Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa
File:                     3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa (raw, json)
Hash identifier:          5GyipP3FwReyTXGYUXTvVs8r1nnHTqHu+URDCISh4qI=
Subject key identifier:   B3:47:E6:61:C8:A3:C6:D8:A3:36:A2:15:79:79:22:B4:FF:D0:41:83
Certificate issuer:       /CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
Certificate serial:       0C4A4BB3885BBDD84AF4ABA03A2FC44B80297289
Authority key identifier: E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa
Signing time:             Wed 13 Dec 2023 11:00:01 +0000
ROA not before:           Wed 13 Dec 2023 10:55:01 +0000
ROA not after:            Wed 11 Dec 2024 11:00:01 +0000
asID:                     140012
IP address blocks:        103.148.29.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl
                          rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:4b:b3:88:5b:bd:d8:4a:f4:ab:a0:3a:2f:c4:4b:80:29:72:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E17357E41F3644D13EBC7C4B25B8A2936B91165A
        Validity
            Not Before: Dec 13 10:55:01 2023 GMT
            Not After : Dec 11 11:00:01 2024 GMT
        Subject: CN=B347E661C8A3C6D8A336A215797922B4FFD04183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ef:cf:e7:63:2d:2e:dd:f1:11:d8:0b:83:eb:
                    7c:fa:d2:a4:62:df:04:b6:e6:d1:b9:53:2c:9e:31:
                    93:41:cf:c9:e2:00:f0:f3:d2:29:1f:39:7d:8f:51:
                    6c:87:1c:45:fa:41:8f:c5:d2:11:30:38:2c:18:87:
                    9e:0c:d3:99:a0:a3:c0:f0:d4:c4:63:93:b4:77:5e:
                    ca:09:7e:62:7b:5c:9e:38:1e:95:0f:fa:60:7b:e2:
                    08:a5:51:8a:b1:06:17:7b:8d:d1:16:e9:37:ad:0c:
                    5e:6c:9d:a4:e9:78:67:7f:5c:9a:28:ac:92:20:78:
                    11:d2:49:ee:3f:5b:c1:76:fd:99:87:ba:e3:ca:fa:
                    c4:09:8d:b3:a1:43:5e:04:fe:86:e1:4a:26:a0:15:
                    d7:7c:ca:d7:76:ba:62:8f:9a:e6:b0:46:fe:61:cf:
                    38:ab:7f:20:1a:9b:17:66:fb:1a:4b:9e:e8:03:cc:
                    8a:80:40:ed:11:45:f7:8a:3f:5d:74:9e:57:b4:72:
                    a5:12:d6:9a:ca:a3:cb:5a:71:13:1d:7a:70:1c:8e:
                    24:a9:0c:56:be:0b:90:11:05:13:70:1a:55:a2:bd:
                    20:af:a2:35:5d:c9:03:5a:a0:4b:fe:86:69:a5:d0:
                    08:99:09:92:ba:2c:38:a4:a5:17:55:1d:11:83:7a:
                    31:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:47:E6:61:C8:A3:C6:D8:A3:36:A2:15:79:79:22:B4:FF:D0:41:83
            X509v3 Authority Key Identifier:
                keyid:E1:73:57:E4:1F:36:44:D1:3E:BC:7C:4B:25:B8:A2:93:6B:91:16:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/E17357E41F3644D13EBC7C4B25B8A2936B91165A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E17357E41F3644D13EBC7C4B25B8A2936B91165A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2ac9e63-9890-422e-88dc-7cb6ddac22fa/0/3130332e3134382e32392e302f32342d3234203d3e20313430303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:f4:30:68:11:3f:a1:85:ea:10:f2:3b:a2:4b:20:6f:3d:22:
