Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
File:                     3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa (raw, json)
Hash identifier:          Sb5eltl7ieY+nayrpL7mduNdCEwiVLwYWvMtKVmFBQU=
Subject key identifier:   F0:4D:71:36:43:82:FE:74:A4:11:41:23:A3:6B:E5:88:96:4A:B5:FD
Certificate issuer:       /CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
Certificate serial:       1DE2292DEBFFA3429063BBD709949655763D658A
Authority key identifier: 27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa
Signing time:             Wed 22 May 2024 05:00:02 +0000
ROA not before:           Wed 22 May 2024 04:55:02 +0000
ROA not after:            Wed 21 May 2025 05:00:02 +0000
asID:                     139951
IP address blocks:        103.79.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl
                          rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 17:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:e2:29:2d:eb:ff:a3:42:90:63:bb:d7:09:94:96:55:76:3d:65:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=27114CFC585C5DB2E0AC5DA74F04C66C319492F1
        Validity
            Not Before: May 22 04:55:02 2024 GMT
            Not After : May 21 05:00:02 2025 GMT
        Subject: CN=F04D71364382FE74A4114123A36BE588964AB5FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:67:e9:b5:84:f2:5a:ee:cb:01:01:b1:e2:b1:
                    17:ca:a6:84:64:af:60:8a:f6:fd:ca:67:06:4c:ac:
                    ef:4e:71:5f:18:c9:29:60:a2:a9:a6:8d:ee:20:97:
                    5a:d7:f6:87:92:0e:a2:dd:f6:fa:7b:77:d1:35:ff:
                    72:e6:e8:07:da:8c:91:a4:b8:5d:f4:bb:a9:31:c5:
                    52:7c:4e:ac:78:8e:b2:5f:05:dd:12:bf:57:c9:d8:
                    d3:94:c1:84:ce:d4:b7:f2:cb:fe:4d:0c:58:cd:02:
                    e0:ab:58:5f:e4:b0:72:ad:ca:ad:27:1c:c0:67:77:
                    bc:19:a7:f6:83:8e:51:f1:1d:75:93:27:34:b5:f7:
                    d6:2c:09:db:a5:5b:07:c0:31:ab:28:cc:89:12:a2:
                    ef:fa:f3:14:fb:2b:8c:17:68:fa:e8:e4:f3:4b:a7:
                    a1:d4:6c:bd:b8:9a:b8:ab:b8:e4:21:e4:82:6a:8b:
                    cf:a8:e0:7e:42:c5:7c:0d:0e:af:41:2c:69:39:3a:
                    db:45:ca:8c:d5:7d:f9:c3:9a:85:ec:c9:fe:55:78:
                    a5:33:7c:0f:84:ed:ea:85:94:66:0b:8f:f7:87:8b:
                    f3:10:a3:4e:04:22:3c:95:89:f0:60:23:a4:e7:f9:
                    74:6b:f3:c1:94:0a:87:d7:19:5b:a1:03:5c:d1:df:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4D:71:36:43:82:FE:74:A4:11:41:23:A3:6B:E5:88:96:4A:B5:FD
            X509v3 Authority Key Identifier:
                keyid:27:11:4C:FC:58:5C:5D:B2:E0:AC:5D:A7:4F:04:C6:6C:31:94:92:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/27114CFC585C5DB2E0AC5DA74F04C66C319492F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5c8b9e3-b44f-490b-bf51-99f2dd2a1364/0/3130332e37392e3132392e302f32342d3234203d3e20313339393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:4e:04:40:6b:2f:b5:c9:20:28:68:9b:da:6b:d9:98:13:6d:
