Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa
File:                     3130332e34312e3230362e302f32342d3234203d3e203538333937.roa (raw, json)
Hash identifier:          8p0am7ehV2An1UqUgUm2Z1Br0OD2VEAPk/dVcoq3jDQ=
Subject key identifier:   1C:BE:D5:11:EE:44:53:43:1A:C1:C5:1F:F1:02:5B:47:3A:E7:34:ED
Certificate issuer:       /CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
Certificate serial:       4B5968F9B39B719D96DF400CE66BDBEAB1FE04B4
Authority key identifier: C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa
Signing time:             Fri 08 Nov 2024 22:00:02 +0000
ROA not before:           Fri 08 Nov 2024 21:55:02 +0000
ROA not after:            Fri 07 Nov 2025 22:00:02 +0000
asID:                     58397
IP address blocks:        103.41.206.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl
                          rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:59:68:f9:b3:9b:71:9d:96:df:40:0c:e6:6b:db:ea:b1:fe:04:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C69005BB7BA468A10A32CE44E9C4CE78538998AE
        Validity
            Not Before: Nov  8 21:55:02 2024 GMT
            Not After : Nov  7 22:00:02 2025 GMT
        Subject: CN=1CBED511EE4453431AC1C51FF1025B473AE734ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:48:aa:41:b7:68:1a:a6:c8:28:aa:bb:b1:
                    bb:1a:67:91:70:bc:cb:11:84:9a:77:b9:25:9b:8d:
                    93:64:40:3f:86:16:a5:f6:54:68:a7:0d:d4:55:a5:
                    0e:30:87:c5:0f:e8:39:37:cb:86:e8:e9:d0:81:47:
                    a9:0b:9f:88:ba:3f:9b:7d:41:4e:e9:b3:01:0b:a9:
                    aa:5c:2f:89:3a:99:59:1f:6a:3e:03:58:12:b4:83:
                    f0:bb:6c:35:00:34:42:9e:07:41:14:ae:82:93:7e:
                    a1:c4:25:d7:3a:41:76:94:12:c3:21:08:fa:90:81:
                    98:a2:67:a5:a4:e9:54:d7:21:47:42:4e:26:d0:1a:
                    51:fd:2f:b5:b5:9a:7f:07:8a:33:6e:d0:7e:27:0a:
                    c6:f6:e8:4f:fe:1f:0f:6a:f2:17:60:c0:b5:f5:f6:
                    10:ba:0e:6c:24:0e:dd:02:ba:88:0b:73:0c:b4:fb:
                    35:39:0f:9d:a8:b6:ff:b4:eb:70:67:89:fd:a0:11:
                    c2:79:1c:81:b9:ad:f6:15:9c:3c:02:72:35:c3:3f:
                    5e:4d:ef:5d:16:4f:ce:5b:61:44:95:b4:b4:15:4b:
                    7c:03:af:85:8f:cb:bf:2c:f1:12:cd:54:b8:07:4d:
                    50:69:b7:df:19:47:cb:11:69:c7:a3:db:de:66:01:
                    f5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BE:D5:11:EE:44:53:43:1A:C1:C5:1F:F1:02:5B:47:3A:E7:34:ED
            X509v3 Authority Key Identifier:
                keyid:C6:90:05:BB:7B:A4:68:A1:0A:32:CE:44:E9:C4:CE:78:53:89:98:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/C69005BB7BA468A10A32CE44E9C4CE78538998AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C69005BB7BA468A10A32CE44E9C4CE78538998AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/db8ba45e-f5da-4581-bfe5-c1616c30efab/0/3130332e34312e3230362e302f32342d3234203d3e203538333937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.41.206.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:cd:9f:cd:c9:5a:27:ac:04:77:24:75:04:c6:0b:a5:d0:dc:
