Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa
File:                     3130332e31302e3134342e302f32342d3234203d3e203436303537.roa (raw, json)
Hash identifier:          be/8Wx/3MwQD0Ly3y8Z3u5nFqvRex798npHJMv4qFX8=
Subject key identifier:   52:CE:A2:B4:31:C7:AE:4C:1E:52:6B:F2:D0:A8:9C:BD:39:0F:DC:98
Certificate issuer:       /CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
Certificate serial:       3CC2C8C05E76EF523CFBB890B1E8779652F897CF
Authority key identifier: 71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa
Signing time:             Wed 09 Oct 2024 14:00:00 +0000
ROA not before:           Wed 09 Oct 2024 13:55:00 +0000
ROA not after:            Wed 08 Oct 2025 14:00:00 +0000
asID:                     46057
IP address blocks:        103.10.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl
                          rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 16:10:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c2:c8:c0:5e:76:ef:52:3c:fb:b8:90:b1:e8:77:96:52:f8:97:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=717B1F47696EEFA7498BEB563D97EBD8515B883E
        Validity
            Not Before: Oct  9 13:55:00 2024 GMT
            Not After : Oct  8 14:00:00 2025 GMT
        Subject: CN=52CEA2B431C7AE4C1E526BF2D0A89CBD390FDC98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fc:66:35:c0:d3:1c:43:86:80:ae:35:41:d4:
                    3a:3c:29:61:f5:ba:be:49:22:20:4c:8e:98:36:71:
                    38:f2:19:70:41:2c:ef:f5:2f:9f:3c:96:db:c4:d5:
                    2b:b3:c2:23:44:7b:7f:70:51:82:ed:1f:4b:91:66:
                    f7:6f:98:af:a7:68:ac:33:86:72:6b:5b:ae:01:97:
                    f5:ec:43:b5:41:f9:4f:e8:24:bc:d0:b5:56:6f:85:
                    75:e1:94:40:29:2f:c7:4c:3d:b8:a3:27:84:52:f9:
                    30:4f:a8:2d:9e:0f:0c:b1:99:73:f3:ae:8d:91:5f:
                    65:23:56:23:79:8c:8d:4e:41:7c:a1:94:3c:d2:be:
                    7c:5e:87:27:67:74:62:38:7c:c4:bf:ba:89:d6:3e:
                    9c:1a:c6:79:71:a7:ac:23:3f:10:e5:9a:15:ee:d3:
                    d6:26:3b:92:33:96:53:01:5d:82:c5:21:71:de:80:
                    a6:7d:ff:ec:8a:f9:d7:29:07:50:9c:e8:e1:ca:73:
                    51:8a:4d:5c:d4:fe:12:ce:e3:a0:d0:cd:87:fb:47:
                    f2:1d:16:d0:03:78:62:be:45:c1:bc:21:25:d5:86:
                    96:ce:f0:f5:6c:ce:c5:b4:bd:45:37:e3:7b:b0:fc:
                    8d:64:5a:59:6e:0b:71:a6:5f:08:18:1d:0e:e4:ec:
                    e4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:CE:A2:B4:31:C7:AE:4C:1E:52:6B:F2:D0:A8:9C:BD:39:0F:DC:98
            X509v3 Authority Key Identifier:
                keyid:71:7B:1F:47:69:6E:EF:A7:49:8B:EB:56:3D:97:EB:D8:51:5B:88:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/717B1F47696EEFA7498BEB563D97EBD8515B883E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/717B1F47696EEFA7498BEB563D97EBD8515B883E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e75d7def-5eb9-4054-a3ab-d7ecf486379a/0/3130332e31302e3134342e302f32342d3234203d3e203436303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         95:af:f4:9b:4d:4d:63:5f:ea:73:4b:23:43:07:70:88:6c:17:
         28:f7:cf:20:14:8f:ad:81:f1:8b:97:4d:91:6a:71:e6:7d:98:
         02:b9:4f:30:41:52:72:00:4d:65:e7:4d:9f:54:45:32:d2:6b:
         dc:61:5a:b3:a4:9a:2f:cc:c1:dc:c2:93:5f:ce:26:24:43:a8:
         0b:50:d2:16:5d:0a:9e:bb:7e:77:18:a3:54:c0:c7:5c:f6:23:
         54:03:ae:68:b6:a0:ec:80:fb:16:1f:85:60:fb:ed:ef:b0:1e:
         5b:41:68:6a:5e:c3:ba:11:6a:43:01:4d:4f:63:82:b6:a9:fa:
         cf:e9:d5:d8:28:d5:ae:a0:0f:84:9b:78:ff:57:f6:09:80:6a:
         82:b7:eb:01:e4:c7:43:b9:af:c0:cf:15:16:3c:7a:38:6e:9a:
         83:06:7e:69:6f:21:9e:f6:17:d9:89:e9:9c:80:1e:a9:4c:43:
         a4:77:af:6a:8c:30:15:80:13:02:ef:0c:50:80:8c:2e:e3:6c:
         84:26:e3:0c:af:33:b2:d8:88:45:5a:61:a9:7a:36:6f:d3:6b:
         e6:ba:6b:0c:5d:9f:ff:be:b5:c0:c1:f2:3f:f1:8a:03:d3:76:
         4b:77:f4:b8:bb:c6:70:36:db:f1:93:eb:28:26:6c:b0:54:c1:
         2c:38:9b:d4
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUPMLIwF5271I8+7iQseh3llL4l88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1
MTVCODgzRTAeFw0yNDEwMDkxMzU1MDBaFw0yNTEwMDgxNDAwMDBaMDMxMTAvBgNV
BAMTKDUyQ0VBMkI0MzFDN0FFNEMxRTUyNkJGMkQwQTg5Q0JEMzkwRkRDOTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDf/GY1wNMcQ4aArjVB1Do8KWH1
ur5JIiBMjpg2cTjyGXBBLO/1L588ltvE1SuzwiNEe39wUYLtH0uRZvdvmK+naKwz
hnJrW64Bl/XsQ7VB+U/oJLzQtVZvhXXhlEApL8dMPbijJ4RS+TBPqC2eDwyxmXPz
ro2RX2UjViN5jI1OQXyhlDzSvnxehydndGI4fMS/uonWPpwaxnlxp6wjPxDlmhXu
09YmO5IzllMBXYLFIXHegKZ9/+yK+dcpB1Cc6OHKc1GKTVzU/hLO46DQzYf7R/Id
FtADeGK+RcG8ISXVhpbO8PVszsW0vUU343uw/I1kWlluC3GmXwgYHQ7k7OQLAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUUs6itDHHrkweUmvy0KicvTkP3JgwHwYDVR0j
BBgwFoAUcXsfR2lu76dJi+tWPZfr2FFbiD4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NzVkN2RlZi01ZWI5LTQwNTQtYTNhYi1kN2VjZjQ4NjM3OWEvMC83MTdCMUY0NzY5
NkVFRkE3NDk4QkVCNTYzRDk3RUJEODUxNUI4ODNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzE3QjFGNDc2OTZFRUZBNzQ5OEJFQjU2M0Q5N0VCRDg1MTVC
ODgzRS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3NWQ3ZGVmLTVlYjktNDA1NC1h
M2FiLWQ3ZWNmNDg2Mzc5YS8wLzMxMzAzMzJlMzEzMDJlMzEzNDM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzNjMwMzUzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGcKkDANBgkqhkiG
9w0BAQsFAAOCAQEAla/0m01NY1/qc0sjQwdwiGwXKPfPIBSPrYHxi5dNkWpx5n2Y
ArlPMEFScgBNZedNn1RFMtJr3GFas6SaL8zB3MKTX84mJEOoC1DSFl0Knrt+dxij
VMDHXPYjVAOuaLag7ID7Fh+FYPvt77AeW0Foal7DuhFqQwFNT2OCtqn6z+nV2CjV
rqAPhJt4/1f2CYBqgrfrAeTHQ7mvwM8VFjx6OG6agwZ+aW8hnvYX2YnpnIAeqUxD
pHevaowwFYATAu8MUICMLuNshCbjDK8zstiIRVphqXo2b9Nr5rprDF2f/761wMHy
P/GKA9N2S3f0uLvGcDbb8ZPrKCZssFTBLDib1A==
-----END CERTIFICATE-----
Generated at Tue Mar 11 05:03:31 2025 by rpki-client