Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
File:                     3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa (raw, json)
Hash identifier:          RK2zH1tgWir8wheYcjszJYDPIlBKYBqZW3v1Zkn9ceg=
Subject key identifier:   9B:AB:33:B1:A7:63:14:B6:57:52:C9:4E:93:D5:28:0B:D7:08:F0:16
Certificate issuer:       /CN=46A7C8702C547FC42210027DD254571031AE05DC
Certificate serial:       5DED20A406C16DBCB364DCD943A64F5205349CA8
Authority key identifier: 46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa
Signing time:             Sat 06 Apr 2024 06:00:00 +0000
ROA not before:           Sat 06 Apr 2024 05:55:00 +0000
ROA not after:            Sat 05 Apr 2025 06:00:00 +0000
asID:                     141595
IP address blocks:        103.160.205.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl
                          rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 15:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ed:20:a4:06:c1:6d:bc:b3:64:dc:d9:43:a6:4f:52:05:34:9c:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=46A7C8702C547FC42210027DD254571031AE05DC
        Validity
            Not Before: Apr  6 05:55:00 2024 GMT
            Not After : Apr  5 06:00:00 2025 GMT
        Subject: CN=9BAB33B1A76314B65752C94E93D5280BD708F016
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:58:10:d5:81:8c:4a:82:71:af:d1:ff:3f:70:
                    ef:b1:ad:4d:d2:e3:62:c9:da:49:88:e8:3d:e4:0f:
                    dd:b5:ee:61:da:fc:74:da:53:8c:b8:1a:a4:dc:5c:
                    71:36:bd:88:c0:af:a3:74:2d:36:8e:b1:1d:c2:95:
                    5c:a3:99:68:e8:70:91:f8:63:8e:d3:eb:a4:a7:35:
                    11:64:e7:48:14:ca:80:27:05:96:8b:59:89:bc:b8:
                    a0:ef:a6:60:03:d9:fa:11:f2:c3:8d:91:23:2b:56:
                    c8:b4:7c:c0:17:7e:70:8b:95:45:2a:70:af:78:50:
                    fb:5c:09:74:af:f0:4a:71:71:9d:6a:fb:54:e1:10:
                    bb:eb:a4:10:08:c2:fe:ae:e4:e5:3c:d1:4b:cb:7e:
                    8e:e7:af:a7:55:bc:63:e7:f3:bf:35:ca:79:88:c4:
                    50:b7:00:38:ab:27:e2:57:56:e4:49:ce:05:22:be:
                    b7:c6:4d:8f:91:fa:fd:b5:3d:f3:56:05:96:67:53:
                    aa:66:6c:e0:11:ee:01:ce:aa:aa:23:f5:02:c6:77:
                    34:0a:89:d4:fe:4b:34:3c:b4:b9:ec:3c:54:7e:ae:
                    41:a2:06:40:aa:3a:46:6e:c4:ac:45:d8:53:80:9a:
                    9a:00:93:c2:5b:d2:87:63:05:46:ac:79:3a:be:32:
                    2c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AB:33:B1:A7:63:14:B6:57:52:C9:4E:93:D5:28:0B:D7:08:F0:16
            X509v3 Authority Key Identifier:
                keyid:46:A7:C8:70:2C:54:7F:C4:22:10:02:7D:D2:54:57:10:31:AE:05:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/46A7C8702C547FC42210027DD254571031AE05DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/46A7C8702C547FC42210027DD254571031AE05DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/de600486-9780-43ee-bb2d-b811094a1445/0/3130332e3136302e3230352e302f32342d3234203d3e20313431353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.160.205.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:37:84:87:34:d1:9b:23:f2:2e:60:b7:66:2c:d8:5c:0f:a9:
