Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa
File:                     3130332e31382e33322e302f32342d3234203d3e203435333132.roa (raw, json)
Hash identifier:          b8Jj02xTr+ArquZ0+ZlkJajOa7a7edeGP2ah1Fn0+Yc=
Subject key identifier:   E8:AE:35:79:F0:3F:BF:65:B9:97:D0:8D:D0:41:39:6E:96:38:C6:02
Certificate issuer:       /CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
Certificate serial:       39ADBB346266F03D76AA8097C6EA2AFEC6480A27
Authority key identifier: 15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa
Signing time:             Mon 01 Jul 2024 01:04:12 +0000
ROA not before:           Mon 01 Jul 2024 00:59:12 +0000
ROA not after:            Mon 30 Jun 2025 01:04:12 +0000
asID:                     45312
IP address blocks:        103.18.32.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl
                          rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:45:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:ad:bb:34:62:66:f0:3d:76:aa:80:97:c6:ea:2a:fe:c6:48:0a:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=154EE03198467B96315FDB527FB3BBCCA0BFC441
        Validity
            Not Before: Jul  1 00:59:12 2024 GMT
            Not After : Jun 30 01:04:12 2025 GMT
        Subject: CN=E8AE3579F03FBF65B997D08DD041396E9638C602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:84:e9:1f:35:f3:75:ca:75:df:6e:f4:b4:d0:
                    0c:2c:71:9d:88:55:64:a5:97:f0:21:8a:1b:f6:8a:
                    9a:35:5a:70:ed:3e:af:e6:60:53:f8:f8:9d:8a:09:
                    b2:bf:a8:4e:09:02:12:47:92:5f:8e:4c:5e:a2:be:
                    f3:0f:73:20:d4:cf:fd:29:74:96:f9:ce:23:3c:a5:
                    10:78:90:1f:10:0b:64:bb:a2:3d:2e:40:dd:c8:c8:
                    23:63:92:95:e8:23:5e:b5:e2:f2:ef:70:c6:0f:b2:
                    f2:58:67:40:ed:c9:4c:81:fa:79:e7:22:72:6f:c9:
                    c5:83:5b:a7:55:9b:42:fe:2a:06:3e:e1:49:d6:02:
                    cc:c6:4a:1a:f6:6b:da:88:12:0c:f6:72:6a:a4:7e:
                    f3:bd:09:ae:4e:f7:b3:44:72:6f:65:bc:03:69:b9:
                    e4:58:2d:d7:c5:a5:5f:07:91:81:ef:18:48:d2:f8:
                    b8:8c:ca:45:0d:fc:ab:89:37:11:54:98:96:84:7f:
                    ce:30:2c:d2:f0:bc:40:bd:07:b5:66:17:5a:4f:29:
                    77:7b:30:26:08:6d:b6:6d:30:ff:f3:51:ba:67:7f:
                    2d:2b:68:8a:15:cc:ed:65:37:c2:e5:fd:e0:64:ea:
                    eb:a5:7f:bf:61:2c:2a:b2:94:aa:46:45:49:cd:71:
                    3f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:AE:35:79:F0:3F:BF:65:B9:97:D0:8D:D0:41:39:6E:96:38:C6:02
            X509v3 Authority Key Identifier:
                keyid:15:4E:E0:31:98:46:7B:96:31:5F:DB:52:7F:B3:BB:CC:A0:BF:C4:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/154EE03198467B96315FDB527FB3BBCCA0BFC441.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/154EE03198467B96315FDB527FB3BBCCA0BFC441.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c621f753-a88e-4edf-a306-bd93d5a38fea/0/3130332e31382e33322e302f32342d3234203d3e203435333132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.18.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:ed:78:2b:54:4b:45:09:85:5f:01:a0:ff:b5:49:5d:90:5a:
         ef:ef:71:f3:23:8b:45:42:ba:dc:e5:ba:98:05:b0:8a:81:4f:
         bb:2d:37:0e:e2:42:04:6d:dd:7f:ef:c3:27:f8:69:3b:a7:fe:
         2c:40:e0:45:02:e2:c7:5f:8f:42:bb:da:ad:e2:77:b3:75:10:
         59:65:fa:02:d8:96:7f:d0:21:39:56:78:85:24:8b:3d:bf:fb:
         3a:d3:ee:8b:ab:b2:e3:b6:fb:f2:20:64:f9:93:f8:ac:64:6a:
         5e:6f:18:56:2f:2c:56:c2:f1:b9:a4:0f:cc:c7:77:0c:1e:d1:
         94:a6:f8:7d:66:37:3a:68:ba:dc:0a:ed:fe:dc:6f:58:e9:6e:
         7a:1d:dc:e3:03:b2:00:81:ff:ea:9b:fc:5d:89:18:fc:f9:33:
         0f:ab:fa:35:76:88:8a:fc:98:40:b6:ce:73:f1:b1:03:1d:13:
         87:20:1b:7e:05:16:ec:23:43:a4:56:96:4e:c4:81:e2:19:19:
         c7:80:89:8a:35:78:25:98:ee:7a:52:91:b1:ee:23:01:6d:fb:
         fa:8f:59:c8:10:3c:9a:8e:9b:da:77:d5:ed:83:d0:31:89:08:
         95:bf:39:47:aa:d7:f2:b3:9a:9b:e6:9b:37:46:cb:81:73:de:
         18:c1:bf:85
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUOa27NGJm8D12qoCXxuoq/sZICicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NB
MEJGQzQ0MTAeFw0yNDA3MDEwMDU5MTJaFw0yNTA2MzAwMTA0MTJaMDMxMTAvBgNV
BAMTKEU4QUUzNTc5RjAzRkJGNjVCOTk3RDA4REQwNDEzOTZFOTYzOEM2MDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohOkfNfN1ynXfbvS00AwscZ2I
VWSll/Ahihv2ipo1WnDtPq/mYFP4+J2KCbK/qE4JAhJHkl+OTF6ivvMPcyDUz/0p
dJb5ziM8pRB4kB8QC2S7oj0uQN3IyCNjkpXoI1614vLvcMYPsvJYZ0DtyUyB+nnn
InJvycWDW6dVm0L+KgY+4UnWAszGShr2a9qIEgz2cmqkfvO9Ca5O97NEcm9lvANp
ueRYLdfFpV8HkYHvGEjS+LiMykUN/KuJNxFUmJaEf84wLNLwvEC9B7VmF1pPKXd7
MCYIbbZtMP/zUbpnfy0raIoVzO1lN8Ll/eBk6uulf79hLCqylKpGRUnNcT8LAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU6K41efA/v2W5l9CN0EE5bpY4xgIwHwYDVR0j
BBgwFoAUFU7gMZhGe5YxX9tSf7O7zKC/xEEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NjIxZjc1My1hODhlLTRlZGYtYTMwNi1iZDkzZDVhMzhmZWEvMC8xNTRFRTAzMTk4
NDY3Qjk2MzE1RkRCNTI3RkIzQkJDQ0EwQkZDNDQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU0RUUwMzE5ODQ2N0I5NjMxNUZEQjUyN0ZCM0JCQ0NBMEJG
QzQ0MS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M2MjFmNzUzLWE4OGUtNGVkZi1h
MzA2LWJkOTNkNWEzOGZlYS8wLzMxMzAzMzJlMzEzODJlMzMzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzMzMxMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnEiAwDQYJKoZIhvcN
AQELBQADggEBAJnteCtUS0UJhV8BoP+1SV2QWu/vcfMji0VCutzlupgFsIqBT7st
Nw7iQgRt3X/vwyf4aTun/ixA4EUC4sdfj0K72q3id7N1EFll+gLYln/QITlWeIUk
iz2/+zrT7oursuO2+/IgZPmT+Kxkal5vGFYvLFbC8bmkD8zHdwwe0ZSm+H1mNzpo
utwK7f7cb1jpbnod3OMDsgCB/+qb/F2JGPz5Mw+r+jV2iIr8mEC2znPxsQMdE4cg
G34FFuwjQ6RWlk7EgeIZGceAiYo1eCWY7npSkbHuIwFt+/qPWcgQPJqOm9p31e2D
0DGJCJW/OUeq1/KzmpvmmzdGy4Fz3hjBv4U=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:30:03 2024 by rpki-client on console-fra.rpki-client.org