Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa
File:                     3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa (raw, json)
Hash identifier:          0ZrsGDTihlCLfglNeWJRUUD4+1lV+ksyRcvcHgMhFqo=
Subject key identifier:   08:48:88:C0:2F:8C:C3:7E:C2:56:D8:65:A2:AC:A7:F8:A3:C0:81:43
Certificate issuer:       /CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
Certificate serial:       6CDBC93C17A43C5085557E5668A734C4F848939B
Authority key identifier: 06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa
Signing time:             Fri 27 Sep 2024 01:00:00 +0000
ROA not before:           Fri 27 Sep 2024 00:55:00 +0000
ROA not after:            Fri 26 Sep 2025 01:00:00 +0000
asID:                     147159
IP address blocks:        103.177.153.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl
                          rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:db:c9:3c:17:a4:3c:50:85:55:7e:56:68:a7:34:c4:f8:48:93:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=061A692BFC16B119C1D8FDB07C81CDE0FFEA2159
        Validity
            Not Before: Sep 27 00:55:00 2024 GMT
            Not After : Sep 26 01:00:00 2025 GMT
        Subject: CN=084888C02F8CC37EC256D865A2ACA7F8A3C08143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:8a:b8:61:e8:20:05:6e:6b:5d:17:14:ff:32:
                    d7:3c:43:10:9a:1b:16:38:95:58:aa:fe:8f:9a:36:
                    60:28:41:1e:31:3a:48:5d:0a:0c:7b:71:ff:05:a0:
                    84:c4:95:78:a0:bc:45:74:1f:56:e5:25:26:a1:7f:
                    52:7b:9c:0f:5f:d7:bd:8a:02:e5:7c:5b:93:fd:bd:
                    3d:46:b6:d4:3d:a6:ab:e9:43:f4:85:01:d1:c2:74:
                    e7:80:91:21:1e:cd:37:a7:8d:16:99:72:40:47:20:
                    8d:cf:e4:38:43:5a:3b:e9:fb:e1:e9:4e:85:98:33:
                    61:0d:98:c8:76:71:04:10:c8:67:2f:54:e2:8a:74:
                    62:94:dd:e4:89:f7:90:1a:68:bd:59:09:78:b8:33:
                    17:de:58:5f:24:1d:52:a0:f5:82:33:16:9c:82:12:
                    0c:0b:47:7d:2f:87:73:0a:f9:a9:6b:38:9b:13:6a:
                    44:d3:cc:ba:af:f5:7f:02:07:1a:43:3d:ff:61:2e:
                    6d:68:28:e7:cc:b1:aa:4f:52:4a:6a:52:d0:25:2e:
                    13:4a:1c:be:f2:47:bb:3d:4a:40:bc:1c:a7:7e:be:
                    5d:ba:4b:47:84:cb:8b:62:b1:28:42:f6:bf:a2:a4:
                    e4:6f:7b:0c:60:5d:c2:5f:a8:1c:0a:db:c8:85:14:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:48:88:C0:2F:8C:C3:7E:C2:56:D8:65:A2:AC:A7:F8:A3:C0:81:43
            X509v3 Authority Key Identifier:
                keyid:06:1A:69:2B:FC:16:B1:19:C1:D8:FD:B0:7C:81:CD:E0:FF:EA:21:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/061A692BFC16B119C1D8FDB07C81CDE0FFEA2159.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c731fb27-6133-47ea-b7cc-2227e04ca265/0/3130332e3137372e3135332e302f32342d3234203d3e20313437313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:55:1d:ce:f6:11:bf:10:97:0f:51:31:9d:fc:a7:4f:97:a5:
         b0:9f:54:b7:f7:f8:7c:3d:56:63:3e:71:5b:8c:87:46:2f:0a:
         d7:2e:bd:43:ae:b7:86:69:7d:15:51:58:7f:01:83:be:bb:41:
         cf:bf:3b:31:54:dd:d6:21:fb:b0:af:be:d5:ef:35:43:1d:8e:
         e7:bf:6f:3a:7f:4b:e7:b0:be:a7:59:e1:91:c5:f9:fb:dc:c5:
         da:03:6b:8e:9a:b3:60:2c:49:6e:fb:15:50:54:f1:5a:90:ef:
         21:df:11:9a:4a:4f:d3:36:26:bc:4f:03:15:37:98:53:66:67:
         2e:4b:6a:ea:1d:de:58:12:97:d9:86:03:93:2d:b1:96:7c:a7:
         43:64:40:d0:d1:24:44:a3:0f:26:81:d4:58:d6:45:99:aa:5b:
         31:37:55:34:a0:6d:96:4d:d5:8a:49:e4:26:ac:66:2e:e0:13:
         02:ff:43:44:5d:b7:2a:23:07:b9:eb:26:44:c3:df:a4:5a:69:
         48:25:89:1f:7f:9b:17:62:b8:37:1f:89:25:50:b1:95:7c:c7:
         36:ef:76:8c:49:05:2c:b6:e8:0e:00:11:ed:65:f1:d2:5d:27:
         4b:b9:7d:8b:4b:41:e5:a3:ae:64:18:cc:ee:db:cc:34:4d:b1:
         18:c1:db:2d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbNvJPBekPFCFVX5WaKc0xPhIk5swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBG
RkVBMjE1OTAeFw0yNDA5MjcwMDU1MDBaFw0yNTA5MjYwMTAwMDBaMDMxMTAvBgNV
BAMTKDA4NDg4OEMwMkY4Q0MzN0VDMjU2RDg2NUEyQUNBN0Y4QTNDMDgxNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKirhh6CAFbmtdFxT/Mtc8QxCa
GxY4lViq/o+aNmAoQR4xOkhdCgx7cf8FoITElXigvEV0H1blJSahf1J7nA9f172K
AuV8W5P9vT1GttQ9pqvpQ/SFAdHCdOeAkSEezTenjRaZckBHII3P5DhDWjvp++Hp
ToWYM2ENmMh2cQQQyGcvVOKKdGKU3eSJ95AaaL1ZCXi4MxfeWF8kHVKg9YIzFpyC
EgwLR30vh3MK+alrOJsTakTTzLqv9X8CBxpDPf9hLm1oKOfMsapPUkpqUtAlLhNK
HL7yR7s9SkC8HKd+vl26S0eEy4tisShC9r+ipORvewxgXcJfqBwK28iFFLj5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUCEiIwC+Mw37CVthloqyn+KPAgUMwHwYDVR0j
BBgwFoAUBhppK/wWsRnB2P2wfIHN4P/qIVkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NzMxZmIyNy02MTMzLTQ3ZWEtYjdjYy0yMjI3ZTA0Y2EyNjUvMC8wNjFBNjkyQkZD
MTZCMTE5QzFEOEZEQjA3QzgxQ0RFMEZGRUEyMTU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDYxQTY5MkJGQzE2QjExOUMxRDhGREIwN0M4MUNERTBGRkVB
MjE1OS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3MzFmYjI3LTYxMzMtNDdlYS1i
N2NjLTIyMjdlMDRjYTI2NS8wLzMxMzAzMzJlMzEzNzM3MmUzMTM1MzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTM1Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsZkwDQYJ
KoZIhvcNAQELBQADggEBABJVHc72Eb8Qlw9RMZ38p0+XpbCfVLf3+Hw9VmM+cVuM
h0YvCtcuvUOut4ZpfRVRWH8Bg767Qc+/OzFU3dYh+7CvvtXvNUMdjue/bzp/S+ew
vqdZ4ZHF+fvcxdoDa46as2AsSW77FVBU8VqQ7yHfEZpKT9M2JrxPAxU3mFNmZy5L
auod3lgSl9mGA5MtsZZ8p0NkQNDRJESjDyaB1FjWRZmqWzE3VTSgbZZN1YpJ5Cas
Zi7gEwL/Q0RdtyojB7nrJkTD36RaaUgliR9/mxdiuDcfiSVQsZV8xzbvdoxJBSy2
6A4AEe1l8dJdJ0u5fYtLQeWjrmQYzO7bzDRNsRjB2y0=
-----END CERTIFICATE-----
Generated at Sun Nov 24 11:23:26 2024 by rpki-client on console-ams.rpki-client.org