Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa
File:                     3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          PUWcmLIXqezWohbBydiSBzBMAytj8n2CXdb3MykrfeA=
Subject key identifier:   7E:FC:D2:5C:74:11:7D:65:DE:8C:C7:FA:7A:54:C1:F9:B0:C9:DE:10
Certificate issuer:       /CN=A777F080277567701C7EF464D9A7351ADB0B538E
Certificate serial:       1FDFE020CDED363D51652E037DCE71BFDAB6DF45
Authority key identifier: A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 13 Jun 2024 04:00:01 +0000
ROA not before:           Thu 13 Jun 2024 03:55:01 +0000
ROA not after:            Thu 12 Jun 2025 04:00:01 +0000
asID:                     135477
IP address blocks:        103.15.215.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl
                          rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 05:17:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:df:e0:20:cd:ed:36:3d:51:65:2e:03:7d:ce:71:bf:da:b6:df:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A777F080277567701C7EF464D9A7351ADB0B538E
        Validity
            Not Before: Jun 13 03:55:01 2024 GMT
            Not After : Jun 12 04:00:01 2025 GMT
        Subject: CN=7EFCD25C74117D65DE8CC7FA7A54C1F9B0C9DE10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:3a:6e:dd:ef:40:19:ed:3c:ac:50:80:50:97:
                    d6:ff:f6:fa:46:3d:b9:12:fc:94:f2:00:eb:c6:15:
                    0e:fb:b9:14:f6:03:3d:4b:e4:9a:85:dd:d7:77:97:
                    7e:32:05:aa:44:a4:60:88:99:f6:ba:ac:10:9f:1e:
                    fd:50:6b:e7:31:11:37:1d:eb:9b:b9:74:ec:c2:eb:
                    c7:d2:ce:8a:07:08:93:2b:65:27:ad:86:e2:e7:5f:
                    05:c2:b0:a2:ad:3d:65:06:dc:8b:06:8c:b2:c9:77:
                    ed:87:cc:7c:6f:52:e3:cf:3a:be:5e:f8:5f:a8:9c:
                    b2:59:1d:0f:c0:00:12:f2:9b:69:dd:d9:3d:32:4b:
                    5d:9c:4a:fc:74:01:e1:44:6f:5a:b1:91:d7:83:91:
                    d3:9f:99:d9:92:c3:8f:04:59:ac:a8:db:e4:30:b7:
                    27:84:db:b5:07:3a:3f:8b:60:2e:08:47:76:bc:61:
                    7c:4c:b0:3e:fb:ce:a7:24:1e:74:d7:2d:5e:f7:d0:
                    a9:3f:a1:2e:3f:56:06:53:a7:21:0d:97:97:8d:14:
                    e6:94:51:a9:08:18:ca:c6:09:2f:e2:8e:89:e7:28:
                    3b:53:e5:9a:6b:6c:66:f1:49:07:71:0d:a3:5c:0b:
                    63:cc:3c:d0:63:bf:68:09:0b:ad:e6:22:a8:e1:82:
                    d0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:FC:D2:5C:74:11:7D:65:DE:8C:C7:FA:7A:54:C1:F9:B0:C9:DE:10
            X509v3 Authority Key Identifier:
                keyid:A7:77:F0:80:27:75:67:70:1C:7E:F4:64:D9:A7:35:1A:DB:0B:53:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/A777F080277567701C7EF464D9A7351ADB0B538E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A777F080277567701C7EF464D9A7351ADB0B538E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6f4767d-e84f-4210-8423-40696618f377/0/3130332e31352e3231352e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:d9:8d:53:15:76:f8:89:ac:7d:53:0e:1b:99:2c:3c:8c:2e:
         91:5a:65:16:ac:d9:b9:aa:6c:87:a0:14:38:2a:bd:0b:f0:4c:
         d3:f1:9f:96:00:92:37:86:ec:f1:37:b2:43:94:f0:b3:18:77:
         59:c9:49:05:d7:1c:32:40:70:bb:2a:9c:d8:50:e1:c8:28:d3:
         c8:9c:47:42:39:a9:7c:7c:1e:e7:49:d4:3e:e5:2f:aa:e7:28:
         d9:36:43:ba:bf:d4:db:a0:27:6a:4b:9f:3a:9f:67:68:70:4b:
         0f:be:d9:50:f4:07:f4:fa:30:82:7b:e3:f3:52:1c:a7:7c:21:
         23:27:3e:f8:b1:66:16:39:01:0e:49:e9:9b:56:2c:99:83:b8:
         d6:5d:cd:b1:45:01:8f:a3:72:c7:c3:9f:b2:2f:8f:1e:a7:18:
         dc:89:85:bd:05:5d:53:bd:2e:05:1b:fc:d4:29:77:79:d2:fd:
         21:d7:3b:dd:8c:b1:63:f7:6f:bf:09:38:77:e9:5f:d0:6d:ab:
         cb:6d:2f:30:8b:15:ee:b8:9b:e2:0e:7b:37:8b:b5:78:b0:0e:
         b8:62:f8:84:dc:5a:9e:a1:0d:d3:2c:77:90:bc:9a:03:4c:56:
         6f:64:4b:dd:c9:1a:99:cf:7c:4a:96:d7:1e:7c:6e:75:ed:62:
         f3:14:1a:84
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUH9/gIM3tNj1RZS4Dfc5xv9q230UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFE
QjBCNTM4RTAeFw0yNDA2MTMwMzU1MDFaFw0yNTA2MTIwNDAwMDFaMDMxMTAvBgNV
BAMTKDdFRkNEMjVDNzQxMTdENjVERThDQzdGQTdBNTRDMUY5QjBDOURFMTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOm7d70AZ7TysUIBQl9b/9vpG
PbkS/JTyAOvGFQ77uRT2Az1L5JqF3dd3l34yBapEpGCImfa6rBCfHv1Qa+cxETcd
65u5dOzC68fSzooHCJMrZSethuLnXwXCsKKtPWUG3IsGjLLJd+2HzHxvUuPPOr5e
+F+onLJZHQ/AABLym2nd2T0yS12cSvx0AeFEb1qxkdeDkdOfmdmSw48EWayo2+Qw
tyeE27UHOj+LYC4IR3a8YXxMsD77zqckHnTXLV730Kk/oS4/VgZTpyENl5eNFOaU
UakIGMrGCS/ijonnKDtT5ZprbGbxSQdxDaNcC2PMPNBjv2gJC63mIqjhgtBTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUfvzSXHQRfWXejMf6elTB+bDJ3hAwHwYDVR0j
BBgwFoAUp3fwgCd1Z3AcfvRk2ac1GtsLU44wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
NmY0NzY3ZC1lODRmLTQyMTAtODQyMy00MDY5NjYxOGYzNzcvMC9BNzc3RjA4MDI3
NzU2NzcwMUM3RUY0NjREOUE3MzUxQURCMEI1MzhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTc3N0YwODAyNzc1Njc3MDFDN0VGNDY0RDlBNzM1MUFEQjBC
NTM4RS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q2ZjQ3NjdkLWU4NGYtNDIxMC04
NDIzLTQwNjk2NjE4ZjM3Ny8wLzMxMzAzMzJlMzEzNTJlMzIzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM1MzQzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZw/XMA0GCSqG
SIb3DQEBCwUAA4IBAQBr2Y1TFXb4iax9Uw4bmSw8jC6RWmUWrNm5qmyHoBQ4Kr0L
8EzT8Z+WAJI3huzxN7JDlPCzGHdZyUkF1xwyQHC7KpzYUOHIKNPInEdCOal8fB7n
SdQ+5S+q5yjZNkO6v9TboCdqS586n2docEsPvtlQ9Af0+jCCe+PzUhynfCEjJz74
sWYWOQEOSembViyZg7jWXc2xRQGPo3LHw5+yL48epxjciYW9BV1TvS4FG/zUKXd5
0v0h1zvdjLFj92+/CTh36V/QbavLbS8wixXuuJviDns3i7V4sA64YviE3FqeoQ3T
LHeQvJoDTFZvZEvdyRqZz3xKltcefG517WLzFBqE
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:45 2024 by rpki-client on console-fra.rpki-client.org