Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa
File:                     3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa (raw, json)
Hash identifier:          +VlGrhXWy7XUIfwjQ7M3GIwRAfOcSI97le8UPrTu9FE=
Subject key identifier:   3C:C5:E6:3F:94:E2:B3:B6:0C:A7:00:23:6E:88:59:A9:38:BB:0E:A7
Certificate issuer:       /CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
Certificate serial:       5961640A3B0E3DAC31C8175218AADD195FC403D3
Authority key identifier: 68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa
Signing time:             Tue 19 Sep 2023 12:25:21 +0000
ROA not before:           Tue 19 Sep 2023 12:20:21 +0000
ROA not after:            Tue 17 Sep 2024 12:25:21 +0000
asID:                     149924
IP address blocks:        103.191.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl
                          rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 21:39:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:61:64:0a:3b:0e:3d:ac:31:c8:17:52:18:aa:dd:19:5f:c4:03:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF
        Validity
            Not Before: Sep 19 12:20:21 2023 GMT
            Not After : Sep 17 12:25:21 2024 GMT
        Subject: CN=3CC5E63F94E2B3B60CA700236E8859A938BB0EA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fc:67:64:6a:68:a4:55:17:ef:ca:34:fc:e5:
                    9c:26:3c:70:83:2a:97:28:39:77:a6:a8:97:ab:29:
                    65:a9:3d:4c:a6:d7:66:a6:ab:b8:13:77:df:aa:8c:
                    f0:93:84:b5:53:74:bd:14:84:38:56:74:34:6e:4a:
                    de:ef:f3:10:61:7d:93:4f:6f:48:82:15:e5:33:7a:
                    24:3c:f7:26:0b:d7:a3:65:c5:ce:7a:25:e1:da:36:
                    ec:da:5a:56:aa:1a:bc:9c:9a:89:70:60:8d:6e:7b:
                    57:32:2c:b3:6e:f5:15:67:56:d8:37:21:41:ce:3a:
                    89:97:9e:54:d9:6a:9c:20:1d:cf:7c:19:8e:4f:5d:
                    9c:ff:ad:d5:39:2d:fc:6a:bc:d6:19:a5:b3:97:6b:
                    bc:02:cf:b6:a0:89:80:4c:94:36:15:41:82:aa:86:
                    63:a3:76:83:3f:1e:7f:f4:ba:c2:39:2c:be:6e:c8:
                    2d:7f:3a:64:a0:40:24:df:d5:1d:cf:b9:6d:74:96:
                    3a:da:1d:da:b0:8e:c0:2c:d5:99:ea:3c:3b:da:7f:
                    9d:8d:4b:0d:2c:13:50:e7:2d:7e:7d:55:4b:5a:73:
                    e6:5c:4a:d3:fb:07:05:f6:5b:8e:4d:82:bc:25:43:
                    77:5b:e3:e0:07:54:3f:4b:24:05:a0:19:00:63:5f:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C5:E6:3F:94:E2:B3:B6:0C:A7:00:23:6E:88:59:A9:38:BB:0E:A7
            X509v3 Authority Key Identifier:
                keyid:68:B1:66:10:EA:F2:D4:B3:AB:FB:9A:C5:71:7E:DF:0A:60:01:EE:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/68B16610EAF2D4B3ABFB9AC5717EDF0A6001EEFF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d18c0383-629f-46e2-b114-188cc921a6a5/0/3130332e3139312e3136382e302f32342d3234203d3e20313439393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.191.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:36:33:70:68:51:07:ea:43:c7:5d:99:22:f4:db:98:8a:55:
