Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa
File:                     3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa (raw, json)
Hash identifier:          W4wsYAuXt6fIXte/bBdwjcmKLXnkv0E1ZhxzpI8yqoI=
Subject key identifier:   E3:EA:50:6F:49:09:C2:66:CD:A0:53:95:F6:AA:38:38:06:20:8C:E4
Certificate issuer:       /CN=49CDCA308C289D688C649C2303BECB3ED76B5054
Certificate serial:       1429E4BA6EC10D982F6E8A32A40560D642C18823
Authority key identifier: 49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa
Signing time:             Mon 01 Jul 2024 01:03:47 +0000
ROA not before:           Mon 01 Jul 2024 00:58:47 +0000
ROA not after:            Mon 30 Jun 2025 01:03:47 +0000
asID:                     131775
IP address blocks:        103.16.198.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl
                          rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:29:e4:ba:6e:c1:0d:98:2f:6e:8a:32:a4:05:60:d6:42:c1:88:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49CDCA308C289D688C649C2303BECB3ED76B5054
        Validity
            Not Before: Jul  1 00:58:47 2024 GMT
            Not After : Jun 30 01:03:47 2025 GMT
        Subject: CN=E3EA506F4909C266CDA05395F6AA383806208CE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:f3:df:51:0c:43:c0:b4:05:ae:a3:c3:25:fb:
                    7d:d4:f6:24:ac:f9:f8:fc:0a:ab:9a:c1:5a:e1:1c:
                    54:cf:a2:08:4d:bb:5c:21:d9:e6:39:87:4a:ed:b1:
                    2d:bc:4b:94:11:4a:d6:36:32:62:7d:02:6b:c3:c1:
                    0e:49:e9:be:b8:31:cc:59:8a:35:18:18:21:61:50:
                    1d:bc:5d:20:c9:84:cb:f5:c7:ce:b3:18:ab:67:e5:
                    22:16:8d:2e:3e:1c:b8:f0:16:dc:ea:2c:e6:3b:17:
                    6b:ed:0d:be:84:aa:0e:3e:27:8e:cd:d4:d3:c9:4b:
                    54:bc:c6:91:83:7f:c8:2e:86:45:b7:45:ea:93:a9:
                    c8:7e:0c:ae:3c:dc:ec:bd:34:cf:e0:8a:eb:0d:5c:
                    2d:1b:14:28:4b:19:91:4f:3b:f0:0e:28:9a:e0:23:
                    68:6a:b8:4f:d9:e6:b0:9f:31:7e:1a:fb:1f:45:22:
                    40:e1:50:67:11:46:62:7b:b4:74:b8:f5:7c:89:15:
                    93:8f:94:6b:fb:33:3d:22:45:93:86:b5:30:3b:88:
                    2f:78:f5:ef:76:20:42:0a:e1:64:f7:43:80:99:31:
                    d7:2d:8f:d3:bc:20:45:33:69:47:22:fe:7e:4c:e3:
                    f0:f4:07:48:cd:e9:a8:07:6f:57:fa:e3:e4:4f:dd:
                    b2:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:EA:50:6F:49:09:C2:66:CD:A0:53:95:F6:AA:38:38:06:20:8C:E4
            X509v3 Authority Key Identifier:
                keyid:49:CD:CA:30:8C:28:9D:68:8C:64:9C:23:03:BE:CB:3E:D7:6B:50:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/49CDCA308C289D688C649C2303BECB3ED76B5054.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49CDCA308C289D688C649C2303BECB3ED76B5054.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eeb98ced-af18-4bff-ad71-73d2b0c9d8a9/0/3130332e31362e3139382e302f32342d3234203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.16.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:60:53:9f:f6:3f:fe:1f:ba:66:23:aa:7e:1c:2f:57:a4:28:
