Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
File:                     3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa (raw, json)
Hash identifier:          bOMgE92A7bsFL/ptKyKlN1V56PoOnlAw0BWzSOMLWu8=
Subject key identifier:   CD:99:56:BE:2D:0E:56:25:CF:B9:4A:E4:A5:22:FA:9C:C6:7E:8F:6B
Certificate issuer:       /CN=4F50242149BE32942675690F53BF8FE81E99F74D
Certificate serial:       4C2BA0DE00709929DA68A3812621022D427F93C6
Authority key identifier: 4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa
Signing time:             Wed 01 May 2024 10:01:25 +0000
ROA not before:           Wed 01 May 2024 09:56:25 +0000
ROA not after:            Wed 30 Apr 2025 10:01:25 +0000
asID:                     141940
IP address blocks:        103.166.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl
                          rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:2b:a0:de:00:70:99:29:da:68:a3:81:26:21:02:2d:42:7f:93:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F50242149BE32942675690F53BF8FE81E99F74D
        Validity
            Not Before: May  1 09:56:25 2024 GMT
            Not After : Apr 30 10:01:25 2025 GMT
        Subject: CN=CD9956BE2D0E5625CFB94AE4A522FA9CC67E8F6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:80:a0:ec:50:15:43:25:bf:46:a5:2e:68:f1:
                    b3:a9:92:63:c2:a6:ca:c9:a8:7d:24:c0:ba:70:50:
                    91:24:e1:90:d8:47:50:da:47:9c:e3:ed:34:ce:52:
                    90:60:38:c1:38:39:b5:98:fe:2e:1d:0d:1e:c5:9a:
                    4a:e4:0d:f0:27:4d:71:70:3f:0d:d5:59:7f:02:25:
                    37:86:91:2c:bb:b3:8a:23:c8:b6:0a:b5:d6:b0:e3:
                    e2:c8:61:2a:4c:6f:b2:81:0f:99:c1:67:7a:3f:80:
                    72:3b:2f:ee:ce:e7:34:e6:c9:c4:71:e6:35:29:13:
                    6a:7b:3a:76:cb:76:ed:db:bf:ba:49:da:50:f4:be:
                    3b:a4:07:e6:f8:a7:bf:44:c1:5c:42:e5:39:d3:f3:
                    bb:58:ff:ca:ce:d1:08:f4:5d:2b:3b:91:f9:fb:d1:
                    e2:9b:9b:5e:ae:eb:8e:a8:b5:11:4f:8b:d0:96:6e:
                    ff:3e:3d:4c:8b:bb:fa:9b:e3:8e:3d:09:a4:f2:38:
                    a9:ff:c0:04:b8:27:d9:3c:e1:5d:86:1a:56:38:4c:
                    e4:b5:15:2d:42:bb:a9:01:55:d4:27:53:bd:68:f2:
                    36:3f:04:1d:79:76:ab:65:40:a1:1e:70:81:66:3a:
                    65:bc:28:e3:90:11:95:e7:c0:51:68:7a:24:f4:25:
                    be:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:99:56:BE:2D:0E:56:25:CF:B9:4A:E4:A5:22:FA:9C:C6:7E:8F:6B
            X509v3 Authority Key Identifier:
                keyid:4F:50:24:21:49:BE:32:94:26:75:69:0F:53:BF:8F:E8:1E:99:F7:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/4F50242149BE32942675690F53BF8FE81E99F74D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4F50242149BE32942675690F53BF8FE81E99F74D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9093ad6-b115-4f10-88d7-6e57dcfd3223/0/3130332e3136362e33302e302f32342d3234203d3e20313431393430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:6a:f9:f4:41:75:f6:22:d1:84:83:2a:78:b5:a0:49:7a:29:
