Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa
File:                     3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier:          /PhQtsZBNT16fPj2/aNmbR1aOdDqFMRF/e450dbt2sM=
Subject key identifier:   DA:29:27:59:4A:F5:C5:43:69:CD:C4:6F:C3:C3:71:92:EE:37:58:7E
Certificate issuer:       /CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7
Certificate serial:       497DFEB272BBA3AEDFF2F0D763981A63F116E6E0
Authority key identifier: 8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa
Signing time:             Thu 16 May 2024 04:00:51 +0000
ROA not before:           Thu 16 May 2024 03:55:51 +0000
ROA not after:            Thu 15 May 2025 04:00:51 +0000
asID:                     38320
IP address blocks:        103.160.138.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl
                          rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7d:fe:b2:72:bb:a3:ae:df:f2:f0:d7:63:98:1a:63:f1:16:e6:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7
        Validity
            Not Before: May 16 03:55:51 2024 GMT
            Not After : May 15 04:00:51 2025 GMT
        Subject: CN=DA2927594AF5C54369CDC46FC3C37192EE37587E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:83:6b:8f:09:6b:90:f5:a1:69:13:96:cb:1d:
                    c1:a0:f4:a5:d4:07:72:28:01:a7:de:60:51:da:9f:
                    57:20:df:b2:e2:28:57:80:30:4d:21:b3:51:ba:41:
                    c1:ef:e7:58:d9:c0:6e:cf:5c:d2:c3:76:21:5b:a9:
                    51:37:21:72:2a:14:f2:7c:92:9c:27:69:0b:c1:be:
                    a5:94:98:a1:05:94:0e:8a:bc:5c:83:3e:31:36:66:
                    c6:59:23:f5:55:19:5b:9f:21:ad:36:fc:33:f6:e4:
                    f1:8e:29:4c:b7:d5:35:46:d0:a1:72:07:60:4c:60:
                    a4:0e:75:d7:ce:fc:dc:be:bc:88:12:9c:b2:a1:0d:
                    3b:c9:d0:77:8e:17:17:1f:ca:6e:b8:94:89:cb:b9:
                    bc:f9:5e:34:29:24:ac:66:75:35:0c:94:1c:8f:55:
                    fb:2c:b7:2c:ff:da:09:92:85:91:1a:0b:1d:88:37:
                    d6:ae:61:74:ae:5a:6e:a3:f9:e9:77:f8:d6:01:6e:
                    95:ec:ff:8a:dc:b4:0d:7c:3c:60:6d:26:20:4a:74:
                    56:30:58:80:7a:12:10:7f:ec:8b:ee:35:2f:2e:16:
                    55:21:2a:a2:50:bc:73:d2:41:71:12:77:53:d3:0d:
                    1e:8a:0a:84:b3:5f:c8:c8:58:09:54:f1:4b:f6:dd:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:29:27:59:4A:F5:C5:43:69:CD:C4:6F:C3:C3:71:92:EE:37:58:7E
            X509v3 Authority Key Identifier:
                keyid:8D:1D:84:B8:A5:62:24:B4:E2:90:FB:DA:5C:79:0C:D1:F0:3F:11:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8D1D84B8A56224B4E290FBDA5C790CD1F03F11A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfdb18ef-659f-4b1e-a2e0-b58af6b1271f/0/3130332e3136302e3133382e302f32332d3234203d3e203338333230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.138.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:d6:65:27:d6:b4:85:4e:28:fb:e7:0e:cb:c4:d4:30:81:d8:
         4e:ba:c1:da:5f:92:7e:4c:8a:d4:96:fa:f7:32:b6:aa:13:6e:
         6d:9a:c5:3a:ba:fe:e6:3c:6d:87:30:7c:d7:74:b2:7f:ab:dc:
         a1:7a:a4:7d:7a:0e:1d:53:27:a5:60:84:62:ea:6c:6e:d7:e0:
         fc:d9:bc:37:e0:f2:32:54:1b:6a:3b:03:95:13:6f:af:10:7b:
         da:2d:f7:41:e4:36:ca:ac:9b:16:90:fe:1b:fa:34:7b:c7:ee:
         15:a7:3e:4e:e0:5c:26:86:bb:f0:d5:39:7e:59:cb:41:75:df:
         8f:bc:9b:98:70:d3:12:1d:59:d3:bd:2c:e0:d6:c4:a5:12:3f:
         87:bb:13:b9:08:d9:39:a2:58:e7:2b:fd:ed:c3:21:eb:a1:d0:
         58:45:3c:0f:ba:f7:a8:af:10:b3:3c:0f:87:1f:f3:15:d2:fc:
         d8:f7:bf:c2:b7:09:69:82:26:2b:25:64:f1:45:c3:52:33:21:
         78:68:36:6c:1f:08:d0:80:0a:78:6f:df:c5:73:d5:cc:2b:21:
         9c:63:25:f2:b0:30:5f:af:0f:6b:b2:4a:8e:1a:e3:75:54:b1:
         41:3b:de:27:ff:b8:12:f2:9f:7a:d2:84:12:1c:cc:0a:86:ad:
         90:68:50:eb
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSX3+snK7o67f8vDXY5gaY/EW5uAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFG
MDNGMTFBNzAeFw0yNDA1MTYwMzU1NTFaFw0yNTA1MTUwNDAwNTFaMDMxMTAvBgNV
BAMTKERBMjkyNzU5NEFGNUM1NDM2OUNEQzQ2RkMzQzM3MTkyRUUzNzU4N0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTg2uPCWuQ9aFpE5bLHcGg9KXU
B3IoAafeYFHan1cg37LiKFeAME0hs1G6QcHv51jZwG7PXNLDdiFbqVE3IXIqFPJ8
kpwnaQvBvqWUmKEFlA6KvFyDPjE2ZsZZI/VVGVufIa02/DP25PGOKUy31TVG0KFy
B2BMYKQOddfO/Ny+vIgSnLKhDTvJ0HeOFxcfym64lInLubz5XjQpJKxmdTUMlByP
Vfsstyz/2gmShZEaCx2IN9auYXSuWm6j+el3+NYBbpXs/4rctA18PGBtJiBKdFYw
WIB6EhB/7IvuNS8uFlUhKqJQvHPSQXESd1PTDR6KCoSzX8jIWAlU8Uv23WnzAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU2iknWUr1xUNpzcRvw8Nxku43WH4wHwYDVR0j
BBgwFoAUjR2EuKViJLTikPvaXHkM0fA/EacwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i
ZmRiMThlZi02NTlmLTRiMWUtYTJlMC1iNThhZjZiMTI3MWYvMC84RDFEODRCOEE1
NjIyNEI0RTI5MEZCREE1Qzc5MENEMUYwM0YxMUE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEQxRDg0QjhBNTYyMjRCNEUyOTBGQkRBNUM3OTBDRDFGMDNG
MTFBNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2JmZGIxOGVmLTY1OWYtNGIxZS1h
MmUwLWI1OGFmNmIxMjcxZi8wLzMxMzAzMzJlMzEzNjMwMmUzMTMzMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMzM4MzMzMjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6CKMA0GCSqG
SIb3DQEBCwUAA4IBAQB91mUn1rSFTij75w7LxNQwgdhOusHaX5J+TIrUlvr3Mraq
E25tmsU6uv7mPG2HMHzXdLJ/q9yheqR9eg4dUyelYIRi6mxu1+D82bw34PIyVBtq
OwOVE2+vEHvaLfdB5DbKrJsWkP4b+jR7x+4Vpz5O4Fwmhrvw1Tl+WctBdd+PvJuY
cNMSHVnTvSzg1sSlEj+HuxO5CNk5oljnK/3twyHrodBYRTwPuveorxCzPA+HH/MV
0vzY97/CtwlpgiYrJWTxRcNSMyF4aDZsHwjQgAp4b9/Fc9XMKyGcYyXysDBfrw9r
skqOGuN1VLFBO94n/7gS8p960oQSHMwKhq2QaFDr
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:03 2024 by rpki-client on console-fra.rpki-client.org