Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
File:                     3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa (raw, json)
Hash identifier:          ORNSjw/kPbM2Cr0x+RgV+SQthBV3BT9CoZD0BdbuqFA=
Subject key identifier:   E5:00:60:E1:13:98:CB:4D:BB:5A:21:2A:26:13:66:10:05:26:92:91
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       4500C74E7C9096A58A2C5B0C6B27652E51153159
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa
Signing time:             Fri 01 Mar 2024 06:01:53 +0000
ROA not before:           Fri 01 Mar 2024 05:56:53 +0000
ROA not after:            Fri 28 Feb 2025 06:01:53 +0000
asID:                     139967
IP address blocks:        103.91.149.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl
                          rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:00:c7:4e:7c:90:96:a5:8a:2c:5b:0c:6b:27:65:2e:51:15:31:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Mar  1 05:56:53 2024 GMT
            Not After : Feb 28 06:01:53 2025 GMT
        Subject: CN=E50060E11398CB4DBB5A212A2613661005269291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:09:d6:5d:4c:28:25:6a:8a:7a:41:9b:e8:
                    a4:8d:e1:93:4c:22:0b:be:4d:39:25:d0:ba:d7:20:
                    eb:b3:60:47:5d:54:f0:95:e1:37:50:64:c1:bd:f4:
                    e5:1f:2f:43:b0:29:42:e7:dd:4c:57:c9:c4:7a:e7:
                    2b:b8:cd:b9:25:5f:55:45:ec:d8:77:1b:c3:b0:df:
                    99:26:73:7d:9d:8d:3c:cf:90:d5:9d:ba:58:30:16:
                    8f:24:e0:82:03:56:db:3e:86:c3:52:53:bf:77:a1:
                    32:00:1a:82:b5:56:50:4a:ce:10:22:63:37:db:86:
                    56:25:a2:14:28:9c:e1:82:a0:f0:d2:72:99:5a:05:
                    48:0a:2b:44:92:7f:e1:a9:ea:7a:b6:8d:13:d2:9d:
                    81:81:ae:1e:ab:5b:8c:ea:fb:ab:c2:9b:9c:81:40:
                    81:06:c5:39:34:66:8a:b5:6f:1b:7f:d5:6c:5a:87:
                    bf:66:a3:1f:2a:80:96:06:8d:94:34:de:0b:b3:a8:
                    a7:fa:97:85:a6:fb:8b:7e:77:0a:cc:eb:71:4a:02:
                    c8:58:6c:77:96:bb:1a:10:76:fd:69:74:83:40:2a:
                    e8:fd:a4:b8:54:6e:57:f3:db:5c:27:f9:a8:9d:14:
                    af:d5:5f:7d:79:97:c1:7d:bb:83:3b:d3:cd:cf:ad:
                    2f:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:00:60:E1:13:98:CB:4D:BB:5A:21:2A:26:13:66:10:05:26:92:91
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134392e302f32342d3234203d3e20313339393637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.149.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:a4:5d:63:b6:c3:bf:a5:d1:b7:3f:ef:2c:63:38:4a:e2:98:
         31:af:ce:bc:f7:d9:8d:1c:a9:ba:a1:b4:86:af:07:b7:e2:c2:
         81:59:19:72:b2:b7:a8:65:e2:01:b3:cb:b5:11:83:fa:c7:d8:
         f4:38:d7:eb:f9:c9:47:72:73:95:db:d7:ff:1e:bb:d1:d9:94:
         b4:05:90:81:ad:e8:f4:6c:f5:c2:b8:24:98:33:e1:e1:87:18:
         89:28:26:c9:e0:5a:94:80:c7:0d:a5:83:d1:5c:e2:d9:82:de:
         5d:e9:93:0f:6c:2c:c3:50:2b:45:25:d9:d2:d7:80:60:33:30:
         99:07:18:6a:fc:25:be:6e:2b:07:b0:0d:5c:b0:10:0b:fa:39:
         b8:11:dd:2f:cc:d0:a8:be:58:63:3f:39:ef:63:31:8c:30:d7:
         bb:cb:d5:04:ec:44:74:5f:c3:66:a6:a6:a3:11:f8:a8:3c:99:
         01:d3:93:41:ea:e4:b4:a0:68:b5:c1:35:88:5c:d7:8c:d2:a0:
         4a:c5:34:1f:b0:91:e9:97:7e:b7:db:8f:7a:c2:77:83:ec:4f:
         69:3f:45:0c:75:7b:16:3a:cc:da:16:17:d0:dc:e1:85:ed:18:
         f0:46:17:0e:0c:d2:e4:51:dc:bf:eb:7c:e3:f7:b5:59:35:1a:
         fd:12:ca:25
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURQDHTnyQlqWKLFsMaydlLlEVMVkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJG
Q0RGRDg5ODAeFw0yNDAzMDEwNTU2NTNaFw0yNTAyMjgwNjAxNTNaMDMxMTAvBgNV
BAMTKEU1MDA2MEUxMTM5OENCNERCQjVBMjEyQTI2MTM2NjEwMDUyNjkyOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtiwnWXUwoJWqKekGb6KSN4ZNM
Igu+TTkl0LrXIOuzYEddVPCV4TdQZMG99OUfL0OwKULn3UxXycR65yu4zbklX1VF
7Nh3G8Ow35kmc32djTzPkNWdulgwFo8k4IIDVts+hsNSU793oTIAGoK1VlBKzhAi
YzfbhlYlohQonOGCoPDScplaBUgKK0SSf+Gp6nq2jRPSnYGBrh6rW4zq+6vCm5yB
QIEGxTk0Zoq1bxt/1Wxah79mox8qgJYGjZQ03guzqKf6l4Wm+4t+dwrM63FKAshY
bHeWuxoQdv1pdINAKuj9pLhUblfz21wn+aidFK/VX315l8F9u4M7083PrS8tAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5QBg4ROYy027WiEqJhNmEAUmkpEwHwYDVR0j
BBgwFoAUeBKFrhqMWV01SRPQuT9pgvzf2JgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Mjc1ZmQ3Ni1lOGVlLTQ2YzgtOWQ4Mi1iNzM1YjlmNzA0MzEvMC83ODEyODVBRTFB
OEM1OTVEMzU0OTEzRDBCOTNGNjk4MkZDREZEODk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzgxMjg1QUUxQThDNTk1RDM1NDkxM0QwQjkzRjY5ODJGQ0RG
RDg5OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2QyNzVmZDc2LWU4ZWUtNDZjOC05
ZDgyLWI3MzViOWY3MDQzMS8wLzMxMzAzMzJlMzkzMTJlMzEzNDM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNjM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ1uVMA0GCSqG
SIb3DQEBCwUAA4IBAQA/pF1jtsO/pdG3P+8sYzhK4pgxr86899mNHKm6obSGrwe3
4sKBWRlysreoZeIBs8u1EYP6x9j0ONfr+clHcnOV29f/HrvR2ZS0BZCBrej0bPXC
uCSYM+HhhxiJKCbJ4FqUgMcNpYPRXOLZgt5d6ZMPbCzDUCtFJdnS14BgMzCZBxhq
/CW+bisHsA1csBAL+jm4Ed0vzNCovlhjPznvYzGMMNe7y9UE7ER0X8NmpqajEfio
PJkB05NB6uS0oGi1wTWIXNeM0qBKxTQfsJHpl3632496wneD7E9pP0UMdXsWOsza
FhfQ3OGF7RjwRhcODNLkUdy/63zj97VZNRr9Esol
-----END CERTIFICATE-----
Generated at Wed Nov 20 18:42:09 2024 by rpki-client on console-fra.rpki-client.org