Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
File:                     3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa (raw, json)
Hash identifier:          Z+EwWewoO8F89T061Joh0UZH1b2vNQ0ncfVR8xkIVTo=
Subject key identifier:   CD:86:20:E5:1B:F9:85:51:B9:E2:D4:7C:8A:88:18:CE:A6:E8:9B:61
Certificate issuer:       /CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
Certificate serial:       46B56B01D355E9244452527DD925BBD4A11526C7
Authority key identifier: C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa
Signing time:             Mon 31 Jul 2023 00:08:02 +0000
ROA not before:           Mon 31 Jul 2023 00:03:02 +0000
ROA not after:            Mon 29 Jul 2024 00:08:02 +0000
asID:                     139378
IP address blocks:        103.142.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl
                          rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:b5:6b:01:d3:55:e9:24:44:52:52:7d:d9:25:bb:d4:a1:15:26:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5CA2999FE7612F56CCCB7441743B05181458ED0
        Validity
            Not Before: Jul 31 00:03:02 2023 GMT
            Not After : Jul 29 00:08:02 2024 GMT
        Subject: CN=CD8620E51BF98551B9E2D47C8A8818CEA6E89B61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:6f:8b:fe:65:2f:a5:f0:e5:9a:e5:1e:60:05:
                    8b:c2:f1:8b:27:aa:08:0f:2f:fc:7f:0e:ce:39:ef:
                    0f:cd:c3:f9:1f:1f:8d:1d:db:64:0e:d6:47:e0:22:
                    1d:74:ce:03:5c:d5:d5:f4:15:02:03:7d:d4:ce:6d:
                    40:75:0d:32:31:78:1f:60:ba:a1:a4:a1:75:f4:d8:
                    96:14:30:49:43:fc:5a:34:db:7e:b0:19:a1:a6:eb:
                    cd:ff:14:f3:3b:cd:89:52:17:df:c2:f5:14:c9:27:
                    2e:18:d3:06:07:c1:bb:cb:07:f6:0e:d1:ba:12:54:
                    11:2e:d5:de:d0:49:7b:68:7b:b6:7e:da:e0:ea:c8:
                    9e:fb:91:a1:7b:ff:14:be:94:9c:da:65:b4:97:74:
                    ea:c0:d8:04:41:85:b6:50:97:bb:71:7b:ce:7e:8c:
                    34:de:e8:1c:a0:53:e4:7f:86:92:f6:5e:62:d9:84:
                    f2:fc:a3:0b:79:0e:7c:b1:08:bb:2c:81:36:37:61:
                    92:ef:40:9e:8c:46:7f:50:9f:df:37:1c:0d:1e:47:
                    d8:11:7f:4c:b1:91:1c:e6:65:34:42:d7:7d:13:9a:
                    d8:bc:ee:b6:31:c0:ac:2e:c0:c2:ae:25:32:5c:e2:
                    be:44:14:19:fc:9c:ad:b4:ca:b3:92:e9:28:59:5a:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:86:20:E5:1B:F9:85:51:B9:E2:D4:7C:8A:88:18:CE:A6:E8:9B:61
            X509v3 Authority Key Identifier:
                keyid:C5:CA:29:99:FE:76:12:F5:6C:CC:B7:44:17:43:B0:51:81:45:8E:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/C5CA2999FE7612F56CCCB7441743B05181458ED0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C5CA2999FE7612F56CCCB7441743B05181458ED0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d67fb837-1b2f-4c4e-b999-6e990ddc1499/0/3130332e3134322e3230322e302f32332d3233203d3e20313339333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6f:7a:5b:94:69:5d:94:b0:b1:e5:90:10:f3:a5:b0:85:90:c7:
