Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
File:                     3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa (raw, json)
Hash identifier:          lEApANfBynwmS7n3WrJkA/+fBsqZjtiQIfYdyCYnd28=
Subject key identifier:   93:6C:67:45:B5:79:67:DC:8E:F0:79:E7:7D:ED:81:87:7A:A0:F1:91
Certificate issuer:       /CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
Certificate serial:       4D74DE6806FA8498BF23A300100473DB3D766676
Authority key identifier: F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa
Signing time:             Tue 07 May 2024 05:00:01 +0000
ROA not before:           Tue 07 May 2024 04:55:01 +0000
ROA not after:            Tue 06 May 2025 05:00:01 +0000
asID:                     141910
IP address blocks:        103.164.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl
                          rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Feb 2025 23:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:74:de:68:06:fa:84:98:bf:23:a3:00:10:04:73:db:3d:76:66:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F
        Validity
            Not Before: May  7 04:55:01 2024 GMT
            Not After : May  6 05:00:01 2025 GMT
        Subject: CN=936C6745B57967DC8EF079E77DED81877AA0F191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:0d:b9:6f:b9:81:b2:06:33:7f:50:de:e9:c8:
                    da:9a:b0:26:77:05:fd:81:d4:df:15:5b:1f:e5:c8:
                    a2:cf:21:56:63:7a:bb:73:48:02:da:7e:45:93:da:
                    7e:75:13:ea:0e:1f:a9:7f:8e:02:79:89:d2:74:bb:
                    4c:41:e5:bc:1f:94:9b:15:8c:46:8d:ac:03:2d:b1:
                    ca:af:fc:91:64:b0:e6:5b:d8:4f:67:0a:5b:30:97:
                    cb:91:1b:f5:45:a5:fa:f4:a5:9a:5b:e0:9f:04:f7:
                    0b:e3:c7:5c:61:14:2f:ac:b3:e2:3e:dd:b1:c5:ea:
                    07:b7:47:b8:df:9a:99:de:22:5e:e1:c8:fd:a4:56:
                    d5:1c:5c:8e:c2:b9:4b:20:52:d9:fd:d6:35:9a:9a:
                    05:0a:2a:cc:77:f3:9a:85:f6:46:ec:50:bc:46:b9:
                    2c:74:79:ca:e8:ec:3b:f7:1e:3e:2c:41:d3:c5:cf:
                    e4:b2:53:7e:93:f5:50:5e:37:39:bf:f3:54:d9:e6:
                    86:2f:9f:8c:f9:97:6c:86:2b:91:c3:a3:d4:ef:dc:
                    25:76:df:6c:7d:ec:a9:57:7f:2f:70:dd:40:c3:41:
                    b5:44:75:80:28:d3:7e:bc:ab:72:89:70:c3:21:87:
                    ac:69:a1:af:00:ad:f2:3e:5d:75:38:18:4b:66:d1:
                    58:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:6C:67:45:B5:79:67:DC:8E:F0:79:E7:7D:ED:81:87:7A:A0:F1:91
            X509v3 Authority Key Identifier:
                keyid:F1:BD:A5:72:CF:8D:79:20:C2:10:DB:CA:14:54:B1:90:4F:1C:1D:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1BDA572CF8D7920C210DBCA1454B1904F1C1D5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d501cdf9-52e1-4c98-9ab3-afb70fac377c/0/3130332e3136342e35382e302f32342d3234203d3e20313431393130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:ea:08:28:e0:13:f5:79:00:d3:56:54:4b:e8:83:a6:f7:61:
         6f:4b:f1:fd:be:9d:24:93:c4:f9:f1:06:e0:da:ce:5b:73:ed:
         4d:13:07:ee:5f:5c:aa:07:01:b1:d9:89:5b:42:5d:a6:4f:1c:
         78:08:10:e8:c0:1f:77:77:52:05:49:93:7d:31:02:12:82:48:
         33:b5:cb:d6:79:d6:a6:f5:bc:20:37:4a:fa:9f:e0:92:70:30:
         02:ac:f0:fc:f1:49:24:55:72:54:b6:26:3d:fc:f6:66:45:3f:
         7d:49:49:b2:d0:fc:fc:bb:84:6b:b3:04:04:04:11:57:37:d1:
         c9:c0:9b:a4:c6:92:26:87:91:03:91:7e:79:a5:72:65:ff:87:
         1a:dd:29:d5:0a:c4:4b:cd:52:82:3a:4c:dc:e5:73:7c:18:f1:
         f0:ff:be:ab:1c:d2:91:39:90:ab:07:32:07:45:39:1c:9a:05:
         fd:69:22:51:db:b0:18:8d:49:69:a1:c1:79:62:d6:ee:17:c6:
         8d:bd:47:b1:57:7e:6a:55:a2:c3:1e:f0:ff:48:0b:87:25:08:
         ae:2a:33:d9:a5:86:39:8e:72:f3:aa:5c:4f:e1:57:55:a1:8e:
         89:f3:63:f1:fd:5c:a8:67:21:bf:4a:bb:cd:86:ab:f2:20:e5:
         17:fd:ca:87
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTXTeaAb6hJi/I6MAEARz2z12ZnYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0
RjFDMUQ1RjAeFw0yNDA1MDcwNDU1MDFaFw0yNTA1MDYwNTAwMDFaMDMxMTAvBgNV
BAMTKDkzNkM2NzQ1QjU3OTY3REM4RUYwNzlFNzdERUQ4MTg3N0FBMEYxOTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPDblvuYGyBjN/UN7pyNqasCZ3
Bf2B1N8VWx/lyKLPIVZjertzSALafkWT2n51E+oOH6l/jgJ5idJ0u0xB5bwflJsV
jEaNrAMtscqv/JFksOZb2E9nClswl8uRG/VFpfr0pZpb4J8E9wvjx1xhFC+ss+I+
3bHF6ge3R7jfmpneIl7hyP2kVtUcXI7CuUsgUtn91jWamgUKKsx385qF9kbsULxG
uSx0ecro7Dv3Hj4sQdPFz+SyU36T9VBeNzm/81TZ5oYvn4z5l2yGK5HDo9Tv3CV2
32x97KlXfy9w3UDDQbVEdYAo0368q3KJcMMhh6xpoa8ArfI+XXU4GEtm0VgjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUk2xnRbV5Z9yO8Hnnfe2Bh3qg8ZEwHwYDVR0j
BBgwFoAU8b2lcs+NeSDCENvKFFSxkE8cHV8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NTAxY2RmOS01MmUxLTRjOTgtOWFiMy1hZmI3MGZhYzM3N2MvMC9GMUJEQTU3MkNG
OEQ3OTIwQzIxMERCQ0ExNDU0QjE5MDRGMUMxRDVGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCREE1NzJDRjhENzkyMEMyMTBEQkNBMTQ1NEIxOTA0RjFD
MUQ1Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q1MDFjZGY5LTUyZTEtNGM5OC05
YWIzLWFmYjcwZmFjMzc3Yy8wLzMxMzAzMzJlMzEzNjM0MmUzNTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzMTMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6Q6MA0GCSqG
SIb3DQEBCwUAA4IBAQCu6ggo4BP1eQDTVlRL6IOm92FvS/H9vp0kk8T58Qbg2s5b
c+1NEwfuX1yqBwGx2YlbQl2mTxx4CBDowB93d1IFSZN9MQISgkgztcvWedam9bwg
N0r6n+CScDACrPD88UkkVXJUtiY9/PZmRT99SUmy0Pz8u4RrswQEBBFXN9HJwJuk
xpImh5EDkX55pXJl/4ca3SnVCsRLzVKCOkzc5XN8GPHw/76rHNKROZCrBzIHRTkc
mgX9aSJR27AYjUlpocF5YtbuF8aNvUexV35qVaLDHvD/SAuHJQiuKjPZpYY5jnLz
qlxP4VdVoY6J82Px/VyoZyG/SrvNhqvyIOUX/cqH
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:11:26 2025 by rpki-client