Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231382e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          PgXGk1cCUVoDjWwMlGp8SUqYU9bSo3ZZY87m70n77HE=
Subject key identifier:   59:4F:85:76:B1:DE:C1:50:98:33:02:36:91:62:25:3A:01:F6:73:F5
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       2EC91F687B0AB1042E9E587F828E4ED0CC0D5ABA
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32342d3234203d3e20313337333239.roa
Signing time:             Wed 04 Sep 2024 18:00:02 +0000
ROA not before:           Wed 04 Sep 2024 17:55:02 +0000
ROA not after:            Wed 03 Sep 2025 18:00:02 +0000
asID:                     137329
IP address blocks:        103.106.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:09:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c9:1f:68:7b:0a:b1:04:2e:9e:58:7f:82:8e:4e:d0:cc:0d:5a:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Sep  4 17:55:02 2024 GMT
            Not After : Sep  3 18:00:02 2025 GMT
        Subject: CN=594F8576B1DEC150983302369162253A01F673F5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8d:a0:29:62:78:7c:fa:b9:fc:bd:a5:7d:5c:
                    72:c2:08:be:32:6c:51:0e:4a:83:8e:e7:f8:9d:19:
                    4e:81:56:47:23:06:60:11:5a:cc:35:c9:14:08:e8:
                    f7:11:7a:97:f6:b6:f5:3e:c2:83:fb:ad:6a:85:a1:
                    f7:37:ae:ab:7c:53:03:97:c3:00:e0:44:95:46:37:
                    05:7b:ff:d5:7e:ee:67:2e:e9:68:92:ae:f1:f3:d4:
                    ef:64:8d:ad:e7:7a:94:f8:88:86:65:c1:b6:71:64:
                    0d:fa:3f:dc:80:2f:53:59:45:f9:ca:85:1d:f0:d4:
                    43:eb:f5:51:3f:a1:e2:8c:92:c2:57:68:da:ff:79:
                    d3:3b:5b:cf:cc:86:9d:1e:31:f1:44:28:3d:76:72:
                    71:6e:52:2a:52:7d:ee:5c:1f:aa:cb:9d:6b:22:e7:
                    5d:bb:12:d4:a9:86:01:0d:07:38:53:e9:7b:fc:95:
                    e6:e1:ff:fd:b7:f6:56:26:d3:af:af:61:5f:1e:51:
                    e2:55:1a:05:3d:07:94:c4:bc:5a:36:c1:52:68:04:
                    09:22:fb:f0:7c:46:42:fb:81:c6:42:30:8c:f6:bb:
                    7f:7a:f7:81:34:a6:46:76:60:0c:34:91:53:6d:f8:
                    68:1a:db:1b:8d:3b:7b:93:ce:77:65:25:55:54:78:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4F:85:76:B1:DE:C1:50:98:33:02:36:91:62:25:3A:01:F6:73:F5
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231382e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:9c:41:49:6d:60:73:cd:00:fe:42:11:4a:c7:b9:bc:a7:7d:
         bb:3d:49:92:e9:95:8e:d8:ca:be:a3:e5:4a:f0:b4:66:ae:a2:
         91:94:37:8a:79:4e:40:45:77:66:12:02:54:36:07:17:ce:e8:
         dc:44:ba:f9:d5:9f:11:9f:07:40:75:e8:19:e2:46:47:84:76:
         7e:58:95:fb:fd:32:4b:fa:dd:86:18:73:c8:27:8d:4f:ac:e9:
         59:dc:e4:da:62:2a:c5:09:22:9d:94:2b:50:37:8b:ef:3d:58:
         e8:92:38:61:8e:af:ff:66:d7:87:27:40:2c:5a:9b:f2:3a:12:
         8b:73:d1:ad:ab:7c:c6:7d:71:0f:78:3e:56:e4:16:1a:a9:0d:
         51:fe:d4:71:b3:6e:f1:11:15:3a:f1:25:16:5f:a0:75:1c:e2:
         ea:e9:23:94:81:38:b2:6f:cc:b7:13:58:56:27:f5:ce:c9:98:
         4b:39:3f:c8:26:e7:fb:69:9e:33:6b:d2:0d:e6:d2:bd:b8:65:
         2a:65:07:f3:94:02:98:98:17:62:93:33:74:67:f0:c9:39:01:
         cd:c6:de:3d:5c:e1:d0:1f:ac:45:f5:d6:05:ad:bb:4d:90:08:
         7d:e0:06:ba:52:72:20:59:50:67:84:d3:e1:4c:b7:1b:f1:30:
         29:c3:8a:76
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIULskfaHsKsQQunlh/go5O0MwNWrowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yNDA5MDQxNzU1MDJaFw0yNTA5MDMxODAwMDJaMDMxMTAvBgNV
BAMTKDU5NEY4NTc2QjFERUMxNTA5ODMzMDIzNjkxNjIyNTNBMDFGNjczRjUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFjaApYnh8+rn8vaV9XHLCCL4y
bFEOSoOO5/idGU6BVkcjBmARWsw1yRQI6PcRepf2tvU+woP7rWqFofc3rqt8UwOX
wwDgRJVGNwV7/9V+7mcu6WiSrvHz1O9kja3nepT4iIZlwbZxZA36P9yAL1NZRfnK
hR3w1EPr9VE/oeKMksJXaNr/edM7W8/Mhp0eMfFEKD12cnFuUipSfe5cH6rLnWsi
5127EtSphgENBzhT6Xv8lebh//239lYm06+vYV8eUeJVGgU9B5TEvFo2wVJoBAki
+/B8RkL7gcZCMIz2u39694E0pkZ2YAw0kVNt+Gga2xuNO3uTzndlJVVUeKjxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUWU+FdrHewVCYMwI2kWIlOgH2c/UwHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMxMzAzMzJlMzEzMDM2MmUzMjMxMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnatowDQYJ
KoZIhvcNAQELBQADggEBAJqcQUltYHPNAP5CEUrHubynfbs9SZLplY7Yyr6j5Urw
tGauopGUN4p5TkBFd2YSAlQ2BxfO6NxEuvnVnxGfB0B16BniRkeEdn5Ylfv9Mkv6
3YYYc8gnjU+s6Vnc5NpiKsUJIp2UK1A3i+89WOiSOGGOr/9m14cnQCxam/I6Eotz
0a2rfMZ9cQ94PlbkFhqpDVH+1HGzbvERFTrxJRZfoHUc4urpI5SBOLJvzLcTWFYn
9c7JmEs5P8gm5/tpnjNr0g3m0r24ZSplB/OUApiYF2KTM3Rn8Mk5Ac3G3j1c4dAf
rEX11gWtu02QCH3gBrpSciBZUGeE0+FMtxvxMCnDinY=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org