWD4dF6roxnjXq
WbEp7BL/zaKDMkBZd7cbHkKNyJdvnk1QxEeDga5UwFpn2/awPDZ0apTNWxI4taK2
8Dah03gdsJvgLwYIoYIZY2to+4iT08T9FSOpo5+S5lIpp1N50X7pyucp0LTZw0LL
Hx2kmlL6g1rfWaanbOS/B0PorloY8N444Vb/4Q==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:37 2024 by rpki-client on console-ams.rpki-client.org