Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa
File:                     3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa (raw, json)
Hash identifier:          S6YsQOwT9mWFkk+1PdMi1aaatDseJh8seaLhCqpzpws=
Subject key identifier:   E4:43:59:71:15:76:60:87:35:0D:99:9F:28:9F:52:F4:5F:55:1E:1B
Certificate issuer:       /CN=38992A0A64D724D15761F2F9410D85186E2311FE
Certificate serial:       54976E51F0019C86CFF18B6D86797EBCE0D5D42D
Authority key identifier: 38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa
Signing time:             Wed 20 Dec 2023 00:00:01 +0000
ROA not before:           Tue 19 Dec 2023 23:55:01 +0000
ROA not after:            Wed 18 Dec 2024 00:00:01 +0000
asID:                     139392
IP address blocks:        103.153.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl
                          rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 06:55:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:97:6e:51:f0:01:9c:86:cf:f1:8b:6d:86:79:7e:bc:e0:d5:d4:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38992A0A64D724D15761F2F9410D85186E2311FE
        Validity
            Not Before: Dec 19 23:55:01 2023 GMT
            Not After : Dec 18 00:00:01 2024 GMT
        Subject: CN=E443597115766087350D999F289F52F45F551E1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6c:02:da:1d:98:de:44:a4:eb:42:5f:68:f4:
                    2d:36:5d:98:2f:86:5f:6a:78:64:c7:e9:0c:c7:5c:
                    c3:54:ad:e0:7f:e2:df:ec:34:e7:7a:92:74:18:42:
                    9c:5a:2f:f5:78:e0:94:11:34:75:26:d6:21:33:57:
                    31:6e:9a:c4:a2:2d:4f:5b:02:b8:14:be:26:82:7d:
                    d6:ec:53:5b:91:f5:61:4f:c5:37:fb:24:b3:0f:6f:
                    ff:3f:7a:4b:0c:cb:46:cc:b1:fb:ea:84:df:dd:da:
                    fe:9f:0f:b5:60:a6:d0:fd:74:f5:f0:34:cc:2d:bb:
                    93:d8:bc:41:56:ab:cf:d3:c2:83:57:8e:f4:2a:da:
                    75:72:3a:47:e2:86:7a:46:ed:20:8c:73:c5:b4:78:
                    02:a5:bb:c6:e5:b9:ea:15:36:04:c7:ca:15:94:76:
                    00:8e:1b:0b:1c:f0:46:e3:c7:60:47:3d:ef:6b:c7:
                    49:09:92:ba:c4:15:03:8a:42:a3:50:90:34:8d:67:
                    1f:29:89:43:13:1f:94:e6:80:d9:e7:68:b8:d3:0a:
                    5a:93:3f:e5:b9:55:d8:db:53:91:1c:10:cc:d7:e6:
                    a7:17:fc:c9:71:a3:42:d9:48:56:2b:fc:35:18:6f:
                    76:04:da:f6:c0:1a:90:18:06:04:f7:63:85:ac:ef:
                    af:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:59:71:15:76:60:87:35:0D:99:9F:28:9F:52:F4:5F:55:1E:1B
            X509v3 Authority Key Identifier:
                keyid:38:99:2A:0A:64:D7:24:D1:57:61:F2:F9:41:0D:85:18:6E:23:11:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/38992A0A64D724D15761F2F9410D85186E2311FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38992A0A64D724D15761F2F9410D85186E2311FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6929901-a137-4a35-8134-1804f94792df/0/3130332e3135332e3138342e302f32342d3234203d3e20313339333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.153.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:69:e1:60:25:4c:01:a3:67:8d:fe:d4:86:4d:bb:8d:16:5e:
         88:b6:12:3c:9e:12:97:db:db:1d:f4:a2:da:6c:d3:d9:11:02:
         32:6f:f8:4b:6c:35:b8:8b:dd:4d:a7:0e:6b:a6:09:20:a2:59:
         cf:a9:fd:66:a5:4b:35:2a:de:60:bb:4b:a0:31:66:5a:f3:c8:
         07:49:10:16:7c:c9:4a:be:b1:80:ba:e7:e3:5e:4d:58:24:79:
         eb:e4:59:81:a8:aa:fd:ec:77:c2:80:4e:59:6e:82:f5:1f:db:
         5c:ec:4a:1f:59:24:f5:c7:a7:68:b6:7a:f1:18:5c:93:aa:3f:
         0d:07:df:f2:f0:5c:f2:12:b6:fe:df:2f:12:f1:13:32:d1:db:
         73:4f:cb:35:c4:72:7f:c7:c8:4c:4e:15:6f:7f:a8:41:e8:cb:
         d1:1b:43:be:73:d5:cf:4f:61:48:1a:11:72:91:22:14:b0:48:
         3a:8c:93:6a:ac:bf:2b:a1:fc:ee:bc:2b:88:51:e6:8a:c4:3f:
         64:69:53:39:7f:34:85:52:dd:77:81:1e:e0:9d:6f:f4:2c:4e:
         f2:9f:86:47:37:4b:98:5e:b1:f9:6d:ba:81:ff:fc:96:d5:86:
         35:8d:e2:b7:a3:3b:e2:45:6b:33:e5:f6:24:d9:82:dc:de:f8:
         82:33:44:40
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUVJduUfABnIbP8Ytthnl+vODV1C0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2
RTIzMTFGRTAeFw0yMzEyMTkyMzU1MDFaFw0yNDEyMTgwMDAwMDFaMDMxMTAvBgNV
BAMTKEU0NDM1OTcxMTU3NjYwODczNTBEOTk5RjI4OUY1MkY0NUY1NTFFMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKbALaHZjeRKTrQl9o9C02XZgv
hl9qeGTH6QzHXMNUreB/4t/sNOd6knQYQpxaL/V44JQRNHUm1iEzVzFumsSiLU9b
ArgUviaCfdbsU1uR9WFPxTf7JLMPb/8/eksMy0bMsfvqhN/d2v6fD7VgptD9dPXw
NMwtu5PYvEFWq8/TwoNXjvQq2nVyOkfihnpG7SCMc8W0eAKlu8blueoVNgTHyhWU
dgCOGwsc8Ebjx2BHPe9rx0kJkrrEFQOKQqNQkDSNZx8piUMTH5TmgNnnaLjTClqT
P+W5VdjbU5EcEMzX5qcX/Mlxo0LZSFYr/DUYb3YE2vbAGpAYBgT3Y4Ws768HAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU5ENZcRV2YIc1DZmfKJ9S9F9VHhswHwYDVR0j
BBgwFoAUOJkqCmTXJNFXYfL5QQ2FGG4jEf4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjkyOTkwMS1hMTM3LTRhMzUtODEzNC0xODA0Zjk0NzkyZGYvMC8zODk5MkEwQTY0
RDcyNEQxNTc2MUYyRjk0MTBEODUxODZFMjMxMUZFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzg5OTJBMEE2NEQ3MjREMTU3NjFGMkY5NDEwRDg1MTg2RTIz
MTFGRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2OTI5OTAxLWExMzctNGEzNS04
MTM0LTE4MDRmOTQ3OTJkZi8wLzMxMzAzMzJlMzEzNTMzMmUzMTM4MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzMzM5MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnmbgwDQYJ
KoZIhvcNAQELBQADggEBAGxp4WAlTAGjZ43+1IZNu40WXoi2EjyeEpfb2x30otps
09kRAjJv+EtsNbiL3U2nDmumCSCiWc+p/WalSzUq3mC7S6AxZlrzyAdJEBZ8yUq+
sYC65+NeTVgkeevkWYGoqv3sd8KATllugvUf21zsSh9ZJPXHp2i2evEYXJOqPw0H
3/LwXPIStv7fLxLxEzLR23NPyzXEcn/HyExOFW9/qEHoy9EbQ75z1c9PYUgaEXKR
IhSwSDqMk2qsvyuh/O68K4hR5orEP2RpUzl/NIVS3XeBHuCdb/QsTvKfhkc3S5he
sfltuoH//JbVhjWN4rejO+JFazPl9iTZgtze+IIzREA=
-----END CERTIFICATE-----
Generated at Thu Jun 20 03:03:18 2024 by rpki-client on console-ams.rpki-client.org