Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa
File:                     3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa (raw, json)
Hash identifier:          /xBNZwXxHohCUxNqlZKCedVvPsp2wp7ZX48RgHZzYtM=
Subject key identifier:   39:59:EA:15:CD:95:A3:36:0D:FA:25:E6:BB:4A:5B:8F:0D:5F:BF:43
Certificate issuer:       /CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741
Certificate serial:       2F5FD2D0DAAC739546DC533574B3832D16F2B41E
Authority key identifier: B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa
Signing time:             Sat 15 Jun 2024 13:00:01 +0000
ROA not before:           Sat 15 Jun 2024 12:55:01 +0000
ROA not after:            Sat 14 Jun 2025 13:00:01 +0000
asID:                     149740
IP address blocks:        103.186.94.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl
                          rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:5f:d2:d0:da:ac:73:95:46:dc:53:35:74:b3:83:2d:16:f2:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B76CEE66CD329E4EDD33E6D3452A33FBBE00D741
        Validity
            Not Before: Jun 15 12:55:01 2024 GMT
            Not After : Jun 14 13:00:01 2025 GMT
        Subject: CN=3959EA15CD95A3360DFA25E6BB4A5B8F0D5FBF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:10:6e:b7:23:81:1c:73:57:76:16:c1:70:2c:
                    3a:bf:ba:c3:b1:6a:52:0c:0c:12:67:3a:8e:3b:23:
                    c0:3d:5b:b9:bb:d4:93:36:b1:5c:28:2f:b7:5b:81:
                    bb:04:7e:e1:7f:ce:14:eb:36:cc:56:c8:33:bc:fd:
                    d4:5e:fc:11:6f:e7:07:a0:10:de:0d:7c:e9:dd:d0:
                    99:f3:94:33:d9:17:48:d8:91:dd:27:dc:3a:ed:c7:
                    f5:a9:4c:ec:5a:1a:fb:42:10:f6:5a:0b:41:17:aa:
                    e8:dc:43:37:ac:c0:c4:76:d6:0a:70:74:a7:55:1f:
                    7a:3f:ee:8a:8f:e0:bb:42:9f:8e:cc:b3:d1:22:a6:
                    6b:81:36:38:7b:a6:7e:a7:ee:8b:0f:3a:5d:cf:4d:
                    1d:17:9c:8a:05:7c:d7:6d:c1:c8:0e:75:f4:06:c0:
                    f7:2e:de:3e:0f:5e:65:2d:27:ba:97:c8:bf:e0:99:
                    23:2c:41:bc:08:b3:5e:0b:12:43:a1:32:5e:b6:3e:
                    e5:a8:9d:a6:e1:53:28:f3:5d:1c:7b:1e:b0:bc:31:
                    41:22:44:76:0b:15:d4:3f:9a:d9:ea:f2:79:89:9c:
                    e7:e6:c0:82:5c:ea:e2:18:5a:4e:97:a9:2a:9f:be:
                    78:10:bb:dd:58:67:27:58:c9:dd:88:bd:6d:ef:90:
                    4c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:59:EA:15:CD:95:A3:36:0D:FA:25:E6:BB:4A:5B:8F:0D:5F:BF:43
            X509v3 Authority Key Identifier:
                keyid:B7:6C:EE:66:CD:32:9E:4E:DD:33:E6:D3:45:2A:33:FB:BE:00:D7:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B76CEE66CD329E4EDD33E6D3452A33FBBE00D741.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cf7b7677-6204-405f-8ba2-e714324c15d7/0/3130332e3138362e39342e302f32332d3234203d3e20313439373430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2c:23:d1:f4:ba:88:b5:f4:aa:9a:93:a7:c3:52:77:bb:6f:75:
         ed:70:52:1a:41:d6:2e:93:30:dd:42:7a:6a:a6:02:d3:4c:21:
         ec:61:c6:c0:1b:87:ff:93:8a:85:4b:d5:88:4d:b0:73:7c:20:
         a7:f1:49:eb:4c:7c:6a:bf:a7:6c:69:de:ee:36:26:24:86:c5:
         23:8c:b4:af:e4:c8:6a:b4:48:90:2e:d4:39:f5:54:69:fa:90:
         57:49:cb:0c:49:6a:14:b2:f2:a0:7c:58:62:a8:39:ca:be:62:
         e8:66:e2:44:34:45:46:c7:6c:4d:d6:a9:90:d6:43:cf:15:01:
         56:13:bf:20:3b:49:37:a7:43:2e:8d:a2:51:77:cb:34:a5:ad:
         53:3d:21:dd:6a:18:54:2a:77:cb:e0:f8:60:6f:39:a4:50:d8:
         72:fd:6f:81:a8:ad:6d:3c:74:2d:23:ae:33:95:3a:a5:ea:35:
         80:d2:f7:34:76:8e:4a:2f:39:ea:14:a5:a8:c4:e4:10:e4:50:
         1f:f1:3c:7c:de:0f:4f:01:ae:d9:7e:e1:fa:97:5b:25:f7:bb:
         6e:d3:3d:05:c5:b2:d7:bf:2e:48:78:bb:a6:70:3a:c9:54:41:
         a9:0c:ce:b2:a2:30:4e:42:24:ff:b5:9c:28:cf:0e:59:76:dd:
         97:67:5e:6b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUL1/S0Nqsc5VG3FM1dLODLRbytB4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJC
RTAwRDc0MTAeFw0yNDA2MTUxMjU1MDFaFw0yNTA2MTQxMzAwMDFaMDMxMTAvBgNV
BAMTKDM5NTlFQTE1Q0Q5NUEzMzYwREZBMjVFNkJCNEE1QjhGMEQ1RkJGNDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLEG63I4Ecc1d2FsFwLDq/usOx
alIMDBJnOo47I8A9W7m71JM2sVwoL7dbgbsEfuF/zhTrNsxWyDO8/dRe/BFv5weg
EN4NfOnd0JnzlDPZF0jYkd0n3Drtx/WpTOxaGvtCEPZaC0EXqujcQzeswMR21gpw
dKdVH3o/7oqP4LtCn47Ms9EipmuBNjh7pn6n7osPOl3PTR0XnIoFfNdtwcgOdfQG
wPcu3j4PXmUtJ7qXyL/gmSMsQbwIs14LEkOhMl62PuWonabhUyjzXRx7HrC8MUEi
RHYLFdQ/mtnq8nmJnOfmwIJc6uIYWk6XqSqfvngQu91YZydYyd2IvW3vkEzHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUOVnqFc2VozYN+iXmu0pbjw1fv0MwHwYDVR0j
BBgwFoAUt2zuZs0ynk7dM+bTRSoz+74A10EwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZjdiNzY3Ny02MjA0LTQwNWYtOGJhMi1lNzE0MzI0YzE1ZDcvMC9CNzZDRUU2NkNE
MzI5RTRFREQzM0U2RDM0NTJBMzNGQkJFMDBENzQxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjc2Q0VFNjZDRDMyOUU0RUREMzNFNkQzNDUyQTMzRkJCRTAw
RDc0MS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmN2I3Njc3LTYyMDQtNDA1Zi04
YmEyLWU3MTQzMjRjMTVkNy8wLzMxMzAzMzJlMzEzODM2MmUzOTM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7peMA0GCSqG
SIb3DQEBCwUAA4IBAQAsI9H0uoi19Kqak6fDUne7b3XtcFIaQdYukzDdQnpqpgLT
TCHsYcbAG4f/k4qFS9WITbBzfCCn8UnrTHxqv6dsad7uNiYkhsUjjLSv5MhqtEiQ
LtQ59VRp+pBXScsMSWoUsvKgfFhiqDnKvmLoZuJENEVGx2xN1qmQ1kPPFQFWE78g
O0k3p0MujaJRd8s0pa1TPSHdahhUKnfL4PhgbzmkUNhy/W+BqK1tPHQtI64zlTql
6jWA0vc0do5KLznqFKWoxOQQ5FAf8Tx83g9PAa7ZfuH6l1sl97tu0z0FxbLXvy5I
eLumcDrJVEGpDM6yojBOQiT/tZwozw5Zdt2XZ15r
-----END CERTIFICATE-----
Generated at Thu Nov 21 19:10:54 2024 by rpki-client on console-fra.rpki-client.org