Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa
File:                     3130332e39302e3235342e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          ciXT6z5vtm66GnIFMEU4jXlTjAv9E2PR+NPFegREDPQ=
Subject key identifier:   B1:78:C1:83:53:68:4F:52:91:74:B7:5F:CF:AC:EF:75:9B:DF:27:96
Certificate issuer:       /CN=57D075B2873A1E1F844485DAAC774C656EB9A611
Certificate serial:       55F8C483FA7789CBC12EF457CB0A36483390CBC6
Authority key identifier: 57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa
Signing time:             Tue 02 Apr 2024 05:01:32 +0000
ROA not before:           Tue 02 Apr 2024 04:56:32 +0000
ROA not after:            Tue 01 Apr 2025 05:01:32 +0000
asID:                     38496
IP address blocks:        103.90.254.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl
                          rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:23:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:f8:c4:83:fa:77:89:cb:c1:2e:f4:57:cb:0a:36:48:33:90:cb:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57D075B2873A1E1F844485DAAC774C656EB9A611
        Validity
            Not Before: Apr  2 04:56:32 2024 GMT
            Not After : Apr  1 05:01:32 2025 GMT
        Subject: CN=B178C18353684F529174B75FCFACEF759BDF2796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4e:19:a4:cd:a5:f1:32:53:ae:ee:e4:7b:33:
                    e7:e8:91:e0:f1:45:eb:13:c1:a0:26:18:52:51:47:
                    9f:03:e2:8a:c4:a8:c0:a6:a4:22:0f:fa:12:83:0b:
                    60:86:67:22:c3:a6:c7:9b:b5:d8:83:dc:2c:b0:2a:
                    4c:ec:b8:9f:fe:91:27:6a:65:0f:38:78:c8:ae:3d:
                    3f:2d:21:65:76:22:94:90:63:61:34:45:ea:b7:12:
                    4e:5f:fa:71:99:bd:37:b6:34:44:b5:28:b1:48:1e:
                    00:b0:a4:bb:71:4d:b9:0c:e2:4f:42:de:ee:7b:ab:
                    6a:2e:b7:d0:94:0a:2b:4c:b7:49:74:3c:49:b1:47:
                    20:42:e9:69:db:ed:3b:da:80:29:a4:9b:c9:14:06:
                    ed:5d:16:0b:a8:5e:c6:fa:cf:e9:f6:8a:e9:b7:8a:
                    c5:3c:bb:d0:c8:85:22:25:88:48:10:ee:db:60:c5:
                    3c:1a:ad:57:19:51:be:db:a7:c3:0a:ad:b1:f9:d6:
                    1d:63:15:4d:d3:36:27:6c:5b:a3:bf:36:47:55:46:
                    5c:8d:76:c8:6a:0e:1c:15:90:ed:ce:37:7f:0b:d9:
                    b2:63:e0:fd:91:19:37:e7:5d:cf:52:4b:3d:fb:73:
                    e7:a3:46:ab:e8:ff:e8:1b:26:86:fd:e7:c2:c3:ac:
                    76:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:78:C1:83:53:68:4F:52:91:74:B7:5F:CF:AC:EF:75:9B:DF:27:96
            X509v3 Authority Key Identifier:
