Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
File:                     3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (raw, json)
Hash identifier:          nNe/Qdu+J7adSqmXx45HurX0lKtoDZhHTKsAHKnNUt4=
Subject key identifier:   C2:1D:05:50:EC:22:31:D1:94:57:C4:6A:B5:E2:6F:24:9B:05:D6:6E
Certificate issuer:       /CN=7B04CE58A1370241E93EF01F597DD18A039D613D
Certificate serial:       0B079DDF955454C4305DCD00F57BD66E3D2D00ED
Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa
Signing time:             Fri 01 Mar 2024 05:00:01 +0000
ROA not before:           Fri 01 Mar 2024 04:55:01 +0000
ROA not after:            Fri 28 Feb 2025 05:00:01 +0000
asID:                     150915
IP address blocks:        103.97.199.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl
                          rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:07:9d:df:95:54:54:c4:30:5d:cd:00:f5:7b:d6:6e:3d:2d:00:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D
        Validity
            Not Before: Mar  1 04:55:01 2024 GMT
            Not After : Feb 28 05:00:01 2025 GMT
        Subject: CN=C21D0550EC2231D19457C46AB5E26F249B05D66E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:12:bf:51:e4:07:da:01:eb:37:9f:8c:1f:
                    59:bf:49:d9:94:19:0d:a8:b1:f3:77:f8:d7:40:e9:
                    bb:62:be:af:2b:9e:62:e0:ca:8f:45:4d:1c:dd:ec:
                    68:a3:46:c2:1f:4c:b6:75:ba:03:eb:07:33:b3:cf:
                    68:76:e4:45:46:1b:af:2e:d3:d5:09:e9:69:fa:60:
                    86:fa:05:1d:c6:2a:02:51:b9:05:fe:0c:3a:99:a3:
                    b9:79:4b:97:17:9f:ed:11:dd:a4:5f:b6:72:63:c8:
                    91:19:e9:8c:f5:63:fa:b3:a1:c6:8e:22:c5:fc:f3:
                    c9:75:65:83:22:e1:22:c9:cb:a3:2c:70:b5:ea:d9:
                    ff:a6:39:9c:e1:3c:ba:14:e6:a3:22:60:5e:bf:77:
                    63:0b:80:2c:28:02:4b:44:bb:1d:46:9d:ca:17:0c:
                    c5:5d:e0:5d:8d:10:d2:b2:b3:68:18:93:6d:95:2c:
                    88:55:da:fc:63:a8:1d:5f:e2:fa:88:50:ba:b6:32:
                    b3:ac:79:70:6f:3f:a1:d3:0c:67:0a:e2:53:dd:d8:
                    ed:f3:05:40:c4:89:3c:05:53:e4:c0:d5:8e:4e:80:
                    25:8a:31:69:f5:5c:83:bf:8c:3e:ad:78:54:31:12:
                    8a:4a:72:1e:86:de:5a:5d:c5:aa:fa:c0:a0:d0:5c:
                    f9:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:1D:05:50:EC:22:31:D1:94:57:C4:6A:B5:E2:6F:24:9B:05:D6:6E
            X509v3 Authority Key Identifier:
                keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.97.199.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:8a:72:00:e1:63:71:d7:c0:53:07:7b:9e:57:93:3f:f9:0c:
         8c:c8:87:b2:2f:9a:ec:b7:00:44:7c:c2:b1:fd:86:ed:12:f0:
         48:e4:29:ce:b9:b3:75:b9:6f:78:c3:b9:56:24:d2:c2:6e:2e:
         49:d2:f9:00:d8:12:73:1f:59:7b:bb:e8:e6:30:9f:ff:1a:3e:
         4e:ed:ce:2d:27:c1:2a:42:3b:fd:28:4c:c5:b7:27:ee:e0:32:
         0f:2c:e1:39:f5:3b:24:4e:95:4a:da:fd:d3:bf:54:c6:8f:d2:
         c0:3c:5b:ad:78:59:d6:62:75:cf:e1:a7:56:a5:5e:ef:79:3c:
         97:df:e6:69:f8:92:22:fc:6e:90:13:6f:bc:2f:1a:1b:fb:bc:
         ee:35:f9:b9:41:2c:bf:cc:b7:66:4b:f9:6b:00:48:e0:47:0d:
         bf:1b:bc:95:71:1d:05:6c:96:78:9b:9d:48:b3:11:ab:ae:b5:
         82:9f:44:bc:fc:5b:86:d2:e5:77:a0:d8:21:f0:e1:91:fa:81:
         1e:9c:5a:3c:41:57:a8:f2:f7:83:f5:12:a7:36:5a:48:de:60:
         d4:c8:ac:ac:68:b4:17:30:c5:5b:c6:a7:ea:60:80:e2:ef:22:
         88:e2:5f:a2:6e:a9:8f:f2:47:ff:9e:63:45:95:87:09:6a:bb:
         a8:8e:b2:8b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUCwed35VUVMQwXc0A9XvWbj0tAO0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw
MzlENjEzRDAeFw0yNDAzMDEwNDU1MDFaFw0yNTAyMjgwNTAwMDFaMDMxMTAvBgNV
BAMTKEMyMUQwNTUwRUMyMjMxRDE5NDU3QzQ2QUI1RTI2RjI0OUIwNUQ2NkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIUhK/UeQH2gHrN5+MH1m/SdmU
GQ2osfN3+NdA6btivq8rnmLgyo9FTRzd7GijRsIfTLZ1ugPrBzOzz2h25EVGG68u
09UJ6Wn6YIb6BR3GKgJRuQX+DDqZo7l5S5cXn+0R3aRftnJjyJEZ6Yz1Y/qzocaO
IsX888l1ZYMi4SLJy6MscLXq2f+mOZzhPLoU5qMiYF6/d2MLgCwoAktEux1GncoX
DMVd4F2NENKys2gYk22VLIhV2vxjqB1f4vqIULq2MrOseXBvP6HTDGcK4lPd2O3z
BUDEiTwFU+TA1Y5OgCWKMWn1XIO/jD6teFQxEopKch6G3lpdxar6wKDQXPk5AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUwh0FUOwiMdGUV8RqteJvJJsF1m4wHwYDVR0j
BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx
MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE
NjEzRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q4NDYzYWQ1LTE3NDUtNDQzZS1i
MTY1LWQxOTRlZWQ4OWU2Yi8wLzMxMzAzMzJlMzkzNzJlMzEzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ2HHMA0GCSqG
SIb3DQEBCwUAA4IBAQBGinIA4WNx18BTB3ueV5M/+QyMyIeyL5rstwBEfMKx/Ybt
EvBI5CnOubN1uW94w7lWJNLCbi5J0vkA2BJzH1l7u+jmMJ//Gj5O7c4tJ8EqQjv9
KEzFtyfu4DIPLOE59TskTpVK2v3Tv1TGj9LAPFuteFnWYnXP4adWpV7veTyX3+Zp
+JIi/G6QE2+8Lxob+7zuNfm5QSy/zLdmS/lrAEjgRw2/G7yVcR0FbJZ4m51IsxGr
rrWCn0S8/FuG0uV3oNgh8OGR+oEenFo8QVeo8veD9RKnNlpI3mDUyKysaLQXMMVb
xqfqYIDi7yKI4l+ibqmP8kf/nmNFlYcJaruojrKL
-----END CERTIFICATE-----
Generated at Sat Jun 22 10:10:56 2024 by rpki-client on console-fra.rpki-client.org