Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa
File:                     3130332e3231302e322e302f32342d3234203d3e20313530393935.roa (raw, json)
Hash identifier:          hIlg+Qt1QESY9Y8aeztegkZN8iCL71JNX4sa7hGChZk=
Subject key identifier:   76:83:2C:7D:D2:6D:C1:2C:14:C3:91:F7:D7:43:A3:66:D8:72:90:BF
Certificate issuer:       /CN=C619643EEB518333DAE2A79933BEB1320C89CA87
Certificate serial:       7751AF1DC76EF7980902388928F85C924141CC80
Authority key identifier: C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa
Signing time:             Tue 22 Oct 2024 17:48:14 +0000
ROA not before:           Tue 22 Oct 2024 17:43:14 +0000
ROA not after:            Tue 21 Oct 2025 17:48:14 +0000
asID:                     150995
IP address blocks:        103.210.2.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl
                          rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 12:36:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:51:af:1d:c7:6e:f7:98:09:02:38:89:28:f8:5c:92:41:41:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C619643EEB518333DAE2A79933BEB1320C89CA87
        Validity
            Not Before: Oct 22 17:43:14 2024 GMT
            Not After : Oct 21 17:48:14 2025 GMT
        Subject: CN=76832C7DD26DC12C14C391F7D743A366D87290BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:80:d2:16:fc:4c:81:71:63:da:b9:08:80:a0:
                    91:27:a8:84:f0:ff:f2:10:e6:af:cd:bc:1f:3b:08:
                    ff:a4:c4:18:46:49:84:58:ac:63:47:ae:59:f5:eb:
                    31:1b:ed:81:6c:dd:16:93:a9:cb:13:b6:97:5f:f1:
                    44:4c:f2:53:83:96:3a:db:f9:43:ab:58:07:4a:35:
                    2d:c5:09:35:56:01:e5:3d:ec:c7:62:f4:82:95:39:
                    b1:0f:f3:d4:f6:a8:2d:65:1e:20:a3:08:dc:f1:8b:
                    7c:20:69:55:25:e3:5e:0e:c5:e1:36:ff:4e:74:2d:
                    8d:7e:84:00:e5:d5:ee:e5:ed:d6:a2:f4:78:78:74:
                    63:91:32:fe:ed:6b:18:ee:88:80:b2:57:c0:e4:39:
                    ec:5a:41:06:12:f4:a1:f6:fe:9b:51:14:17:1f:c6:
                    51:45:8a:95:8f:a8:b3:13:7f:80:74:e1:71:cb:86:
                    c2:72:7a:a9:8d:c9:f3:06:a7:56:62:c1:c3:95:a1:
                    2a:ac:5b:26:00:0f:50:8c:13:e2:9e:2f:37:13:0a:
                    de:f1:2c:58:59:c0:6b:e8:7a:17:12:c4:f5:c7:3a:
                    ec:e0:5f:f0:a2:4f:d9:13:c3:d2:3b:77:5b:af:95:
                    ca:ac:66:74:2c:19:b2:e8:7e:8e:4d:f9:96:06:a3:
                    df:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:83:2C:7D:D2:6D:C1:2C:14:C3:91:F7:D7:43:A3:66:D8:72:90:BF
            X509v3 Authority Key Identifier:
                keyid:C6:19:64:3E:EB:51:83:33:DA:E2:A7:99:33:BE:B1:32:0C:89:CA:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/C619643EEB518333DAE2A79933BEB1320C89CA87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C619643EEB518333DAE2A79933BEB1320C89CA87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dfc30c71-df2d-4fc7-b435-7511df287a6b/0/3130332e3231302e322e302f32342d3234203d3e20313530393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.210.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a9:6b:a0:e3:cd:e0:a9:df:5b:37:69:96:52:4d:bb:88:86:c2:
