Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa
File:                     3130332e34312e3230342e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier:          Es6h8MzPI3S1mFQ1J0kqGZiZfKqhvpv8wCyy8PJOM40=
Subject key identifier:   1E:12:CC:FD:8A:90:BB:83:E4:D5:B9:FF:8C:D4:45:E7:B8:62:E2:0B
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       6928002961803915DE94431D1D32D3D3F2903B0B
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa
Signing time:             Fri 08 Nov 2024 21:00:01 +0000
ROA not before:           Fri 08 Nov 2024 20:55:01 +0000
ROA not after:            Fri 07 Nov 2025 21:00:01 +0000
asID:                     58397
IP address blocks:        103.41.204.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:28:00:29:61:80:39:15:de:94:43:1d:1d:32:d3:d3:f2:90:3b:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Nov  8 20:55:01 2024 GMT
            Not After : Nov  7 21:00:01 2025 GMT
        Subject: CN=1E12CCFD8A90BB83E4D5B9FF8CD445E7B862E20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2b:dc:ed:fe:95:a1:46:38:47:e0:41:55:20:
                    34:6d:e5:3f:c7:d2:24:c2:a2:84:d7:55:fe:99:75:
                    30:b9:cf:dc:3e:cd:2d:db:60:38:d0:10:e0:91:4e:
                    64:50:2a:4e:99:d0:f8:21:19:53:1a:9b:45:4f:be:
                    02:fb:3b:20:76:e8:fe:92:0a:42:46:50:05:8e:10:
                    5b:fc:c6:39:2d:07:24:b9:f5:80:fe:51:74:2a:b9:
                    b8:da:e8:9e:a5:54:d1:ca:93:9d:98:80:90:08:b9:
                    05:38:7e:b7:d0:a0:61:ab:94:fb:4a:fd:fd:0f:2c:
                    28:55:e4:d7:8e:3f:ef:92:01:b0:ae:41:9d:3c:ce:
                    ff:c4:42:76:a2:c6:f5:0e:2c:21:c7:c8:4d:b3:d2:
                    5f:74:af:c6:27:6b:f8:3b:6c:ec:23:3f:ec:c8:b5:
                    37:7d:8c:87:de:c3:05:f8:49:af:6e:0c:5e:a0:26:
                    4e:2b:a0:56:51:56:46:34:d6:e1:64:e5:57:52:64:
                    24:82:d5:b2:1d:7c:18:66:70:09:c2:7b:cd:c9:1d:
                    fe:87:9a:ae:f2:28:9a:e9:a3:39:66:a6:06:55:14:
                    b7:53:cd:3d:b6:5c:94:71:7d:a5:4b:9d:f0:96:de:
                    e9:a6:ee:06:80:52:15:36:ba:06:af:58:48:d3:cd:
                    93:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:12:CC:FD:8A:90:BB:83:E4:D5:B9:FF:8C:D4:45:E7:B8:62:E2:0B
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230342e302f32342d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.204.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:92:af:53:da:7a:27:84:aa:df:38:d4:75:96:ad:c4:14:23:
         10:26:0d:fe:ba:94:c5:76:29:0e:9c:23:b2:e1:35:de:2e:55:
         98:a1:3b:7d:89:5b:4c:f2:88:d1:68:b2:33:54:01:3d:58:e8:
         68:07:82:e4:3f:3c:40:7d:1d:ca:8c:42:9e:fb:ca:e5:cb:a7:
         81:76:ed:72:75:86:82:ad:3a:12:fd:4e:85:98:e7:7e:c8:10:
         b1:9c:55:26:0a:17:eb:9c:5d:b2:79:5f:aa:87:e4:18:6b:1b:
         55:00:ba:c9:6c:52:b9:e4:2b:3e:95:9a:fb:35:2d:c8:d1:0f:
         f2:44:6a:0f:24:37:6d:41:58:d1:3a:13:3c:e3:6d:fa:73:53:
         28:18:28:95:a0:8f:35:6d:51:bf:a0:ad:6d:ba:26:d2:23:3b:
         3e:de:c5:66:e2:57:8d:98:7b:21:ab:ce:f9:57:11:9a:7c:bb:
         86:1f:80:b9:ca:93:2c:06:a6:be:37:5e:fc:7d:9c:b3:47:e9:
         09:ce:19:d8:21:5e:ef:69:43:2d:72:a9:53:f4:f7:9c:5b:c0:
         60:7d:b2:4c:36:31:57:3a:68:0a:68:b4:96:c3:d4:c6:7b:8b:
         58:db:a2:fb:8b:2d:2c:1b:48:fe:0a:2f:dc:5d:09:f4:de:62:
         9d:e6:86:06
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaSgAKWGAORXelEMdHTLT0/KQOwswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1
Mzg5OThBRTAeFw0yNDExMDgyMDU1MDFaFw0yNTExMDcyMTAwMDFaMDMxMTAvBgNV
BAMTKDFFMTJDQ0ZEOEE5MEJCODNFNEQ1QjlGRjhDRDQ0NUU3Qjg2MkUyMEIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1K9zt/pWhRjhH4EFVIDRt5T/H
0iTCooTXVf6ZdTC5z9w+zS3bYDjQEOCRTmRQKk6Z0PghGVMam0VPvgL7OyB26P6S
CkJGUAWOEFv8xjktByS59YD+UXQqubja6J6lVNHKk52YgJAIuQU4frfQoGGrlPtK
/f0PLChV5NeOP++SAbCuQZ08zv/EQnaixvUOLCHHyE2z0l90r8Yna/g7bOwjP+zI
tTd9jIfewwX4Sa9uDF6gJk4roFZRVkY01uFk5VdSZCSC1bIdfBhmcAnCe83JHf6H
mq7yKJrpozlmpgZVFLdTzT22XJRxfaVLnfCW3umm7gaAUhU2ugavWEjTzZMzAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHhLM/YqQu4Pk1bn/jNRF57hi4gswHwYDVR0j
BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC
QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5
OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i
ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzAzMzJlMzQzMTJlMzIzMDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpzDANBgkqhkiG
9w0BAQsFAAOCAQEACZKvU9p6J4Sq3zjUdZatxBQjECYN/rqUxXYpDpwjsuE13i5V
mKE7fYlbTPKI0WiyM1QBPVjoaAeC5D88QH0dyoxCnvvK5cungXbtcnWGgq06Ev1O
hZjnfsgQsZxVJgoX65xdsnlfqofkGGsbVQC6yWxSueQrPpWa+zUtyNEP8kRqDyQ3
bUFY0ToTPONt+nNTKBgolaCPNW1Rv6Ctbbom0iM7Pt7FZuJXjZh7IavO+VcRmny7
hh+AucqTLAamvjde/H2cs0fpCc4Z2CFe72lDLXKpU/T3nFvAYH2yTDYxVzpoCmi0
lsPUxnuLWNui+4stLBtI/gov3F0J9N5ineaGBg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org