Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa
File:                     3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (raw, json)
Hash identifier:          a7bbLvivN5h778OSusowuH24mo9x9m39VMDSk/dwR+U=
Subject key identifier:   4B:AE:F1:AE:58:53:B1:8F:4E:E3:76:C5:66:1F:BD:6C:E6:94:33:3E
Certificate issuer:       /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
Certificate serial:       4B37FD955E68046C954D836848016D638C6B6FB5
Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa
Signing time:             Thu 16 May 2024 07:00:00 +0000
ROA not before:           Thu 16 May 2024 06:55:00 +0000
ROA not after:            Thu 15 May 2025 07:00:00 +0000
asID:                     139460
IP address blocks:        103.166.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl
                          rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:27:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:37:fd:95:5e:68:04:6c:95:4d:83:68:48:01:6d:63:8c:6b:6f:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967
        Validity
            Not Before: May 16 06:55:00 2024 GMT
            Not After : May 15 07:00:00 2025 GMT
        Subject: CN=4BAEF1AE5853B18F4EE376C5661FBD6CE694333E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:41:a9:dd:14:58:9d:61:67:34:21:2a:97:38:
                    19:f4:fb:e0:7c:98:49:90:b8:dc:08:bd:54:b1:52:
                    fb:a1:d0:84:95:5f:0c:ed:2a:b9:da:2d:1b:27:84:
                    fb:3a:f9:ce:0e:23:3b:32:69:f6:44:fb:c9:cd:6d:
                    79:e2:a6:f2:f2:7a:1b:c6:d5:33:db:7f:19:8d:62:
                    5b:f4:e4:00:86:c9:54:21:88:6e:25:28:3b:04:1f:
                    78:6e:ac:a0:98:11:d4:32:0f:45:07:b7:ec:a0:a1:
                    f7:b5:0f:29:08:73:58:a7:26:f3:c9:90:3b:0e:28:
                    42:de:5e:0a:e5:b3:e1:a6:22:69:f0:a7:c9:b5:af:
                    1d:12:94:98:ed:75:f8:16:04:e5:1a:fa:a0:a7:8b:
                    58:f8:99:69:86:99:8c:fd:7f:39:2b:ec:14:da:5b:
                    fc:ae:38:09:05:1e:0b:2d:eb:8f:56:a5:1d:08:f0:
                    f1:7f:79:88:82:a7:a4:83:b3:97:18:0f:45:0c:e9:
                    cb:ee:97:d2:aa:91:da:27:9f:4c:42:af:f5:ab:36:
                    4a:83:de:59:e7:c5:74:14:b4:d3:7b:96:f5:da:4c:
                    51:d9:8d:d9:fc:aa:d4:6e:c8:91:03:e6:f2:39:b7:
                    46:86:9a:c1:95:cb:cd:b1:b0:02:3f:ea:92:e5:85:
                    a9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:AE:F1:AE:58:53:B1:8F:4E:E3:76:C5:66:1F:BD:6C:E6:94:33:3E
            X509v3 Authority Key Identifier:
                keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:3d:6f:59:f5:09:87:0b:d1:20:41:fb:13:cb:d2:87:b5:99:
         89:01:61:7b:bc:9a:d5:9f:a6:7a:45:c6:de:4f:7c:98:63:4f:
         3f:f8:76:28:09:18:ca:41:d0:58:8d:89:76:ef:ed:84:db:bd:
         f4:f6:90:cb:30:53:d7:ed:c8:4f:27:58:a5:6e:0c:b0:8f:c4:
         91:c8:a9:94:3d:cd:77:45:03:95:00:03:03:dc:fc:1f:d1:2d:
         a3:c8:3c:ad:f7:60:24:9f:37:49:19:52:86:c1:e7:f3:95:7d:
         5f:62:39:a1:13:e8:e4:58:6d:42:93:3a:ac:ac:f8:71:3b:59:
         fd:58:06:47:b4:46:f5:5a:ff:08:69:f7:06:9f:e2:96:ce:c2:
         3b:b7:81:ed:e4:eb:95:39:b3:c2:94:30:bf:55:6f:41:7e:a3:
         ac:c6:32:51:f8:e4:95:22:f2:ff:de:1c:73:99:ed:da:cc:d8:
         f0:73:6f:c2:7b:ca:38:c1:68:29:dd:43:7b:62:2d:59:d6:93:
         7a:f8:33:1a:38:6f:ad:45:c1:be:68:0d:73:3a:d3:77:b9:f2:
         29:01:c9:9a:fd:47:6e:8e:30:3e:63:e6:81:41:43:07:3c:e3:
         e4:60:ea:0d:e7:03:19:db:aa:85:70:2e:16:fd:c9:44:b6:72:
         12:ef:02:2e
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSzf9lV5oBGyVTYNoSAFtY4xrb7UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC
QTk0NDk2NzAeFw0yNDA1MTYwNjU1MDBaFw0yNTA1MTUwNzAwMDBaMDMxMTAvBgNV
BAMTKDRCQUVGMUFFNTg1M0IxOEY0RUUzNzZDNTY2MUZCRDZDRTY5NDMzM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2QandFFidYWc0ISqXOBn0++B8
mEmQuNwIvVSxUvuh0ISVXwztKrnaLRsnhPs6+c4OIzsyafZE+8nNbXnipvLyehvG
1TPbfxmNYlv05ACGyVQhiG4lKDsEH3hurKCYEdQyD0UHt+ygofe1DykIc1inJvPJ
kDsOKELeXgrls+GmImnwp8m1rx0SlJjtdfgWBOUa+qCni1j4mWmGmYz9fzkr7BTa
W/yuOAkFHgst649WpR0I8PF/eYiCp6SDs5cYD0UM6cvul9Kqkdonn0xCr/WrNkqD
3lnnxXQUtNN7lvXaTFHZjdn8qtRuyJED5vI5t0aGmsGVy82xsAI/6pLlhallAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUS67xrlhTsY9O43bFZh+9bOaUMz4wHwYDVR0j
BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2
Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0
NDk2Ny5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4YjYzZTdkLWE2MTctNGU4Yy1h
ODIxLTYyMzk1NmQ0ZDRhZS8wLzMxMzAzMzJlMzEzNjM2MmUzNDM4MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzQzNjMwLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6YwMA0GCSqG
SIb3DQEBCwUAA4IBAQAmPW9Z9QmHC9EgQfsTy9KHtZmJAWF7vJrVn6Z6RcbeT3yY
Y08/+HYoCRjKQdBYjYl27+2E27309pDLMFPX7chPJ1ilbgywj8SRyKmUPc13RQOV
AAMD3Pwf0S2jyDyt92AknzdJGVKGwefzlX1fYjmhE+jkWG1CkzqsrPhxO1n9WAZH
tEb1Wv8IafcGn+KWzsI7t4Ht5OuVObPClDC/VW9BfqOsxjJR+OSVIvL/3hxzme3a
zNjwc2/Ce8o4wWgp3UN7Yi1Z1pN6+DMaOG+tRcG+aA1zOtN3ufIpAcma/UdujjA+
Y+aBQUMHPOPkYOoN5wMZ26qFcC4W/clEtnIS7wIu
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:57 2024 by rpki-client on console-ams.rpki-client.org