         14:4a:0d:ea:06:d7:ef:e1:6a:41:1e:a6:60:25:6a:b1:0b:4b:
         22:48:cc:04:3f:a1:76:70:76:a2:70:43:d0:8b:16:c9:f9:29:
         1d:46:04:8d:68:77:12:55:4f:16:4e:b6:52:41:23:33:24:9f:
         50:1a:60:34:b4:72:ba:89:91:68:c0:09:db:46:f7:41:25:aa:
         35:6e:cf:b0:71:0c:52:1e:79:1b:36:5f:2d:77:83:da:44:57:
         4c:2c:c2:cd:94:5c:48:74:14:9b:bf:00:2b:30:38:09:3e:4e:
         1d:08:da:e9:05:83:22:cb:27:aa:98:6b:75:91:d7:0e:ec:5d:
         13:70:eb:66:86:e0:75:04:d1:30:20:ca:d2:6a:66:e9:33:61:
         f4:05:0d:fc:ef:39:f7:6e:d7:4a:07:7c:e7:7b:96:6c:70:a4:
         75:f9:24:e1:fc:e0:8b:03:10:ba:08:c6:c3:63:c5:12:90:f4:
         42:27:66:da:13:51:59:02:16:2a:e0:59:a1:91:02:b7:5a:ec:
         93:33:15:30:41:3f:9f:1a:f1:bc:2e:48:fb:77:73:12:51:9e:
         e9:e1:44:c9:d6:83:ba:1b:ce:d8:10:8c:52:51:a3:19:b4:23:
         17:82:93:3b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTCug3gBwmSnaaKOBJiECLUJ/k8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgx
RTk5Rjc0RDAeFw0yNDA1MDEwOTU2MjVaFw0yNTA0MzAxMDAxMjVaMDMxMTAvBgNV
BAMTKENEOTk1NkJFMkQwRTU2MjVDRkI5NEFFNEE1MjJGQTlDQzY3RThGNkIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDggKDsUBVDJb9GpS5o8bOpkmPC
psrJqH0kwLpwUJEk4ZDYR1DaR5zj7TTOUpBgOME4ObWY/i4dDR7FmkrkDfAnTXFw
Pw3VWX8CJTeGkSy7s4ojyLYKtdaw4+LIYSpMb7KBD5nBZ3o/gHI7L+7O5zTmycRx
5jUpE2p7OnbLdu3bv7pJ2lD0vjukB+b4p79EwVxC5TnT87tY/8rO0Qj0XSs7kfn7
0eKbm16u646otRFPi9CWbv8+PUyLu/qb4449CaTyOKn/wAS4J9k84V2GGlY4TOS1
FS1Cu6kBVdQnU71o8jY/BB15dqtlQKEecIFmOmW8KOOQEZXnwFFoeiT0Jb4VAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUzZlWvi0OViXPuUrkpSL6nMZ+j2swHwYDVR0j
BBgwFoAUT1AkIUm+MpQmdWkPU7+P6B6Z900wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
OTA5M2FkNi1iMTE1LTRmMTAtODhkNy02ZTU3ZGNmZDMyMjMvMC80RjUwMjQyMTQ5
QkUzMjk0MjY3NTY5MEY1M0JGOEZFODFFOTlGNzRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEY1MDI0MjE0OUJFMzI5NDI2NzU2OTBGNTNCRjhGRTgxRTk5
Rjc0RC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Q5MDkzYWQ2LWIxMTUtNGYxMC04
OGQ3LTZlNTdkY2ZkMzIyMy8wLzMxMzAzMzJlMzEzNjM2MmUzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMxMzkzNDMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ6YeMA0GCSqG
SIb3DQEBCwUAA4IBAQBravn0QXX2ItGEgyp4taBJeikUSg3qBtfv4WpBHqZgJWqx
C0siSMwEP6F2cHaicEPQixbJ+SkdRgSNaHcSVU8WTrZSQSMzJJ9QGmA0tHK6iZFo
wAnbRvdBJao1bs+wcQxSHnkbNl8td4PaRFdMLMLNlFxIdBSbvwArMDgJPk4dCNrp
BYMiyyeqmGt1kdcO7F0TcOtmhuB1BNEwIMrSambpM2H0BQ387zn3btdKB3zne5Zs
cKR1+STh/OCLAxC6CMbDY8USkPRCJ2baE1FZAhYq4FmhkQK3WuyTMxUwQT+fGvG8
Lkj7d3MSUZ7p4UTJ1oO6G87YEIxSUaMZtCMXgpM7
-----END CERTIFICATE-----
Generated at Sun Nov 24 09:53:16 2024 by rpki-client on console-ams.rpki-client.org