Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa
File:                     3130332e3136302e36392e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          auLcgmSGCQAKQQp7IS/UW/PKknCFg/ObGvfBAC+PkNE=
Subject key identifier:   A8:7F:CB:0D:BC:E7:E2:01:08:65:A8:17:D1:69:5B:37:36:E8:2B:33
Certificate issuer:       /CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
Certificate serial:       092DE292FA24DC485FAF1D95F386C40A16F2A578
Authority key identifier: 40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa
Signing time:             Sun 14 Jul 2024 23:52:26 +0000
ROA not before:           Sun 14 Jul 2024 23:47:26 +0000
ROA not after:            Sun 13 Jul 2025 23:52:26 +0000
asID:                     48465
IP address blocks:        103.160.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl
                          rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2d:e2:92:fa:24:dc:48:5f:af:1d:95:f3:86:c4:0a:16:f2:a5:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD
        Validity
            Not Before: Jul 14 23:47:26 2024 GMT
            Not After : Jul 13 23:52:26 2025 GMT
        Subject: CN=A87FCB0DBCE7E2010865A817D1695B3736E82B33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:79:cb:2e:9a:10:da:22:ee:e7:43:33:f5:3e:
                    27:c2:1c:a1:33:c1:83:d4:44:2d:84:2b:63:bd:31:
                    24:f2:84:54:00:5a:bd:af:9b:38:74:cf:9a:38:04:
                    6f:04:ce:55:5c:57:62:59:5a:ac:89:f5:31:49:ad:
                    28:fd:5f:82:98:7b:c1:30:3f:2c:4e:fc:1e:f6:3c:
                    d5:b0:1b:17:64:89:de:c2:a4:5a:c4:9e:0f:93:e6:
                    b5:65:17:39:ed:22:a3:ab:0f:50:7b:73:ca:6c:91:
                    ab:03:1e:9f:c3:64:05:0a:d3:9e:74:4c:a4:b8:59:
                    3a:4e:c3:5a:39:b6:8d:16:4d:ce:b6:97:b2:08:f9:
                    3a:43:2b:07:d5:b7:d7:d1:64:39:99:cf:84:f8:ef:
                    d3:c8:ef:43:50:3f:44:c8:b4:86:c6:fa:b7:66:03:
                    a9:e7:9b:c7:02:70:d1:24:1b:46:b1:f0:66:a5:bb:
                    ad:91:6e:90:f5:38:68:fe:ca:7d:25:37:35:ce:c2:
                    e9:3b:40:60:1c:ca:0c:04:aa:88:d8:45:99:2a:74:
                    4a:09:c5:fe:10:a9:82:84:7c:d5:7c:e1:33:df:d0:
                    4e:8a:5f:0b:71:dd:8c:90:99:b1:92:83:9e:ac:d0:
                    7d:06:52:d1:bd:5c:00:1b:7d:9d:c0:9f:33:b2:db:
                    95:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7F:CB:0D:BC:E7:E2:01:08:65:A8:17:D1:69:5B:37:36:E8:2B:33
            X509v3 Authority Key Identifier:
                keyid:40:1A:A5:6A:F5:99:CC:A2:CD:71:A6:84:FF:CF:53:FF:F9:DD:E3:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/401AA56AF599CCA2CD71A684FFCF53FFF9DDE3DD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac79fbe-4790-46be-b9b2-0359b1a18e33/0/3130332e3136302e36392e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:aa:4a:a0:2e:3a:5d:bc:1b:c0:d2:a7:98:d3:c5:20:6b:8d:
         e6:1f:23:b9:4f:8f:22:27:2a:c4:29:a9:e3:01:00:29:09:d3:
         cb:b0:fc:8e:29:42:f3:3c:f1:fb:3b:a9:3f:4c:07:21:c3:00:
         73:de:0a:d8:1f:9b:1b:57:81:0a:ca:c1:cc:24:4f:dd:bd:29:
         3d:43:2f:c6:3d:e8:f2:62:c8:67:0f:d9:ec:ab:47:73:08:b4:
         a6:1e:39:3f:b2:08:6c:73:ed:cb:1d:6e:92:35:23:ca:1b:c4:
         ff:69:de:8a:93:be:5a:de:88:01:c2:ce:18:19:59:11:d4:d4:
         15:85:67:fd:9d:87:f3:72:5d:63:d9:e1:03:69:76:35:66:69:
         89:95:3d:6e:db:2b:25:11:bc:bb:0b:0f:d6:6c:62:43:bd:a1:
         66:2f:ba:58:0c:13:90:39:c6:5f:01:15:8b:3a:c8:f8:db:6d:
         72:60:af:b2:b6:eb:12:89:bd:54:5e:4b:35:11:5c:83:cd:07:
         62:21:59:a0:c3:89:93:b4:3b:43:41:80:cf:f0:dc:91:1c:c5:
         f7:f0:2d:e9:58:f8:e4:7e:1c:da:9e:8f:9a:ad:48:fc:98:3f:
         0c:af:0f:41:0d:89:49:e0:a4:f0:fa:81:a6:18:2a:bb:f4:bc:
         4d:f0:a7:0a
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCS3ikvok3Ehfrx2V84bEChbypXgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZG
OURERTNERDAeFw0yNDA3MTQyMzQ3MjZaFw0yNTA3MTMyMzUyMjZaMDMxMTAvBgNV
BAMTKEE4N0ZDQjBEQkNFN0UyMDEwODY1QTgxN0QxNjk1QjM3MzZFODJCMzMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSecsumhDaIu7nQzP1PifCHKEz
wYPURC2EK2O9MSTyhFQAWr2vmzh0z5o4BG8EzlVcV2JZWqyJ9TFJrSj9X4KYe8Ew
PyxO/B72PNWwGxdkid7CpFrEng+T5rVlFzntIqOrD1B7c8pskasDHp/DZAUK0550
TKS4WTpOw1o5to0WTc62l7II+TpDKwfVt9fRZDmZz4T479PI70NQP0TItIbG+rdm
A6nnm8cCcNEkG0ax8Galu62RbpD1OGj+yn0lNzXOwuk7QGAcygwEqojYRZkqdEoJ
xf4QqYKEfNV84TPf0E6KXwtx3YyQmbGSg56s0H0GUtG9XAAbfZ3AnzOy25XvAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUqH/LDbzn4gEIZagX0WlbNzboKzMwHwYDVR0j
BBgwFoAUQBqlavWZzKLNcaaE/89T//nd490wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWM3OWZiZS00NzkwLTQ2YmUtYjliMi0wMzU5YjFhMThlMzMvMC80MDFBQTU2QUY1
OTlDQ0EyQ0Q3MUE2ODRGRkNGNTNGRkY5RERFM0RELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDAxQUE1NkFGNTk5Q0NBMkNENzFBNjg0RkZDRjUzRkZGOURE
RTNERC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYzc5ZmJlLTQ3OTAtNDZiZS1i
OWIyLTAzNTliMWExOGUzMy8wLzMxMzAzMzJlMzEzNjMwMmUzNjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGegRTANBgkqhkiG
9w0BAQsFAAOCAQEAhapKoC46XbwbwNKnmNPFIGuN5h8juU+PIicqxCmp4wEAKQnT
y7D8jilC8zzx+zupP0wHIcMAc94K2B+bG1eBCsrBzCRP3b0pPUMvxj3o8mLIZw/Z
7KtHcwi0ph45P7IIbHPtyx1ukjUjyhvE/2neipO+Wt6IAcLOGBlZEdTUFYVn/Z2H
83JdY9nhA2l2NWZpiZU9btsrJRG8uwsP1mxiQ72hZi+6WAwTkDnGXwEVizrI+Ntt
cmCvsrbrEom9VF5LNRFcg80HYiFZoMOJk7Q7Q0GAz/DckRzF9/At6Vj45H4c2p6P
mq1I/Jg/DK8PQQ2JSeCk8PqBphgqu/S8TfCnCg==
-----END CERTIFICATE-----
Generated at Thu Nov 21 08:04:21 2024 by rpki-client on console-fra.rpki-client.org