Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
File:                     3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa (raw, json)
Hash identifier:          np/8UZkWdqPgd55xyHdhWCSJZzZtLCdrOeOZ6nL5GG0=
Subject key identifier:   D3:9F:D6:9D:5F:DF:DC:EA:A7:25:B4:A9:36:00:E4:1B:1F:4C:30:A6
Certificate issuer:       /CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
Certificate serial:       420716BC62463562C98315DFCB8E78A4EC3628D5
Authority key identifier: 26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa
Signing time:             Thu 30 Nov 2023 06:00:01 +0000
ROA not before:           Thu 30 Nov 2023 05:55:01 +0000
ROA not after:            Thu 28 Nov 2024 06:00:01 +0000
asID:                     140008
IP address blocks:        103.145.147.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl
                          rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:07:16:bc:62:46:35:62:c9:83:15:df:cb:8e:78:a4:ec:36:28:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26A14190F845A3F3FC336BD3062AE6F165B97E5C
        Validity
            Not Before: Nov 30 05:55:01 2023 GMT
            Not After : Nov 28 06:00:01 2024 GMT
        Subject: CN=D39FD69D5FDFDCEAA725B4A93600E41B1F4C30A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9f:a5:b3:5b:30:69:07:80:2c:b0:26:c0:d3:
                    56:57:01:8c:c2:4f:e2:14:3c:78:04:ad:d8:aa:47:
                    40:cf:af:da:2d:27:9e:06:72:37:54:78:47:12:e1:
                    da:f0:c3:25:59:88:88:f4:5d:d9:e7:6d:a6:2d:d4:
                    7e:1e:65:0f:24:91:31:e2:ca:be:d9:50:ed:5f:cb:
                    9a:b5:1b:b2:f5:fd:7c:e6:38:15:01:68:51:96:23:
                    91:29:4b:77:42:4b:79:50:11:ba:20:16:64:47:c5:
                    d5:b5:12:83:6a:b3:a5:40:44:87:83:5a:d1:2c:4b:
                    23:0f:15:5b:da:ae:d8:74:f2:35:4d:41:75:58:89:
                    47:3d:93:06:45:0e:86:e0:b3:2c:a0:ae:ed:7b:36:
                    37:5d:f9:f6:b9:64:cc:93:e0:88:53:0f:ab:b5:8a:
                    b2:37:d7:ed:8b:c2:76:14:25:34:e9:70:5e:49:88:
                    b3:e6:5d:e2:75:8b:cd:bd:9c:78:d5:70:41:df:33:
                    85:d7:2d:b9:9d:fb:c4:31:ff:54:8a:81:43:0c:09:
                    69:68:9c:9e:7e:b7:1a:2e:ee:c6:0e:28:ff:93:64:
                    4e:49:67:16:c2:6b:2a:83:e8:c4:40:98:7a:85:b9:
                    4b:a0:33:8a:dd:1c:c7:15:8f:32:7d:24:f4:a3:37:
                    47:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9F:D6:9D:5F:DF:DC:EA:A7:25:B4:A9:36:00:E4:1B:1F:4C:30:A6
            X509v3 Authority Key Identifier:
                keyid:26:A1:41:90:F8:45:A3:F3:FC:33:6B:D3:06:2A:E6:F1:65:B9:7E:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/26A14190F845A3F3FC336BD3062AE6F165B97E5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26A14190F845A3F3FC336BD3062AE6F165B97E5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc60a6c1-c081-439b-ae8d-8149b634d5a2/0/3130332e3134352e3134372e302f32342d3234203d3e20313430303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.147.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:95:34:e1:9f:2c:f1:4b:1a:3f:e5:5c:7c:48:6c:a4:1d:d1:
         9a:f9:ca:47:d4:8b:9d:f9:3d:a8:52:88:65:e4:6a:a3:33:2b:
         f7:40:99:d8:38:7d:35:2b:bd:aa:83:6c:c5:6b:af:e0:83:db:
         4c:2c:09:82:79:84:bc:e0:19:34:62:21:5e:06:d9:3d:65:46:
         2b:d7:2f:d6:af:fc:63:5c:d0:09:3b:9a:fd:d5:3c:03:cc:a1:
         e3:51:18:cb:bb:56:e9:20:be:4e:50:9f:75:c0:87:02:48:24:
         c3:e0:d8:00:0b:ca:42:92:51:54:52:a5:4a:17:a3:a8:c2:d5:
         68:df:d0:f6:fb:83:d7:eb:84:0b:c3:a8:36:8e:81:99:1c:b6:
         8f:58:cc:20:04:ca:85:21:11:c6:72:82:d5:e5:bb:ee:4f:05:
         83:09:77:3e:08:14:aa:a2:b2:bf:9d:e2:c4:cb:af:ce:15:a4:
         e0:99:43:2c:80:17:ca:84:18:23:c9:56:f9:00:9d:50:83:37:
         09:a9:ba:8d:18:9b:13:d2:2b:38:9e:77:f1:d4:76:ca:d6:e6:
         62:e6:1e:ac:7f:e1:a3:6e:da:e5:5e:81:4c:d9:5b:ba:08:44:
         06:b0:00:15:71:2f:6d:38:ab:6f:54:b9:c6:89:46:d2:77:b6:
         fa:1e:0a:2d
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUQgcWvGJGNWLJgxXfy454pOw2KNUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2
NUI5N0U1QzAeFw0yMzExMzAwNTU1MDFaFw0yNDExMjgwNjAwMDFaMDMxMTAvBgNV
BAMTKEQzOUZENjlENUZERkRDRUFBNzI1QjRBOTM2MDBFNDFCMUY0QzMwQTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDon6WzWzBpB4AssCbA01ZXAYzC
T+IUPHgErdiqR0DPr9otJ54GcjdUeEcS4drwwyVZiIj0XdnnbaYt1H4eZQ8kkTHi
yr7ZUO1fy5q1G7L1/XzmOBUBaFGWI5EpS3dCS3lQEbogFmRHxdW1EoNqs6VARIeD
WtEsSyMPFVvarth08jVNQXVYiUc9kwZFDobgsyygru17Njdd+fa5ZMyT4IhTD6u1
irI31+2LwnYUJTTpcF5JiLPmXeJ1i829nHjVcEHfM4XXLbmd+8Qx/1SKgUMMCWlo
nJ5+txou7sYOKP+TZE5JZxbCayqD6MRAmHqFuUugM4rdHMcVjzJ9JPSjN0dbAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU05/WnV/f3OqnJbSpNgDkGx9MMKYwHwYDVR0j
BBgwFoAUJqFBkPhFo/P8M2vTBirm8WW5flwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
YzYwYTZjMS1jMDgxLTQzOWItYWU4ZC04MTQ5YjYzNGQ1YTIvMC8yNkExNDE5MEY4
NDVBM0YzRkMzMzZCRDMwNjJBRTZGMTY1Qjk3RTVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZBMTQxOTBGODQ1QTNGM0ZDMzM2QkQzMDYyQUU2RjE2NUI5
N0U1Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjNjBhNmMxLWMwODEtNDM5Yi1h
ZThkLTgxNDliNjM0ZDVhMi8wLzMxMzAzMzJlMzEzNDM1MmUzMTM0MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMwMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkZMwDQYJ
KoZIhvcNAQELBQADggEBAA2VNOGfLPFLGj/lXHxIbKQd0Zr5ykfUi535PahSiGXk
aqMzK/dAmdg4fTUrvaqDbMVrr+CD20wsCYJ5hLzgGTRiIV4G2T1lRivXL9av/GNc
0Ak7mv3VPAPMoeNRGMu7Vukgvk5Qn3XAhwJIJMPg2AALykKSUVRSpUoXo6jC1Wjf
0Pb7g9frhAvDqDaOgZkcto9YzCAEyoUhEcZygtXlu+5PBYMJdz4IFKqisr+d4sTL
r84VpOCZQyyAF8qEGCPJVvkAnVCDNwmpuo0YmxPSKzied/HUdsrW5mLmHqx/4aNu
2uVegUzZW7oIRAawABVxL204q29UucaJRtJ3tvoeCi0=
-----END CERTIFICATE-----
Generated at Sat Jun 1 19:26:35 2024 by rpki-client on console-fra.rpki-client.org