Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa
File:                     3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa (raw, json)
Hash identifier:          7srUQKoO5rHeVTvX7A7WP5B+w9PDonTAVbVBRgo6eeE=
Subject key identifier:   0C:05:F7:D3:AF:38:B5:98:36:0A:93:64:80:DF:81:93:51:89:78:D5
Certificate issuer:       /CN=FC646066A689B77054AF95653FA324395357E6A3
Certificate serial:       2648E41F1C8DFE7A08212B99CFBCA5CB2C54DF61
Authority key identifier: FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa
Signing time:             Thu 24 Aug 2023 23:20:20 +0000
ROA not before:           Thu 24 Aug 2023 23:15:20 +0000
ROA not after:            Thu 22 Aug 2024 23:20:20 +0000
asID:                     55653
IP address blocks:        103.254.126.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl
                          rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:48:e4:1f:1c:8d:fe:7a:08:21:2b:99:cf:bc:a5:cb:2c:54:df:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FC646066A689B77054AF95653FA324395357E6A3
        Validity
            Not Before: Aug 24 23:15:20 2023 GMT
            Not After : Aug 22 23:20:20 2024 GMT
        Subject: CN=0C05F7D3AF38B598360A936480DF8193518978D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:47:6d:2a:72:72:0a:aa:41:86:6b:c7:35:a7:
                    6e:5c:fb:45:e6:bd:9c:19:02:3e:8c:4b:05:f0:84:
                    3e:c6:26:dc:32:84:3b:6d:e3:5c:a1:13:6b:ba:c8:
                    87:fb:82:ef:bf:1e:af:c9:f7:c1:87:bb:d4:fc:e5:
                    f6:8a:6d:4a:8c:f9:ca:5b:5e:50:1e:db:cd:0b:0c:
                    e4:12:c0:5a:c7:e8:0c:b6:98:c1:af:05:7c:e8:0b:
                    9c:ee:27:fc:78:1f:1f:69:25:eb:b9:b6:27:19:e7:
                    e1:93:0b:62:42:21:69:da:9d:1d:bb:d0:6e:3b:74:
                    45:ff:59:56:23:0b:8f:b1:a3:90:d6:06:7d:5f:ef:
                    f2:dc:84:31:2c:1e:96:be:f5:7e:78:c8:ff:29:54:
                    c9:8e:d0:82:d6:fc:db:4b:8e:2e:2e:68:39:1a:de:
                    16:ab:e3:bd:19:e6:fb:ab:f8:1b:30:dd:81:ed:fc:
                    3a:47:d6:25:c9:ca:27:0d:d2:ea:87:e9:91:24:5c:
                    10:fe:da:05:78:db:1b:7b:39:b5:eb:f7:cf:d6:44:
                    f2:30:9a:c3:a0:7e:96:51:6f:56:9f:5e:c8:9d:87:
                    29:04:0c:3d:fc:df:1b:b5:8d:f4:a8:21:f6:a3:62:
                    5e:43:20:b7:11:75:5c:8a:0e:72:76:ee:a6:72:04:
                    51:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:05:F7:D3:AF:38:B5:98:36:0A:93:64:80:DF:81:93:51:89:78:D5
            X509v3 Authority Key Identifier:
                keyid:FC:64:60:66:A6:89:B7:70:54:AF:95:65:3F:A3:24:39:53:57:E6:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/FC646066A689B77054AF95653FA324395357E6A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FC646066A689B77054AF95653FA324395357E6A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c97465e3-78a0-4965-ae14-e4cb4d0fc185/0/3130332e3235342e3132362e302f32332d3234203d3e203535363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.254.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         19:b3:ce:29:0f:d4:ef:6b:0b:9b:69:fa:d0:93:ba:08:8c:99:
         41:bd:cf:ab:d0:19:5a:00:21:2a:6a:2c:5d:0d:d6:49:4f:9d:
         6e:71:bc:b8:6e:5f:9b:ce:8a:76:86:16:19:12:81:54:72:67:
         d3:ca:32:9b:04:f7:a5:b9:31:13:5f:7e:33:61:b5:b4:c5:ac:
         61:47:87:b0:04:ab:49:95:b5:68:9f:89:75:1d:15:53:40:3c:
         10:5e:b4:9c:e8:11:ed:04:f1:f0:24:5c:57:6a:4e:2a:dd:37:
         11:cd:38:40:b0:02:b7:33:dd:71:05:90:bd:92:15:41:ec:07:
         93:95:d9:14:57:b3:ab:09:a8:68:ef:73:66:06:39:8d:0a:a0:
         da:9e:0d:de:e6:ea:a3:5c:13:c8:fb:12:ac:db:d1:aa:20:99:
         41:20:cc:6c:31:92:5b:e3:fc:6b:7b:8d:25:64:32:fb:a4:52:
         30:d4:5e:8b:6f:bd:03:e4:f6:dd:e1:ce:c9:a2:d3:20:50:d7:
         ce:af:0f:96:d0:2d:10:0f:3c:ff:f8:9e:62:7a:9f:cd:4c:3a:
         11:37:d0:5e:40:15:46:3a:76:85:40:28:e5:e0:44:77:bf:17:
         ba:c4:14:ea:38:2f:21:fc:de:e4:60:fe:c8:71:a2:82:99:4b:
         0f:b7:5d:30
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJkjkHxyN/noIISuZz7ylyyxU32EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1
MzU3RTZBMzAeFw0yMzA4MjQyMzE1MjBaFw0yNDA4MjIyMzIwMjBaMDMxMTAvBgNV
BAMTKDBDMDVGN0QzQUYzOEI1OTgzNjBBOTM2NDgwREY4MTkzNTE4OTc4RDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFR20qcnIKqkGGa8c1p25c+0Xm
vZwZAj6MSwXwhD7GJtwyhDtt41yhE2u6yIf7gu+/Hq/J98GHu9T85faKbUqM+cpb
XlAe280LDOQSwFrH6Ay2mMGvBXzoC5zuJ/x4Hx9pJeu5ticZ5+GTC2JCIWnanR27
0G47dEX/WVYjC4+xo5DWBn1f7/LchDEsHpa+9X54yP8pVMmO0ILW/NtLji4uaDka
3har470Z5vur+Bsw3YHt/DpH1iXJyicN0uqH6ZEkXBD+2gV42xt7ObXr98/WRPIw
msOgfpZRb1afXsidhykEDD383xu1jfSoIfajYl5DILcRdVyKDnJ27qZyBFHbAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUDAX30684tZg2CpNkgN+Bk1GJeNUwHwYDVR0j
BBgwFoAU/GRgZqaJt3BUr5VlP6MkOVNX5qMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OTc0NjVlMy03OGEwLTQ5NjUtYWUxNC1lNGNiNGQwZmMxODUvMC9GQzY0NjA2NkE2
ODlCNzcwNTRBRjk1NjUzRkEzMjQzOTUzNTdFNkEzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRkM2NDYwNjZBNjg5Qjc3MDU0QUY5NTY1M0ZBMzI0Mzk1MzU3
RTZBMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5NzQ2NWUzLTc4YTAtNDk2NS1h
ZTE0LWU0Y2I0ZDBmYzE4NS8wLzMxMzAzMzJlMzIzNTM0MmUzMTMyMzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzNTM1MzYzNTMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ/5+MA0GCSqG
SIb3DQEBCwUAA4IBAQAZs84pD9TvawubafrQk7oIjJlBvc+r0BlaACEqaixdDdZJ
T51ucby4bl+bzop2hhYZEoFUcmfTyjKbBPeluTETX34zYbW0xaxhR4ewBKtJlbVo
n4l1HRVTQDwQXrSc6BHtBPHwJFxXak4q3TcRzThAsAK3M91xBZC9khVB7AeTldkU
V7OrCaho73NmBjmNCqDang3e5uqjXBPI+xKs29GqIJlBIMxsMZJb4/xre40lZDL7
pFIw1F6Lb70D5Pbd4c7JotMgUNfOrw+W0C0QDzz/+J5iep/NTDoRN9BeQBVGOnaF
QCjl4ER3vxe6xBTqOC8h/N7kYP7IcaKCmUsPt10w
-----END CERTIFICATE-----
Generated at Sun Jun 2 03:35:02 2024 by rpki-client on console-fra.rpki-client.org