Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e39332e3233362e302f32332d3234203d3e203633343930.roa
File:                     3130332e39332e3233362e302f32332d3234203d3e203633343930.roa (raw, json)
Hash identifier:          N575Rd04sdWuljy+/gWPBi8EMbVoyPyHMDMfsQ5bHKg=
Subject key identifier:   3B:15:A5:B6:D6:B6:D1:9F:B4:38:66:33:40:88:BC:B9:F3:6B:99:2D
Certificate issuer:       /CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
Certificate serial:       361DE9FA1E0ABD92914E2A1B10FEC9E674E55A1E
Authority key identifier: 1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e39332e3233362e302f32332d3234203d3e203633343930.roa
Signing time:             Sun 21 Jul 2024 20:00:01 +0000
ROA not before:           Sun 21 Jul 2024 19:55:01 +0000
ROA not after:            Sun 20 Jul 2025 20:00:01 +0000
asID:                     63490
IP address blocks:        103.93.236.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl
                          rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:1d:e9:fa:1e:0a:bd:92:91:4e:2a:1b:10:fe:c9:e6:74:e5:5a:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D996206B24E67937CEF2CE40882DBFAD893F1FB
        Validity
            Not Before: Jul 21 19:55:01 2024 GMT
            Not After : Jul 20 20:00:01 2025 GMT
        Subject: CN=3B15A5B6D6B6D19FB43866334088BCB9F36B992D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:42:f2:b6:be:ea:4f:11:cd:a0:ee:7f:5e:29:
                    12:79:c7:7e:bf:15:9f:87:c7:bf:82:1e:38:f6:3e:
                    b5:a4:aa:78:91:86:41:ac:a8:d9:f6:e4:f8:87:7a:
                    91:17:13:5c:d9:d3:0b:7b:c5:89:af:cb:52:a1:aa:
                    51:47:bd:c1:44:bb:4c:91:a6:b2:3c:3e:ac:80:37:
                    20:82:c7:0f:a7:9f:1d:ac:0c:b3:88:87:a3:6c:8b:
                    d1:e4:a0:ec:89:b6:7c:d8:07:d7:0a:66:84:4a:26:
                    57:9d:aa:ff:47:e9:66:c8:e6:eb:bc:af:66:78:75:
                    f0:1a:f2:3a:39:76:94:9f:e5:d2:fa:57:fe:8c:d6:
                    06:47:ae:48:38:22:14:47:7f:6b:72:50:fc:ee:15:
                    4f:d9:d9:c3:53:4c:36:8e:16:d0:1d:73:7f:4d:43:
                    d4:18:81:15:3f:00:10:12:06:99:fa:be:85:17:5e:
                    02:4c:f1:6a:6b:a6:e6:c2:d9:75:78:07:c6:35:a3:
                    36:3d:af:10:2e:12:1e:f7:d5:cb:94:9a:b8:a0:66:
                    37:8b:3a:7c:d0:17:4d:c2:df:07:a6:42:a7:4b:a2:
                    98:9c:36:45:cd:d9:f0:29:e5:61:86:00:f5:1f:f9:
                    6d:81:51:15:d8:1a:f7:f5:bc:0b:aa:de:e8:16:ad:
                    22:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:15:A5:B6:D6:B6:D1:9F:B4:38:66:33:40:88:BC:B9:F3:6B:99:2D
            X509v3 Authority Key Identifier:
                keyid:1D:99:62:06:B2:4E:67:93:7C:EF:2C:E4:08:82:DB:FA:D8:93:F1:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/1D996206B24E67937CEF2CE40882DBFAD893F1FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D996206B24E67937CEF2CE40882DBFAD893F1FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9e36056-f097-49a7-bd23-3d711e89f305/0/3130332e39332e3233362e302f32332d3234203d3e203633343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.93.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         47:9d:2c:6d:41:3c:1e:cb:be:9e:29:6e:2c:b7:1d:e3:fc:1b:
         cc:b6:c4:0c:bc:31:26:b9:f0:0b:42:3e:6d:1d:20:f3:ff:4e:
         15:e8:9e:4f:5a:55:ba:b5:34:ab:1a:ae:12:6d:2d:2c:3f:8a:
         9d:a6:76:a6:0e:ad:f2:a4:47:dd:f5:30:84:47:45:1a:6b:57:
         96:62:79:2f:e2:43:cd:25:d9:dc:2e:8b:1b:84:97:97:66:6e:
         9a:7a:9c:2a:22:88:81:9e:53:84:19:05:e2:56:39:e4:c4:f5:
         34:7b:b7:77:50:55:a7:f6:45:56:99:a8:df:6f:de:d1:bf:f5:
         86:89:fd:60:ce:3a:2e:a2:57:5f:a6:bc:8b:76:12:b2:a3:29:
         d7:71:b9:51:c2:ff:83:29:9c:eb:d0:b5:63:76:a2:71:c5:a8:
         c8:71:3d:bb:42:b8:62:dd:80:f0:bd:ed:1c:45:c4:86:f9:22:
         e1:eb:2a:d5:b1:44:f8:f8:97:a5:33:f8:55:30:4a:3d:fc:a5:
         23:5b:06:2a:33:8c:d0:25:a0:da:31:63:8f:0c:1a:4c:ed:d8:
         91:b8:84:ac:91:a4:b9:51:c8:5f:50:10:3e:8c:a4:06:a3:73:
         27:da:18:b7:c8:da:38:c1:24:41:07:05:46:7b:1d:af:ba:d8:
         0b:62:86:45
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNh3p+h4KvZKRTiobEP7J5nTlWh4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFE
ODkzRjFGQjAeFw0yNDA3MjExOTU1MDFaFw0yNTA3MjAyMDAwMDFaMDMxMTAvBgNV
BAMTKDNCMTVBNUI2RDZCNkQxOUZCNDM4NjYzMzQwODhCQ0I5RjM2Qjk5MkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbQvK2vupPEc2g7n9eKRJ5x36/
FZ+Hx7+CHjj2PrWkqniRhkGsqNn25PiHepEXE1zZ0wt7xYmvy1KhqlFHvcFEu0yR
prI8PqyANyCCxw+nnx2sDLOIh6Nsi9HkoOyJtnzYB9cKZoRKJledqv9H6WbI5uu8
r2Z4dfAa8jo5dpSf5dL6V/6M1gZHrkg4IhRHf2tyUPzuFU/Z2cNTTDaOFtAdc39N
Q9QYgRU/ABASBpn6voUXXgJM8WprpubC2XV4B8Y1ozY9rxAuEh731cuUmrigZjeL
OnzQF03C3wemQqdLopicNkXN2fAp5WGGAPUf+W2BURXYGvf1vAuq3ugWrSLDAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUOxWltta20Z+0OGYzQIi8ufNrmS0wHwYDVR0j
BBgwFoAUHZliBrJOZ5N87yzkCILb+tiT8fswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
OWUzNjA1Ni1mMDk3LTQ5YTctYmQyMy0zZDcxMWU4OWYzMDUvMC8xRDk5NjIwNkIy
NEU2NzkzN0NFRjJDRTQwODgyREJGQUQ4OTNGMUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUQ5OTYyMDZCMjRFNjc5MzdDRUYyQ0U0MDg4MkRCRkFEODkz
RjFGQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M5ZTM2MDU2LWYwOTctNDlhNy1i
ZDIzLTNkNzExZTg5ZjMwNS8wLzMxMzAzMzJlMzkzMzJlMzIzMzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzYzMzM0MzkzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWdd7DANBgkqhkiG
9w0BAQsFAAOCAQEAR50sbUE8Hsu+niluLLcd4/wbzLbEDLwxJrnwC0I+bR0g8/9O
FeieT1pVurU0qxquEm0tLD+KnaZ2pg6t8qRH3fUwhEdFGmtXlmJ5L+JDzSXZ3C6L
G4SXl2ZumnqcKiKIgZ5ThBkF4lY55MT1NHu3d1BVp/ZFVpmo32/e0b/1hon9YM46
LqJXX6a8i3YSsqMp13G5UcL/gymc69C1Y3aiccWoyHE9u0K4Yt2A8L3tHEXEhvki
4esq1bFE+PiXpTP4VTBKPfylI1sGKjOM0CWg2jFjjwwaTO3YkbiErJGkuVHIX1AQ
PoykBqNzJ9oYt8jaOMEkQQcFRnsdr7rYC2KGRQ==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org