Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa
File:                     3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa (raw, json)
Hash identifier:          P/ZsADScTUGs/l/zKbOoXv1/4i2vqpYRBFViR/MDzcM=
Subject key identifier:   7E:A5:8F:B5:55:BB:41:51:24:29:47:50:5A:C9:14:CE:14:5D:F5:6A
Certificate issuer:       /CN=19093F7761A9E337D03405604750BFD4ADC2121E
Certificate serial:       48128643BD8103454A1C099DA2BBDA939692925B
Authority key identifier: 19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa
Signing time:             Wed 04 Oct 2023 18:00:01 +0000
ROA not before:           Wed 04 Oct 2023 17:55:01 +0000
ROA not after:            Wed 02 Oct 2024 18:00:01 +0000
asID:                     137329
IP address blocks:        103.106.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl
                          rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:12:86:43:bd:81:03:45:4a:1c:09:9d:a2:bb:da:93:96:92:92:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19093F7761A9E337D03405604750BFD4ADC2121E
        Validity
            Not Before: Oct  4 17:55:01 2023 GMT
            Not After : Oct  2 18:00:01 2024 GMT
        Subject: CN=7EA58FB555BB4151242947505AC914CE145DF56A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a3:8c:04:fc:f4:60:56:81:dd:67:5b:7b:20:
                    53:5a:8d:39:3b:57:8b:a9:ed:2c:ad:cc:62:9c:0d:
                    1c:b3:c2:bf:63:2a:3f:61:66:1f:5a:74:6a:d7:67:
                    f8:8d:48:39:c9:44:5a:4b:ad:8d:60:3b:e7:9e:41:
                    15:f9:99:3c:4d:d4:30:51:4f:81:e4:4c:e1:3a:83:
                    24:ba:f6:01:87:6a:84:ad:c3:78:2e:ba:54:75:45:
                    e9:93:c2:8c:f6:07:99:8d:e4:4c:de:20:ff:5c:c9:
                    a1:3f:e7:69:a6:f1:20:db:72:c3:b4:e0:0a:9a:b5:
                    0b:20:14:38:4d:72:7b:b5:d2:66:5f:c4:a1:61:2a:
                    8e:24:29:b5:df:80:8d:a4:5e:22:30:87:ae:2e:21:
                    9c:7a:d1:56:44:45:a0:10:3d:e1:fd:05:1b:75:6c:
                    3e:10:56:bd:ed:31:03:73:4c:cb:1c:f5:9b:db:27:
                    cd:da:7b:4e:49:ef:98:40:62:62:ab:3d:31:f9:b5:
                    e5:a9:20:4f:8d:d4:2c:0f:a0:6a:67:a4:3e:09:17:
                    7f:1a:40:4f:fc:37:bc:5e:2e:ce:cc:b1:80:eb:66:
                    52:02:28:e3:09:50:e7:5e:89:7e:22:7a:9f:29:f6:
                    dd:9c:35:8d:f1:fa:7d:53:ac:50:0f:63:01:7e:12:
                    05:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A5:8F:B5:55:BB:41:51:24:29:47:50:5A:C9:14:CE:14:5D:F5:6A
            X509v3 Authority Key Identifier:
                keyid:19:09:3F:77:61:A9:E3:37:D0:34:05:60:47:50:BF:D4:AD:C2:12:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/19093F7761A9E337D03405604750BFD4ADC2121E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/19093F7761A9E337D03405604750BFD4ADC2121E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e17bd502-42c2-400d-a2ad-d1754365a45d/0/3130332e3130362e3231392e302f32342d3234203d3e20313337333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.106.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ae:40:0c:39:ee:5c:0b:8a:a0:a4:1d:e0:62:d5:4f:4e:75:9e:
         82:ac:4a:e7:0a:61:4d:bf:f4:e2:98:70:30:40:1b:2f:d5:a4:
         b5:c3:7e:1b:b2:ec:a5:4f:f2:8a:c9:81:ae:58:49:e9:a6:7b:
         55:23:9c:67:9d:58:f0:20:95:f4:b1:76:cf:d3:8e:ab:a8:dc:
         4c:71:cd:57:6a:ed:8f:42:80:f4:c6:f1:0a:b7:38:72:52:31:
         72:fa:1b:39:2a:70:93:26:ef:c5:2c:b8:ec:6d:97:57:31:ad:
         6c:d8:7c:44:98:67:b5:47:19:3d:5e:8d:97:42:ce:cc:69:9a:
         fe:fb:7e:61:34:08:e8:8a:ab:95:55:1b:2c:8c:b5:0b:91:9b:
         75:ff:13:e1:b1:44:19:29:be:94:c2:c9:81:0b:46:0f:91:eb:
         88:25:38:91:04:5a:c5:aa:c4:e7:0e:72:ea:ed:a9:81:8b:8a:
         e8:ef:ee:a9:2e:9a:3d:38:6e:ff:91:e7:eb:8f:b9:ca:9f:9e:
         b8:9f:23:c5:a8:fc:8b:b8:83:bf:90:23:ae:2e:39:6b:6c:e8:
         c2:ae:e6:f8:4a:0e:56:3d:f6:a8:1e:55:14:a1:98:25:9e:4b:
         6d:d3:09:9b:70:dd:6b:5e:11:2c:c7:0c:04:3b:dc:74:de:2e:
         ea:ef:97:bb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSBKGQ72BA0VKHAmdorvak5aSklswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRB
REMyMTIxRTAeFw0yMzEwMDQxNzU1MDFaFw0yNDEwMDIxODAwMDFaMDMxMTAvBgNV
BAMTKDdFQTU4RkI1NTVCQjQxNTEyNDI5NDc1MDVBQzkxNENFMTQ1REY1NkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMo4wE/PRgVoHdZ1t7IFNajTk7
V4up7SytzGKcDRyzwr9jKj9hZh9adGrXZ/iNSDnJRFpLrY1gO+eeQRX5mTxN1DBR
T4HkTOE6gyS69gGHaoStw3guulR1RemTwoz2B5mN5EzeIP9cyaE/52mm8SDbcsO0
4AqatQsgFDhNcnu10mZfxKFhKo4kKbXfgI2kXiIwh64uIZx60VZERaAQPeH9BRt1
bD4QVr3tMQNzTMsc9ZvbJ83ae05J75hAYmKrPTH5teWpIE+N1CwPoGpnpD4JF38a
QE/8N7xeLs7MsYDrZlICKOMJUOdeiX4iep8p9t2cNY3x+n1TrFAPYwF+EgX5AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUfqWPtVW7QVEkKUdQWskUzhRd9WowHwYDVR0j
BBgwFoAUGQk/d2Gp4zfQNAVgR1C/1K3CEh4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MTdiZDUwMi00MmMyLTQwMGQtYTJhZC1kMTc1NDM2NWE0NWQvMC8xOTA5M0Y3NzYx
QTlFMzM3RDAzNDA1NjA0NzUwQkZENEFEQzIxMjFFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTkwOTNGNzc2MUE5RTMzN0QwMzQwNTYwNDc1MEJGRDRBREMy
MTIxRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UxN2JkNTAyLTQyYzItNDAwZC1h
MmFkLWQxNzU0MzY1YTQ1ZC8wLzMxMzAzMzJlMzEzMDM2MmUzMjMxMzkyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMyMzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnatswDQYJ
KoZIhvcNAQELBQADggEBAK5ADDnuXAuKoKQd4GLVT051noKsSucKYU2/9OKYcDBA
Gy/VpLXDfhuy7KVP8orJga5YSemme1UjnGedWPAglfSxds/Tjquo3ExxzVdq7Y9C
gPTG8Qq3OHJSMXL6GzkqcJMm78UsuOxtl1cxrWzYfESYZ7VHGT1ejZdCzsxpmv77
fmE0COiKq5VVGyyMtQuRm3X/E+GxRBkpvpTCyYELRg+R64glOJEEWsWqxOcOcurt
qYGLiujv7qkumj04bv+R5+uPucqfnrifI8Wo/Iu4g7+QI64uOWts6MKu5vhKDlY9
9qgeVRShmCWeS23TCZtw3WteESzHDAQ73HTeLurvl7s=
-----END CERTIFICATE-----
Generated at Sun Jun 2 04:59:48 2024 by rpki-client on console-fra.rpki-client.org