Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139302e302f32342d3234203d3e203338353236.roa
File:                     3130332e3131322e3139302e302f32342d3234203d3e203338353236.roa (raw, json)
Hash identifier:          3mnFhbvay4qMDfXfPnL21PDs6XbY99ETr5IsrO72MIc=
Subject key identifier:   18:A3:6A:FD:A9:99:87:5D:18:51:95:1B:D4:ED:C8:8E:8C:50:99:15
Certificate issuer:       /CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
Certificate serial:       1BC3C974028DE0825B683B8001877BE47AD1B642
Authority key identifier: 56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139302e302f32342d3234203d3e203338353236.roa
Signing time:             Tue 20 Feb 2024 08:00:02 +0000
ROA not before:           Tue 20 Feb 2024 07:55:02 +0000
ROA not after:            Tue 18 Feb 2025 08:00:02 +0000
asID:                     38526
IP address blocks:        103.112.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl
                          rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:c3:c9:74:02:8d:e0:82:5b:68:3b:80:01:87:7b:e4:7a:d1:b6:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560CF5B1622CB492E1C603F69D4FB9C11322520D
        Validity
            Not Before: Feb 20 07:55:02 2024 GMT
            Not After : Feb 18 08:00:02 2025 GMT
        Subject: CN=18A36AFDA999875D1851951BD4EDC88E8C509915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:63:d3:9a:09:2e:1b:95:2c:a5:b5:ce:0e:a3:
                    a0:3d:53:6c:a4:c8:12:ef:e6:b8:32:74:e1:1b:d2:
                    dd:8e:08:de:df:ea:73:5c:c1:d2:9f:58:03:7f:48:
                    ca:7f:2c:6b:6e:71:8a:9e:07:36:94:32:4f:11:79:
                    06:18:1a:3c:24:eb:b2:94:42:1a:7a:83:5e:fb:25:
                    9f:fe:b9:1c:32:29:6a:c8:c5:0a:ef:12:8c:d5:da:
                    48:f1:3e:5b:39:0c:ca:16:02:31:33:83:ac:97:cc:
                    40:90:cf:e9:1e:1b:37:e4:25:ee:01:92:f2:56:c5:
                    21:3e:79:0f:c1:40:45:13:29:cd:1c:a4:d3:1f:31:
                    d7:48:0d:63:c7:69:a1:4c:c8:54:e5:f1:4c:2a:b0:
                    50:a8:e8:14:94:7e:81:26:d0:6c:ec:32:32:3f:fc:
                    77:25:83:42:cd:c0:80:95:cf:1a:d6:a0:73:59:31:
                    d2:e1:28:30:59:41:0b:80:d1:3a:c5:e1:15:19:34:
                    30:10:ea:87:e0:eb:cf:ba:b2:3f:9b:98:ed:ab:57:
                    3e:3d:bf:6b:b6:77:6e:a9:6f:5b:22:db:af:51:5a:
                    9f:5b:e7:b4:4b:cc:29:32:b2:3b:66:0e:3c:68:47:
                    d9:40:67:c9:8a:42:0f:f5:d9:01:83:00:7b:38:15:
                    7b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:A3:6A:FD:A9:99:87:5D:18:51:95:1B:D4:ED:C8:8E:8C:50:99:15
            X509v3 Authority Key Identifier:
                keyid:56:0C:F5:B1:62:2C:B4:92:E1:C6:03:F6:9D:4F:B9:C1:13:22:52:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/560CF5B1622CB492E1C603F69D4FB9C11322520D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/560CF5B1622CB492E1C603F69D4FB9C11322520D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e65e7810-67f4-41c2-8034-4652733b8dd2/0/3130332e3131322e3139302e302f32342d3234203d3e203338353236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:2e:f2:0b:41:3d:a1:6f:53:0b:49:82:81:86:a0:24:ba:c3:
         88:ab:1e:f5:e5:44:5b:01:52:76:ee:69:9d:1e:1d:5c:86:fa:
         32:4b:09:a5:81:29:e7:28:85:e3:e4:04:b7:de:40:45:36:57:
         96:2c:d2:fc:83:0b:3c:59:c0:01:d3:4b:46:e0:ea:9f:56:8f:
         f0:b2:85:aa:4c:b6:d0:55:86:8c:fe:6a:e4:4c:e2:9e:cd:a9:
         96:c3:39:2f:ff:1d:27:12:a4:4e:c9:1f:98:27:af:cd:d8:dc:
         24:0b:db:4a:13:59:f7:e3:2f:03:3c:d9:c4:a0:2d:be:27:a1:
         f2:cc:fc:34:be:bb:81:1f:95:9d:88:8b:16:82:55:eb:c9:6f:
         2d:95:77:48:e9:e0:89:cf:97:49:5f:4d:10:5a:e3:9e:74:bb:
         0f:19:77:4c:bf:01:b4:dd:8b:1f:0d:39:2e:5d:1b:97:58:5a:
         c9:55:d5:9d:1f:33:6a:16:98:50:0c:7f:92:26:ac:6a:d7:c2:
         9c:a8:14:e3:f7:60:bb:65:1d:84:56:2b:f3:0b:61:cf:5f:60:
         bf:1a:c4:50:16:ef:29:71:34:94:ad:8f:73:d6:d4:85:d8:96:
         5b:c1:f2:ae:99:00:8b:df:af:48:c4:32:18:e0:45:fe:10:05:
         d1:41:7a:32
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUG8PJdAKN4IJbaDuAAYd75HrRtkIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzEx
MzIyNTIwRDAeFw0yNDAyMjAwNzU1MDJaFw0yNTAyMTgwODAwMDJaMDMxMTAvBgNV
BAMTKDE4QTM2QUZEQTk5OTg3NUQxODUxOTUxQkQ0RURDODhFOEM1MDk5MTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKY9OaCS4blSyltc4Oo6A9U2yk
yBLv5rgydOEb0t2OCN7f6nNcwdKfWAN/SMp/LGtucYqeBzaUMk8ReQYYGjwk67KU
Qhp6g177JZ/+uRwyKWrIxQrvEozV2kjxPls5DMoWAjEzg6yXzECQz+keGzfkJe4B
kvJWxSE+eQ/BQEUTKc0cpNMfMddIDWPHaaFMyFTl8UwqsFCo6BSUfoEm0GzsMjI/
/Hclg0LNwICVzxrWoHNZMdLhKDBZQQuA0TrF4RUZNDAQ6ofg68+6sj+bmO2rVz49
v2u2d26pb1si269RWp9b57RLzCkysjtmDjxoR9lAZ8mKQg/12QGDAHs4FXtjAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUGKNq/amZh10YUZUb1O3IjoxQmRUwHwYDVR0j
BBgwFoAUVgz1sWIstJLhxgP2nU+5wRMiUg0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjVlNzgxMC02N2Y0LTQxYzItODAzNC00NjUyNzMzYjhkZDIvMC81NjBDRjVCMTYy
MkNCNDkyRTFDNjAzRjY5RDRGQjlDMTEzMjI1MjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTYwQ0Y1QjE2MjJDQjQ5MkUxQzYwM0Y2OUQ0RkI5QzExMzIy
NTIwRC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2NWU3ODEwLTY3ZjQtNDFjMi04
MDM0LTQ2NTI3MzNiOGRkMi8wLzMxMzAzMzJlMzEzMTMyMmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMzM4MzUzMjM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3C+MA0GCSqG
SIb3DQEBCwUAA4IBAQCULvILQT2hb1MLSYKBhqAkusOIqx715URbAVJ27mmdHh1c
hvoySwmlgSnnKIXj5AS33kBFNleWLNL8gws8WcAB00tG4OqfVo/wsoWqTLbQVYaM
/mrkTOKezamWwzkv/x0nEqROyR+YJ6/N2NwkC9tKE1n34y8DPNnEoC2+J6HyzPw0
vruBH5WdiIsWglXryW8tlXdI6eCJz5dJX00QWuOedLsPGXdMvwG03YsfDTkuXRuX
WFrJVdWdHzNqFphQDH+SJqxq18KcqBTj92C7ZR2EVivzC2HPX2C/GsRQFu8pcTSU
rY9z1tSF2JZbwfKumQCL369IxDIY4EX+EAXRQXoy
-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:49 2024 by rpki-client on console-fra.rpki-client.org