Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa
File:                     3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa (raw, json)
Hash identifier:          jCig+hn3QKp3Ujwgup1WTWWUat/bt5TgFSQX6AvuGtA=
Subject key identifier:   1F:9D:2E:68:16:50:19:9B:3F:E9:90:A3:37:DC:74:52:E3:BC:11:28
Certificate issuer:       /CN=A42F07BEA859C831526717AB1D092E11E7890BDD
Certificate serial:       3AD8963ACD92B1E18BBCAA4E7B0C6318F2486DC5
Authority key identifier: A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa
Signing time:             Mon 26 Feb 2024 09:00:01 +0000
ROA not before:           Mon 26 Feb 2024 08:55:01 +0000
ROA not after:            Mon 24 Feb 2025 09:00:01 +0000
asID:                     137311
IP address blocks:        103.109.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl
                          rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:52:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:d8:96:3a:cd:92:b1:e1:8b:bc:aa:4e:7b:0c:63:18:f2:48:6d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A42F07BEA859C831526717AB1D092E11E7890BDD
        Validity
            Not Before: Feb 26 08:55:01 2024 GMT
            Not After : Feb 24 09:00:01 2025 GMT
        Subject: CN=1F9D2E681650199B3FE990A337DC7452E3BC1128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:c3:31:d9:e9:b4:55:f1:8e:f3:02:55:f6:
                    0b:33:cf:b0:15:4d:0e:ab:98:b3:ab:73:87:ce:87:
                    f6:b2:f4:80:cb:3f:9d:73:47:6d:ce:bd:98:ef:e7:
                    99:a2:1c:b0:c7:fd:5b:58:a5:d7:4e:f7:53:a4:f8:
                    59:37:a4:e5:0a:a3:8f:c3:f4:52:6b:8d:95:94:58:
                    4e:97:df:e6:71:9b:78:0b:87:c0:b5:7c:18:a4:b1:
                    50:d5:df:ee:ff:d2:2b:dc:88:3a:f8:1d:7b:28:dc:
                    59:9b:5b:f8:3a:40:f0:38:0d:c4:5a:7e:f3:74:e0:
                    8e:de:58:1f:30:3d:07:71:b8:c8:92:2c:9e:07:7b:
                    16:32:7c:72:ee:a8:5c:00:90:24:24:89:36:10:75:
                    09:74:2c:3b:46:e4:c5:f1:b4:ee:4d:08:e4:32:ac:
                    ba:c6:74:57:e1:cb:34:31:17:dd:40:79:60:a2:d5:
                    90:f2:f4:5c:18:c9:82:97:65:1d:da:f9:ab:2f:5e:
                    69:97:0a:54:54:c7:bf:5f:1c:50:c9:8a:5b:08:18:
                    5b:bb:ab:a7:69:de:8c:11:83:6e:dc:72:58:f5:f3:
                    8b:31:47:b5:0c:46:f6:0b:ac:72:19:6f:f7:71:98:
                    0f:13:fe:11:6e:14:98:84:a2:5f:87:38:ea:41:61:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:9D:2E:68:16:50:19:9B:3F:E9:90:A3:37:DC:74:52:E3:BC:11:28
            X509v3 Authority Key Identifier:
                keyid:A4:2F:07:BE:A8:59:C8:31:52:67:17:AB:1D:09:2E:11:E7:89:0B:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/A42F07BEA859C831526717AB1D092E11E7890BDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A42F07BEA859C831526717AB1D092E11E7890BDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d835cb4a-2fb9-40d7-b155-dcce7cb00293/0/3130332e3130392e32362e302f32342d3234203d3e20313337333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.109.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:94:5f:16:cb:ea:6d:e4:7b:55:cd:21:b6:55:79:f8:3f:e0:
         30:ba:1d:9f:4a:42:df:d0:10:96:22:60:2c:49:8e:1e:17:c2:
         c7:89:76:80:c3:ef:6b:be:ca:bd:76:e5:6e:90:10:f6:05:ef:
         91:3f:e0:03:6b:6d:dc:12:05:d9:4a:e4:bd:d2:d0:c6:9b:4f:
         83:08:73:61:c8:f2:05:ec:09:f1:62:93:4e:6e:f4:57:6f:51:
         29:5d:82:4f:9a:b7:fa:20:5c:63:88:b1:54:bc:65:3c:11:99:
         a6:b2:1d:1d:ca:e7:92:be:37:ca:00:6f:1b:90:af:0e:e9:29:
         7a:76:cd:47:4c:24:fa:92:8a:4b:9c:7e:f5:6a:37:92:f2:bc:
         4d:c0:ee:ec:5a:9f:13:b8:41:43:f3:9f:1e:81:98:48:22:22:
         94:58:3b:57:a3:5d:b7:1a:c7:8b:ef:09:2b:a3:c2:cf:9d:1c:
         31:36:4d:e3:f0:4f:ae:a9:d3:e7:b7:3c:8d:93:7c:aa:7f:4e:
         18:60:60:79:2c:2a:f2:49:b0:e3:1a:fa:e8:44:a9:57:67:c1:
         65:56:03:65:27:e7:d3:f7:f8:96:57:81:26:4b:c7:e0:a7:03:
         86:1d:34:3f:65:87:36:a9:42:69:b6:05:53:d1:75:f8:e0:19:
         9a:bc:ad:f5
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUOtiWOs2SseGLvKpOewxjGPJIbcUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFF
Nzg5MEJERDAeFw0yNDAyMjYwODU1MDFaFw0yNTAyMjQwOTAwMDFaMDMxMTAvBgNV
BAMTKDFGOUQyRTY4MTY1MDE5OUIzRkU5OTBBMzM3REM3NDUyRTNCQzExMjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUg8Mx2em0VfGO8wJV9gszz7AV
TQ6rmLOrc4fOh/ay9IDLP51zR23OvZjv55miHLDH/VtYpddO91Ok+Fk3pOUKo4/D
9FJrjZWUWE6X3+Zxm3gLh8C1fBiksVDV3+7/0ivciDr4HXso3FmbW/g6QPA4DcRa
fvN04I7eWB8wPQdxuMiSLJ4HexYyfHLuqFwAkCQkiTYQdQl0LDtG5MXxtO5NCOQy
rLrGdFfhyzQxF91AeWCi1ZDy9FwYyYKXZR3a+asvXmmXClRUx79fHFDJilsIGFu7
q6dp3owRg27cclj184sxR7UMRvYLrHIZb/dxmA8T/hFuFJiEol+HOOpBYWcHAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUH50uaBZQGZs/6ZCjN9x0UuO8ESgwHwYDVR0j
BBgwFoAUpC8HvqhZyDFSZxerHQkuEeeJC90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ODM1Y2I0YS0yZmI5LTQwZDctYjE1NS1kY2NlN2NiMDAyOTMvMC9BNDJGMDdCRUE4
NTlDODMxNTI2NzE3QUIxRDA5MkUxMUU3ODkwQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTQyRjA3QkVBODU5QzgzMTUyNjcxN0FCMUQwOTJFMTFFNzg5
MEJERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4MzVjYjRhLTJmYjktNDBkNy1i
MTU1LWRjY2U3Y2IwMDI5My8wLzMxMzAzMzJlMzEzMDM5MmUzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ20aMA0GCSqG
SIb3DQEBCwUAA4IBAQCTlF8Wy+pt5HtVzSG2VXn4P+Awuh2fSkLf0BCWImAsSY4e
F8LHiXaAw+9rvsq9duVukBD2Be+RP+ADa23cEgXZSuS90tDGm0+DCHNhyPIF7Anx
YpNObvRXb1EpXYJPmrf6IFxjiLFUvGU8EZmmsh0dyueSvjfKAG8bkK8O6Sl6ds1H
TCT6kopLnH71ajeS8rxNwO7sWp8TuEFD858egZhIIiKUWDtXo123GseL7wkro8LP
nRwxNk3j8E+uqdPntzyNk3yqf04YYGB5LCrySbDjGvroRKlXZ8FlVgNlJ+fT9/iW
V4EmS8fgpwOGHTQ/ZYc2qUJptgVT0XX44BmavK31
-----END CERTIFICATE-----
Generated at Fri Nov 22 17:50:11 2024 by rpki-client on console-fra.rpki-client.org