Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          9l9RyVRLWRt8XRaOgJT1o0NAWWm5/lnOEdIKtpxwXaU=
Subject key identifier:   A4:19:CD:7B:2C:97:FB:4A:96:23:87:31:D7:10:4D:A4:59:76:A0:80
Certificate issuer:       /CN=961C97EF8E7664408011D05E6A81CF905A1336B1
Certificate serial:       2363907C35A290407F78CEC862B97736A7F2B8FD
Authority key identifier: 96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa
Signing time:             Thu 14 Mar 2024 05:00:01 +0000
ROA not before:           Thu 14 Mar 2024 04:55:01 +0000
ROA not after:            Thu 13 Mar 2025 05:00:01 +0000
asID:                     139977
IP address blocks:        103.130.80.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl
                          rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:63:90:7c:35:a2:90:40:7f:78:ce:c8:62:b9:77:36:a7:f2:b8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961C97EF8E7664408011D05E6A81CF905A1336B1
        Validity
            Not Before: Mar 14 04:55:01 2024 GMT
            Not After : Mar 13 05:00:01 2025 GMT
        Subject: CN=A419CD7B2C97FB4A96238731D7104DA45976A080
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:69:bf:31:48:49:c0:8b:be:45:f7:bd:e6:f4:
                    21:6d:90:c4:a1:e1:96:94:fd:bb:46:b0:91:b3:f6:
                    0f:dc:28:63:9c:05:b8:66:8a:13:85:8f:c4:43:2c:
                    48:d7:bf:a8:e6:0d:fd:50:51:5f:d5:74:a2:ae:12:
                    71:21:e6:c2:c1:81:7c:81:f6:55:44:68:6d:b6:40:
                    64:51:1f:ab:79:5a:d0:98:84:fb:8f:c9:57:29:c5:
                    d3:56:10:91:c9:92:f2:72:91:4e:9c:a8:3b:ad:21:
                    bd:07:6b:90:d8:be:34:af:47:d9:84:13:7c:bd:a2:
                    db:9f:1f:c8:f9:c3:f0:76:54:ab:cf:49:2b:6f:7b:
                    50:37:37:0b:2e:30:28:e2:2c:be:68:67:c8:e0:bf:
                    97:e2:d5:25:61:78:c2:4f:9d:95:89:6c:58:b5:65:
                    fa:47:88:f9:ba:b1:23:3f:1c:7b:a4:c0:b8:86:db:
                    a4:19:c5:6c:42:76:14:95:f3:a6:fc:c8:ff:5d:76:
                    b6:9a:9b:4a:e1:5c:53:41:f9:c0:49:a4:93:4a:20:
                    cd:39:a1:55:64:93:49:0b:ca:1e:37:2f:b2:fb:27:
                    2a:1f:9b:33:71:94:13:48:ac:e6:c5:40:23:5d:7b:
                    6d:69:0e:8e:75:89:e0:4c:04:74:b6:f4:9d:a6:cc:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:CD:7B:2C:97:FB:4A:96:23:87:31:D7:10:4D:A4:59:76:A0:80
            X509v3 Authority Key Identifier:
                keyid:96:1C:97:EF:8E:76:64:40:80:11:D0:5E:6A:81:CF:90:5A:13:36:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/961C97EF8E7664408011D05E6A81CF905A1336B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/961C97EF8E7664408011D05E6A81CF905A1336B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4ae57b3-46a2-423d-b244-03ffee105b77/0/3130332e3133302e38302e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.130.80.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:7f:bb:ee:14:1b:7a:1c:a9:42:6a:e3:2f:54:d7:36:58:b8:
