Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          5nsUaJsoHljodwn0u7F5BmbwvHAGQAdxB49YHcH+PVw=
Subject key identifier:   6C:C5:E9:0F:EB:BF:16:1E:20:6C:79:48:36:0D:E2:AE:F0:95:49:FB
Certificate issuer:       /CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
Certificate serial:       1CE1696776D31261B70863DAF3331F3B7ABA4AA5
Authority key identifier: 6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa
Signing time:             Wed 17 Jul 2024 17:00:01 +0000
ROA not before:           Wed 17 Jul 2024 16:55:01 +0000
ROA not after:            Wed 16 Jul 2025 17:00:01 +0000
asID:                     140443
IP address blocks:        103.152.119.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl
                          rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 03:03:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:e1:69:67:76:d3:12:61:b7:08:63:da:f3:33:1f:3b:7a:ba:4a:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DCC69508EF4E670EFBC5C69203D6B120FA9392F
        Validity
            Not Before: Jul 17 16:55:01 2024 GMT
            Not After : Jul 16 17:00:01 2025 GMT
        Subject: CN=6CC5E90FEBBF161E206C7948360DE2AEF09549FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:54:9a:4d:10:d6:94:6f:6a:fa:93:18:a2:7e:
                    23:1d:ef:b1:e1:c6:68:bc:d1:5a:d7:4d:1b:28:63:
                    94:af:e7:5d:66:db:c5:d7:45:e4:31:bf:45:0b:fa:
                    20:1d:28:ac:30:fa:7c:32:30:a2:bd:1a:6b:c9:2b:
                    d9:4f:f1:00:61:e9:16:26:28:e3:4a:2a:13:62:fe:
                    6d:9d:09:f0:1a:a1:c9:70:5f:18:53:45:c9:55:b7:
                    b9:66:d0:5b:0c:06:4d:ef:3f:13:00:ff:13:42:7e:
                    bc:fb:b6:7a:4d:be:38:d2:87:57:d6:6c:26:88:01:
                    43:ea:ee:d8:12:5d:9b:4b:43:03:63:03:00:a0:62:
                    5e:9e:c0:ad:bd:a7:af:90:c2:c5:ef:df:d1:27:0e:
                    3d:9e:8f:c9:31:6b:9c:16:26:b3:a3:0a:38:f8:9b:
                    1b:6d:ab:0b:8d:52:df:8a:10:e6:19:48:63:bd:2e:
                    a4:53:76:68:dd:9c:8f:c6:de:e5:e4:09:bc:5e:ad:
                    38:d9:0a:d5:89:b9:c2:21:a8:5a:d9:ea:b7:22:a9:
                    69:ab:b6:07:b6:ed:26:b1:0a:4e:21:27:2d:bf:8f:
                    3d:71:8b:62:f3:05:0c:1f:ce:9a:07:eb:bc:db:cd:
                    17:22:54:58:e9:c1:82:23:d8:dd:09:c0:4f:54:05:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:E9:0F:EB:BF:16:1E:20:6C:79:48:36:0D:E2:AE:F0:95:49:FB
            X509v3 Authority Key Identifier:
                keyid:6D:CC:69:50:8E:F4:E6:70:EF:BC:5C:69:20:3D:6B:12:0F:A9:39:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6DCC69508EF4E670EFBC5C69203D6B120FA9392F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d2073ace-a691-4863-9c1c-59b2db9cb463/0/3130332e3135322e3131392e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.152.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:c9:39:46:80:68:1b:ac:62:eb:b0:d2:0d:8c:45:e7:bb:
         db:5c:c4:42:c0:36:ba:9e:06:66:e4:b9:32:2e:d9:f0:26:0e:
         10:bb:fc:48:b2:6d:6c:d8:eb:f9:ae:7c:9c:f9:e8:21:c0:f0:
         2c:06:d1:ac:bd:df:4b:71:78:d5:98:e8:bf:0c:b7:a5:84:0f:
         53:3e:9f:da:54:5e:fc:ab:b3:d2:da:55:58:d0:08:ed:31:db:
         8d:f0:d1:19:8f:6b:29:8d:02:f9:42:ed:9a:04:90:22:51:d5:
         4d:fa:b5:23:43:52:b7:c6:33:17:f0:3e:83:36:f7:b6:21:d6:
         76:af:4d:66:30:16:35:2f:4a:db:64:de:62:3d:f2:62:68:26:
         6e:4c:df:f7:a1:56:d2:05:50:ec:11:b6:47:a9:bc:f6:da:8f:
         01:c7:22:ae:82:6c:d4:46:3e:dd:9d:07:08:ad:86:14:a2:fa:
         ee:a6:8a:e9:0a:ff:23:f7:90:31:c5:f9:0e:70:11:d9:7b:2e:
         46:cb:6b:fb:7f:4c:7f:28:e1:ae:d6:a9:92:60:d6:f3:b0:e1:
         f5:0c:7d:9f:3b:11:4e:f7:47:ef:20:ad:ca:a4:bc:1d:3b:7b:
         35:6d:18:d6:78:a9:17:bc:75:6e:0b:94:ae:aa:71:29:44:4d:
         55:56:ec:61
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHOFpZ3bTEmG3CGPa8zMfO3q6SqUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIw
RkE5MzkyRjAeFw0yNDA3MTcxNjU1MDFaFw0yNTA3MTYxNzAwMDFaMDMxMTAvBgNV
BAMTKDZDQzVFOTBGRUJCRjE2MUUyMDZDNzk0ODM2MERFMkFFRjA5NTQ5RkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVJpNENaUb2r6kxiifiMd77Hh
xmi80VrXTRsoY5Sv511m28XXReQxv0UL+iAdKKww+nwyMKK9GmvJK9lP8QBh6RYm
KONKKhNi/m2dCfAaoclwXxhTRclVt7lm0FsMBk3vPxMA/xNCfrz7tnpNvjjSh1fW
bCaIAUPq7tgSXZtLQwNjAwCgYl6ewK29p6+QwsXv39EnDj2ej8kxa5wWJrOjCjj4
mxttqwuNUt+KEOYZSGO9LqRTdmjdnI/G3uXkCbxerTjZCtWJucIhqFrZ6rciqWmr
tge27SaxCk4hJy2/jz1xi2LzBQwfzpoH67zbzRciVFjpwYIj2N0JwE9UBW1rAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUbMXpD+u/Fh4gbHlINg3irvCVSfswHwYDVR0j
BBgwFoAUbcxpUI705nDvvFxpID1rEg+pOS8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
MjA3M2FjZS1hNjkxLTQ4NjMtOWMxYy01OWIyZGI5Y2I0NjMvMC82RENDNjk1MDhF
RjRFNjcwRUZCQzVDNjkyMDNENkIxMjBGQTkzOTJGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkRDQzY5NTA4RUY0RTY3MEVGQkM1QzY5MjAzRDZCMTIwRkE5
MzkyRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyMDczYWNlLWE2OTEtNDg2My05
YzFjLTU5YjJkYjljYjQ2My8wLzMxMzAzMzJlMzEzNTMyMmUzMTMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzAzNDM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmHcwDQYJ
KoZIhvcNAQELBQADggEBAD1EyTlGgGgbrGLrsNINjEXnu9tcxELANrqeBmbkuTIu
2fAmDhC7/EiybWzY6/mufJz56CHA8CwG0ay930txeNWY6L8Mt6WED1M+n9pUXvyr
s9LaVVjQCO0x243w0RmPaymNAvlC7ZoEkCJR1U36tSNDUrfGMxfwPoM297Yh1nav
TWYwFjUvSttk3mI98mJoJm5M3/ehVtIFUOwRtkepvPbajwHHIq6CbNRGPt2dBwit
hhSi+u6miukK/yP3kDHF+Q5wEdl7LkbLa/t/TH8o4a7WqZJg1vOw4fUMfZ87EU73
R+8grcqkvB07ezVtGNZ4qRe8dW4LlK6qcSlETVVW7GE=
-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:21 2024 by rpki-client on console-ams.rpki-client.org