Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa
File:                     3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa (raw, json)
Hash identifier:          ZUTOx7YNxEInj7Wkz7eXTYYR8S5djP8YvIzTcnFDwLU=
Subject key identifier:   C7:74:20:3E:F8:9C:75:1E:89:26:75:97:2D:DB:71:20:EF:B6:46:A7
Certificate issuer:       /CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
Certificate serial:       1B80213CA4B190A9D4B5890B553F5D3D1630D1F7
Authority key identifier: 15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa
Signing time:             Mon 13 May 2024 03:11:06 +0000
ROA not before:           Mon 13 May 2024 03:06:06 +0000
ROA not after:            Mon 12 May 2025 03:11:06 +0000
asID:                     134639
IP address blocks:        103.205.56.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl
                          rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:80:21:3c:a4:b1:90:a9:d4:b5:89:0b:55:3f:5d:3d:16:30:d1:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15B96A3BCE4C10C17F4BDB7700A33F886ACD8717
        Validity
            Not Before: May 13 03:06:06 2024 GMT
            Not After : May 12 03:11:06 2025 GMT
        Subject: CN=C774203EF89C751E892675972DDB7120EFB646A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f6:27:40:f0:7e:f6:3e:65:4e:d7:fe:41:df:
                    78:c1:96:b4:21:43:95:55:e8:e6:c1:6b:cb:7d:0f:
                    0e:2c:b7:15:aa:3c:1f:ab:0a:1d:e5:e6:b2:6d:e8:
                    48:6c:bf:7f:41:16:53:5a:5a:03:23:70:42:9d:c2:
                    48:c4:7d:87:41:d9:37:52:06:60:06:19:5f:34:82:
                    2c:45:dc:05:f2:aa:c7:2b:11:34:0a:1f:eb:98:dd:
                    03:b4:29:04:97:6b:4e:d9:51:d9:79:4c:9e:77:8a:
                    17:1e:32:94:01:99:7c:82:b1:08:e5:76:1c:54:d9:
                    17:52:f0:a2:7b:96:cd:8b:fc:20:58:a8:3f:8f:37:
                    e1:0d:57:5a:56:77:9d:9b:93:56:ff:e6:9f:87:10:
                    d8:62:11:24:62:ef:3d:93:b5:19:e5:1c:ff:b3:ff:
                    18:79:9a:17:77:05:4f:36:d9:db:31:f8:75:dd:70:
                    cb:14:93:89:2d:40:bd:11:44:b2:fc:a1:28:e6:d9:
                    5f:0c:2d:f5:82:79:de:b3:e9:8c:38:18:e5:42:5b:
                    a3:97:4c:a2:22:8a:e3:1e:5d:72:03:c0:62:d6:16:
                    00:f4:0b:21:d8:d1:d3:0a:44:68:32:70:1a:c5:3e:
                    4d:ff:be:3b:57:6f:7a:89:eb:9f:72:8b:cb:02:f6:
                    38:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:74:20:3E:F8:9C:75:1E:89:26:75:97:2D:DB:71:20:EF:B6:46:A7
            X509v3 Authority Key Identifier:
                keyid:15:B9:6A:3B:CE:4C:10:C1:7F:4B:DB:77:00:A3:3F:88:6A:CD:87:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/15B96A3BCE4C10C17F4BDB7700A33F886ACD8717.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c30c8f86-bcd5-4b7a-a9b1-465ef0c9f87a/0/3130332e3230352e35362e302f32342d3234203d3e20313334363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.205.56.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:90:fd:cd:b2:76:43:9d:60:61:e2:55:65:1b:a2:f3:f8:ca:
