Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa
File:                     3130332e33362e35322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=
Subject key identifier:   BA:B0:71:2C:3D:DE:9E:95:2F:EF:68:16:33:62:2E:46:B6:EA:BF:48
Certificate issuer:       /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
Certificate serial:       3F308AEE835BA7DDCC0A681B72BFA8477C1679B3
Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 24 Sep 2024 17:00:01 +0000
ROA not before:           Tue 24 Sep 2024 16:55:01 +0000
ROA not after:            Tue 23 Sep 2025 17:00:01 +0000
asID:                     9341
IP address blocks:        103.36.52.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl
                          rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:06:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:30:8a:ee:83:5b:a7:dd:cc:0a:68:1b:72:bf:a8:47:7c:16:79:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C
        Validity
            Not Before: Sep 24 16:55:01 2024 GMT
            Not After : Sep 23 17:00:01 2025 GMT
        Subject: CN=BAB0712C3DDE9E952FEF681633622E46B6EABF48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:dc:d8:a6:d6:10:12:5a:1b:9f:ba:25:2a:a5:
                    e0:95:88:8e:ec:13:82:3e:d0:6e:59:e8:69:cb:3a:
                    07:cf:bc:1c:43:a5:eb:07:cd:48:d9:9c:0e:41:31:
                    57:86:f5:bc:4e:c4:83:12:92:88:d0:c6:a1:d8:a2:
                    ae:12:b0:3d:9d:5b:ef:0c:ce:75:33:ab:43:b4:a1:
                    3b:55:a1:b4:c0:33:f6:53:35:bd:17:a5:62:a5:43:
                    f6:99:6a:88:70:27:9d:27:4c:52:12:7d:0d:88:67:
                    d2:45:f5:0b:3b:75:64:a0:53:aa:ac:29:2c:dd:d9:
                    a9:ab:6b:ab:95:dd:87:2c:38:19:52:57:fa:a1:5f:
                    db:b6:90:e3:2e:e8:11:bd:20:5b:17:5f:e7:47:34:
                    39:62:72:78:a6:91:35:fe:dc:f1:5b:37:7e:66:da:
                    b6:68:ba:0d:62:e4:c1:cf:35:ca:0a:26:91:c0:9c:
                    96:e6:5e:cf:b0:7c:a6:16:82:eb:be:61:0f:04:71:
                    1a:9f:5c:4b:01:1c:d1:d8:25:0c:59:ad:79:44:3c:
                    a2:48:a0:41:12:70:4b:da:52:e2:58:4d:de:fb:ae:
                    da:6f:27:f6:8f:eb:81:2e:eb:1b:a8:5d:ea:63:ba:
                    06:d5:52:d7:d0:9b:38:70:eb:b2:4c:55:11:cc:f6:
                    3c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B0:71:2C:3D:DE:9E:95:2F:EF:68:16:33:62:2E:46:B6:EA:BF:48
            X509v3 Authority Key Identifier:
                keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/3130332e33362e35322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.36.52.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:03:43:a1:f5:63:63:0a:e3:13:5a:47:1e:42:fd:cc:c3:dd:
         60:73:44:73:78:cf:42:88:a2:9f:cf:0f:4f:28:f2:3c:b7:7d:
         45:3c:08:13:f3:4c:8f:db:93:01:50:73:21:3a:5e:b9:97:15:
         d6:1e:a6:5c:2d:78:39:ad:3c:20:98:fc:c9:72:90:32:0c:d0:
         e2:f7:55:b3:75:72:d4:5f:63:23:f3:24:bc:33:3d:05:ac:8b:
         40:36:ad:7d:ed:aa:0f:dc:9b:1e:2e:c6:76:50:2b:fe:e0:47:
         4e:aa:70:c8:d1:b5:2e:fa:18:6e:97:37:18:fc:a5:31:05:a7:
         3e:d7:28:6b:44:84:80:9c:e8:85:04:f3:a3:3e:3e:32:22:8f:
         e6:2c:2d:ab:32:09:01:32:b0:01:d9:12:d3:4d:6d:59:6d:12:
         82:81:4b:b7:23:52:46:a8:79:1f:b0:e3:aa:03:a9:9e:2c:41:
         ff:a5:49:56:df:e2:13:9f:4f:19:2a:11:2a:a2:fd:17:b0:6f:
         d1:ee:79:ac:78:73:11:5e:a8:fd:f6:f7:f2:bc:b0:43:fc:ca:
         d1:c0:b7:45:9d:35:f0:15:4e:54:cc:f7:85:99:e3:17:82:38:
         2b:e3:7c:e9:65:40:12:78:f2:5f:0a:47:9d:26:75:a2:10:d8:
         60:f3:90:cc
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUPzCK7oNbp93MCmgbcr+oR3wWebMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4
OUVFODE5QzAeFw0yNDA5MjQxNjU1MDFaFw0yNTA5MjMxNzAwMDFaMDMxMTAvBgNV
BAMTKEJBQjA3MTJDM0RERTlFOTUyRkVGNjgxNjMzNjIyRTQ2QjZFQUJGNDgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd3Nim1hASWhufuiUqpeCViI7s
E4I+0G5Z6GnLOgfPvBxDpesHzUjZnA5BMVeG9bxOxIMSkojQxqHYoq4SsD2dW+8M
znUzq0O0oTtVobTAM/ZTNb0XpWKlQ/aZaohwJ50nTFISfQ2IZ9JF9Qs7dWSgU6qs
KSzd2amra6uV3YcsOBlSV/qhX9u2kOMu6BG9IFsXX+dHNDlicnimkTX+3PFbN35m
2rZoug1i5MHPNcoKJpHAnJbmXs+wfKYWguu+YQ8EcRqfXEsBHNHYJQxZrXlEPKJI
oEEScEvaUuJYTd77rtpvJ/aP64Eu6xuoXepjugbVUtfQmzhw67JMVRHM9jw1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUurBxLD3enpUv72gWM2IuRrbqv0gwHwYDVR0j
BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx
OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF
ODE5Qy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk
NzctOTIzZDkyN2U3NjM0LzAvMzEzMDMzMmUzMzM2MmUzNTMyMmUzMDJmMzIzNDJk
MzIzNDIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnJDQwDQYJKoZIhvcNAQEL
BQADggEBALEDQ6H1Y2MK4xNaRx5C/czD3WBzRHN4z0KIop/PD08o8jy3fUU8CBPz
TI/bkwFQcyE6XrmXFdYeplwteDmtPCCY/MlykDIM0OL3VbN1ctRfYyPzJLwzPQWs
i0A2rX3tqg/cmx4uxnZQK/7gR06qcMjRtS76GG6XNxj8pTEFpz7XKGtEhICc6IUE
86M+PjIij+YsLasyCQEysAHZEtNNbVltEoKBS7cjUkaoeR+w46oDqZ4sQf+lSVbf
4hOfTxkqESqi/Rewb9Hueax4cxFeqP329/K8sEP8ytHAt0WdNfAVTlTM94WZ4xeC
OCvjfOllQBJ48l8KR50mdaIQ2GDzkMw=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:19:27 2024 by rpki-client on console-ams.rpki-client.org