Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa
File:                     3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa (raw, json)
Hash identifier:          fgXPSQsqaItwV85kVDw1BpY1q2P/h3jwxlkF9YcsUtA=
Subject key identifier:   90:80:17:77:54:CC:80:E2:01:27:46:7B:59:F9:9B:8E:9B:50:84:13
Certificate issuer:       /CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
Certificate serial:       41331294F666FCA82E7859E55EFB2CB75200369F
Authority key identifier: B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa
Signing time:             Tue 13 Aug 2024 03:54:33 +0000
ROA not before:           Tue 13 Aug 2024 03:49:33 +0000
ROA not after:            Tue 12 Aug 2025 03:54:33 +0000
asID:                     152009
IP address blocks:        103.38.106.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl
                          rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:33:12:94:f6:66:fc:a8:2e:78:59:e5:5e:fb:2c:b7:52:00:36:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B5A68ADE81322F194320BE4302C6897D29D13BDD
        Validity
            Not Before: Aug 13 03:49:33 2024 GMT
            Not After : Aug 12 03:54:33 2025 GMT
        Subject: CN=9080177754CC80E20127467B59F99B8E9B508413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:03:8d:d6:b6:33:30:f8:0a:67:6e:4b:e0:ee:
                    a6:bf:af:57:92:bf:b0:05:fb:d4:8b:f1:e1:3a:61:
                    cd:73:74:0f:a2:51:31:99:59:42:e4:4f:ca:31:5f:
                    8a:45:30:48:f1:b4:c2:12:3d:98:06:ad:7e:a2:59:
                    04:16:c9:94:9c:56:fa:89:3a:95:05:6f:46:dd:30:
                    e0:1d:df:86:6c:b5:e1:98:35:5a:2f:22:05:ce:e5:
                    5d:d5:0d:09:74:b5:8b:3a:02:fc:9c:43:29:60:d6:
                    76:cc:d4:f3:53:ac:15:81:05:2f:46:f5:10:e0:a5:
                    aa:a6:6f:84:28:ae:9e:bd:ee:39:d6:e3:7b:dd:57:
                    ed:cc:a3:d5:07:10:11:e0:70:68:b0:0b:39:0c:37:
                    93:3f:98:d7:a8:be:99:57:ff:c2:42:9e:2d:0c:48:
                    90:b9:c9:a0:fa:6d:ff:ce:3d:ee:c1:ad:f1:15:b6:
                    52:91:af:a7:da:39:d9:04:2e:b3:0a:cf:05:5b:ab:
                    da:1e:35:c2:f3:0e:57:99:56:a4:1a:15:97:fe:de:
                    f3:bc:58:de:ec:cc:34:9e:d5:77:f9:14:9b:24:39:
                    1a:c3:02:85:6d:bf:85:58:64:56:a2:91:b6:20:f2:
                    f7:c3:93:ce:ea:5d:ee:bf:31:56:b4:0d:98:ec:c5:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:80:17:77:54:CC:80:E2:01:27:46:7B:59:F9:9B:8E:9B:50:84:13
            X509v3 Authority Key Identifier:
                keyid:B5:A6:8A:DE:81:32:2F:19:43:20:BE:43:02:C6:89:7D:29:D1:3B:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/B5A68ADE81322F194320BE4302C6897D29D13BDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B5A68ADE81322F194320BE4302C6897D29D13BDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db016085-2f94-40ff-80ce-ce23d39e65a1/0/3130332e33382e3130362e302f32332d3234203d3e20313532303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:65:b8:71:c7:b4:5f:ed:de:0e:b4:36:1b:dc:0a:92:00:bb:
         80:fd:41:36:bb:ce:ac:0a:dd:24:64:03:74:a4:5c:80:05:a3:
         fb:1f:d9:4d:85:8d:92:3b:b9:90:8a:9f:07:de:92:73:e8:00:
         3d:8a:66:7b:6d:6b:67:c7:8c:47:a9:9f:11:b1:ec:0c:78:f6:
         d8:92:e6:b8:00:77:dd:87:0a:f6:07:0a:36:9b:12:bc:b7:41:
         22:0b:7b:12:b7:dd:14:e4:5c:9f:70:45:5f:0e:76:3b:e4:65:
         ab:c8:6c:72:dc:89:df:19:32:34:86:b9:e6:17:4f:db:44:53:
         f5:f2:c9:51:26:23:db:23:07:5a:f2:17:d7:2b:0b:84:62:87:
         fc:7c:40:c8:a2:8f:cb:2d:6a:14:15:e9:95:db:8a:a5:f4:20:
         31:2f:8a:b1:96:d9:c1:e3:34:10:93:4c:fd:b0:14:f1:13:c9:
         e3:c6:43:5c:88:b6:39:93:0d:59:7b:dc:34:61:e9:8b:a5:a3:
         6a:4f:31:c1:33:1c:19:e1:4b:3a:40:e2:ec:2b:9a:00:86:3d:
         27:46:2e:76:34:44:5f:fa:5d:e9:a6:96:5c:3a:26:31:00:f7:
         89:b9:48:96:04:1d:28:09:89:b2:1a:e1:18:b1:d7:8a:87:f0:
         48:e3:15:75
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQTMSlPZm/KgueFnlXvsst1IANp8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0Qy
OUQxM0JERDAeFw0yNDA4MTMwMzQ5MzNaFw0yNTA4MTIwMzU0MzNaMDMxMTAvBgNV
BAMTKDkwODAxNzc3NTRDQzgwRTIwMTI3NDY3QjU5Rjk5QjhFOUI1MDg0MTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwA43WtjMw+Apnbkvg7qa/r1eS
v7AF+9SL8eE6Yc1zdA+iUTGZWULkT8oxX4pFMEjxtMISPZgGrX6iWQQWyZScVvqJ
OpUFb0bdMOAd34ZsteGYNVovIgXO5V3VDQl0tYs6AvycQylg1nbM1PNTrBWBBS9G
9RDgpaqmb4Qorp697jnW43vdV+3Mo9UHEBHgcGiwCzkMN5M/mNeovplX/8JCni0M
SJC5yaD6bf/OPe7BrfEVtlKRr6faOdkELrMKzwVbq9oeNcLzDleZVqQaFZf+3vO8
WN7szDSe1Xf5FJskORrDAoVtv4VYZFaikbYg8vfDk87qXe6/MVa0DZjsxZytAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUkIAXd1TMgOIBJ0Z7WfmbjptQhBMwHwYDVR0j
BBgwFoAUtaaK3oEyLxlDIL5DAsaJfSnRO90wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjAxNjA4NS0yZjk0LTQwZmYtODBjZS1jZTIzZDM5ZTY1YTEvMC9CNUE2OEFERTgx
MzIyRjE5NDMyMEJFNDMwMkM2ODk3RDI5RDEzQkRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjVBNjhBREU4MTMyMkYxOTQzMjBCRTQzMDJDNjg5N0QyOUQx
M0JERC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiMDE2MDg1LTJmOTQtNDBmZi04
MGNlLWNlMjNkMzllNjVhMS8wLzMxMzAzMzJlMzMzODJlMzEzMDM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMyMzAzMDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZyZqMA0GCSqG
SIb3DQEBCwUAA4IBAQALZbhxx7Rf7d4OtDYb3AqSALuA/UE2u86sCt0kZAN0pFyA
BaP7H9lNhY2SO7mQip8H3pJz6AA9imZ7bWtnx4xHqZ8RsewMePbYkua4AHfdhwr2
Bwo2mxK8t0EiC3sSt90U5FyfcEVfDnY75GWryGxy3InfGTI0hrnmF0/bRFP18slR
JiPbIwda8hfXKwuEYof8fEDIoo/LLWoUFemV24ql9CAxL4qxltnB4zQQk0z9sBTx
E8njxkNciLY5kw1Ze9w0YemLpaNqTzHBMxwZ4Us6QOLsK5oAhj0nRi52NERf+l3p
ppZcOiYxAPeJuUiWBB0oCYmyGuEYsdeKh/BI4xV1
-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org