Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
File:                     3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa (raw, json)
Hash identifier:          ea9xX+sjo0TrPI9LqLlWLLsF36pbdmxUxQfCCeXAHFc=
Subject key identifier:   B7:B3:74:B2:E6:3C:8D:18:18:4B:F8:D0:DB:DE:F5:08:51:2C:F8:A8
Certificate issuer:       /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Certificate serial:       37C7D5C6E7FF19EF0E9521A0C8FF7A54DE11A0BD
Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa
Signing time:             Mon 11 Nov 2024 02:56:46 +0000
ROA not before:           Mon 11 Nov 2024 02:51:46 +0000
ROA not after:            Mon 10 Nov 2025 02:56:46 +0000
asID:                     151521
IP address blocks:        103.165.252.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl
                          rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c7:d5:c6:e7:ff:19:ef:0e:95:21:a0:c8:ff:7a:54:de:11:a0:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
        Validity
            Not Before: Nov 11 02:51:46 2024 GMT
            Not After : Nov 10 02:56:46 2025 GMT
        Subject: CN=B7B374B2E63C8D18184BF8D0DBDEF508512CF8A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:52:2c:08:6a:56:20:7f:7a:51:54:bc:34:e4:
                    e4:96:c9:31:97:32:bd:13:d0:bd:e4:d9:8d:60:93:
                    9f:59:ba:47:46:31:cc:ac:68:f6:67:2e:b2:37:5f:
                    b6:0f:f1:a5:13:99:e8:18:02:42:58:19:dd:b7:db:
                    08:29:93:ff:73:1b:45:b5:5c:d7:5b:ca:50:ad:62:
                    47:1c:b8:63:55:1e:84:7c:70:61:41:aa:74:eb:eb:
                    fd:aa:45:5e:de:90:4b:ea:f5:eb:22:a2:9d:d7:69:
                    a5:22:08:2a:33:cb:da:ee:b8:4e:c9:c7:15:7c:c3:
                    a4:92:fd:d8:4d:ce:9f:fd:0e:66:87:19:54:40:b2:
                    86:8f:bb:f5:a4:e4:75:ce:7a:76:67:f4:4a:b3:69:
                    bd:1e:5a:ae:ac:40:15:88:62:7c:82:3b:dd:fd:b0:
                    5b:96:1b:60:bd:7f:c6:54:fe:e2:2f:cb:68:71:10:
                    b4:d3:1a:9c:a1:d5:af:62:af:dd:2a:d6:33:ab:7f:
                    9d:e4:e0:30:ea:92:ec:e0:fb:9e:5d:ab:1a:82:b5:
                    ae:c9:83:6b:d5:09:81:50:25:25:5d:f5:c9:d1:a0:
                    cd:88:cf:df:26:ce:8c:43:3d:81:20:63:35:60:d0:
                    0a:35:c3:42:e2:6e:df:1a:45:e2:e0:7b:96:6a:51:
                    93:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:B3:74:B2:E6:3C:8D:18:18:4B:F8:D0:DB:DE:F5:08:51:2C:F8:A8
            X509v3 Authority Key Identifier:
                keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313531353231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bb:8f:fb:90:f5:8f:b9:03:d8:81:e1:d7:bc:6a:e5:84:9f:4e:
         33:67:05:3d:0a:7e:5e:15:3b:b3:44:5c:aa:7b:62:eb:f6:8e:
         ba:8d:fd:96:2d:d6:35:18:08:fb:28:4e:c9:3d:da:ac:44:e5:
         ff:bd:76:17:30:7e:be:5e:a6:b6:58:4b:a0:2e:6a:b9:ac:cd:
         c2:2d:d1:25:ff:d0:11:65:77:c5:b5:4e:2d:19:dc:0c:48:1b:
         1d:c0:92:03:98:d9:ad:32:25:01:e0:bd:c3:b3:8e:ef:02:1b:
         a5:07:48:2c:94:85:37:ae:7b:fe:9b:8f:78:c2:3c:30:5f:0a:
         39:52:27:25:8e:07:74:85:48:73:45:11:75:4a:17:6a:cd:57:
         04:c5:bf:7c:38:a3:db:9c:f5:e4:a9:d0:8e:af:94:c7:34:37:
         49:c7:87:cb:41:a7:1b:e2:c4:a4:6e:36:49:22:5d:a5:6e:ad:
         52:9b:26:b0:b7:25:90:ef:86:7c:21:ff:20:a6:67:7a:37:54:
         ff:16:41:56:5e:f1:b5:82:e7:8f:79:a8:ad:4a:34:30:c8:69:
         d6:c9:4d:0a:83:32:1b:ed:8c:64:5f:33:39:93:38:d9:af:70:
         b8:77:ee:19:3b:e8:5b:a1:a4:fc:6e:64:8f:43:6d:00:6d:2b:
         db:29:12:89
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUN8fVxuf/Ge8OlSGgyP96VN4RoL0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2
QzE0RThFOTAeFw0yNDExMTEwMjUxNDZaFw0yNTExMTAwMjU2NDZaMDMxMTAvBgNV
BAMTKEI3QjM3NEIyRTYzQzhEMTgxODRCRjhEMERCREVGNTA4NTEyQ0Y4QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUiwIalYgf3pRVLw05OSWyTGX
Mr0T0L3k2Y1gk59ZukdGMcysaPZnLrI3X7YP8aUTmegYAkJYGd232wgpk/9zG0W1
XNdbylCtYkccuGNVHoR8cGFBqnTr6/2qRV7ekEvq9esiop3XaaUiCCozy9ruuE7J
xxV8w6SS/dhNzp/9DmaHGVRAsoaPu/Wk5HXOenZn9Eqzab0eWq6sQBWIYnyCO939
sFuWG2C9f8ZU/uIvy2hxELTTGpyh1a9ir90q1jOrf53k4DDqkuzg+55dqxqCta7J
g2vVCYFQJSVd9cnRoM2Iz98mzoxDPYEgYzVg0Ao1w0Libt8aReLge5ZqUZNBAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUt7N0suY8jRgYS/jQ2971CFEs+KgwHwYDVR0j
BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw
QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0
RThFOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMGJkY2M1LTRjZDktNDZiMC05
ZDdiLWQyMzFhOWU1N2I1MC8wLzMxMzAzMzJlMzEzNjM1MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMyMzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpfwwDQYJ
KoZIhvcNAQELBQADggEBALuP+5D1j7kD2IHh17xq5YSfTjNnBT0Kfl4VO7NEXKp7
Yuv2jrqN/ZYt1jUYCPsoTsk92qxE5f+9dhcwfr5eprZYS6AuarmszcIt0SX/0BFl
d8W1Ti0Z3AxIGx3AkgOY2a0yJQHgvcOzju8CG6UHSCyUhTeue/6bj3jCPDBfCjlS
JyWOB3SFSHNFEXVKF2rNVwTFv3w4o9uc9eSp0I6vlMc0N0nHh8tBpxvixKRuNkki
XaVurVKbJrC3JZDvhnwh/yCmZ3o3VP8WQVZe8bWC5495qK1KNDDIadbJTQqDMhvt
jGRfMzmTONmvcLh37hk76FuhpPxuZI9DbQBtK9spEok=
-----END CERTIFICATE-----
Generated at Sun Nov 24 20:07:40 2024 by rpki-client on console-ams.rpki-client.org