Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa
File:                     3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa (raw, json)
Hash identifier:          3YXBeTPQt+Blr7tAYuESpihvBFV9JKlNQz4UPnXFX6A=
Subject key identifier:   A9:16:45:FA:BB:35:90:8B:04:DD:F0:64:90:6E:E3:93:15:9F:20:77
Certificate issuer:       /CN=157748842D6BEE36DEE3B1999F10079808FF41C0
Certificate serial:       05B277FC9A0B36E6BF8C6B94CC5CF325E331C9EC
Authority key identifier: 15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa
Signing time:             Sat 12 Oct 2024 06:02:23 +0000
ROA not before:           Sat 12 Oct 2024 05:57:23 +0000
ROA not after:            Sat 11 Oct 2025 06:02:23 +0000
asID:                     140007
IP address blocks:        103.148.196.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl
                          rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b2:77:fc:9a:0b:36:e6:bf:8c:6b:94:cc:5c:f3:25:e3:31:c9:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=157748842D6BEE36DEE3B1999F10079808FF41C0
        Validity
            Not Before: Oct 12 05:57:23 2024 GMT
            Not After : Oct 11 06:02:23 2025 GMT
        Subject: CN=A91645FABB35908B04DDF064906EE393159F2077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:ee:f6:f6:f9:d2:40:25:31:04:28:55:f3:ee:
                    29:42:99:d7:7b:32:b9:c5:85:66:de:fe:89:5c:a2:
                    c5:3b:1b:a6:4b:1f:49:b9:eb:84:6f:7c:f3:c8:48:
                    6f:35:3c:23:92:e6:8b:ee:8a:03:f7:06:bf:19:3a:
                    51:64:21:a7:8e:a3:a1:a9:8d:20:87:86:9c:bf:60:
                    51:d9:27:cf:6e:0d:45:67:6d:3d:77:e3:81:95:ab:
                    e1:b5:fa:c9:df:dd:f7:f5:8c:56:c2:7d:8b:8f:e6:
                    aa:e2:62:c7:09:ce:d2:c5:b6:d7:e0:4d:10:24:89:
                    a2:99:1e:74:da:3d:c1:1c:c5:1c:95:e7:c5:51:bc:
                    59:4a:97:f6:da:50:06:53:44:a2:d8:97:89:6e:31:
                    66:37:0a:c3:ff:af:6e:69:7f:81:23:58:2f:b7:8a:
                    b5:c0:2f:82:9e:94:c2:c3:55:a5:b0:ae:e4:19:e3:
                    af:d2:9a:02:2b:e8:3a:9e:cd:c2:3d:3c:bc:b2:d7:
                    39:2d:44:94:c6:2e:a0:60:ca:6d:73:7a:26:74:24:
                    9c:ee:0a:01:ea:28:38:dc:ab:6c:18:b8:18:75:75:
                    90:b5:9e:fa:8f:fd:3e:a5:b8:51:73:2c:af:24:0a:
                    e1:75:0f:e0:5c:4d:0f:7f:6b:34:4a:3b:c7:8a:f4:
                    19:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:16:45:FA:BB:35:90:8B:04:DD:F0:64:90:6E:E3:93:15:9F:20:77
            X509v3 Authority Key Identifier:
                keyid:15:77:48:84:2D:6B:EE:36:DE:E3:B1:99:9F:10:07:98:08:FF:41:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/157748842D6BEE36DEE3B1999F10079808FF41C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/157748842D6BEE36DEE3B1999F10079808FF41C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e46f5a05-32b5-4d3c-b4e0-abddcf73f5e9/0/3130332e3134382e3139362e302f32332d3234203d3e20313430303037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.196.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:9d:e6:b7:2c:5f:47:df:19:43:7e:47:fb:dc:01:0c:2a:e0:
         2e:0c:d2:71:92:da:5a:ed:e8:ec:13:40:33:4e:84:5d:39:e6:
         0c:7f:7d:0e:67:b9:b1:58:8c:32:b8:84:b6:77:11:2e:43:de:
         ab:2a:f8:a6:82:9b:b1:f3:20:b3:05:ca:dc:7f:ae:ce:0f:ae:
         54:d3:6d:8d:db:23:7c:a6:5d:8c:b0:bc:bb:5d:eb:3f:41:fd:
         4b:bc:6d:9b:4c:7a:d7:5b:36:76:9f:c1:ce:8a:c3:2c:a0:d1:
         03:e9:98:03:9a:7d:59:89:98:65:86:96:c2:48:1d:86:51:d1:
         0a:32:f4:fd:41:2f:ea:4b:98:b8:10:3f:69:44:89:d8:6f:07:
         6d:2f:ed:82:7e:fb:a5:fe:07:ba:13:89:d0:b5:16:08:41:5e:
         52:68:7e:97:5f:a0:19:e6:da:99:59:27:2d:f0:91:56:2d:a9:
         ed:5c:56:50:f9:fb:b8:09:9d:cd:6b:77:9a:8f:89:99:b1:f5:
         59:d1:64:90:74:b2:8d:71:42:3f:8f:44:d7:71:40:0d:90:20:
         89:16:54:85:63:4a:94:c6:30:81:72:a0:7f:2d:b0:45:61:fe:
         68:d0:59:34:66:1e:fd:fc:f9:34:ee:43:ee:63:4d:82:69:43:
         37:9f:94:86
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBbJ3/JoLNua/jGuUzFzzJeMxyewwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgw
OEZGNDFDMDAeFw0yNDEwMTIwNTU3MjNaFw0yNTEwMTEwNjAyMjNaMDMxMTAvBgNV
BAMTKEE5MTY0NUZBQkIzNTkwOEIwNERERjA2NDkwNkVFMzkzMTU5RjIwNzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD07vb2+dJAJTEEKFXz7ilCmdd7
MrnFhWbe/olcosU7G6ZLH0m564RvfPPISG81PCOS5ovuigP3Br8ZOlFkIaeOo6Gp
jSCHhpy/YFHZJ89uDUVnbT1344GVq+G1+snf3ff1jFbCfYuP5qriYscJztLFttfg
TRAkiaKZHnTaPcEcxRyV58VRvFlKl/baUAZTRKLYl4luMWY3CsP/r25pf4EjWC+3
irXAL4KelMLDVaWwruQZ46/SmgIr6DqezcI9PLyy1zktRJTGLqBgym1zeiZ0JJzu
CgHqKDjcq2wYuBh1dZC1nvqP/T6luFFzLK8kCuF1D+BcTQ9/azRKO8eK9BlvAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqRZF+rs1kIsE3fBkkG7jkxWfIHcwHwYDVR0j
BBgwFoAUFXdIhC1r7jbe47GZnxAHmAj/QcAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NDZmNWEwNS0zMmI1LTRkM2MtYjRlMC1hYmRkY2Y3M2Y1ZTkvMC8xNTc3NDg4NDJE
NkJFRTM2REVFM0IxOTk5RjEwMDc5ODA4RkY0MUMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTU3NzQ4ODQyRDZCRUUzNkRFRTNCMTk5OUYxMDA3OTgwOEZG
NDFDMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0NmY1YTA1LTMyYjUtNGQzYy1i
NGUwLWFiZGRjZjczZjVlOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTM5MzYyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzAzMDMwMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlMQwDQYJ
KoZIhvcNAQELBQADggEBAHOd5rcsX0ffGUN+R/vcAQwq4C4M0nGS2lrt6OwTQDNO
hF055gx/fQ5nubFYjDK4hLZ3ES5D3qsq+KaCm7HzILMFytx/rs4PrlTTbY3bI3ym
XYywvLtd6z9B/Uu8bZtMetdbNnafwc6Kwyyg0QPpmAOafVmJmGWGlsJIHYZR0Qoy
9P1BL+pLmLgQP2lEidhvB20v7YJ++6X+B7oTidC1FghBXlJofpdfoBnm2plZJy3w
kVYtqe1cVlD5+7gJnc1rd5qPiZmx9VnRZJB0so1xQj+PRNdxQA2QIIkWVIVjSpTG
MIFyoH8tsEVh/mjQWTRmHv38+TTuQ+5jTYJpQzeflIY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 23:56:43 2024 by rpki-client on console-fra.rpki-client.org