Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa
File:                     3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa (raw, json)
Hash identifier:          cSLwYh4QbV22B4UfJqqcdWDUMdUFFzDrQikKVuYxGhE=
Subject key identifier:   B6:04:C5:77:73:ED:7E:18:06:68:E6:70:E6:0A:DC:9B:83:C3:3F:2E
Certificate issuer:       /CN=473225269441779F80E443B1EA516CC99E4ED4DA
Certificate serial:       74085F11B7A2741EE72FA6E49AE289D2692307BC
Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa
Signing time:             Fri 24 May 2024 17:00:02 +0000
ROA not before:           Fri 24 May 2024 16:55:02 +0000
ROA not after:            Fri 23 May 2025 17:00:02 +0000
asID:                     141909
IP address blocks:        103.121.186.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl
                          rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:08:5f:11:b7:a2:74:1e:e7:2f:a6:e4:9a:e2:89:d2:69:23:07:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA
        Validity
            Not Before: May 24 16:55:02 2024 GMT
            Not After : May 23 17:00:02 2025 GMT
        Subject: CN=B604C57773ED7E180668E670E60ADC9B83C33F2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:30:65:b0:47:e2:ad:a2:0d:56:94:ae:71:cf:
                    6a:87:26:ea:cd:06:71:69:51:4e:76:40:a8:3d:2f:
                    dc:ef:c8:bb:2a:61:ef:d5:95:2f:e7:00:a8:60:9a:
                    6b:91:2f:6e:de:26:8f:e1:3a:27:dc:ca:4d:10:6b:
                    1f:0c:ca:a2:30:ff:f5:74:0a:98:ca:84:a5:52:ae:
                    f2:e2:7a:c5:15:c5:d0:18:51:73:f9:6c:56:fb:8e:
                    7b:de:b4:01:6f:0f:08:39:1a:10:79:dc:16:47:d6:
                    9e:f9:eb:47:91:66:d8:b3:0b:97:e2:90:7d:ed:b1:
                    b1:99:8f:f9:c5:0f:20:a1:ad:08:8e:5b:51:b1:c0:
                    5e:c4:b6:55:ab:8a:cf:67:27:61:4d:b8:ed:fd:12:
                    11:39:fe:2d:6b:fb:e2:f4:cb:bc:4e:c4:08:68:78:
                    b3:bd:d5:0f:88:9f:b0:f1:32:0d:82:62:a9:5c:04:
                    7d:e3:ed:f4:06:2f:b6:8b:d7:e0:5f:5c:73:5d:80:
                    8e:f3:0e:80:6e:d6:90:0f:fd:d1:d9:06:0b:4e:3f:
                    18:70:48:df:92:f9:8e:0b:86:c6:d8:98:9c:ad:93:
                    ef:eb:b2:6c:77:3d:6e:47:51:4d:18:3a:22:a1:48:
                    81:09:e9:bd:26:a5:1e:a3:00:63:46:8a:00:42:de:
                    f2:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:04:C5:77:73:ED:7E:18:06:68:E6:70:E6:0A:DC:9B:83:C3:3F:2E
            X509v3 Authority Key Identifier:
                keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32342d3234203d3e20313431393039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.186.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:8b:88:c8:25:1c:a8:c4:38:6a:09:ed:2e:29:98:60:bf:57:
         81:c5:bf:c4:bd:08:05:91:fb:8b:59:d2:ce:43:28:d3:2a:16:
         51:d5:84:7d:fd:0c:7b:79:76:e4:fb:0f:8f:10:f3:cc:66:ae:
         95:8e:7c:fa:50:8d:4a:c2:f9:bd:c5:68:d0:ab:9f:65:92:2f:
         c3:32:ac:b8:c0:2e:42:4c:38:7b:9f:5b:07:cb:12:80:e3:20:
         32:68:41:b2:6d:35:81:ea:57:f6:f0:14:d8:86:32:15:53:c4:
         9c:3c:88:60:d3:69:00:7f:ee:3a:f6:ec:bf:0f:7a:aa:91:dc:
         f2:24:f3:c1:05:b4:fc:38:13:04:9d:83:9e:1d:25:99:33:c3:
         fb:1a:cd:70:7a:c3:40:8b:f0:bd:a2:9e:70:bc:4f:f4:e5:0b:
         49:44:54:9f:91:21:a0:13:6c:af:4e:55:69:7b:d2:e8:e9:8e:
         6b:d5:8a:8b:cb:0b:91:d5:0a:c9:9f:ec:b9:f5:94:6c:04:07:
         79:b9:74:45:0b:28:4a:1a:ed:11:03:7e:ab:a5:2c:f3:b9:8d:
         9c:fe:b3:16:ec:3d:6c:d7:52:0e:18:83:77:00:78:b6:d3:d1:
         52:c9:59:fd:26:26:ee:0a:df:00:17:92:0f:54:be:d5:95:ef:
         1e:01:72:26
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdAhfEbeidB7nL6bkmuKJ0mkjB7wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5
RTRFRDREQTAeFw0yNDA1MjQxNjU1MDJaFw0yNTA1MjMxNzAwMDJaMDMxMTAvBgNV
BAMTKEI2MDRDNTc3NzNFRDdFMTgwNjY4RTY3MEU2MEFEQzlCODNDMzNGMkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMGWwR+Ktog1WlK5xz2qHJurN
BnFpUU52QKg9L9zvyLsqYe/VlS/nAKhgmmuRL27eJo/hOifcyk0Qax8MyqIw//V0
CpjKhKVSrvLiesUVxdAYUXP5bFb7jnvetAFvDwg5GhB53BZH1p7560eRZtizC5fi
kH3tsbGZj/nFDyChrQiOW1GxwF7EtlWris9nJ2FNuO39EhE5/i1r++L0y7xOxAho
eLO91Q+In7DxMg2CYqlcBH3j7fQGL7aL1+BfXHNdgI7zDoBu1pAP/dHZBgtOPxhw
SN+S+Y4LhsbYmJytk+/rsmx3PW5HUU0YOiKhSIEJ6b0mpR6jAGNGigBC3vJpAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUtgTFd3PtfhgGaOZw5grcm4PDPy4wHwYDVR0j
BBgwFoAURzIlJpRBd5+A5EOx6lFsyZ5O1NowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MDYyMGNmYy1iNDZjLTQ1N2MtOWZkZS0yOTc3MTBjNTQ2YTkvMC80NzMyMjUyNjk0
NDE3NzlGODBFNDQzQjFFQTUxNkNDOTlFNEVENERBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDczMjI1MjY5NDQxNzc5RjgwRTQ0M0IxRUE1MTZDQzk5RTRF
RDREQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UwNjIwY2ZjLWI0NmMtNDU3Yy05
ZmRlLTI5NzcxMGM1NDZhOS8wLzMxMzAzMzJlMzEzMjMxMmUzMTM4MzYyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzOTMwMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnebowDQYJ
KoZIhvcNAQELBQADggEBALaLiMglHKjEOGoJ7S4pmGC/V4HFv8S9CAWR+4tZ0s5D
KNMqFlHVhH39DHt5duT7D48Q88xmrpWOfPpQjUrC+b3FaNCrn2WSL8MyrLjALkJM
OHufWwfLEoDjIDJoQbJtNYHqV/bwFNiGMhVTxJw8iGDTaQB/7jr27L8PeqqR3PIk
88EFtPw4EwSdg54dJZkzw/sazXB6w0CL8L2innC8T/TlC0lEVJ+RIaATbK9OVWl7
0ujpjmvViovLC5HVCsmf7Ln1lGwEB3m5dEULKEoa7REDfqulLPO5jZz+sxbsPWzX
Ug4Yg3cAeLbT0VLJWf0mJu4K3wAXkg9UvtWV7x4BciY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org