         31:b6:fb:07:e8:46:36:cd:28:bc:df:80:42:97:8b:56:65:9b:
         78:1b:57:11:a9:b4:d3:07:22:2c:04:3c:78:d9:76:66:9a:64:
         3e:08:70:74:fc:a3:a2:90:6c:4b:2a:04:46:c5:74:28:9d:56:
         49:ad:e2:52:b5:a9:a2:30:7c:93:ac:6e:68:5c:d6:78:c2:a2:
         72:4e:93:72:a5:0d:6d:cc:fc:4c:04:53:e5:f3:e5:e5:89:93:
         29:d1:70:90:f8:03:a4:56:7c:81:d0:4f:b6:65:72:f5:6e:21:
         eb:00:e8:61:de:9c:de:56:cf:9c:5d:60:47:12:2d:84:e7:40:
         6a:07:c7:d7:3b:6b:c9:aa:7f:62:94:01:f6:e2:24:d4:b0:97:
         f3:c8:9c:7b:97:05:f8:af:25:fe:6c:a6:e5:56:68:05:d7:35:
         db:58:12:a3:c4:90:75:bc:12:fb:a7:fd:5a:fc:19:3e:11:1a:
         c6:71:a0:b7:41:73:98:f4:b1:3c:f4:55:1e:ee:8e:8c:e7:65:
         73:51:3d:a8:e1:7d:77:79:fe:45:6e:62:2f:af:64:d7:0b:a7:
         b1:cf:25:cd:a4:f2:27:28:a0:3a:ec:78:d6:07:43:f5:e8:31:
         7e:a1:00:e9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUHeIpLev/o0KQY7vXCZSWVXY9ZYowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMz
MTk0OTJGMTAeFw0yNDA1MjIwNDU1MDJaFw0yNTA1MjEwNTAwMDJaMDMxMTAvBgNV
BAMTKEYwNEQ3MTM2NDM4MkZFNzRBNDExNDEyM0EzNkJFNTg4OTY0QUI1RkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmZ+m1hPJa7ssBAbHisRfKpoRk
r2CK9v3KZwZMrO9OcV8YySlgoqmmje4gl1rX9oeSDqLd9vp7d9E1/3Lm6AfajJGk
uF30u6kxxVJ8Tqx4jrJfBd0Sv1fJ2NOUwYTO1Lfyy/5NDFjNAuCrWF/ksHKtyq0n
HMBnd7wZp/aDjlHxHXWTJzS199YsCdulWwfAMasozIkSou/68xT7K4wXaPro5PNL
p6HUbL24mriruOQh5IJqi8+o4H5CxXwNDq9BLGk5OttFyozVffnDmoXsyf5VeKUz
fA+E7eqFlGYLj/eHi/MQo04EIjyVifBgI6Tn+XRr88GUCofXGVuhA1zR37AjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU8E1xNkOC/nSkEUEjo2vliJZKtf0wHwYDVR0j
BBgwFoAUJxFM/FhcXbLgrF2nTwTGbDGUkvEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NWM4YjllMy1iNDRmLTQ5MGItYmY1MS05OWYyZGQyYTEzNjQvMC8yNzExNENGQzU4
NUM1REIyRTBBQzVEQTc0RjA0QzY2QzMxOTQ5MkYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjcxMTRDRkM1ODVDNURCMkUwQUM1REE3NEYwNEM2NkMzMTk0
OTJGMS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U1YzhiOWUzLWI0NGYtNDkwYi1i
ZjUxLTk5ZjJkZDJhMTM2NC8wLzMxMzAzMzJlMzczOTJlMzEzMjM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNTMxLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ0+BMA0GCSqG
SIb3DQEBCwUAA4IBAQBgTgRAay+1ySAoaJvaa9mYE20xtvsH6EY2zSi834BCl4tW
ZZt4G1cRqbTTByIsBDx42XZmmmQ+CHB0/KOikGxLKgRGxXQonVZJreJStamiMHyT
rG5oXNZ4wqJyTpNypQ1tzPxMBFPl8+XliZMp0XCQ+AOkVnyB0E+2ZXL1biHrAOhh
3pzeVs+cXWBHEi2E50BqB8fXO2vJqn9ilAH24iTUsJfzyJx7lwX4ryX+bKblVmgF
1zXbWBKjxJB1vBL7p/1a/Bk+ERrGcaC3QXOY9LE89FUe7o6M52VzUT2o4X13ef5F
bmIvr2TXC6exzyXNpPInKKA67HjWB0P16DF+oQDp
-----END CERTIFICATE-----
Generated at Mon Nov 25 18:43:03 2024 by rpki-client on console-ams.rpki-client.org