         31:d7:25:ef:25:b1:83:06:ad:e1:aa:8d:95:b4:d0:ed:ca:ad:
         6d:1d:df:dd:7e:b7:8a:0f:78:81:3d:42:2b:96:98:63:73:6d:
         92:da:c0:70:3c:a9:fb:c2:52:40:4e:c9:ed:65:7c:87:e5:34:
         11:cd:cc:d7:d8:1a:5f:3a:88:97:35:2f:4b:ec:63:01:9a:56:
         b2:36:0e:72:de:ac:ca:14:52:2c:86:d5:be:b0:26:05:d3:ab:
         a7:2b:77:5d:52:76:66:9e:8f:95:a1:c4:c3:d7:33:40:2a:7e:
         cf:3b:20:0c:41:03:1a:ea:ed:b4:61:7c:06:47:89:b1:db:ae:
         79:dd:d5:df:30:84:3c:9b:cd:05:d6:65:64:f8:37:b3:0a:35:
         7a:5b:84:84:2a:02:af:15:d1:d8:e1:e9:91:81:37:ed:27:02:
         7a:32:80:c5:24:e8:03:d3:ba:55:1c:7d:9a:2d:c6:51:8c:3b:
         ab:03:f2:51:8c:21:db:d4:62:fd:a5:e2:36:18:e0:4a:d2:8c:
         59:2f:ea:e0:ae:bc:31:25:47:30:49:e8:56:45:04:56:91:32:
         20:6e:f1:9e:7f:34:fd:f0:d9:20:88:e4:11:23:ee:dd:94:f9:
         3e:64:e5:41
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURrVrAdNV6SREUlJ92SW71KEVJscwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4
MTQ1OEVEMDAeFw0yMzA3MzEwMDAzMDJaFw0yNDA3MjkwMDA4MDJaMDMxMTAvBgNV
BAMTKENEODYyMEU1MUJGOTg1NTFCOUUyRDQ3QzhBODgxOENFQTZFODlCNjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAb4v+ZS+l8OWa5R5gBYvC8Ysn
qggPL/x/Ds457w/Nw/kfH40d22QO1kfgIh10zgNc1dX0FQIDfdTObUB1DTIxeB9g
uqGkoXX02JYUMElD/Fo0236wGaGm683/FPM7zYlSF9/C9RTJJy4Y0wYHwbvLB/YO
0boSVBEu1d7QSXtoe7Z+2uDqyJ77kaF7/xS+lJzaZbSXdOrA2ARBhbZQl7txe85+
jDTe6BygU+R/hpL2XmLZhPL8owt5DnyxCLssgTY3YZLvQJ6MRn9Qn983HA0eR9gR
f0yxkRzmZTRC130Tmti87rYxwKwuwMKuJTJc4r5EFBn8nK20yrOS6ShZWgATAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUzYYg5Rv5hVG54tR8iogYzqbom2EwHwYDVR0j
BBgwFoAUxcopmf52EvVszLdEF0OwUYFFjtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NjdmYjgzNy0xYjJmLTRjNGUtYjk5OS02ZTk5MGRkYzE0OTkvMC9DNUNBMjk5OUZF
NzYxMkY1NkNDQ0I3NDQxNzQzQjA1MTgxNDU4RUQwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzVDQTI5OTlGRTc2MTJGNTZDQ0NCNzQ0MTc0M0IwNTE4MTQ1
OEVEMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2N2ZiODM3LTFiMmYtNGM0ZS1i
OTk5LTZlOTkwZGRjMTQ5OS8wLzMxMzAzMzJlMzEzNDMyMmUzMjMwMzIyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTMzMzkzMzM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnjsowDQYJ
KoZIhvcNAQELBQADggEBAG96W5RpXZSwseWQEPOlsIWQxzHXJe8lsYMGreGqjZW0
0O3KrW0d391+t4oPeIE9QiuWmGNzbZLawHA8qfvCUkBOye1lfIflNBHNzNfYGl86
iJc1L0vsYwGaVrI2DnLerMoUUiyG1b6wJgXTq6crd11Sdmaej5WhxMPXM0Aqfs87
IAxBAxrq7bRhfAZHibHbrnnd1d8whDybzQXWZWT4N7MKNXpbhIQqAq8V0djh6ZGB
N+0nAnoygMUk6APTulUcfZotxlGMO6sD8lGMIdvUYv2l4jYY4ErSjFkv6uCuvDEl
RzBJ6FZFBFaRMiBu8Z5/NP3w2SCI5BEj7t2U+T5k5UE=
-----END CERTIFICATE-----
Generated at Sat Jun 1 11:46:17 2024 by rpki-client on console-ams.rpki-client.org