         b3:58:8a:fe:25:e2:b8:55:b0:d9:6d:4c:2b:ab:f1:a4:44:de:
         4b:73:af:99:8b:84:94:f6:d4:a3:a8:de:fe:71:d0:d2:50:12:
         99:82:c5:47:18:a9:8c:94:70:ae:74:25:7a:5c:08:f0:88:bb:
         66:22:49:6b:f0:ad:ce:18:43:98:72:b6:c2:35:48:8f:41:5a:
         75:e7:34:a6:2b:52:a1:7d:cb:ac:79:37:9b:38:c9:81:f2:f3:
         64:52:d1:a5:40:d9:c0:bb:e3:1f:ce:eb:44:2b:93:f2:a7:78:
         9a:80:0c:69:72:e4:15:90:09:26:87:7b:dd:c0:1e:64:ea:60:
         5f:6b:8c:ca:d1:27:a0:5d:55:de:4d:c3:09:c2:78:92:b2:38:
         57:05:79:05:d3:65:70:40:51:d6:05:00:79:98:f3:da:76:6e:
         9c:28:d9:5d:b9:72:80:23:79:7c:81:ad:cf:a5:04:ef:7f:23:
         4a:05:8c:45:75:92:44:a8:c4:b0:21:8d:d1:c8:3d:74:70:a2:
         06:26:8d:01:c3:e7:69:01:7f:7f:29:2a:55:b8:a6:0d:cc:40:
         c9:52:62:28:8e:ca:42:2a:68:05:7d:fa:52:05:e4:d0:33:dd:
         68:1c:0d:54
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUI2OQfDWikEB/eM7IYrl3NqfyuP0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1
QTEzMzZCMTAeFw0yNDAzMTQwNDU1MDFaFw0yNTAzMTMwNTAwMDFaMDMxMTAvBgNV
BAMTKEE0MTlDRDdCMkM5N0ZCNEE5NjIzODczMUQ3MTA0REE0NTk3NkEwODAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCab8xSEnAi75F973m9CFtkMSh
4ZaU/btGsJGz9g/cKGOcBbhmihOFj8RDLEjXv6jmDf1QUV/VdKKuEnEh5sLBgXyB
9lVEaG22QGRRH6t5WtCYhPuPyVcpxdNWEJHJkvJykU6cqDutIb0Ha5DYvjSvR9mE
E3y9otufH8j5w/B2VKvPSStve1A3NwsuMCjiLL5oZ8jgv5fi1SVheMJPnZWJbFi1
ZfpHiPm6sSM/HHukwLiG26QZxWxCdhSV86b8yP9ddraam0rhXFNB+cBJpJNKIM05
oVVkk0kLyh43L7L7JyofmzNxlBNIrObFQCNde21pDo51ieBMBHS29J2mzFLvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUpBnNeyyX+0qWI4cx1xBNpFl2oIAwHwYDVR0j
BBgwFoAUlhyX7452ZECAEdBeaoHPkFoTNrEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NGFlNTdiMy00NmEyLTQyM2QtYjI0NC0wM2ZmZWUxMDViNzcvMC85NjFDOTdFRjhF
NzY2NDQwODAxMUQwNUU2QTgxQ0Y5MDVBMTMzNkIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTYxQzk3RUY4RTc2NjQ0MDgwMTFEMDVFNkE4MUNGOTA1QTEz
MzZCMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U0YWU1N2IzLTQ2YTItNDIzZC1i
MjQ0LTAzZmZlZTEwNWI3Ny8wLzMxMzAzMzJlMzEzMzMwMmUzODMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ4JQMA0GCSqG
SIb3DQEBCwUAA4IBAQAGf7vuFBt6HKlCauMvVNc2WLizWIr+JeK4VbDZbUwrq/Gk
RN5Lc6+Zi4SU9tSjqN7+cdDSUBKZgsVHGKmMlHCudCV6XAjwiLtmIklr8K3OGEOY
crbCNUiPQVp15zSmK1KhfcuseTebOMmB8vNkUtGlQNnAu+MfzutEK5Pyp3iagAxp
cuQVkAkmh3vdwB5k6mBfa4zK0SegXVXeTcMJwniSsjhXBXkF02VwQFHWBQB5mPPa
dm6cKNlduXKAI3l8ga3PpQTvfyNKBYxFdZJEqMSwIY3RyD10cKIGJo0Bw+dpAX9/
KSpVuKYNzEDJUmIojspCKmgFffpSBeTQM91oHA1U
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org