         7e:3c:aa:95:f7:9b:62:20:cd:fb:86:76:33:24:b5:bb:f8:03:
         dd:93:72:a0:f6:8a:17:28:bd:9d:30:50:b9:85:7f:56:c5:49:
         bd:12:42:6d:c2:fd:91:a7:c3:5b:f3:16:84:ef:b5:29:e2:54:
         9c:86:30:8e:da:73:02:90:7e:ef:e3:25:1c:4d:e4:d3:54:23:
         ae:d2:fd:2c:50:7d:ae:28:d7:12:bf:54:87:2b:48:77:e4:a9:
         57:e5:4c:90:06:02:e2:5c:b7:30:b6:b4:3a:ef:8a:5a:5b:96:
         f3:a3:86:17:aa:b3:44:c9:b1:a2:99:8a:27:70:fb:bc:a6:f4:
         2f:c3:4c:8a:33:ea:9c:b5:34:4b:2e:e7:a4:b4:fb:84:e4:51:
         d7:2b:7e:6d:c8:74:4f:49:fd:d9:1c:ab:07:2d:80:b4:62:b4:
         bb:d8:82:5b:0d:b4:32:02:d2:36:08:89:59:0c:50:3a:b4:ca:
         02:1d:8e:a3:e7:11:fb:17:a4:6b:b9:52:8e:53:42:23:73:e0:
         3e:8e:86:91:ba:69:9a:a7:47:db:92:fd:b8:aa:52:e2:bf:2f:
         f7:b6:58:84:fb:5b:8e:7a:16:75:ff:84:97:ea:03:ca:a3:e1:
         d4:7d:55:5f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFCnkum7BDZgvbooypAVg1kLBiCMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VE
NzZCNTA1NDAeFw0yNDA3MDEwMDU4NDdaFw0yNTA2MzAwMTAzNDdaMDMxMTAvBgNV
BAMTKEUzRUE1MDZGNDkwOUMyNjZDREEwNTM5NUY2QUEzODM4MDYyMDhDRTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO899RDEPAtAWuo8Ml+33U9iSs
+fj8CquawVrhHFTPoghNu1wh2eY5h0rtsS28S5QRStY2MmJ9AmvDwQ5J6b64McxZ
ijUYGCFhUB28XSDJhMv1x86zGKtn5SIWjS4+HLjwFtzqLOY7F2vtDb6Eqg4+J47N
1NPJS1S8xpGDf8guhkW3ReqTqch+DK483Oy9NM/giusNXC0bFChLGZFPO/AOKJrg
I2hquE/Z5rCfMX4a+x9FIkDhUGcRRmJ7tHS49XyJFZOPlGv7Mz0iRZOGtTA7iC94
9e92IEIK4WT3Q4CZMdctj9O8IEUzaUci/n5M4/D0B0jN6agHb1f64+RP3bJxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU4+pQb0kJwmbNoFOV9qo4OAYgjOQwHwYDVR0j
BBgwFoAUSc3KMIwonWiMZJwjA77LPtdrUFQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ZWI5OGNlZC1hZjE4LTRiZmYtYWQ3MS03M2QyYjBjOWQ4YTkvMC80OUNEQ0EzMDhD
Mjg5RDY4OEM2NDlDMjMwM0JFQ0IzRUQ3NkI1MDU0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDlDRENBMzA4QzI4OUQ2ODhDNjQ5QzIzMDNCRUNCM0VENzZC
NTA1NC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VlYjk4Y2VkLWFmMTgtNGJmZi1h
ZDcxLTczZDJiMGM5ZDhhOS8wLzMxMzAzMzJlMzEzNjJlMzEzOTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZxDGMA0GCSqG
SIb3DQEBCwUAA4IBAQCLYFOf9j/+H7pmI6p+HC9XpCh+PKqV95tiIM37hnYzJLW7
+APdk3Kg9ooXKL2dMFC5hX9WxUm9EkJtwv2Rp8Nb8xaE77Up4lSchjCO2nMCkH7v
4yUcTeTTVCOu0v0sUH2uKNcSv1SHK0h35KlX5UyQBgLiXLcwtrQ674paW5bzo4YX
qrNEybGimYoncPu8pvQvw0yKM+qctTRLLuektPuE5FHXK35tyHRPSf3ZHKsHLYC0
YrS72IJbDbQyAtI2CIlZDFA6tMoCHY6j5xH7F6RruVKOU0Ijc+A+joaRummap0fb
kv24qlLivy/3tliE+1uOehZ1/4SX6gPKo+HUfVVf
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:40 2024 by rpki-client on console-fra.rpki-client.org