Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
File:                     3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa (raw, json)
Hash identifier:          H8OkUhbkV3prMXAScleKaaML8OlGeDeAk2RxH8impZQ=
Subject key identifier:   B6:B4:63:C4:D6:AF:D6:DB:C9:96:92:C3:AF:AB:87:A1:6C:EC:EF:BB
Certificate issuer:       /CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
Certificate serial:       1D9E064A2F9165A28E6AAAFE9DAC48F2E8E80569
Authority key identifier: FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa
Signing time:             Thu 18 Jan 2024 12:34:35 +0000
ROA not before:           Thu 18 Jan 2024 12:29:35 +0000
ROA not after:            Thu 16 Jan 2025 12:34:35 +0000
asID:                     138142
IP address blocks:        103.134.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl
                          rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 14:36:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9e:06:4a:2f:91:65:a2:8e:6a:aa:fe:9d:ac:48:f2:e8:e8:05:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC4F8762524C3EBF98126E5F579CCB30C37EEF63
        Validity
            Not Before: Jan 18 12:29:35 2024 GMT
            Not After : Jan 16 12:34:35 2025 GMT
        Subject: CN=B6B463C4D6AFD6DBC99692C3AFAB87A16CECEFBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f4:94:cb:30:f2:51:3f:ff:67:74:ee:5c:2c:
                    d4:a7:0a:83:94:90:87:44:d8:ad:61:bc:87:20:8d:
                    f8:9d:ba:7d:19:52:49:73:ea:66:17:08:1c:6a:8f:
                    a2:ea:43:05:24:86:e8:37:09:ce:72:78:a4:d5:66:
                    44:e5:c0:cf:2c:51:34:e8:71:ef:38:c5:b6:82:dd:
                    e2:1d:b8:ff:12:b5:b9:17:95:ed:34:9a:10:af:8c:
                    b7:87:96:37:86:80:42:76:0e:6a:3c:74:26:83:6c:
                    e9:97:49:8b:ca:f6:31:13:c3:48:d6:63:81:6e:22:
                    63:cb:51:10:f6:4d:4a:93:21:71:41:4c:e1:ce:4c:
                    cd:e4:12:45:f1:50:4f:65:39:00:eb:47:25:e7:e7:
                    5c:35:d3:f5:5d:b0:64:60:33:b5:a6:67:02:6a:e3:
                    66:cb:70:a3:b9:6a:17:bd:b6:f8:b8:03:46:90:3a:
                    f5:5c:74:d1:aa:a4:8b:32:08:4d:b3:2c:07:48:92:
                    1d:05:7c:5f:25:27:f5:aa:48:3f:3c:e2:1c:51:c1:
                    44:0b:36:06:49:4a:14:df:f8:4c:4f:86:01:29:2b:
                    37:7a:a3:45:79:81:36:40:f9:64:b1:ce:23:7e:06:
                    6c:90:06:74:7f:7e:c3:45:1f:d7:cd:71:cb:c8:3a:
                    58:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:B4:63:C4:D6:AF:D6:DB:C9:96:92:C3:AF:AB:87:A1:6C:EC:EF:BB
            X509v3 Authority Key Identifier:
                keyid:FC:4F:87:62:52:4C:3E:BF:98:12:6E:5F:57:9C:CB:30:C3:7E:EF:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC4F8762524C3EBF98126E5F579CCB30C37EEF63.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/be5aa93d-787b-4a17-87d0-7ef41b0f2def/0/3130332e3133342e31362e302f32342d3234203d3e20313338313432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:cf:a4:14:c1:2f:d0:90:41:07:f7:ce:4d:02:da:fd:cd:7f:
         da:9b:ce:ae:c2:22:6e:40:d7:83:fb:bc:16:83:f3:16:19:ca:
         e1:e6:ad:4e:58:84:b5:45:a2:9e:54:a7:c2:25:48:79:f2:f3:
         c3:c6:06:4d:7d:6c:d1:cc:cb:85:85:27:c4:82:fe:56:1b:fd:
         07:ca:31:c7:7d:77:2a:01:1d:43:39:32:2d:b0:1a:34:23:ed:
         82:22:b9:e7:46:fa:7a:64:a8:1f:ce:52:6f:2a:2a:91:f5:25:
         ce:15:16:e6:80:42:97:e4:d1:be:23:85:44:ae:b8:53:92:78:
         17:f6:03:81:bb:e3:e1:b1:26:13:21:56:c7:58:8f:f4:41:b4:
         84:34:f4:15:71:59:8e:91:d7:65:c0:23:9d:d0:3a:87:70:ce:
         04:2f:1e:30:f2:4e:13:30:01:48:7c:9f:38:8d:c4:eb:03:55:
         e3:2c:c1:50:f2:2e:28:4a:05:15:04:67:2a:6a:68:89:db:7c:
         80:09:9d:d0:e4:83:97:09:e3:d4:f7:5b:b6:2d:bd:44:d8:be:
         f3:7e:57:cc:0f:ff:63:fe:87:6a:99:09:e4:d3:e9:ee:53:02:
         8c:82:7c:48:30:bc:a3:e4:2a:b1:ec:5c:4d:31:3e:7e:79:35:
         6c:c0:ab:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHZ4GSi+RZaKOaqr+naxI8ujoBWkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBD
MzdFRUY2MzAeFw0yNDAxMTgxMjI5MzVaFw0yNTAxMTYxMjM0MzVaMDMxMTAvBgNV
BAMTKEI2QjQ2M0M0RDZBRkQ2REJDOTk2OTJDM0FGQUI4N0ExNkNFQ0VGQkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW9JTLMPJRP/9ndO5cLNSnCoOU
kIdE2K1hvIcgjfidun0ZUklz6mYXCBxqj6LqQwUkhug3Cc5yeKTVZkTlwM8sUTTo
ce84xbaC3eIduP8StbkXle00mhCvjLeHljeGgEJ2Dmo8dCaDbOmXSYvK9jETw0jW
Y4FuImPLURD2TUqTIXFBTOHOTM3kEkXxUE9lOQDrRyXn51w10/VdsGRgM7WmZwJq
42bLcKO5ahe9tvi4A0aQOvVcdNGqpIsyCE2zLAdIkh0FfF8lJ/WqSD884hxRwUQL
NgZJShTf+ExPhgEpKzd6o0V5gTZA+WSxziN+BmyQBnR/fsNFH9fNccvIOlhFAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUtrRjxNav1tvJlpLDr6uHoWzs77swHwYDVR0j
BBgwFoAU/E+HYlJMPr+YEm5fV5zLMMN+72MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZTVhYTkzZC03ODdiLTRhMTctODdkMC03ZWY0MWIwZjJkZWYvMC9GQzRGODc2MjUy
NEMzRUJGOTgxMjZFNUY1NzlDQ0IzMEMzN0VFRjYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM0Rjg3NjI1MjRDM0VCRjk4MTI2RTVGNTc5Q0NCMzBDMzdF
RUY2My5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JlNWFhOTNkLTc4N2ItNGExNy04
N2QwLTdlZjQxYjBmMmRlZi8wLzMxMzAzMzJlMzEzMzM0MmUzMTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzEzNDMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4YQMA0GCSqG
SIb3DQEBCwUAA4IBAQACz6QUwS/QkEEH985NAtr9zX/am86uwiJuQNeD+7wWg/MW
Gcrh5q1OWIS1RaKeVKfCJUh58vPDxgZNfWzRzMuFhSfEgv5WG/0HyjHHfXcqAR1D
OTItsBo0I+2CIrnnRvp6ZKgfzlJvKiqR9SXOFRbmgEKX5NG+I4VErrhTkngX9gOB
u+PhsSYTIVbHWI/0QbSENPQVcVmOkddlwCOd0DqHcM4ELx4w8k4TMAFIfJ84jcTr
A1XjLMFQ8i4oSgUVBGcqamiJ23yACZ3Q5IOXCePU91u2Lb1E2L7zflfMD/9j/odq
mQnk0+nuUwKMgnxIMLyj5Cqx7FxNMT5+eTVswKug
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:13:31 2024 by rpki-client on console-fra.rpki-client.org