Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa
File:                     3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa (raw, json)
Hash identifier:          5WAjPQFyaB8VU/xV/L/W+MpTyoJtVsIgPQ74sNXdzhE=
Subject key identifier:   EA:C2:4D:75:94:87:FE:3E:09:15:5E:72:7A:80:1A:7E:C6:04:9A:18
Certificate issuer:       /CN=13697C4A24DCE77089F778CD506D620711B4472B
Certificate serial:       247497FB198A73E35407B303EF5681DEC094F9A5
Authority key identifier: 13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa
Signing time:             Sat 16 Nov 2024 14:34:09 +0000
ROA not before:           Sat 16 Nov 2024 14:29:09 +0000
ROA not after:            Sat 15 Nov 2025 14:34:09 +0000
asID:                     58378
IP address blocks:        103.161.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl
                          rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:74:97:fb:19:8a:73:e3:54:07:b3:03:ef:56:81:de:c0:94:f9:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=13697C4A24DCE77089F778CD506D620711B4472B
        Validity
            Not Before: Nov 16 14:29:09 2024 GMT
            Not After : Nov 15 14:34:09 2025 GMT
        Subject: CN=EAC24D759487FE3E09155E727A801A7EC6049A18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:80:d9:27:08:09:2a:7c:7f:c7:d2:13:07:
                    a4:4b:1c:df:10:8a:ce:cd:19:d5:3e:8c:77:b1:2e:
                    e0:8f:4a:99:92:94:5a:22:cf:33:4f:45:7c:1a:0f:
                    c7:ff:d6:73:9e:e5:6b:bd:1b:3e:31:76:e2:da:f7:
                    7d:8c:d5:0e:07:c3:5f:d4:af:b7:bd:dd:57:18:8b:
                    96:a0:cb:05:b3:1b:58:21:7f:e9:53:f3:74:4f:57:
                    8f:f2:be:39:23:68:ea:f1:d9:c2:51:ee:ca:49:f5:
                    0a:3a:b2:63:3a:0f:35:64:18:c1:62:60:be:35:17:
                    25:4f:c0:71:1a:6a:f8:ef:ae:9a:aa:d3:3b:51:c3:
                    8c:c6:49:40:42:60:d5:17:b8:35:0a:7f:a4:f4:e7:
                    c7:7c:30:ea:75:42:90:aa:dd:fb:2a:e5:8a:41:4d:
                    49:48:b4:fb:dc:6e:db:cc:30:77:7c:84:53:ae:ee:
                    24:8d:3d:31:ab:36:4c:90:60:e2:7e:43:41:a3:76:
                    b7:4f:47:66:d4:b8:53:f8:a8:40:2d:c1:66:57:7a:
                    95:65:cb:5f:70:81:40:5a:77:d9:47:25:43:17:ad:
                    50:32:61:06:d6:77:ca:7f:3e:bd:8e:0b:8a:01:99:
                    e5:2f:b9:f5:5d:24:c7:f9:94:ff:50:2e:56:66:23:
                    70:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C2:4D:75:94:87:FE:3E:09:15:5E:72:7A:80:1A:7E:C6:04:9A:18
            X509v3 Authority Key Identifier:
                keyid:13:69:7C:4A:24:DC:E7:70:89:F7:78:CD:50:6D:62:07:11:B4:47:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/13697C4A24DCE77089F778CD506D620711B4472B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/13697C4A24DCE77089F778CD506D620711B4472B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b73507f3-f8c0-410b-b19e-57e48bf32305/0/3130332e3136312e3131372e302f32342d3234203d3e203538333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:1e:6d:eb:d8:78:76:3f:0e:53:94:bf:a0:1f:9a:83:d3:a5:
         c7:b9:ed:be:99:25:de:7f:92:b6:a0:b0:99:dd:1b:eb:a9:f3:
         bb:aa:70:50:0a:cb:f0:91:61:c1:5d:27:d5:c5:21:34:2a:03:
         1a:ab:cf:f8:f9:04:91:52:14:f8:4b:fe:ad:41:37:3c:db:7e:
         66:ad:fa:f2:3c:cb:ed:fb:41:31:28:73:75:a8:e0:10:e3:47:
         d4:4a:59:fd:7c:30:5d:d4:94:1f:89:21:95:61:b0:30:ea:cd:
         13:33:85:1f:6a:f8:70:f7:19:88:ac:b8:ce:86:fc:2e:1e:75:
         b5:b5:b4:b7:62:87:7c:1f:c6:27:18:3f:bd:45:0f:fe:5a:73:
         1a:f6:0a:db:19:aa:52:f0:67:56:3f:34:39:94:63:71:b4:8c:
         68:3f:32:4e:07:cd:04:84:cf:81:f7:28:ca:50:83:df:e3:c3:
         24:d6:4f:f4:87:87:c9:b3:0a:5a:e4:de:17:d3:96:ce:ed:9d:
         d4:5d:b2:ae:33:e1:f7:5b:3d:66:da:66:bd:b1:ae:c6:35:9d:
         28:79:4c:37:98:7c:f7:c8:6f:7c:76:08:f6:dd:c4:49:f6:b9:
         e5:66:2c:bc:db:db:21:a3:0a:5a:70:95:09:54:50:27:46:3b:
         6d:53:6a:68
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJHSX+xmKc+NUB7MD71aB3sCU+aUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcx
MUI0NDcyQjAeFw0yNDExMTYxNDI5MDlaFw0yNTExMTUxNDM0MDlaMDMxMTAvBgNV
BAMTKEVBQzI0RDc1OTQ4N0ZFM0UwOTE1NUU3MjdBODAxQTdFQzYwNDlBMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbIDZJwgJKnx/x9ITB6RLHN8Q
is7NGdU+jHexLuCPSpmSlFoizzNPRXwaD8f/1nOe5Wu9Gz4xduLa932M1Q4Hw1/U
r7e93VcYi5agywWzG1ghf+lT83RPV4/yvjkjaOrx2cJR7spJ9Qo6smM6DzVkGMFi
YL41FyVPwHEaavjvrpqq0ztRw4zGSUBCYNUXuDUKf6T058d8MOp1QpCq3fsq5YpB
TUlItPvcbtvMMHd8hFOu7iSNPTGrNkyQYOJ+Q0GjdrdPR2bUuFP4qEAtwWZXepVl
y19wgUBad9lHJUMXrVAyYQbWd8p/Pr2OC4oBmeUvufVdJMf5lP9QLlZmI3D1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6sJNdZSH/j4JFV5yeoAafsYEmhgwHwYDVR0j
BBgwFoAUE2l8SiTc53CJ93jNUG1iBxG0RyswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
NzM1MDdmMy1mOGMwLTQxMGItYjE5ZS01N2U0OGJmMzIzMDUvMC8xMzY5N0M0QTI0
RENFNzcwODlGNzc4Q0Q1MDZENjIwNzExQjQ0NzJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTM2OTdDNEEyNERDRTc3MDg5Rjc3OENENTA2RDYyMDcxMUI0
NDcyQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2I3MzUwN2YzLWY4YzAtNDEwYi1i
MTllLTU3ZTQ4YmYzMjMwNS8wLzMxMzAzMzJlMzEzNjMxMmUzMTMxMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM4MzMzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6F1MA0GCSqG
SIb3DQEBCwUAA4IBAQAyHm3r2Hh2Pw5TlL+gH5qD06XHue2+mSXef5K2oLCZ3Rvr
qfO7qnBQCsvwkWHBXSfVxSE0KgMaq8/4+QSRUhT4S/6tQTc8235mrfryPMvt+0Ex
KHN1qOAQ40fUSln9fDBd1JQfiSGVYbAw6s0TM4Ufavhw9xmIrLjOhvwuHnW1tbS3
Yod8H8YnGD+9RQ/+WnMa9grbGapS8GdWPzQ5lGNxtIxoPzJOB80EhM+B9yjKUIPf
48Mk1k/0h4fJswpa5N4X05bO7Z3UXbKuM+H3Wz1m2ma9sa7GNZ0oeUw3mHz3yG98
dgj23cRJ9rnlZiy829showpacJUJVFAnRjttU2po
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org