         2f:16:c1:1f:bd:1e:b8:7f:e5:c4:b2:f5:03:88:73:78:bc:c3:
         05:3e:9c:ea:11:fb:67:10:2b:05:39:f4:8e:17:3e:c7:66:97:
         ac:bb:ad:5c:67:6c:53:7a:a5:32:c2:42:00:fd:a8:fe:1f:0c:
         c6:7c:91:0e:6c:8a:19:c4:69:05:9a:b4:25:c6:c2:7b:f7:4a:
         f9:2e:69:5c:a8:87:47:bd:82:ba:b4:72:7a:d4:78:a7:07:ee:
         cc:3e:e7:2c:4c:c8:4b:ca:8a:47:ad:d0:70:e2:56:63:d8:5a:
         35:7e:53:df:d9:30:22:b3:ae:1b:0a:90:80:60:35:d0:ca:4c:
         bb:1a:63:90:51:64:a0:50:e1:52:ee:1d:02:06:1f:59:94:8f:
         aa:6e:c0:ae:f8:5e:ac:87:5c:db:f7:e2:dc:ad:49:68:60:90:
         34:60:58:31:ae:d6:6c:a1:c6:b8:6b:bc:74:e2:a0:35:a4:f3:
         fb:43:c6:a3:32:29:69:23:5a:25:57:0f:79:4b:d9:c3:4a:30:
         b3:2f:7e:a1:1d:b1:e2:95:29:96:eb:d2:48:77:9b:05:bf:ef:
         42:1f:e7:da:28:43:4d:0c:2c:0e:58:4b:b5:cc:7f:20:13:01:
         dd:b9:bf:7d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUS1lo+bObcZ2W30AM5mvb6rH+BLQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1
Mzg5OThBRTAeFw0yNDExMDgyMTU1MDJaFw0yNTExMDcyMjAwMDJaMDMxMTAvBgNV
BAMTKDFDQkVENTExRUU0NDUzNDMxQUMxQzUxRkYxMDI1QjQ3M0FFNzM0RUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmp0iqQbdoGqbIKKq7sbsaZ5Fw
vMsRhJp3uSWbjZNkQD+GFqX2VGinDdRVpQ4wh8UP6Dk3y4bo6dCBR6kLn4i6P5t9
QU7pswELqapcL4k6mVkfaj4DWBK0g/C7bDUANEKeB0EUroKTfqHEJdc6QXaUEsMh
CPqQgZiiZ6Wk6VTXIUdCTibQGlH9L7W1mn8HijNu0H4nCsb26E/+Hw9q8hdgwLX1
9hC6DmwkDt0CuogLcwy0+zU5D52otv+063Bnif2gEcJ5HIG5rfYVnDwCcjXDP15N
710WT85bYUSVtLQVS3wDr4WPy78s8RLNVLgHTVBpt98ZR8sRacej295mAfUNAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUHL7VEe5EU0MawcUf8QJbRzrnNO0wHwYDVR0j
BBgwFoAUxpAFu3ukaKEKMs5E6cTOeFOJmK4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YjhiYTQ1ZS1mNWRhLTQ1ODEtYmZlNS1jMTYxNmMzMGVmYWIvMC9DNjkwMDVCQjdC
QTQ2OEExMEEzMkNFNDRFOUM0Q0U3ODUzODk5OEFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzY5MDA1QkI3QkE0NjhBMTBBMzJDRTQ0RTlDNENFNzg1Mzg5
OThBRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RiOGJhNDVlLWY1ZGEtNDU4MS1i
ZmU1LWMxNjE2YzMwZWZhYi8wLzMxMzAzMzJlMzQzMTJlMzIzMDM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzkzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcpzjANBgkqhkiG
9w0BAQsFAAOCAQEAmM2fzclaJ6wEdyR1BMYLpdDcLxbBH70euH/lxLL1A4hzeLzD
BT6c6hH7ZxArBTn0jhc+x2aXrLutXGdsU3qlMsJCAP2o/h8MxnyRDmyKGcRpBZq0
JcbCe/dK+S5pXKiHR72CurRyetR4pwfuzD7nLEzIS8qKR63QcOJWY9haNX5T39kw
IrOuGwqQgGA10MpMuxpjkFFkoFDhUu4dAgYfWZSPqm7ArvherIdc2/fi3K1JaGCQ
NGBYMa7WbKHGuGu8dOKgNaTz+0PGozIpaSNaJVcPeUvZw0owsy9+oR2x4pUpluvS
SHebBb/vQh/n2ihDTQwsDlhLtcx/IBMB3bm/fQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:01 2024 by rpki-client on console-ams.rpki-client.org