         59:54:ee:97:0e:ad:64:ee:bb:54:0b:b4:78:b5:38:4f:dd:89:
         4b:5c:92:cf:18:d4:20:20:9a:3a:5a:07:b1:01:4b:b9:15:59:
         4a:b6:3a:ff:e7:c4:93:d9:61:c5:30:2a:7d:c9:7a:87:50:07:
         33:14:5b:9c:99:ba:38:51:20:f4:76:7e:d5:27:53:97:33:f5:
         93:4b:f0:84:3e:ac:62:57:38:5f:50:3f:f9:d6:57:f3:13:38:
         ac:36:a7:f0:ce:cb:52:8e:10:64:dc:31:bb:f3:a6:b7:6e:59:
         99:8e:8c:02:77:83:98:66:dc:f9:a5:af:60:74:a6:00:ec:9d:
         09:fd:b9:48:4a:3c:48:70:a7:2d:75:dd:6f:ac:25:e4:81:d3:
         c3:a0:dd:df:6d:f4:0d:9a:56:a7:a2:0c:47:09:5f:79:36:a7:
         47:46:2a:99:68:cf:d3:36:92:51:f5:48:72:cd:6e:5c:61:09:
         bc:7f:0a:82:ca:b2:b3:81:fb:5e:d7:fb:68:aa:ec:86:06:71:
         6d:09:20:9b:60:b5:3b:ed:dd:9c:05:8c:65:3a:57:7b:22:c2:
         78:07:ff:b3:c9:b9:7e:2c:0f:26:dd:1e:5e:38:1c:f4:50:92:
         d2:c7:84:e4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUXe0gpAbBbbyzZNzZQ6ZPUgU0nKgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAz
MUFFMDVEQzAeFw0yNDA0MDYwNTU1MDBaFw0yNTA0MDUwNjAwMDBaMDMxMTAvBgNV
BAMTKDlCQUIzM0IxQTc2MzE0QjY1NzUyQzk0RTkzRDUyODBCRDcwOEYwMTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpWBDVgYxKgnGv0f8/cO+xrU3S
42LJ2kmI6D3kD9217mHa/HTaU4y4GqTcXHE2vYjAr6N0LTaOsR3ClVyjmWjocJH4
Y47T66SnNRFk50gUyoAnBZaLWYm8uKDvpmAD2foR8sONkSMrVsi0fMAXfnCLlUUq
cK94UPtcCXSv8EpxcZ1q+1ThELvrpBAIwv6u5OU80UvLfo7nr6dVvGPn8781ynmI
xFC3ADirJ+JXVuRJzgUivrfGTY+R+v21PfNWBZZnU6pmbOAR7gHOqqoj9QLGdzQK
idT+SzQ8tLnsPFR+rkGiBkCqOkZuxKxF2FOAmpoAk8Jb0odjBUaseTq+MiwLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUm6szsadjFLZXUslOk9UoC9cI8BYwHwYDVR0j
BBgwFoAURqfIcCxUf8QiEAJ90lRXEDGuBdwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZTYwMDQ4Ni05NzgwLTQzZWUtYmIyZC1iODExMDk0YTE0NDUvMC80NkE3Qzg3MDJD
NTQ3RkM0MjIxMDAyN0REMjU0NTcxMDMxQUUwNURDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDZBN0M4NzAyQzU0N0ZDNDIyMTAwMjdERDI1NDU3MTAzMUFF
MDVEQy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RlNjAwNDg2LTk3ODAtNDNlZS1i
YjJkLWI4MTEwOTRhMTQ0NS8wLzMxMzAzMzJlMzEzNjMwMmUzMjMwMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNTM5MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoM0wDQYJ
KoZIhvcNAQELBQADggEBAGg3hIc00Zsj8i5gt2Ys2FwPqVlU7pcOrWTuu1QLtHi1
OE/diUtcks8Y1CAgmjpaB7EBS7kVWUq2Ov/nxJPZYcUwKn3JeodQBzMUW5yZujhR
IPR2ftUnU5cz9ZNL8IQ+rGJXOF9QP/nWV/MTOKw2p/DOy1KOEGTcMbvzprduWZmO
jAJ3g5hm3Pmlr2B0pgDsnQn9uUhKPEhwpy113W+sJeSB08Og3d9t9A2aVqeiDEcJ
X3k2p0dGKploz9M2klH1SHLNblxhCbx/CoLKsrOB+17X+2iq7IYGcW0JIJtgtTvt
3ZwFjGU6V3siwngH/7PJuX4sDybdHl44HPRQktLHhOQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 15:26:45 2024 by rpki-client on console-fra.rpki-client.org