         66:36:31:f0:f7:3c:e5:4e:43:08:97:71:d6:ba:be:a6:c3:c5:
         18:4b:6a:71:d1:4c:1b:c1:01:c1:b1:17:09:bf:d7:25:2c:a5:
         8e:47:30:7f:f0:e8:85:5d:98:d9:28:ce:19:2b:f8:bc:c6:e1:
         1b:30:72:66:32:0d:b8:78:d2:58:7b:c6:d5:39:6e:49:ba:fd:
         60:49:67:74:65:5c:48:c2:4e:5f:3e:4c:b2:d6:c5:7a:cf:f5:
         41:61:81:1a:69:83:ad:a9:94:79:20:81:ed:a1:ac:72:4c:8d:
         39:9a:ba:94:e7:90:dd:e0:4b:af:37:e4:20:a5:79:21:84:4d:
         88:ec:e4:0c:23:34:c6:ef:a1:09:e5:00:5e:84:5c:49:d6:dc:
         0b:43:c4:9c:fc:09:fb:53:be:e5:c3:fe:b3:ac:6b:1f:89:d7:
         cd:8f:e5:a3:87:e8:52:5a:85:f7:3e:a4:90:ca:d4:04:43:62:
         c3:3d:12:90:80:f6:bf:e7:57:59:13:5a:dc:c4:67:4c:0d:62:
         ad:63:73:ca:fa:a4:17:5d:b5:62:04:8c:e3:2e:7c:64:60:1d:
         f8:1b:01:ee:81:87:1d:6e:3c:04:9c:2a:e0:67:27:bf:9c:30:
         b1:15:a5:08
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUd1GvHcdu95gJAjiJKPhckkFBzIAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIw
Qzg5Q0E4NzAeFw0yNDEwMjIxNzQzMTRaFw0yNTEwMjExNzQ4MTRaMDMxMTAvBgNV
BAMTKDc2ODMyQzdERDI2REMxMkMxNEMzOTFGN0Q3NDNBMzY2RDg3MjkwQkYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqgNIW/EyBcWPauQiAoJEnqITw
//IQ5q/NvB87CP+kxBhGSYRYrGNHrln16zEb7YFs3RaTqcsTtpdf8URM8lODljrb
+UOrWAdKNS3FCTVWAeU97Mdi9IKVObEP89T2qC1lHiCjCNzxi3wgaVUl414OxeE2
/050LY1+hADl1e7l7dai9Hh4dGORMv7taxjuiICyV8DkOexaQQYS9KH2/ptRFBcf
xlFFipWPqLMTf4B04XHLhsJyeqmNyfMGp1ZiwcOVoSqsWyYAD1CME+KeLzcTCt7x
LFhZwGvoehcSxPXHOuzgX/CiT9kTw9I7d1uvlcqsZnQsGbLofo5N+ZYGo99lAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUdoMsfdJtwSwUw5H310OjZthykL8wHwYDVR0j
BBgwFoAUxhlkPutRgzPa4qeZM76xMgyJyocwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
ZmMzMGM3MS1kZjJkLTRmYzctYjQzNS03NTExZGYyODdhNmIvMC9DNjE5NjQzRUVC
NTE4MzMzREFFMkE3OTkzM0JFQjEzMjBDODlDQTg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzYxOTY0M0VFQjUxODMzM0RBRTJBNzk5MzNCRUIxMzIwQzg5
Q0E4Ny5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RmYzMwYzcxLWRmMmQtNGZjNy1i
NDM1LTc1MTFkZjI4N2E2Yi8wLzMxMzAzMzJlMzIzMTMwMmUzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMDM5MzkzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGfSAjANBgkqhkiG
9w0BAQsFAAOCAQEAqWug483gqd9bN2mWUk27iIbCZjYx8Pc85U5DCJdx1rq+psPF
GEtqcdFMG8EBwbEXCb/XJSyljkcwf/DohV2Y2SjOGSv4vMbhGzByZjINuHjSWHvG
1TluSbr9YElndGVcSMJOXz5MstbFes/1QWGBGmmDramUeSCB7aGsckyNOZq6lOeQ
3eBLrzfkIKV5IYRNiOzkDCM0xu+hCeUAXoRcSdbcC0PEnPwJ+1O+5cP+s6xrH4nX
zY/lo4foUlqF9z6kkMrUBENiwz0SkID2v+dXWRNa3MRnTA1irWNzyvqkF121YgSM
4y58ZGAd+BsB7oGHHW48BJwq4Gcnv5wwsRWlCA==
-----END CERTIFICATE-----
Generated at Mon Nov 25 13:14:35 2024 by rpki-client on console-ams.rpki-client.org