Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa
File:                     3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa (raw, json)
Hash identifier:          49CeYm2cOo08ajd9mG94dfnnxIVF6bqfclQYOR837B8=
Subject key identifier:   28:F4:2D:F8:4A:A7:89:FF:CF:62:E3:30:9D:D2:BD:6F:4F:97:E0:57
Certificate issuer:       /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Certificate serial:       78EDFD3B6C879EF7DD20F6EB3A47570D9E23C682
Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa
Signing time:             Thu 30 Nov 2023 06:00:01 +0000
ROA not before:           Thu 30 Nov 2023 05:55:01 +0000
ROA not after:            Thu 28 Nov 2024 06:00:01 +0000
asID:                     140008
IP address blocks:        103.145.146.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
                          rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:ed:fd:3b:6c:87:9e:f7:dd:20:f6:eb:3a:47:57:0d:9e:23:c6:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
        Validity
            Not Before: Nov 30 05:55:01 2023 GMT
            Not After : Nov 28 06:00:01 2024 GMT
        Subject: CN=28F42DF84AA789FFCF62E3309DD2BD6F4F97E057
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:51:6b:45:68:f5:0a:46:e9:d8:fc:e5:74:9e:
                    cd:d3:28:31:74:1f:aa:45:d5:ee:95:bf:4d:47:4a:
                    4e:10:f6:22:af:67:d0:57:37:66:bd:79:84:1a:70:
                    23:25:fb:32:c3:a1:fa:e4:eb:ad:9a:6b:50:c6:21:
                    36:c7:90:a6:57:9b:18:c8:5a:43:d6:fa:b0:e7:a0:
                    cc:31:d6:ca:81:f7:b1:55:d8:2a:fe:9e:5f:25:d8:
                    17:a4:8d:ea:01:e0:5d:32:eb:35:4e:d0:72:23:12:
                    54:0b:f2:bd:6a:c7:26:0f:96:64:67:39:e2:f8:54:
                    11:be:f9:f4:5a:ef:fb:46:87:e1:7f:d1:b8:a9:1b:
                    eb:f2:b1:46:d5:61:55:a1:d0:43:44:45:e4:85:b3:
                    fc:f7:09:68:a0:94:66:c5:d1:e5:4c:90:79:c8:8b:
                    d4:32:e9:de:fe:b3:86:a4:be:2c:05:dd:b4:56:14:
                    5d:19:3b:86:be:2d:c0:63:c5:40:e6:3f:c3:59:ad:
                    0f:b7:6a:b6:de:87:48:11:b8:73:74:fc:2e:55:77:
                    9f:6a:e0:04:ff:5b:fb:7b:f8:d4:92:61:8d:85:c6:
                    ca:44:bc:aa:64:30:4c:c6:f2:a7:8f:a3:8b:b3:96:
                    2b:b1:ad:f2:06:a5:25:d0:18:f4:6f:b9:32:9f:1f:
                    f8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:F4:2D:F8:4A:A7:89:FF:CF:62:E3:30:9D:D2:BD:6F:4F:97:E0:57
            X509v3 Authority Key Identifier:
                keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134362e302f32332d3233203d3e20313430303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.146.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:fc:50:3c:1f:b4:7b:be:84:0e:f5:06:7a:0d:11:c9:fd:9e:
         10:6e:4c:91:d4:9a:ac:57:ad:1e:49:28:fd:98:c4:d1:4e:07:
         c6:7b:6b:7f:fe:70:0c:4b:86:63:9a:76:1c:ed:f6:c4:13:26:
         f4:f8:ef:5b:1f:53:91:9b:f5:d4:15:ec:3a:39:d2:5a:3b:60:
         b6:b4:d5:c0:e4:fa:8a:58:7c:ad:e4:fc:d4:26:a7:15:f0:18:
         c0:e9:67:fa:7e:a9:cd:51:39:d3:1b:e9:91:aa:03:c3:92:33:
         5d:e3:df:d6:dd:d1:d2:bc:7f:a2:17:65:2b:f2:8e:fc:44:81:
         94:a5:ae:36:3b:0d:71:88:4c:49:c9:3c:06:ac:98:4b:7c:2b:
         73:b3:28:ec:33:51:62:97:39:27:ea:0f:86:a0:9f:a6:b5:43:
         f8:01:30:7c:a3:b3:e3:1f:49:5b:bf:ca:62:14:f9:bf:7f:d7:
         1a:eb:85:8c:0f:1b:9e:a1:9f:be:21:e8:f0:b0:80:8f:12:92:
         ea:53:9c:bd:c9:b0:e6:6f:a1:07:c9:47:c0:5c:42:df:62:87:
         bb:ac:4d:01:24:43:f9:da:2a:16:5b:36:a1:2f:39:af:2a:84:
         64:61:a6:3e:bd:09:f8:c6:85:9b:f1:27:34:c1:64:c1:e2:9b:
         aa:36:13:b2
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeO39O2yHnvfdIPbrOkdXDZ4jxoIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2
NUI5N0U1QzAeFw0yMzExMzAwNTU1MDFaFw0yNDExMjgwNjAwMDFaMDMxMTAvBgNV
BAMTKDI4RjQyREY4NEFBNzg5RkZDRjYyRTMzMDlERDJCRDZGNEY5N0UwNTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfUWtFaPUKRunY/OV0ns3TKDF0
H6pF1e6Vv01HSk4Q9iKvZ9BXN2a9eYQacCMl+zLDofrk662aa1DGITbHkKZXmxjI
WkPW+rDnoMwx1sqB97FV2Cr+nl8l2BekjeoB4F0y6zVO0HIjElQL8r1qxyYPlmRn
OeL4VBG++fRa7/tGh+F/0bipG+vysUbVYVWh0ENEReSFs/z3CWiglGbF0eVMkHnI
i9Qy6d7+s4akviwF3bRWFF0ZO4a+LcBjxUDmP8NZrQ+3arbeh0gRuHN0/C5Vd59q
4AT/W/t7+NSSYY2FxspEvKpkMEzG8qePo4uzliuxrfIGpSXQGPRvuTKfH/jnAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKPQt+Eqnif/PYuMwndK9b0+X4FcwHwYDVR0j
BBgwFoAUJqFBkPhFo/P8M2vTBirm8WW5flwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YzYwYTZjMS1jMDgxLTQzOWItYWU4ZC04MTQ5YjYzNGQ1YTIvMC8yNkExNDE5MEY4
NDVBM0YzRkMzMzZCRDMwNjJBRTZGMTY1Qjk3RTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2NUI5
N0U1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjNjBhNmMxLWMwODEtNDM5Yi1h
ZThkLTgxNDliNjM0ZDVhMi8wLzMxMzAzMzJlMzEzNDM1MmUzMTM0MzYyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzAzMDMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnkZIwDQYJ
KoZIhvcNAQELBQADggEBAFz8UDwftHu+hA71BnoNEcn9nhBuTJHUmqxXrR5JKP2Y
xNFOB8Z7a3/+cAxLhmOadhzt9sQTJvT471sfU5Gb9dQV7Do50lo7YLa01cDk+opY
fK3k/NQmpxXwGMDpZ/p+qc1ROdMb6ZGqA8OSM13j39bd0dK8f6IXZSvyjvxEgZSl
rjY7DXGITEnJPAasmEt8K3OzKOwzUWKXOSfqD4agn6a1Q/gBMHyjs+MfSVu/ymIU
+b9/1xrrhYwPG56hn74h6PCwgI8SkupTnL3JsOZvoQfJR8BcQt9ih7usTQEkQ/na
KhZbNqEvOa8qhGRhpj69CfjGhZvxJzTBZMHim6o2E7I=
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:50:30 2024 by rpki-client on console-ams.rpki-client.org