Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa
File:                     3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa (raw, json)
Hash identifier:          wab1AYCl6NDvOGzVc9Pfye0mSkVG/7Ay7lTAwHKcsT0=
Subject key identifier:   DA:B8:8A:70:BE:60:E7:AA:15:8A:7F:5F:6D:E5:B1:E8:25:3C:73:46
Certificate issuer:       /CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20
Certificate serial:       59F02C8AF2BDD08419C0650B12C074D0EB420061
Authority key identifier: AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa
Signing time:             Wed 03 Jan 2024 08:02:01 +0000
ROA not before:           Wed 03 Jan 2024 07:57:01 +0000
ROA not after:            Wed 01 Jan 2025 08:02:01 +0000
asID:                     135478
IP address blocks:        103.121.182.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl
                          rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:f0:2c:8a:f2:bd:d0:84:19:c0:65:0b:12:c0:74:d0:eb:42:00:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE7B61A9C16793784CC25CEC0295516C69FF5E20
        Validity
            Not Before: Jan  3 07:57:01 2024 GMT
            Not After : Jan  1 08:02:01 2025 GMT
        Subject: CN=DAB88A70BE60E7AA158A7F5F6DE5B1E8253C7346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:f8:8b:a3:c2:c1:80:5f:1a:fe:8c:0d:fb:29:
                    40:fd:30:d8:aa:e0:88:b7:71:9a:0a:1a:fc:70:e4:
                    73:34:95:d9:4a:a7:47:76:49:18:40:a7:0e:4b:15:
                    bd:27:1d:5e:96:34:a7:fe:51:ce:f1:f3:ba:a2:df:
                    7b:e8:d9:d5:73:58:d4:8f:99:e7:8f:84:58:08:e4:
                    23:57:cd:f3:5b:a4:c6:1d:a6:db:a9:8c:7c:b4:c1:
                    a1:a4:62:75:bb:7a:cd:05:fd:6a:da:d6:8c:1c:2b:
                    f8:cd:d0:68:cf:3b:16:9a:f3:58:8d:27:5b:ae:1a:
                    90:11:0d:a6:36:08:96:1f:8a:41:27:06:79:54:46:
                    67:e6:fa:fe:1d:68:5e:3c:f9:df:95:89:21:f8:2e:
                    ee:91:1b:be:e3:ec:42:96:4a:57:d6:a0:19:20:2d:
                    17:5b:3c:f0:71:1e:55:ab:a2:92:ab:b4:36:98:f0:
                    fd:af:8e:98:3f:46:55:a9:d5:cc:ed:64:80:99:f2:
                    53:c7:2f:61:69:a0:fa:9d:46:f5:2d:e6:9b:d8:5d:
                    13:20:df:7b:1f:c4:0f:12:cc:a2:f8:71:29:fe:0a:
                    21:8a:cb:47:71:47:52:21:23:e6:0b:64:38:63:57:
                    69:41:96:7a:68:17:82:68:fe:cc:e5:a3:2b:92:94:
                    c3:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:B8:8A:70:BE:60:E7:AA:15:8A:7F:5F:6D:E5:B1:E8:25:3C:73:46
            X509v3 Authority Key Identifier:
                keyid:AE:7B:61:A9:C1:67:93:78:4C:C2:5C:EC:02:95:51:6C:69:FF:5E:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/AE7B61A9C16793784CC25CEC0295516C69FF5E20.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AE7B61A9C16793784CC25CEC0295516C69FF5E20.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ee895ceb-2777-4ad9-92db-4873e485c1f6/0/3130332e3132312e3138322e302f32332d3234203d3e20313335343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:66:7c:52:8e:74:a1:a0:5c:dd:f7:37:8f:bb:8a:13:72:05:
         c1:a9:db:86:98:90:93:74:0c:85:f0:e3:c5:d3:bd:ff:c2:c9:
         2a:86:e8:38:00:56:71:b3:03:cb:b4:54:f1:23:60:db:00:0e:
         02:ff:36:79:db:f5:e0:69:f5:2e:a4:dc:43:bf:46:5d:82:e9:
         3e:47:71:b1:d1:36:b7:40:fa:e8:c8:3a:71:35:58:73:f5:39:
         41:42:76:e1:7e:a7:51:ac:25:35:a0:02:66:96:da:6b:a7:b3:
         5a:b9:17:58:95:d9:c4:79:6a:21:bc:10:03:1e:bb:06:78:03:
         d6:52:6c:1f:39:27:7f:11:c3:ea:9f:7f:e9:17:b3:4b:eb:87:
         4c:41:80:c8:88:fb:75:ee:de:52:dd:23:13:7b:1b:b4:60:9c:
         bd:ae:41:7f:4c:23:1c:0d:36:7c:d5:c9:2d:10:9f:28:93:38:
         1e:c4:8d:30:e8:b3:11:b6:ba:60:2c:3d:9b:4c:2a:4c:fb:2a:
         66:f3:7c:23:44:6d:d0:93:3d:a8:10:b1:66:e2:7b:58:fa:3c:
         b5:a3:5a:f3:10:4f:60:9a:46:f4:e8:0e:e5:3b:5b:ae:10:68:
         44:ae:12:e8:bf:b8:86:42:51:9d:b1:3e:e1:6b:c5:b8:c2:f0:
         bd:24:67:eb
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUWfAsivK90IQZwGULEsB00OtCAGEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2
OUZGNUUyMDAeFw0yNDAxMDMwNzU3MDFaFw0yNTAxMDEwODAyMDFaMDMxMTAvBgNV
BAMTKERBQjg4QTcwQkU2MEU3QUExNThBN0Y1RjZERTVCMUU4MjUzQzczNDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0+IujwsGAXxr+jA37KUD9MNiq
4Ii3cZoKGvxw5HM0ldlKp0d2SRhApw5LFb0nHV6WNKf+Uc7x87qi33vo2dVzWNSP
meePhFgI5CNXzfNbpMYdptupjHy0waGkYnW7es0F/Wra1owcK/jN0GjPOxaa81iN
J1uuGpARDaY2CJYfikEnBnlURmfm+v4daF48+d+ViSH4Lu6RG77j7EKWSlfWoBkg
LRdbPPBxHlWropKrtDaY8P2vjpg/RlWp1cztZICZ8lPHL2FpoPqdRvUt5pvYXRMg
33sfxA8SzKL4cSn+CiGKy0dxR1IhI+YLZDhjV2lBlnpoF4Jo/szloyuSlMPLAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU2riKcL5g56oVin9fbeWx6CU8c0YwHwYDVR0j
BBgwFoAUrnthqcFnk3hMwlzsApVRbGn/XiAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZTg5NWNlYi0yNzc3LTRhZDktOTJkYi00ODczZTQ4NWMxZjYvMC9BRTdCNjFBOUMx
Njc5Mzc4NENDMjVDRUMwMjk1NTE2QzY5RkY1RTIwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUU3QjYxQTlDMTY3OTM3ODRDQzI1Q0VDMDI5NTUxNkM2OUZG
NUUyMC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlODk1Y2ViLTI3NzctNGFkOS05
MmRiLTQ4NzNlNDg1YzFmNi8wLzMxMzAzMzJlMzEzMjMxMmUzMTM4MzIyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzUzNDM3Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnebYwDQYJ
KoZIhvcNAQELBQADggEBAJRmfFKOdKGgXN33N4+7ihNyBcGp24aYkJN0DIXw48XT
vf/CySqG6DgAVnGzA8u0VPEjYNsADgL/Nnnb9eBp9S6k3EO/Rl2C6T5HcbHRNrdA
+ujIOnE1WHP1OUFCduF+p1GsJTWgAmaW2muns1q5F1iV2cR5aiG8EAMeuwZ4A9ZS
bB85J38Rw+qff+kXs0vrh0xBgMiI+3Xu3lLdIxN7G7RgnL2uQX9MIxwNNnzVyS0Q
nyiTOB7EjTDosxG2umAsPZtMKkz7KmbzfCNEbdCTPagQsWbie1j6PLWjWvMQT2Ca
RvToDuU7W64QaESuEui/uIZCUZ2xPuFrxbjC8L0kZ+s=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:58 2024 by rpki-client on console-fra.rpki-client.org