         b5:3b:e1:d0:a1:f5:d5:1e:76:dc:d0:b0:60:51:96:40:4b:78:
         1e:7d:00:d0:f1:62:7e:92:83:8a:74:66:87:47:02:49:d5:f4:
         27:99:bf:7a:a2:df:02:d3:f3:57:bf:be:8d:ea:6d:f6:49:3b:
         78:ad:ea:e0:b9:d2:7b:79:d8:32:72:24:5c:38:2e:02:f5:5e:
         45:a8:26:76:1f:a3:b1:23:45:b5:78:d5:16:4d:ec:09:ce:fb:
         66:94:3f:d4:8e:bf:c1:17:d9:60:2d:40:13:2c:dd:75:a3:88:
         bd:6b:cb:7a:65:48:92:ac:ea:f8:ff:ce:27:ee:0e:32:09:ce:
         62:e2:f7:18:1d:b1:64:33:cb:31:64:f2:2f:9b:8c:f3:43:c1:
         15:5e:d5:83:64:20:e6:4b:74:16:06:d6:9c:f7:c5:4c:1e:14:
         71:16:ab:96:c2:65:31:a2:75:14:1d:bc:7f:46:ac:13:18:0f:
         be:a7:44:57:0c:c9:3e:94:67:9b:e7:c3:9b:c5:93:63:b5:3b:
         ba:b6:6d:0b:ae:97:57:91:30:9a:d0:79:c0:1d:68:39:09:47:
         61:99:00:e9:38:bd:ba:00:4c:eb:41:47:f8:84:84:de:70:08:
         67:f9:4d:c7
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG4AhPKSxkKnUtYkLVT9dPRYw0fcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2
QUNEODcxNzAeFw0yNDA1MTMwMzA2MDZaFw0yNTA1MTIwMzExMDZaMDMxMTAvBgNV
BAMTKEM3NzQyMDNFRjg5Qzc1MUU4OTI2NzU5NzJEREI3MTIwRUZCNjQ2QTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDw9idA8H72PmVO1/5B33jBlrQh
Q5VV6ObBa8t9Dw4stxWqPB+rCh3l5rJt6Ehsv39BFlNaWgMjcEKdwkjEfYdB2TdS
BmAGGV80gixF3AXyqscrETQKH+uY3QO0KQSXa07ZUdl5TJ53ihceMpQBmXyCsQjl
dhxU2RdS8KJ7ls2L/CBYqD+PN+ENV1pWd52bk1b/5p+HENhiESRi7z2TtRnlHP+z
/xh5mhd3BU822dsx+HXdcMsUk4ktQL0RRLL8oSjm2V8MLfWCed6z6Yw4GOVCW6OX
TKIiiuMeXXIDwGLWFgD0CyHY0dMKRGgycBrFPk3/vjtXb3qJ659yi8sC9jhnAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUx3QgPvicdR6JJnWXLdtxIO+2RqcwHwYDVR0j
BBgwFoAUFblqO85MEMF/S9t3AKM/iGrNhxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
MzBjOGY4Ni1iY2Q1LTRiN2EtYTliMS00NjVlZjBjOWY4N2EvMC8xNUI5NkEzQkNF
NEMxMEMxN0Y0QkRCNzcwMEEzM0Y4ODZBQ0Q4NzE3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTVCOTZBM0JDRTRDMTBDMTdGNEJEQjc3MDBBMzNGODg2QUNE
ODcxNy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2MzMGM4Zjg2LWJjZDUtNGI3YS1h
OWIxLTQ2NWVmMGM5Zjg3YS8wLzMxMzAzMzJlMzIzMDM1MmUzNTM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM0MzYzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ804MA0GCSqG
SIb3DQEBCwUAA4IBAQChkP3NsnZDnWBh4lVlG6Lz+Mq1O+HQofXVHnbc0LBgUZZA
S3gefQDQ8WJ+koOKdGaHRwJJ1fQnmb96ot8C0/NXv76N6m32STt4rergudJ7edgy
ciRcOC4C9V5FqCZ2H6OxI0W1eNUWTewJzvtmlD/Ujr/BF9lgLUATLN11o4i9a8t6
ZUiSrOr4/84n7g4yCc5i4vcYHbFkM8sxZPIvm4zzQ8EVXtWDZCDmS3QWBtac98VM
HhRxFquWwmUxonUUHbx/RqwTGA++p0RXDMk+lGeb58ObxZNjtTu6tm0LrpdXkTCa
0HnAHWg5CUdhmQDpOL26AEzrQUf4hITecAhn+U3H
-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:41 2024 by rpki-client on console-fra.rpki-client.org