Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa
File:                     3130332e31302e37302e302f32342d3234203d3e20313530323130.roa (raw, json)
Hash identifier:          283YGT3AVYzy+p0Ofgvris1gpEJYj8VlOigQuJmqnnQ=
Subject key identifier:   43:56:16:CC:96:9B:BA:60:7C:83:94:7E:4E:8F:6F:4C:EE:2F:AF:FE
Certificate issuer:       /CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB
Certificate serial:       208A5ED739C671756F6587851F420030EC197BAA
Authority key identifier: 8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa
Signing time:             Tue 13 Feb 2024 12:00:01 +0000
ROA not before:           Tue 13 Feb 2024 11:55:01 +0000
ROA not after:            Tue 11 Feb 2025 12:00:01 +0000
asID:                     150210
IP address blocks:        103.10.70.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl
                          rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 10:17:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:5e:d7:39:c6:71:75:6f:65:87:85:1f:42:00:30:ec:19:7b:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB
        Validity
            Not Before: Feb 13 11:55:01 2024 GMT
            Not After : Feb 11 12:00:01 2025 GMT
        Subject: CN=435616CC969BBA607C83947E4E8F6F4CEE2FAFFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:79:1b:ce:cc:21:7d:ba:73:38:3a:ed:5b:fb:
                    c6:d0:f2:35:c5:5b:60:7a:b7:43:b6:42:8a:6b:95:
                    7e:dc:82:e7:a8:a5:7f:40:a9:be:d4:6e:a3:4f:6b:
                    f0:32:09:b1:66:4a:6f:42:10:bc:5a:29:ac:96:06:
                    a5:8a:11:f3:38:ab:89:de:2c:63:db:c2:5c:64:9d:
                    7d:2d:72:46:c9:51:9a:3c:14:b4:a5:97:5e:77:3e:
                    c1:33:ba:d9:1e:be:47:6b:39:2e:6f:73:47:3d:b3:
                    16:3d:f4:f7:de:ba:c4:11:30:92:f4:df:f2:59:70:
                    0a:e4:59:34:72:4e:bf:08:2c:df:e0:3b:3f:bb:55:
                    04:fe:6c:1d:9d:01:af:cd:07:a2:31:8f:27:e4:0f:
                    cb:d0:7a:70:36:db:24:a9:74:53:6f:ae:1e:a9:0b:
                    34:b2:56:4b:c0:1c:8a:fb:b3:81:38:76:2e:63:4e:
                    67:1a:e6:64:9f:00:29:c5:31:5e:e4:85:8f:29:78:
                    47:45:b3:d3:b4:81:74:58:10:dd:51:97:1f:53:4c:
                    05:91:8e:e2:1d:fe:55:40:fc:cd:a7:10:73:7f:84:
                    7b:ab:a4:f9:c1:9f:98:f3:9c:3d:d4:b3:5f:65:a1:
                    73:5b:8d:46:38:82:7b:b2:55:af:3b:6a:23:88:62:
                    98:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:16:CC:96:9B:BA:60:7C:83:94:7E:4E:8F:6F:4C:EE:2F:AF:FE
            X509v3 Authority Key Identifier:
                keyid:8C:6B:9F:E8:0E:F1:DA:40:B9:64:D4:42:9F:78:78:5A:DD:D2:9E:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8C6B9FE80EF1DA40B964D4429F78785ADDD29EFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dacb7187-7a5f-4e23-be94-593a0c288cb9/0/3130332e31302e37302e302f32342d3234203d3e20313530323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:64:eb:1c:99:5c:a1:dc:56:1d:10:8d:de:76:49:18:b6:
         81:4f:89:cf:ec:41:45:67:53:18:4f:f8:a9:3a:a8:d3:58:79:
         4d:f3:d8:6b:4b:c1:f0:0f:f4:9c:12:c9:35:7c:91:f9:00:bb:
         4d:2f:f7:41:68:9a:55:f7:7a:55:98:68:ac:19:a4:43:25:b0:
         9c:60:89:49:01:b1:34:0f:d8:78:7d:db:9f:b6:9f:9e:73:ca:
         96:43:fe:73:bb:ec:af:c9:32:96:99:57:f9:48:df:e9:02:5a:
         1a:bc:de:40:8b:37:c9:c7:a0:71:3d:fc:1e:50:71:6f:01:71:
         e3:de:e4:0e:56:05:51:c7:a6:11:10:f8:e4:a3:21:20:e7:f4:
         57:2f:f7:4f:49:55:c3:c3:c4:df:46:fb:55:bb:65:4e:0a:83:
         b4:ed:64:c3:6d:30:de:98:6a:7d:92:d1:d2:16:44:fc:7b:c5:
         fa:5c:cc:a3:3e:d8:71:0d:a3:e8:5e:00:82:87:53:17:3c:82:
         b1:eb:dc:74:36:01:5f:b0:fe:dc:a0:6b:f7:dc:2d:df:cf:8d:
         b3:e4:4f:9d:ec:04:ba:27:a4:6d:a1:69:94:b9:59:73:00:5a:
         4e:3c:68:7e:d8:97:53:2a:8d:28:98:f6:54:f4:51:a2:c4:df:
         af:7e:d5:a6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUIIpe1znGcXVvZYeFH0IAMOwZe6owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFE
REQyOUVGQjAeFw0yNDAyMTMxMTU1MDFaFw0yNTAyMTExMjAwMDFaMDMxMTAvBgNV
BAMTKDQzNTYxNkNDOTY5QkJBNjA3QzgzOTQ3RTRFOEY2RjRDRUUyRkFGRkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeRvOzCF9unM4Ou1b+8bQ8jXF
W2B6t0O2QoprlX7cgueopX9Aqb7UbqNPa/AyCbFmSm9CELxaKayWBqWKEfM4q4ne
LGPbwlxknX0tckbJUZo8FLSll153PsEzutkevkdrOS5vc0c9sxY99PfeusQRMJL0
3/JZcArkWTRyTr8ILN/gOz+7VQT+bB2dAa/NB6IxjyfkD8vQenA22ySpdFNvrh6p
CzSyVkvAHIr7s4E4di5jTmca5mSfACnFMV7khY8peEdFs9O0gXRYEN1Rlx9TTAWR
juId/lVA/M2nEHN/hHurpPnBn5jznD3Us19loXNbjUY4gnuyVa87aiOIYpj7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQ1YWzJabumB8g5R+To9vTO4vr/4wHwYDVR0j
BBgwFoAUjGuf6A7x2kC5ZNRCn3h4Wt3SnvswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWNiNzE4Ny03YTVmLTRlMjMtYmU5NC01OTNhMGMyODhjYjkvMC84QzZCOUZFODBF
RjFEQTQwQjk2NEQ0NDI5Rjc4Nzg1QURERDI5RUZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEM2QjlGRTgwRUYxREE0MEI5NjRENDQyOUY3ODc4NUFEREQy
OUVGQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhY2I3MTg3LTdhNWYtNGUyMy1i
ZTk0LTU5M2EwYzI4OGNiOS8wLzMxMzAzMzJlMzEzMDJlMzczMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDMyMzEzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKRjANBgkqhkiG
9w0BAQsFAAOCAQEAi/hk6xyZXKHcVh0Qjd52SRi2gU+Jz+xBRWdTGE/4qTqo01h5
TfPYa0vB8A/0nBLJNXyR+QC7TS/3QWiaVfd6VZhorBmkQyWwnGCJSQGxNA/YeH3b
n7afnnPKlkP+c7vsr8kylplX+Ujf6QJaGrzeQIs3ycegcT38HlBxbwFx497kDlYF
UcemERD45KMhIOf0Vy/3T0lVw8PE30b7VbtlTgqDtO1kw20w3phqfZLR0hZE/HvF
+lzMoz7YcQ2j6F4AgodTFzyCsevcdDYBX7D+3KBr99wt38+Ns+RPnewEuiekbaFp
lLlZcwBaTjxoftiXUyqNKJj2VPRRosTfr37Vpg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:14:33 2024 by rpki-client on console-fra.rpki-client.org