Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
File:                     3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa (raw, json)
Hash identifier:          1lqYd7hkjX4+Jk0uKLziRcrfY2vX20m//NCQnspFZQU=
Subject key identifier:   A9:7D:B5:3A:FB:A6:E6:90:8F:D8:AC:BB:A0:7A:40:E5:99:A5:BF:3F
Certificate issuer:       /CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
Certificate serial:       342FA51D184ADB8886E601DF01A863DEFF578D55
Authority key identifier: E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa
Signing time:             Fri 24 May 2024 14:00:02 +0000
ROA not before:           Fri 24 May 2024 13:55:02 +0000
ROA not after:            Fri 23 May 2025 14:00:02 +0000
asID:                     147143
IP address blocks:        103.176.252.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl
                          rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 00:09:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:2f:a5:1d:18:4a:db:88:86:e6:01:df:01:a8:63:de:ff:57:8d:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E82AE8B691C7C53E1CE0B396D8975747F15604D5
        Validity
            Not Before: May 24 13:55:02 2024 GMT
            Not After : May 23 14:00:02 2025 GMT
        Subject: CN=A97DB53AFBA6E6908FD8ACBBA07A40E599A5BF3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d7:63:65:f9:a8:a7:fd:46:d9:8c:b8:49:91:
                    f4:4e:2d:e0:94:c7:20:5d:aa:e0:91:b1:38:ae:00:
                    a9:70:0a:c1:a2:aa:f9:2d:6c:ea:0e:19:a9:f8:e0:
                    a7:55:64:e9:6a:3c:06:f1:ac:64:e1:4b:c5:8f:f7:
                    c8:c0:ef:e2:7a:b5:39:50:90:a1:86:1e:14:10:2c:
                    a8:12:52:fc:62:17:6b:f9:c7:7a:b7:00:5e:66:14:
                    27:9f:1f:f2:57:ce:47:9e:77:b8:a1:da:0a:f5:23:
                    ac:d7:5b:78:c6:96:41:db:17:cb:0e:30:11:1a:94:
                    d6:3e:d0:43:b4:2d:cf:34:47:f9:8e:21:ed:49:1d:
                    84:3f:df:cb:7f:b3:b8:2d:61:4f:6e:5c:e6:e5:d7:
                    5f:c5:76:a8:9c:7b:22:7f:d9:7e:a5:82:53:94:dc:
                    09:59:2d:1f:9f:1b:96:8a:b0:21:61:5b:a7:c5:93:
                    af:9f:7c:4a:57:81:87:9f:e4:4f:5a:ab:08:91:f4:
                    b8:63:9b:96:39:c9:4e:53:af:dd:c3:53:de:82:3a:
                    99:63:ef:c0:b8:47:8d:6f:f8:33:97:ff:b4:54:5b:
                    11:77:31:16:7f:b6:86:5d:f2:b7:62:ed:76:d2:fc:
                    70:4f:03:d2:3c:44:2d:75:c6:3e:ff:d3:c0:8c:7b:
                    1a:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7D:B5:3A:FB:A6:E6:90:8F:D8:AC:BB:A0:7A:40:E5:99:A5:BF:3F
            X509v3 Authority Key Identifier:
                keyid:E8:2A:E8:B6:91:C7:C5:3E:1C:E0:B3:96:D8:97:57:47:F1:56:04:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/E82AE8B691C7C53E1CE0B396D8975747F15604D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E82AE8B691C7C53E1CE0B396D8975747F15604D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9ffb43b-f8b5-4f1f-9b8f-5b02ddbb6fcf/0/3130332e3137362e3235322e302f32332d3234203d3e20313437313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.176.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:71:51:b9:b0:dc:39:ca:53:14:cc:d7:8f:fe:ba:e5:3b:
         1c:c0:c0:1c:a6:1b:2b:d4:60:86:ca:89:29:ea:84:80:92:aa:
         94:5b:97:bd:56:a6:af:46:40:19:2a:11:51:eb:9c:9e:b6:ce:
         f1:30:c9:f6:79:20:2e:89:80:6d:40:0e:2d:15:ec:02:c8:26:
         22:a5:ac:8c:87:0e:a7:dd:14:d7:a3:a2:70:d0:c8:da:af:1c:
         73:0d:4c:42:0f:3a:9a:c9:aa:ab:3f:fd:47:6d:ed:90:db:fa:
         17:dd:d6:b4:33:f3:53:50:a3:88:33:34:88:7b:b0:70:29:f5:
         2b:2a:bf:24:88:b0:9f:75:6d:a8:24:3b:d7:65:9b:73:bc:79:
         3c:92:86:7d:49:91:a3:e5:60:aa:b7:cf:9b:00:99:9c:2b:1a:
         68:8d:6f:21:c1:66:d0:d0:99:4e:85:fc:05:12:e6:f5:30:cb:
         30:44:e7:94:42:0b:43:c0:01:b1:d8:a7:60:8c:20:31:43:06:
         19:67:37:b1:36:b5:c0:63:c5:de:eb:a5:c0:ee:b0:29:b4:ff:
         57:63:49:31:4e:3e:8c:de:3d:62:66:c4:48:fd:31:7c:a7:a1:
         01:fe:12:af:c1:36:60:83:94:b0:80:b3:b7:ff:a0:56:58:aa:
         ac:58:87:a4
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUNC+lHRhK24iG5gHfAahj3v9XjVUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdG
MTU2MDRENTAeFw0yNDA1MjQxMzU1MDJaFw0yNTA1MjMxNDAwMDJaMDMxMTAvBgNV
BAMTKEE5N0RCNTNBRkJBNkU2OTA4RkQ4QUNCQkEwN0E0MEU1OTlBNUJGM0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC712Nl+ain/UbZjLhJkfROLeCU
xyBdquCRsTiuAKlwCsGiqvktbOoOGan44KdVZOlqPAbxrGThS8WP98jA7+J6tTlQ
kKGGHhQQLKgSUvxiF2v5x3q3AF5mFCefH/JXzkeed7ih2gr1I6zXW3jGlkHbF8sO
MBEalNY+0EO0Lc80R/mOIe1JHYQ/38t/s7gtYU9uXObl11/FdqiceyJ/2X6lglOU
3AlZLR+fG5aKsCFhW6fFk6+ffEpXgYef5E9aqwiR9Lhjm5Y5yU5Tr93DU96COplj
78C4R41v+DOX/7RUWxF3MRZ/toZd8rdi7XbS/HBPA9I8RC11xj7/08CMexoLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUqX21Ovum5pCP2Ky7oHpA5Zmlvz8wHwYDVR0j
BBgwFoAU6CrotpHHxT4c4LOW2JdXR/FWBNUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OWZmYjQzYi1mOGI1LTRmMWYtOWI4Zi01YjAyZGRiYjZmY2YvMC9FODJBRThCNjkx
QzdDNTNFMUNFMEIzOTZEODk3NTc0N0YxNTYwNEQ1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTgyQUU4QjY5MUM3QzUzRTFDRTBCMzk2RDg5NzU3NDdGMTU2
MDRENS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5ZmZiNDNiLWY4YjUtNGYxZi05
YjhmLTViMDJkZGJiNmZjZi8wLzMxMzAzMzJlMzEzNzM2MmUzMjM1MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM0MzczMTM0MzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnsPwwDQYJ
KoZIhvcNAQELBQADggEBAJ5YcVG5sNw5ylMUzNeP/rrlOxzAwBymGyvUYIbKiSnq
hICSqpRbl71Wpq9GQBkqEVHrnJ62zvEwyfZ5IC6JgG1ADi0V7ALIJiKlrIyHDqfd
FNejonDQyNqvHHMNTEIPOprJqqs//Udt7ZDb+hfd1rQz81NQo4gzNIh7sHAp9Ssq
vySIsJ91bagkO9dlm3O8eTyShn1JkaPlYKq3z5sAmZwrGmiNbyHBZtDQmU6F/AUS
5vUwyzBE55RCC0PAAbHYp2CMIDFDBhlnN7E2tcBjxd7rpcDusCm0/1djSTFOPoze
PWJmxEj9MXynoQH+Eq/BNmCDlLCAs7f/oFZYqqxYh6Q=
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:51:52 2024 by rpki-client on console-fra.rpki-client.org