Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa
File:                     3131372e3130332e31352e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier:          jdeRb5rlVS5VGUTw0VcOvT43aqiUQFlzmn4fabUv/q0=
Subject key identifier:   5E:A8:08:A2:47:C0:1F:18:BB:EF:1C:F5:16:27:3E:0C:6D:A9:C1:A2
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       68D497D267E815E8967D3A9C6767E7A82FE2FBCA
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa
Signing time:             Wed 17 Apr 2024 05:02:02 +0000
ROA not before:           Wed 17 Apr 2024 04:57:02 +0000
ROA not after:            Wed 16 Apr 2025 05:02:02 +0000
asID:                     38496
IP address blocks:        117.103.15.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
                          rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d4:97:d2:67:e8:15:e8:96:7d:3a:9c:67:67:e7:a8:2f:e2:fb:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Apr 17 04:57:02 2024 GMT
            Not After : Apr 16 05:02:02 2025 GMT
        Subject: CN=5EA808A247C01F18BBEF1CF516273E0C6DA9C1A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:fe:a8:4a:11:d3:65:bc:32:58:c1:db:d5:90:
                    07:99:bc:91:65:93:3b:d1:8e:c7:7b:e2:e1:51:c9:
                    26:d9:a3:c8:1c:91:88:cd:5e:f2:07:0e:b3:88:bf:
                    2f:2c:a0:f5:4b:20:85:dc:cf:67:af:30:d6:65:b0:
                    a9:8c:e9:fa:6d:22:a0:eb:04:63:5f:86:7e:9f:aa:
                    e4:1b:9c:68:ab:9c:8a:f5:96:67:4d:71:b6:ad:e9:
                    8e:c6:59:c2:a4:ea:1b:b4:b3:ba:41:42:a0:57:5b:
                    53:c6:10:f5:75:9d:eb:e0:45:27:48:f2:d2:ac:98:
                    87:36:b9:1f:57:f7:33:80:ed:29:12:0e:ce:de:b2:
                    06:6e:57:f6:19:8d:15:d2:7c:18:bb:4f:68:8e:28:
                    6d:27:79:83:ca:66:fd:af:7a:08:05:b9:71:75:0f:
                    01:b7:01:1c:2a:30:b3:ea:b9:02:9d:59:38:4f:3f:
                    1f:ca:94:c7:31:13:5e:08:6f:f9:26:38:65:37:6a:
                    8f:db:97:bf:c5:ce:fb:cc:39:1a:ff:77:ad:f0:77:
                    38:ce:79:a5:86:f5:f7:05:f7:53:4d:f0:97:a9:88:
                    7a:94:4b:51:e4:99:c2:a0:31:fb:30:2e:18:f2:14:
                    ca:67:a3:30:22:db:cc:c2:dc:15:ba:bc:4b:d3:1a:
                    22:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:A8:08:A2:47:C0:1F:18:BB:EF:1C:F5:16:27:3E:0C:6D:A9:C1:A2
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131372e3130332e31352e302f32342d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.103.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:3f:60:0b:9e:52:b9:bb:92:c2:d5:15:63:06:89:c6:f5:df:
         b4:74:fc:01:8d:98:8c:03:8a:20:25:b2:ca:a7:93:66:0b:35:
         f4:5c:bb:50:68:9f:21:04:45:11:ea:32:39:57:aa:5d:43:c3:
         40:1e:db:c8:ff:47:4d:bc:77:fc:5c:02:8f:2b:88:90:3e:f6:
         bc:5c:7a:46:bc:b7:e8:7f:2a:22:74:eb:f9:30:ef:64:50:3f:
         a3:3b:dd:81:97:dd:d8:f5:09:08:4c:c4:b9:2a:a9:c4:19:df:
         b0:48:1b:36:80:20:68:df:5e:9e:0c:64:8f:f9:2b:78:4d:a8:
         5f:cf:78:41:6c:af:c7:07:ce:b5:f4:5c:94:2a:c8:6d:7e:6e:
         b0:5a:2f:04:7f:77:17:62:17:b3:c7:ba:9a:e9:69:a8:6b:1c:
         80:c6:bb:c1:2f:2a:29:6d:41:e1:43:5c:38:4a:82:4b:55:28:
         11:d4:4e:8b:df:b2:7c:3b:95:04:d3:90:cf:bc:2e:35:94:a0:
         c0:96:3c:a3:99:77:e4:e3:a8:e5:8f:9b:29:34:64:14:36:3f:
         c0:37:26:5f:2e:92:0f:de:3d:f8:36:89:12:2b:70:26:c8:39:
         18:91:ec:e1:69:2b:30:d3:49:a6:49:fc:f6:ac:30:19:5f:e9:
         c7:c0:ee:af
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUaNSX0mfoFeiWfTqcZ2fnqC/i+8owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yNDA0MTcwNDU3MDJaFw0yNTA0MTYwNTAyMDJaMDMxMTAvBgNV
BAMTKDVFQTgwOEEyNDdDMDFGMThCQkVGMUNGNTE2MjczRTBDNkRBOUMxQTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5/qhKEdNlvDJYwdvVkAeZvJFl
kzvRjsd74uFRySbZo8gckYjNXvIHDrOIvy8soPVLIIXcz2evMNZlsKmM6fptIqDr
BGNfhn6fquQbnGirnIr1lmdNcbat6Y7GWcKk6hu0s7pBQqBXW1PGEPV1nevgRSdI
8tKsmIc2uR9X9zOA7SkSDs7esgZuV/YZjRXSfBi7T2iOKG0neYPKZv2veggFuXF1
DwG3ARwqMLPquQKdWThPPx/KlMcxE14Ib/kmOGU3ao/bl7/FzvvMORr/d63wdzjO
eaWG9fcF91NN8JepiHqUS1HkmcKgMfswLhjyFMpnozAi28zC3BW6vEvTGiLFAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXqgIokfAHxi77xz1Fic+DG2pwaIwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMxMzEzNzJlMzEzMDMzMmUzMTM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHVnDzANBgkqhkiG
9w0BAQsFAAOCAQEAVD9gC55SubuSwtUVYwaJxvXftHT8AY2YjAOKICWyyqeTZgs1
9Fy7UGifIQRFEeoyOVeqXUPDQB7byP9HTbx3/FwCjyuIkD72vFx6Rry36H8qInTr
+TDvZFA/ozvdgZfd2PUJCEzEuSqpxBnfsEgbNoAgaN9engxkj/kreE2oX894QWyv
xwfOtfRclCrIbX5usFovBH93F2IXs8e6mulpqGscgMa7wS8qKW1B4UNcOEqCS1Uo
EdROi9+yfDuVBNOQz7wuNZSgwJY8o5l35OOo5Y+bKTRkFDY/wDcmXy6SD949+DaJ
EitwJsg5GJHs4WkrMNNJpkn89qwwGV/px8Durw==
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:52:58 2024 by rpki-client on console-ams.rpki-client.org