Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
File:                     3130332e32362e3137362e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          ccBmiJXR4PcNr5rQJ1azX+yRxbkfZzC6mMcaJSN0pB8=
Subject key identifier:   79:D3:13:07:B7:FB:47:AC:86:0B:72:2F:74:17:D9:8E:B3:46:7D:2A
Certificate issuer:       /CN=2370B87417B78EB4410F4394F29FB327D1401F0D
Certificate serial:       5DFA86D0ED0D467C0C69031D322C0076D875DCDA
Authority key identifier: 23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa
Signing time:             Thu 26 Oct 2023 08:00:00 +0000
ROA not before:           Thu 26 Oct 2023 07:55:00 +0000
ROA not after:            Thu 24 Oct 2024 08:00:00 +0000
asID:                     58821
IP address blocks:        103.26.176.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl
                          rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:fa:86:d0:ed:0d:46:7c:0c:69:03:1d:32:2c:00:76:d8:75:dc:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2370B87417B78EB4410F4394F29FB327D1401F0D
        Validity
            Not Before: Oct 26 07:55:00 2023 GMT
            Not After : Oct 24 08:00:00 2024 GMT
        Subject: CN=79D31307B7FB47AC860B722F7417D98EB3467D2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cf:45:74:02:71:88:9c:3f:fb:1b:01:8b:d0:
                    38:e0:f0:3f:55:3c:e0:73:a7:82:6c:21:29:6d:c0:
                    46:d7:8e:ad:d8:17:53:cf:42:ae:d1:bb:b0:10:60:
                    33:67:98:7f:2c:cf:12:40:89:90:65:91:48:c2:b5:
                    af:1b:2a:e9:97:57:78:54:9c:fd:9d:a3:5f:66:a2:
                    82:c1:3a:3b:a8:c4:71:a4:02:1c:de:c7:47:3d:86:
                    92:38:0e:66:de:d2:34:50:c1:f9:61:2f:6c:c9:bd:
                    e8:18:2c:4b:89:02:ec:53:8a:cf:e7:02:4d:d4:78:
                    ba:f6:87:58:1b:54:16:29:c1:20:ab:96:bd:c5:78:
                    3b:cd:49:75:a9:b8:5d:36:32:1f:a4:0f:34:94:d1:
                    f5:30:07:34:1c:e2:79:ce:4b:db:8a:86:c0:60:6c:
                    f2:63:5a:a6:52:6f:dd:44:82:d2:75:1f:9e:81:27:
                    53:77:5f:26:55:c5:bc:3b:ed:82:62:9a:9f:51:3b:
                    61:f1:3b:0d:90:d3:38:c9:70:07:a1:d3:b2:cd:6d:
                    13:75:e1:c3:b5:d0:1e:39:41:cf:23:a1:51:e1:73:
                    3a:74:7f:6e:7d:48:31:8f:90:6d:b8:75:f4:e8:c2:
                    cc:fb:14:1a:84:df:45:e5:df:c7:74:2c:42:1f:66:
                    19:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D3:13:07:B7:FB:47:AC:86:0B:72:2F:74:17:D9:8E:B3:46:7D:2A
            X509v3 Authority Key Identifier:
                keyid:23:70:B8:74:17:B7:8E:B4:41:0F:43:94:F2:9F:B3:27:D1:40:1F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/2370B87417B78EB4410F4394F29FB327D1401F0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2370B87417B78EB4410F4394F29FB327D1401F0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e74d0bf9-cc9a-42a3-830a-76f6d32b2f45/0/3130332e32362e3137362e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.26.176.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0e:ac:c6:87:c2:e1:63:8a:83:cd:ea:cc:de:6a:c0:44:73:99:
         1d:24:32:5b:32:e8:fe:e3:20:77:cb:85:fd:b2:a1:73:ad:dd:
         bf:a9:58:16:06:df:e3:8d:d3:16:33:c4:a4:fa:3c:6f:18:9a:
         50:a8:6e:ea:0c:ab:25:5e:55:8a:aa:89:7e:78:84:1a:38:03:
         b1:02:eb:b6:a3:3a:9e:23:2e:c5:43:7f:b9:72:50:62:cc:0c:
         73:3a:7f:39:43:1b:93:f7:c4:5f:39:22:7a:9a:e4:d6:a7:20:
         22:dd:05:b9:51:f4:d9:99:35:69:2d:ee:c6:d1:ba:3f:32:28:
         c3:6d:b8:e9:fc:28:df:db:e4:06:dc:2a:b4:6b:c8:71:7d:22:
         fc:49:1b:9f:94:6b:4f:ef:b4:2b:ed:0b:3b:b7:27:37:37:cf:
         99:c0:60:53:c2:3b:ef:0d:17:5f:98:a1:c6:c5:ee:93:e4:f5:
         3e:46:c0:5f:c6:f8:fb:fa:0e:9a:fd:99:7f:1d:c6:6f:94:c4:
         fb:d1:83:c8:6d:00:a0:fd:e6:de:86:de:81:35:74:6f:d5:c7:
         ec:2e:33:ac:b0:82:04:a8:e2:d6:1a:ea:eb:56:85:6a:f3:0a:
         b6:19:9d:a5:f2:c4:b2:3d:37:23:4d:15:71:c0:d1:f6:2f:27:
         b2:e1:d0:42
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUXfqG0O0NRnwMaQMdMiwAdth13NowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdE
MTQwMUYwRDAeFw0yMzEwMjYwNzU1MDBaFw0yNDEwMjQwODAwMDBaMDMxMTAvBgNV
BAMTKDc5RDMxMzA3QjdGQjQ3QUM4NjBCNzIyRjc0MTdEOThFQjM0NjdEMkEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCaz0V0AnGInD/7GwGL0Djg8D9V
POBzp4JsISltwEbXjq3YF1PPQq7Ru7AQYDNnmH8szxJAiZBlkUjCta8bKumXV3hU
nP2do19mooLBOjuoxHGkAhzex0c9hpI4Dmbe0jRQwflhL2zJvegYLEuJAuxTis/n
Ak3UeLr2h1gbVBYpwSCrlr3FeDvNSXWpuF02Mh+kDzSU0fUwBzQc4nnOS9uKhsBg
bPJjWqZSb91EgtJ1H56BJ1N3XyZVxbw77YJimp9RO2HxOw2Q0zjJcAeh07LNbRN1
4cO10B45Qc8joVHhczp0f259SDGPkG24dfTowsz7FBqE30Xl38d0LEIfZhkHAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUedMTB7f7R6yGC3IvdBfZjrNGfSowHwYDVR0j
BBgwFoAUI3C4dBe3jrRBD0OU8p+zJ9FAHw0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzRkMGJmOS1jYzlhLTQyYTMtODMwYS03NmY2ZDMyYjJmNDUvMC8yMzcwQjg3NDE3
Qjc4RUI0NDEwRjQzOTRGMjlGQjMyN0QxNDAxRjBELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjM3MEI4NzQxN0I3OEVCNDQxMEY0Mzk0RjI5RkIzMjdEMTQw
MUYwRC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3NGQwYmY5LWNjOWEtNDJhMy04
MzBhLTc2ZjZkMzJiMmY0NS8wLzMxMzAzMzJlMzIzNjJlMzEzNzM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWcasDANBgkqhkiG
9w0BAQsFAAOCAQEADqzGh8LhY4qDzerM3mrARHOZHSQyWzLo/uMgd8uF/bKhc63d
v6lYFgbf443TFjPEpPo8bxiaUKhu6gyrJV5ViqqJfniEGjgDsQLrtqM6niMuxUN/
uXJQYswMczp/OUMbk/fEXzkieprk1qcgIt0FuVH02Zk1aS3uxtG6PzIow2246fwo
39vkBtwqtGvIcX0i/Ekbn5RrT++0K+0LO7cnNzfPmcBgU8I77w0XX5ihxsXuk+T1
PkbAX8b4+/oOmv2Zfx3Gb5TE+9GDyG0AoP3m3obegTV0b9XH7C4zrLCCBKji1hrq
61aFavMKthmdpfLEsj03I00VccDR9i8nsuHQQg==
-----END CERTIFICATE-----
Generated at Wed May 1 18:11:11 2024 by rpki-client on console-ams.rpki-client.org