Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
File:                     3130332e3137322e33342e302f32332d3234203d3e203538383231.roa (raw, json)
Hash identifier:          8SN27JgRzLp2HkIPs909BiGw4amp0rXHb0iEz91v6Jo=
Subject key identifier:   C6:77:94:29:DF:AA:F4:8D:C4:48:04:72:1F:E1:EA:0E:8B:1F:F1:68
Certificate issuer:       /CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
Certificate serial:       4892AE93BBF3DAC776E09F5179BB9A08C98F65E9
Authority key identifier: 55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa
Signing time:             Fri 31 May 2024 03:00:01 +0000
ROA not before:           Fri 31 May 2024 02:55:01 +0000
ROA not after:            Fri 30 May 2025 03:00:01 +0000
asID:                     58821
IP address blocks:        103.172.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl
                          rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 17:19:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:92:ae:93:bb:f3:da:c7:76:e0:9f:51:79:bb:9a:08:c9:8f:65:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5562ED3E2B75AA4CE36165EE02F7696CCB8045E1
        Validity
            Not Before: May 31 02:55:01 2024 GMT
            Not After : May 30 03:00:01 2025 GMT
        Subject: CN=C6779429DFAAF48DC44804721FE1EA0E8B1FF168
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:3b:4f:ba:6e:bf:69:37:98:ff:a3:fb:3f:75:
                    54:4a:a9:7e:3f:e7:76:33:fd:cd:4a:34:b4:85:60:
                    c0:36:72:79:28:c7:5a:49:52:b7:9e:f6:eb:6d:f5:
                    39:72:b2:ec:30:d8:bc:ed:51:40:3a:c3:2a:66:a3:
                    f0:a1:f5:43:d2:91:2c:c7:fe:1c:e1:f0:61:8b:94:
                    fc:ff:3b:96:b6:4f:0f:c3:20:f4:8f:f2:77:f4:d3:
                    7c:f4:6f:8a:bf:b2:79:35:26:54:e9:93:b5:4a:f1:
                    97:f5:b7:8c:2d:40:b3:a6:70:07:e1:3a:8e:07:a7:
                    01:40:e8:de:af:08:77:fb:73:95:4f:5e:4f:56:2f:
                    ad:ae:59:fa:7f:14:0a:0f:0c:fd:84:01:d5:00:d5:
                    06:86:c9:00:39:2a:6d:33:42:a1:ac:fd:03:03:70:
                    da:3c:07:bf:58:53:23:79:49:23:91:18:ce:de:4d:
                    38:8c:03:55:2a:00:a6:bb:ff:c6:3c:ac:41:f3:53:
                    d0:34:89:18:3d:67:ca:ed:71:d6:5b:73:c1:bb:3b:
                    b5:42:9b:cc:72:64:d3:e3:75:c3:d9:3b:4e:e9:5f:
                    e7:aa:43:ab:d5:7a:91:fb:8e:16:09:a0:64:30:1a:
                    05:f1:cb:e9:17:f2:83:f5:d3:86:6e:37:f4:c2:2c:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:77:94:29:DF:AA:F4:8D:C4:48:04:72:1F:E1:EA:0E:8B:1F:F1:68
            X509v3 Authority Key Identifier:
                keyid:55:62:ED:3E:2B:75:AA:4C:E3:61:65:EE:02:F7:69:6C:CB:80:45:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5562ED3E2B75AA4CE36165EE02F7696CCB8045E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e7a3e90a-033a-4c8d-9077-0daf8050fa8b/0/3130332e3137322e33342e302f32332d3234203d3e203538383231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:b5:65:6f:f2:b1:e9:0d:28:f0:b1:55:bc:ed:e1:91:5e:5c:
         36:e9:95:cf:f7:30:10:12:ab:97:30:f1:66:63:fe:97:94:f8:
         e3:13:52:81:ab:aa:3c:f6:dc:79:aa:6e:24:5b:2f:6a:f4:2e:
         77:44:0d:05:8a:ef:98:4a:a0:ae:9b:0d:ee:73:37:06:3a:c4:
         b8:5c:ed:05:40:9f:2c:49:73:85:35:23:e2:c6:f5:1b:2a:55:
         e8:f0:af:cd:e0:67:d7:5a:8f:61:c0:70:1c:51:09:99:fa:91:
         87:6c:04:2b:40:7b:80:aa:b9:17:56:17:4a:ea:ea:84:d3:30:
         f8:95:9c:63:d1:01:1e:2f:f5:74:c2:bc:db:83:ec:37:8f:8f:
         b6:36:d9:7a:f8:de:d6:45:cb:a2:8b:db:c7:a3:e2:ac:13:5c:
         0d:ce:bd:06:e3:d0:12:8a:e1:da:ce:1e:73:e5:cd:34:f8:ec:
         3f:91:9a:d2:db:12:b2:04:eb:fb:bf:91:20:e6:e6:19:4e:cf:
         35:c0:15:3b:28:7a:c8:53:10:a3:1e:dc:bd:57:50:4b:12:59:
         9e:a1:a9:15:8a:18:f9:4f:6a:55:8f:27:4c:42:dd:be:99:0f:
         53:cb:fd:ac:cc:0e:07:57:f8:7f:21:a4:37:f4:0e:bf:8e:63:
         ab:8b:2e:36
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSJKuk7vz2sd24J9RebuaCMmPZekwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkND
QjgwNDVFMTAeFw0yNDA1MzEwMjU1MDFaFw0yNTA1MzAwMzAwMDFaMDMxMTAvBgNV
BAMTKEM2Nzc5NDI5REZBQUY0OERDNDQ4MDQ3MjFGRTFFQTBFOEIxRkYxNjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO0+6br9pN5j/o/s/dVRKqX4/
53Yz/c1KNLSFYMA2cnkox1pJUree9utt9Tlysuww2LztUUA6wypmo/Ch9UPSkSzH
/hzh8GGLlPz/O5a2Tw/DIPSP8nf003z0b4q/snk1JlTpk7VK8Zf1t4wtQLOmcAfh
Oo4HpwFA6N6vCHf7c5VPXk9WL62uWfp/FAoPDP2EAdUA1QaGyQA5Km0zQqGs/QMD
cNo8B79YUyN5SSORGM7eTTiMA1UqAKa7/8Y8rEHzU9A0iRg9Z8rtcdZbc8G7O7VC
m8xyZNPjdcPZO07pX+eqQ6vVepH7jhYJoGQwGgXxy+kX8oP104ZuN/TCLB2pAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxneUKd+q9I3ESARyH+HqDosf8WgwHwYDVR0j
BBgwFoAUVWLtPit1qkzjYWXuAvdpbMuAReEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
N2EzZTkwYS0wMzNhLTRjOGQtOTA3Ny0wZGFmODA1MGZhOGIvMC81NTYyRUQzRTJC
NzVBQTRDRTM2MTY1RUUwMkY3Njk2Q0NCODA0NUUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTU2MkVEM0UyQjc1QUE0Q0UzNjE2NUVFMDJGNzY5NkNDQjgw
NDVFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U3YTNlOTBhLTAzM2EtNGM4ZC05
MDc3LTBkYWY4MDUwZmE4Yi8wLzMxMzAzMzJlMzEzNzMyMmUzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzUzODM4MzIzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWesIjANBgkqhkiG
9w0BAQsFAAOCAQEAZ7Vlb/Kx6Q0o8LFVvO3hkV5cNumVz/cwEBKrlzDxZmP+l5T4
4xNSgauqPPbceapuJFsvavQud0QNBYrvmEqgrpsN7nM3BjrEuFztBUCfLElzhTUj
4sb1GypV6PCvzeBn11qPYcBwHFEJmfqRh2wEK0B7gKq5F1YXSurqhNMw+JWcY9EB
Hi/1dMK824PsN4+PtjbZevje1kXLoovbx6PirBNcDc69BuPQEorh2s4ec+XNNPjs
P5Ga0tsSsgTr+7+RIObmGU7PNcAVOyh6yFMQox7cvVdQSxJZnqGpFYoY+U9qVY8n
TELdvpkPU8v9rMwOB1f4fyGkN/QOv45jq4suNg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:44 2024 by rpki-client on console-fra.rpki-client.org