         25:3e:64:a5:9b:79:8b:df:e4:5f:bb:7a:03:71:88:fc:e5:80:
         c5:2a:7e:be:e7:64:30:b2:b6:7e:59:28:3f:25:2e:cd:a4:63:
         ad:73:e3:b5:22:45:d1:38:83:ea:ea:39:d4:09:a1:93:05:be:
         46:07:a3:88:04:6a:08:5d:32:a5:c9:9a:78:99:9e:ee:85:02:
         06:f6:89:e4:bc:15:0f:8c:ba:3c:de:d1:f2:2f:9c:14:ad:58:
         7d:a4:39:66:5e:09:5e:ff:6c:29:66:89:4f:1d:1d:08:6b:47:
         82:ce:6c:a4:01:b0:14:14:93:92:e2:75:b3:a7:38:0d:46:99:
         a2:9c:14:45:7f:23:5b:78:a8:1c:b7:b9:e7:05:ce:80:1b:15:
         49:51:db:93:9d:5d:2c:07:fd:7f:41:60:5b:fa:dc:a1:b8:23:
         93:85:58:28:34:59:1d:8e:9f:2d:f4:09:a5:34:31:6a:24:bc:
         e7:d5:29:d2:18:51:b4:02:dc:b1:3d:64:ef:18:9b:8b:f5:f6:
         e0:e6:a6:2b:8a:3c:dc:83:63:85:e3:49:ce:01:a5:4a:c5:f3:
         21:33:b9:57:87:66:82:ae:bd:19:ca:44:09:80:ed:83:3c:be:
         4f:7b:81:9a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWWFkCjsOPawxyBdSGKrdGV/EA9MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2
MDAxRUVGRjAeFw0yMzA5MTkxMjIwMjFaFw0yNDA5MTcxMjI1MjFaMDMxMTAvBgNV
BAMTKDNDQzVFNjNGOTRFMkIzQjYwQ0E3MDAyMzZFODg1OUE5MzhCQjBFQTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR/GdkamikVRfvyjT85ZwmPHCD
KpcoOXemqJerKWWpPUym12amq7gTd9+qjPCThLVTdL0UhDhWdDRuSt7v8xBhfZNP
b0iCFeUzeiQ89yYL16Nlxc56JeHaNuzaWlaqGrycmolwYI1ue1cyLLNu9RVnVtg3
IUHOOomXnlTZapwgHc98GY5PXZz/rdU5LfxqvNYZpbOXa7wCz7agiYBMlDYVQYKq
hmOjdoM/Hn/0usI5LL5uyC1/OmSgQCTf1R3PuW10ljraHdqwjsAs1ZnqPDvaf52N
Sw0sE1DnLX59VUtac+ZcStP7BwX2W45NgrwlQ3db4+AHVD9LJAWgGQBjX+6bAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUPMXmP5Tis7YMpwAjbohZqTi7DqcwHwYDVR0j
BBgwFoAUaLFmEOry1LOr+5rFcX7fCmAB7v8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MThjMDM4My02MjlmLTQ2ZTItYjExNC0xODhjYzkyMWE2YTUvMC82OEIxNjYxMEVB
RjJENEIzQUJGQjlBQzU3MTdFREYwQTYwMDFFRUZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjhCMTY2MTBFQUYyRDRCM0FCRkI5QUM1NzE3RURGMEE2MDAx
RUVGRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QxOGMwMzgzLTYyOWYtNDZlMi1i
MTE0LTE4OGNjOTIxYTZhNS8wLzMxMzAzMzJlMzEzOTMxMmUzMTM2MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzOTMyMzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnv6gwDQYJ
KoZIhvcNAQELBQADggEBACk2M3BoUQfqQ8ddmSL025iKVSU+ZKWbeYvf5F+7egNx
iPzlgMUqfr7nZDCytn5ZKD8lLs2kY61z47UiRdE4g+rqOdQJoZMFvkYHo4gEaghd
MqXJmniZnu6FAgb2ieS8FQ+Mujze0fIvnBStWH2kOWZeCV7/bClmiU8dHQhrR4LO
bKQBsBQUk5LidbOnOA1GmaKcFEV/I1t4qBy3uecFzoAbFUlR25OdXSwH/X9BYFv6
3KG4I5OFWCg0WR2Ony30CaU0MWokvOfVKdIYUbQC3LE9ZO8Ym4v19uDmpiuKPNyD
Y4XjSc4BpUrF8yEzuVeHZoKuvRnKRAmA7YM8vk97gZo=
-----END CERTIFICATE-----
Generated at Sat Jun 1 00:12:06 2024 by rpki-client on console-ams.rpki-client.org