Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
File:                     3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa (raw, json)
Hash identifier:          4ffaA+HJTlhbFhWXiIV/z7UyuFvQH2sRUiYe/L6G0PQ=
Subject key identifier:   18:E5:31:32:2B:DD:8E:CB:A4:FF:15:19:2A:31:C8:74:7F:C6:35:A1
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       58A787561F2CAFED26EDAFE08FA0B5E1D9BA4D8B
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa
Signing time:             Sat 09 Nov 2024 16:00:00 +0000
ROA not before:           Sat 09 Nov 2024 15:55:00 +0000
ROA not after:            Sat 08 Nov 2025 16:00:00 +0000
asID:                     136855
IP address blocks:        103.108.242.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl
                          rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:a7:87:56:1f:2c:af:ed:26:ed:af:e0:8f:a0:b5:e1:d9:ba:4d:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Nov  9 15:55:00 2024 GMT
            Not After : Nov  8 16:00:00 2025 GMT
        Subject: CN=18E531322BDD8ECBA4FF15192A31C8747FC635A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:d7:8e:73:f0:85:ef:32:9b:81:27:15:26:
                    ca:3f:53:1c:17:82:d0:9d:8e:9e:fd:fa:1b:95:44:
                    71:17:d0:3a:df:87:33:36:53:fd:07:af:03:c1:73:
                    e1:66:5b:bf:2d:b8:02:43:7c:c8:23:e8:98:79:cc:
                    22:ec:c3:b6:07:57:61:ae:75:2f:f7:66:68:4c:04:
                    3d:df:3b:ab:40:97:68:a0:82:69:a9:3d:96:95:24:
                    61:9d:63:a8:7c:2b:a5:db:67:1f:ed:50:6d:8a:48:
                    0f:99:7e:0c:29:f2:f4:97:f3:ba:91:b7:0b:b0:4a:
                    38:eb:3b:eb:e7:5b:69:06:39:1a:76:84:c9:28:c8:
                    b3:0b:2e:c6:39:fb:e4:54:c7:64:f4:cc:f4:27:55:
                    08:5c:f7:5f:02:3e:d3:e8:ad:80:5c:47:d9:a5:25:
                    03:83:1a:4d:a1:9b:1b:5f:79:e9:97:b7:c2:b1:ae:
                    82:97:40:d6:d9:2e:7b:06:7b:58:de:c3:c0:b8:bd:
                    1e:6d:34:95:19:18:ff:ca:f8:61:f0:79:5e:25:7e:
                    c4:64:ba:38:77:56:5c:c9:44:65:5f:fe:de:e8:d9:
                    fd:e3:ad:f8:08:6c:fc:94:04:32:6f:6b:2b:58:50:
                    d5:c9:79:ce:9f:6a:43:7a:cb:bb:46:39:0c:1c:7e:
                    ee:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E5:31:32:2B:DD:8E:CB:A4:FF:15:19:2A:31:C8:74:7F:C6:35:A1
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234322e302f32342d3234203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.242.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:33:f2:48:93:ef:4a:12:7d:ce:5a:67:3b:4b:0c:70:06:08:
         87:fc:ec:1a:d7:40:55:44:86:40:e2:74:fb:a6:6d:ba:54:65:
         70:2b:ef:c0:08:2c:e3:0a:9e:6a:20:cd:dc:31:e1:32:ef:83:
         f3:a2:30:64:da:d3:2f:aa:6b:c6:ef:d8:88:b6:3f:cc:6f:fe:
         e5:15:ad:1f:a1:aa:ed:55:12:73:25:4e:8e:4f:1f:fb:8f:6a:
         f7:8d:fe:2c:85:6b:5a:90:17:dc:14:69:a2:5f:02:70:95:4f:
         cb:75:7d:6f:a2:a8:20:29:95:6a:35:aa:78:ca:59:a5:5d:ae:
         6a:5c:8b:aa:bb:83:2c:a7:62:b1:5c:af:5a:16:fd:83:ee:c0:
         31:2c:c4:c8:53:b4:3c:d2:33:bd:ec:cb:05:17:45:8b:c3:51:
         f2:2e:7b:52:5e:d7:c4:0e:7e:63:69:0b:c5:d2:2e:06:2e:97:
         aa:79:3e:e1:27:6f:90:d6:96:26:30:1e:c5:e0:26:2e:63:55:
         61:de:bc:fe:26:3f:8a:bf:49:51:38:7e:aa:7e:84:af:82:0b:
         ba:90:64:1b:0b:0b:66:cf:b3:70:9b:6e:b0:a6:36:d2:c1:f1:
         0e:68:13:8d:eb:4e:ab:41:35:6d:d7:7e:68:3d:cc:c4:73:59:
         00:4b:37:de
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWKeHVh8sr+0m7a/gj6C14dm6TYswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5
NDc5OUFBNjAeFw0yNDExMDkxNTU1MDBaFw0yNTExMDgxNjAwMDBaMDMxMTAvBgNV
BAMTKDE4RTUzMTMyMkJERDhFQ0JBNEZGMTUxOTJBMzFDODc0N0ZDNjM1QTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQONeOc/CF7zKbgScVJso/UxwX
gtCdjp79+huVRHEX0DrfhzM2U/0HrwPBc+FmW78tuAJDfMgj6Jh5zCLsw7YHV2Gu
dS/3ZmhMBD3fO6tAl2iggmmpPZaVJGGdY6h8K6XbZx/tUG2KSA+Zfgwp8vSX87qR
twuwSjjrO+vnW2kGORp2hMkoyLMLLsY5++RUx2T0zPQnVQhc918CPtPorYBcR9ml
JQODGk2hmxtfeemXt8KxroKXQNbZLnsGe1jew8C4vR5tNJUZGP/K+GHweV4lfsRk
ujh3VlzJRGVf/t7o2f3jrfgIbPyUBDJvaytYUNXJec6fakN6y7tGOQwcfu5nAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUGOUxMivdjsuk/xUZKjHIdH/GNaEwHwYDVR0j
BBgwFoAUyke6bZeAYRrqaLyb9yckrpR5mqYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC9DQTQ3QkE2RDk3
ODA2MTFBRUE2OEJDOUJGNzI3MjRBRTk0Nzk5QUE2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5NDc5
OUFBNi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ViODFiY2VhLWI3MGYtNDM3NC05
MjRiLWI2Yzc3ODEwOTgzNy8wLzMxMzAzMzJlMzEzMDM4MmUzMjM0MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzYzODM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnbPIwDQYJ
KoZIhvcNAQELBQADggEBAHMz8kiT70oSfc5aZztLDHAGCIf87BrXQFVEhkDidPum
bbpUZXAr78AILOMKnmogzdwx4TLvg/OiMGTa0y+qa8bv2Ii2P8xv/uUVrR+hqu1V
EnMlTo5PH/uPaveN/iyFa1qQF9wUaaJfAnCVT8t1fW+iqCAplWo1qnjKWaVdrmpc
i6q7gyynYrFcr1oW/YPuwDEsxMhTtDzSM73sywUXRYvDUfIue1Je18QOfmNpC8XS
LgYul6p5PuEnb5DWliYwHsXgJi5jVWHevP4mP4q/SVE4fqp+hK+CC7qQZBsLC2bP
s3CbbrCmNtLB8Q5oE43rTqtBNW3Xfmg9zMRzWQBLN94=
-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org