         c8:67:46:22:a7:2f:3f:1f:7b:ae:6a:e1:c5:5f:ce:8a:4a:f3:
         f0:2c:b6:2d:87:e9:77:b7:ac:01:33:1f:79:d2:ed:dd:81:d5:
         5d:8d:0d:e9:d8:f5:0e:dc:1f:25:81:04:d0:bb:91:09:5a:1b:
         37:fd:e8:05:90:56:2a:8f:e3:95:cf:23:42:17:22:ae:67:4d:
         a6:02:14:cd:6a:ec:a4:ec:e0:d8:db:57:00:3c:03:2d:33:02:
         a3:b1:b3:7e:eb:98:0e:6f:7f:e9:7f:f7:d2:48:d8:dd:9b:35:
         29:e9:e9:dc:2b:9d:3b:b0:b2:78:11:ae:d0:e9:67:c3:99:c3:
         4d:80:67:6d:ed:c4:b3:7f:4a:e0:e1:46:59:2d:30:96:6d:4e:
         4f:bf:a6:53:53:2b:af:f3:79:60:bf:59:2a:1c:04:f6:01:6a:
         0b:90:71:06:74:43:bb:57:e4:9c:de:4b:d6:4c:83:fd:5f:89:
         35:57:2b:2b:7e:f2:42:17:28:16:63:b4:c6:60:81:26:30:8b:
         c3:0e:c1:3a:30:2c:6f:30:b2:72:53:19:cf:a1:8a:22:48:3b:
         3d:85:99:ad:08:4f:ed:2b:18:43:96:b6:51:27:54:5b:3e:6f:
         ca:6c:e8:26
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDEpLs4hbvdhK9KugOi/ES4ApcokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2
QjkxMTY1QTAeFw0yMzEyMTMxMDU1MDFaFw0yNDEyMTExMTAwMDFaMDMxMTAvBgNV
BAMTKEIzNDdFNjYxQzhBM0M2RDhBMzM2QTIxNTc5NzkyMkI0RkZEMDQxODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC478/nYy0u3fER2AuD63z60qRi
3wS25tG5UyyeMZNBz8niAPDz0ikfOX2PUWyHHEX6QY/F0hEwOCwYh54M05mgo8Dw
1MRjk7R3XsoJfmJ7XJ44HpUP+mB74gilUYqxBhd7jdEW6TetDF5snaTpeGd/XJoo
rJIgeBHSSe4/W8F2/ZmHuuPK+sQJjbOhQ14E/obhSiagFdd8ytd2umKPmuawRv5h
zzirfyAamxdm+xpLnugDzIqAQO0RRfeKP110nle0cqUS1prKo8tacRMdenAcjiSp
DFa+C5ARBRNwGlWivSCvojVdyQNaoEv+hmml0AiZCZK6LDikpRdVHRGDejENAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUs0fmYcijxtijNqIVeXkitP/QQYMwHwYDVR0j
BBgwFoAU4XNX5B82RNE+vHxLJbiik2uRFlowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
MmFjOWU2My05ODkwLTQyMmUtODhkYy03Y2I2ZGRhYzIyZmEvMC9FMTczNTdFNDFG
MzY0NEQxM0VCQzdDNEIyNUI4QTI5MzZCOTExNjVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTE3MzU3RTQxRjM2NDREMTNFQkM3QzRCMjVCOEEyOTM2Qjkx
MTY1QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2UyYWM5ZTYzLTk4OTAtNDIyZS04
OGRjLTdjYjZkZGFjMjJmYS8wLzMxMzAzMzJlMzEzNDM4MmUzMjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDMwMzAzMTMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ5QdMA0GCSqG
SIb3DQEBCwUAA4IBAQDG9DBoET+hheoQ8juiSyBvPSLIZ0Yipy8/H3uuauHFX86K
SvPwLLYth+l3t6wBMx950u3dgdVdjQ3p2PUO3B8lgQTQu5EJWhs3/egFkFYqj+OV
zyNCFyKuZ02mAhTNauyk7ODY21cAPAMtMwKjsbN+65gOb3/pf/fSSNjdmzUp6enc
K507sLJ4Ea7Q6WfDmcNNgGdt7cSzf0rg4UZZLTCWbU5Pv6ZTUyuv83lgv1kqHAT2
AWoLkHEGdEO7V+Sc3kvWTIP9X4k1VysrfvJCFygWY7TGYIEmMIvDDsE6MCxvMLJy
UxnPoYoiSDs9hZmtCE/tKxhDlrZRJ1RbPm/KbOgm
-----END CERTIFICATE-----
Generated at Sat Jun 22 14:21:51 2024 by rpki-client on console-ams.rpki-client.org