Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
File:                     3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa (raw, json)
Hash identifier:          YhKKtoKO/lnFao4OFu55DXrk/dVQHygjF6zudhXXaxU=
Subject key identifier:   2A:66:67:87:37:C3:A1:87:55:B3:DB:8B:58:A1:D1:E6:C8:42:A8:96
Certificate issuer:       /CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
Certificate serial:       4EAD0C75A5D0F33E507A20ADD53CA105B868A454
Authority key identifier: 55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa
Signing time:             Wed 15 May 2024 09:00:56 +0000
ROA not before:           Wed 15 May 2024 08:55:56 +0000
ROA not after:            Wed 14 May 2025 09:00:56 +0000
asID:                     136106
IP address blocks:        103.206.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl
                          rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ad:0c:75:a5:d0:f3:3e:50:7a:20:ad:d5:3c:a1:05:b8:68:a4:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55FE929F3DF18E4B5BC4309769AA6C72AFF634CC
        Validity
            Not Before: May 15 08:55:56 2024 GMT
            Not After : May 14 09:00:56 2025 GMT
        Subject: CN=2A66678737C3A18755B3DB8B58A1D1E6C842A896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ae:bf:8b:dc:eb:b2:bc:ec:a4:b2:7c:7f:f3:
                    28:c9:1f:4b:2b:87:46:c1:94:b2:49:cb:fe:a8:1d:
                    d8:0a:8a:66:30:65:a5:b2:7f:5e:9b:e9:3a:81:1a:
                    d2:36:7e:a8:cc:80:9a:2b:27:42:cb:e6:e0:cb:0e:
                    f7:a9:9f:b1:ba:e5:f3:0e:dd:a5:cc:6e:92:2f:2e:
                    d4:7e:64:dc:7d:e0:90:a7:36:71:0e:8c:00:72:45:
                    dc:bd:a2:4c:c7:aa:27:61:20:c9:b7:c5:2f:c5:01:
                    f0:41:06:df:47:d9:16:c5:3c:5b:33:bb:4a:02:ca:
                    ee:ee:7e:4f:1b:0e:b7:f9:ec:12:aa:95:e8:65:72:
                    ca:bf:00:f4:0c:28:34:f8:0e:45:cd:cf:75:6c:b1:
                    52:29:2f:49:d7:0b:e3:48:ca:42:41:4a:4c:27:9c:
                    80:d8:90:be:f0:39:35:b9:2c:1b:92:b9:42:51:64:
                    b3:44:1c:c9:b2:17:12:f7:1b:52:13:bd:e1:44:8d:
                    62:93:5d:ca:d7:9f:7e:11:80:80:7c:14:06:e9:15:
                    2f:2d:37:f5:20:b4:44:57:bb:d6:d6:a5:a8:fa:59:
                    6d:c4:37:32:18:5a:22:16:50:29:25:ae:16:8b:c8:
                    c8:53:d4:d1:d4:12:24:52:88:81:5a:9c:08:a0:42:
                    f2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:66:67:87:37:C3:A1:87:55:B3:DB:8B:58:A1:D1:E6:C8:42:A8:96
            X509v3 Authority Key Identifier:
                keyid:55:FE:92:9F:3D:F1:8E:4B:5B:C4:30:97:69:AA:6C:72:AF:F6:34:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/55FE929F3DF18E4B5BC4309769AA6C72AFF634CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cc976ec5-b05a-480f-86da-d557f84a2364/0/3130332e3230362e3138362e302f32342d3234203d3e20313336313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.206.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:49:d7:7e:d9:30:44:ba:38:2d:d3:3d:b2:ea:b2:f4:38:05:
         6d:a4:87:5b:37:fa:d9:8b:2d:be:cf:d0:16:41:eb:b2:8c:14:
         26:3e:f3:de:d8:01:6d:55:bf:24:e8:59:ab:83:c5:32:df:ac:
         35:c6:9c:3a:49:29:c4:ac:22:61:b3:80:a9:d6:c6:41:2d:18:
         cf:3d:e4:9f:5e:31:cf:9e:30:c8:27:c0:cf:fc:50:76:62:22:
         ac:54:aa:38:e4:fb:dc:58:8f:56:3c:67:de:a2:98:3c:9f:cc:
         f5:8b:f4:d6:f9:ed:3d:98:82:fb:b7:51:a0:74:0c:0d:a3:aa:
         44:84:36:9b:fa:2a:1d:6c:1d:e7:cc:53:53:92:f4:1e:53:5b:
         2b:02:ef:07:ee:c0:66:38:ba:a9:01:ce:73:a0:30:37:14:04:
         d2:6c:47:f3:40:9e:fd:26:9d:04:2f:bc:54:c9:82:50:77:a4:
         39:b4:5f:98:cc:e7:08:b9:75:1a:92:f8:78:d6:b0:64:8e:dc:
         9e:d9:bb:ad:38:ff:17:dc:67:1f:c5:da:d3:8e:f7:60:47:23:
         90:49:87:c8:25:cf:cb:10:c9:25:25:ff:fe:86:15:4c:66:22:
         6f:5f:41:61:ea:3d:d1:31:75:79:70:1b:d2:f5:c6:10:b8:62:
         e0:7b:b3:53
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTq0MdaXQ8z5QeiCt1TyhBbhopFQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJB
RkY2MzRDQzAeFw0yNDA1MTUwODU1NTZaFw0yNTA1MTQwOTAwNTZaMDMxMTAvBgNV
BAMTKDJBNjY2Nzg3MzdDM0ExODc1NUIzREI4QjU4QTFEMUU2Qzg0MkE4OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZrr+L3OuyvOyksnx/8yjJH0sr
h0bBlLJJy/6oHdgKimYwZaWyf16b6TqBGtI2fqjMgJorJ0LL5uDLDvepn7G65fMO
3aXMbpIvLtR+ZNx94JCnNnEOjAByRdy9okzHqidhIMm3xS/FAfBBBt9H2RbFPFsz
u0oCyu7ufk8bDrf57BKqlehlcsq/APQMKDT4DkXNz3VssVIpL0nXC+NIykJBSkwn
nIDYkL7wOTW5LBuSuUJRZLNEHMmyFxL3G1ITveFEjWKTXcrXn34RgIB8FAbpFS8t
N/UgtERXu9bWpaj6WW3ENzIYWiIWUCklrhaLyMhT1NHUEiRSiIFanAigQvLZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUKmZnhzfDoYdVs9uLWKHR5shCqJYwHwYDVR0j
BBgwFoAUVf6Snz3xjktbxDCXaapscq/2NMwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Yzk3NmVjNS1iMDVhLTQ4MGYtODZkYS1kNTU3Zjg0YTIzNjQvMC81NUZFOTI5RjNE
RjE4RTRCNUJDNDMwOTc2OUFBNkM3MkFGRjYzNENDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTVGRTkyOUYzREYxOEU0QjVCQzQzMDk3NjlBQTZDNzJBRkY2
MzRDQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjOTc2ZWM1LWIwNWEtNDgwZi04
NmRhLWQ1NTdmODRhMjM2NC8wLzMxMzAzMzJlMzIzMDM2MmUzMTM4MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzMTMwMzYucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnzrowDQYJ
KoZIhvcNAQELBQADggEBAIxJ137ZMES6OC3TPbLqsvQ4BW2kh1s3+tmLLb7P0BZB
67KMFCY+897YAW1VvyToWauDxTLfrDXGnDpJKcSsImGzgKnWxkEtGM895J9eMc+e
MMgnwM/8UHZiIqxUqjjk+9xYj1Y8Z96imDyfzPWL9Nb57T2Ygvu3UaB0DA2jqkSE
Npv6Kh1sHefMU1OS9B5TWysC7wfuwGY4uqkBznOgMDcUBNJsR/NAnv0mnQQvvFTJ
glB3pDm0X5jM5wi5dRqS+HjWsGSO3J7Zu604/xfcZx/F2tOO92BHI5BJh8glz8sQ
ySUl//6GFUxmIm9fQWHqPdExdXlwG9L1xhC4YuB7s1M=
-----END CERTIFICATE-----
Generated at Sun Jun 2 09:53:22 2024 by rpki-client on console-fra.rpki-client.org