                keyid:57:D0:75:B2:87:3A:1E:1F:84:44:85:DA:AC:77:4C:65:6E:B9:A6:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/57D075B2873A1E1F844485DAAC774C656EB9A611.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/57D075B2873A1E1F844485DAAC774C656EB9A611.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d774b18c-f263-4fe1-8df8-1e7c68bfbefc/0/3130332e39302e3235342e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.90.254.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:b9:51:3b:42:37:f2:d7:3c:6d:9f:8e:8f:22:ff:20:a1:25:
         82:40:91:d8:69:d6:59:4f:70:fd:2e:3d:57:3a:44:cb:bb:e2:
         15:73:c4:e5:0f:98:52:11:e9:65:c0:73:ea:7a:ac:96:dc:92:
         69:ce:95:d3:33:74:e8:78:5a:c3:7b:2d:c7:f0:32:1f:42:5d:
         c7:df:2a:a6:87:96:92:14:c5:1e:07:62:74:a7:1c:9d:50:30:
         45:a6:b7:02:d1:34:3a:1e:74:2e:25:1e:a6:6f:df:ca:71:0a:
         7d:36:0f:0e:22:c0:9c:96:63:a6:e6:4c:65:ac:6c:30:65:c0:
         43:a0:f9:31:b4:c7:2c:27:9e:a8:8e:2d:01:4c:49:35:82:54:
         84:b1:1f:67:e6:bf:31:28:a8:d0:29:50:4f:60:39:99:bc:44:
         d2:fe:7d:cf:2e:81:07:8d:a3:e8:b9:44:fb:ae:e6:ca:0f:c6:
         15:00:91:fc:b2:a6:ed:5b:89:55:5c:68:fd:11:e8:43:0c:26:
         41:35:18:12:a2:70:fd:ec:c0:2d:eb:b0:28:66:e0:87:7b:4c:
         14:74:cb:eb:fd:32:8d:ba:8b:cf:fd:8d:a6:cf:ee:bd:0c:6f:
         62:76:c8:a7:f4:60:32:be:a9:57:37:67:08:b2:82:73:06:59:
         5e:7e:77:c4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUVfjEg/p3icvBLvRXywo2SDOQy8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2
RUI5QTYxMTAeFw0yNDA0MDIwNDU2MzJaFw0yNTA0MDEwNTAxMzJaMDMxMTAvBgNV
BAMTKEIxNzhDMTgzNTM2ODRGNTI5MTc0Qjc1RkNGQUNFRjc1OUJERjI3OTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9ThmkzaXxMlOu7uR7M+fokeDx
ResTwaAmGFJRR58D4orEqMCmpCIP+hKDC2CGZyLDpsebtdiD3CywKkzsuJ/+kSdq
ZQ84eMiuPT8tIWV2IpSQY2E0Req3Ek5f+nGZvTe2NES1KLFIHgCwpLtxTbkM4k9C
3u57q2out9CUCitMt0l0PEmxRyBC6Wnb7TvagCmkm8kUBu1dFguoXsb6z+n2ium3
isU8u9DIhSIliEgQ7ttgxTwarVcZUb7bp8MKrbH51h1jFU3TNidsW6O/NkdVRlyN
dshqDhwVkO3ON38L2bJj4P2RGTfnXc9SSz37c+ejRqvo/+gbJob958LDrHY/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUsXjBg1NoT1KRdLdfz6zvdZvfJ5YwHwYDVR0j
BBgwFoAUV9B1soc6Hh+ERIXarHdMZW65phEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
Nzc0YjE4Yy1mMjYzLTRmZTEtOGRmOC0xZTdjNjhiZmJlZmMvMC81N0QwNzVCMjg3
M0ExRTFGODQ0NDg1REFBQzc3NEM2NTZFQjlBNjExLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTdEMDc1QjI4NzNBMUUxRjg0NDQ4NURBQUM3NzRDNjU2RUI5
QTYxMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q3NzRiMThjLWYyNjMtNGZlMS04
ZGY4LTFlN2M2OGJmYmVmYy8wLzMxMzAzMzJlMzkzMDJlMzIzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGda/jANBgkqhkiG
9w0BAQsFAAOCAQEAZLlRO0I38tc8bZ+OjyL/IKElgkCR2GnWWU9w/S49VzpEy7vi
FXPE5Q+YUhHpZcBz6nqsltySac6V0zN06Hhaw3stx/AyH0Jdx98qpoeWkhTFHgdi
dKccnVAwRaa3AtE0Oh50LiUepm/fynEKfTYPDiLAnJZjpuZMZaxsMGXAQ6D5MbTH
LCeeqI4tAUxJNYJUhLEfZ+a/MSio0ClQT2A5mbxE0v59zy6BB42j6LlE+67myg/G
FQCR/LKm7VuJVVxo/RHoQwwmQTUYEqJw/ezALeuwKGbgh3tMFHTL6/0yjbqLz/2N
ps/uvQxvYnbIp/RgMr6pVzdnCLKCcwZZXn53xA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org