Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
File:                     3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa (raw, json)
Hash identifier:          CSKpEC89Xk+ogIKfeE+w63/O6M+PoFVrS1+E8+YlhQ4=
Subject key identifier:   EE:D5:46:98:C1:73:C4:D1:00:CD:22:CA:E8:0C:6F:18:3A:A6:B5:A1
Certificate issuer:       /CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
Certificate serial:       6B6D8297EF33A266B03FB4055B196DD3992AAA0A
Authority key identifier: 77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa
Signing time:             Tue 09 Jul 2024 11:00:00 +0000
ROA not before:           Tue 09 Jul 2024 10:55:00 +0000
ROA not after:            Tue 08 Jul 2025 11:00:00 +0000
asID:                     141621
IP address blocks:        103.161.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl
                          rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:43:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:6d:82:97:ef:33:a2:66:b0:3f:b4:05:5b:19:6d:d3:99:2a:aa:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77776250E47CDCAE9263AB4AF8FA40A1391792EA
        Validity
            Not Before: Jul  9 10:55:00 2024 GMT
            Not After : Jul  8 11:00:00 2025 GMT
        Subject: CN=EED54698C173C4D100CD22CAE80C6F183AA6B5A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:da:d3:46:b0:9a:88:72:03:29:0f:d6:b6:ad:
                    d4:ec:d0:c4:48:0f:33:35:38:42:ea:7f:c0:a7:c9:
                    9a:3f:4d:a1:88:40:09:37:c5:c7:80:16:50:48:21:
                    a7:65:99:6f:e4:b0:49:1f:e7:69:92:a3:70:36:9b:
                    83:ae:54:e8:75:d4:ab:91:59:12:e1:10:28:d0:6f:
                    71:d6:cd:4d:66:a7:c5:7c:c6:2e:e1:3a:60:3a:95:
                    6f:59:81:a2:83:a2:2d:67:66:cf:48:da:3d:8a:b2:
                    b6:56:25:38:02:7d:09:32:26:67:be:71:af:ce:20:
                    c1:b4:d8:1b:7d:36:6c:12:ac:75:ba:71:dd:52:ce:
                    d6:2c:bf:0e:86:1c:8e:d4:82:b8:8f:da:a6:c6:ae:
                    d5:71:4c:b4:18:4b:41:bb:fa:59:1c:c6:ec:39:d4:
                    cd:04:1f:1f:80:4f:f1:25:a8:37:06:ca:b2:6e:31:
                    27:8b:9d:42:78:58:f6:6e:a9:7d:47:e2:2d:bf:aa:
                    1e:14:ed:81:3b:68:33:13:74:e8:6e:0f:c1:6b:30:
                    25:f4:16:7d:c3:2c:8f:53:dc:70:59:6d:73:25:23:
                    9a:21:6c:17:99:41:f2:8d:47:59:5c:27:ab:76:86:
                    0e:c7:c1:aa:74:55:34:9b:6a:64:cb:e7:fa:bc:21:
                    45:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D5:46:98:C1:73:C4:D1:00:CD:22:CA:E8:0C:6F:18:3A:A6:B5:A1
            X509v3 Authority Key Identifier:
                keyid:77:77:62:50:E4:7C:DC:AE:92:63:AB:4A:F8:FA:40:A1:39:17:92:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/77776250E47CDCAE9263AB4AF8FA40A1391792EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/77776250E47CDCAE9263AB4AF8FA40A1391792EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e517fe98-8f58-497f-be57-8665a7a04bb0/0/3130332e3136312e3136342e302f32342d3234203d3e20313431363231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.161.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:a6:11:8e:38:bb:0e:20:d1:c3:77:a3:7d:ae:c6:83:60:5c:
         ae:72:b5:1c:04:58:51:63:6c:cd:5f:03:fa:ca:f3:c3:36:80:
         cb:c3:f9:b5:2b:4f:f4:30:c1:c2:c9:80:25:24:ea:8e:52:4d:
         ef:8a:ab:88:3c:2c:db:40:93:ed:75:90:ec:10:3d:ef:96:0e:
         4c:a5:b4:71:c6:2c:37:f2:46:96:d6:48:82:49:87:3d:0d:50:
         ab:07:0d:21:66:2b:32:a1:7b:e2:b2:01:19:ea:1e:8f:96:dc:
         3d:d8:da:8d:57:f9:7f:8d:3b:60:55:92:4f:25:49:bb:2a:26:
         8f:8d:68:d1:c1:6b:60:35:8b:41:ae:9e:3c:3a:07:b7:4d:f9:
         f9:bd:02:6d:41:f2:80:f3:22:5b:38:f4:7e:11:8e:76:68:a0:
         3a:c5:ce:0a:58:9e:f4:13:8c:e8:e4:1e:ed:d9:9b:3d:8d:5e:
         41:26:a1:2b:e3:a0:2e:85:d1:e7:65:b8:8f:86:25:7e:67:8b:
         dc:3f:01:66:ea:5d:0c:81:98:0d:41:11:7f:61:ed:db:32:16:
         5b:45:c8:93:4e:9a:e1:e9:0d:5a:0d:48:bd:de:04:0c:40:27:
         70:49:3f:e4:ea:d9:d5:10:fb:78:28:29:75:56:d2:bc:d9:7a:
         1c:5e:8d:17
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUa22Cl+8zomawP7QFWxlt05kqqgowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEz
OTE3OTJFQTAeFw0yNDA3MDkxMDU1MDBaFw0yNTA3MDgxMTAwMDBaMDMxMTAvBgNV
BAMTKEVFRDU0Njk4QzE3M0M0RDEwMENEMjJDQUU4MEM2RjE4M0FBNkI1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT2tNGsJqIcgMpD9a2rdTs0MRI
DzM1OELqf8CnyZo/TaGIQAk3xceAFlBIIadlmW/ksEkf52mSo3A2m4OuVOh11KuR
WRLhECjQb3HWzU1mp8V8xi7hOmA6lW9ZgaKDoi1nZs9I2j2KsrZWJTgCfQkyJme+
ca/OIMG02Bt9NmwSrHW6cd1SztYsvw6GHI7UgriP2qbGrtVxTLQYS0G7+lkcxuw5
1M0EHx+AT/ElqDcGyrJuMSeLnUJ4WPZuqX1H4i2/qh4U7YE7aDMTdOhuD8FrMCX0
Fn3DLI9T3HBZbXMlI5ohbBeZQfKNR1lcJ6t2hg7Hwap0VTSbamTL5/q8IUXZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU7tVGmMFzxNEAzSLK6AxvGDqmtaEwHwYDVR0j
BBgwFoAUd3diUOR83K6SY6tK+PpAoTkXkuowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NTE3ZmU5OC04ZjU4LTQ5N2YtYmU1Ny04NjY1YTdhMDRiYjAvMC83Nzc3NjI1MEU0
N0NEQ0FFOTI2M0FCNEFGOEZBNDBBMTM5MTc5MkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzc3NzYyNTBFNDdDRENBRTkyNjNBQjRBRjhGQTQwQTEzOTE3
OTJFQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1MTdmZTk4LThmNTgtNDk3Zi1i
ZTU3LTg2NjVhN2EwNGJiMC8wLzMxMzAzMzJlMzEzNjMxMmUzMTM2MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnoaQwDQYJ
KoZIhvcNAQELBQADggEBABqmEY44uw4g0cN3o32uxoNgXK5ytRwEWFFjbM1fA/rK
88M2gMvD+bUrT/QwwcLJgCUk6o5STe+Kq4g8LNtAk+11kOwQPe+WDkyltHHGLDfy
RpbWSIJJhz0NUKsHDSFmKzKhe+KyARnqHo+W3D3Y2o1X+X+NO2BVkk8lSbsqJo+N
aNHBa2A1i0Gunjw6B7dN+fm9Am1B8oDzIls49H4RjnZooDrFzgpYnvQTjOjkHu3Z
mz2NXkEmoSvjoC6F0edluI+GJX5ni9w/AWbqXQyBmA1BEX9h7dsyFltFyJNOmuHp
DVoNSL3eBAxAJ3BJP+Tq2dUQ+3goKXVW0rzZehxejRc=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org