Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
File:                     3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa (raw, json)
Hash identifier:          OYg7qAhuryoyd0ZPI/hBmw2iC9UdebHt/rrBQ3eUY0k=
Subject key identifier:   66:F4:FB:E4:24:81:B9:FD:C0:5D:94:05:52:C6:7A:72:AF:21:BE:E6
Certificate issuer:       /CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
Certificate serial:       208AD61DA89845EE175F3F9F40FFE5F78CD049F3
Authority key identifier: 65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa
Signing time:             Tue 14 May 2024 06:00:32 +0000
ROA not before:           Tue 14 May 2024 05:55:32 +0000
ROA not after:            Tue 13 May 2025 06:00:32 +0000
asID:                     149696
IP address blocks:        103.186.99.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl
                          rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:8a:d6:1d:a8:98:45:ee:17:5f:3f:9f:40:ff:e5:f7:8c:d0:49:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65C50EAF84A840821CDFF6E27F5BFD9EADC2823E
        Validity
            Not Before: May 14 05:55:32 2024 GMT
            Not After : May 13 06:00:32 2025 GMT
        Subject: CN=66F4FBE42481B9FDC05D940552C67A72AF21BEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:6b:4d:17:6c:e6:ba:bd:67:cd:34:14:a8:73:
                    f2:02:56:0b:3e:b0:c6:83:d1:9b:75:47:5a:5d:51:
                    93:ae:a2:71:5f:97:15:a7:e6:0a:81:48:30:9e:7b:
                    45:2b:da:8e:92:cd:29:59:80:9a:a3:47:47:20:f6:
                    c1:88:f5:16:f7:4e:a3:bc:ba:7d:ad:af:9b:a9:c7:
                    15:7e:89:ae:c5:85:48:58:00:c5:fa:6c:08:5e:53:
                    52:6b:33:f9:e0:ba:ea:72:c4:76:b0:9f:17:65:dc:
                    ef:7c:d8:5e:91:59:a5:08:d5:71:fb:8f:de:b5:8c:
                    1e:eb:b0:99:47:d8:6f:3d:3d:69:c0:26:c4:3e:ea:
                    27:67:52:98:4a:a6:df:20:24:a5:8c:fa:ca:61:1e:
                    a9:32:c7:21:6b:6a:21:b2:6a:83:5f:e1:29:a3:c9:
                    91:85:94:fb:c3:ed:73:34:b5:12:97:93:39:b5:50:
                    ef:0a:bb:ac:1f:19:7b:b3:43:91:e3:66:29:e9:23:
                    74:a9:41:0a:92:69:55:b1:4d:c4:24:b6:16:1e:90:
                    16:38:83:e1:f3:1b:42:cd:60:5d:e6:d3:c4:92:92:
                    45:f2:99:f9:42:5f:81:00:5f:fe:b4:26:dc:bd:eb:
                    0a:a5:3c:e3:13:0b:bf:9d:a3:33:56:ff:61:13:cb:
                    aa:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:F4:FB:E4:24:81:B9:FD:C0:5D:94:05:52:C6:7A:72:AF:21:BE:E6
            X509v3 Authority Key Identifier:
                keyid:65:C5:0E:AF:84:A8:40:82:1C:DF:F6:E2:7F:5B:FD:9E:AD:C2:82:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/65C50EAF84A840821CDFF6E27F5BFD9EADC2823E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0872086-805c-40aa-87b1-beb8e1302c26/0/3130332e3138362e39392e302f32342d3234203d3e20313439363936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:82:5a:64:be:4c:51:a3:49:bc:6e:23:9c:8e:af:9c:e1:3a:
         7c:b6:39:04:81:37:21:6f:96:e1:e2:a5:27:4e:d8:b7:62:00:
         5a:04:70:ea:18:24:bc:9b:28:35:4f:89:bd:73:68:82:0a:4f:
         a9:ef:22:04:57:a3:49:b8:f4:6f:48:b0:23:2f:f8:17:8b:34:
         46:7d:50:7e:60:8c:98:6f:60:d4:be:a8:9d:3d:c3:73:97:1f:
         5e:06:6a:54:96:82:68:9a:bf:c1:d9:38:db:12:1f:3c:43:a5:
         fa:6d:85:9d:a7:7d:1b:f7:fe:db:05:c0:11:0d:c9:f7:85:9e:
         53:b3:9a:c8:0f:4b:f1:0e:fc:88:99:52:76:ce:3b:03:8f:ef:
         c0:a3:0b:b6:5f:f5:23:e8:82:c1:b9:ca:a2:17:71:9e:a7:0d:
         30:14:e2:0a:6f:87:81:51:54:a8:7a:ba:54:b9:45:f6:da:9e:
         fe:df:96:c9:2e:06:53:ae:1d:a7:2d:c4:7a:5c:0e:c6:b0:e6:
         88:96:aa:4f:7a:9a:89:8d:3f:56:3a:4c:eb:3a:09:cf:34:5d:
         49:02:63:1b:e4:72:fd:52:ba:f5:7e:2b:66:ef:24:4f:a4:0f:
         26:61:f8:44:84:73:98:dc:82:34:cd:2d:82:f5:a5:5e:bd:76:
         24:15:c9:68
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUIIrWHaiYRe4XXz+fQP/l94zQSfMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVB
REMyODIzRTAeFw0yNDA1MTQwNTU1MzJaFw0yNTA1MTMwNjAwMzJaMDMxMTAvBgNV
BAMTKDY2RjRGQkU0MjQ4MUI5RkRDMDVEOTQwNTUyQzY3QTcyQUYyMUJFRTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDea00XbOa6vWfNNBSoc/ICVgs+
sMaD0Zt1R1pdUZOuonFflxWn5gqBSDCee0Ur2o6SzSlZgJqjR0cg9sGI9Rb3TqO8
un2tr5upxxV+ia7FhUhYAMX6bAheU1JrM/nguupyxHawnxdl3O982F6RWaUI1XH7
j961jB7rsJlH2G89PWnAJsQ+6idnUphKpt8gJKWM+sphHqkyxyFraiGyaoNf4Smj
yZGFlPvD7XM0tRKXkzm1UO8Ku6wfGXuzQ5HjZinpI3SpQQqSaVWxTcQkthYekBY4
g+HzG0LNYF3m08SSkkXymflCX4EAX/60Jty96wqlPOMTC7+dozNW/2ETy6rBAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUZvT75CSBuf3AXZQFUsZ6cq8hvuYwHwYDVR0j
BBgwFoAUZcUOr4SoQIIc3/bif1v9nq3Cgj4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MDg3MjA4Ni04MDVjLTQwYWEtODdiMS1iZWI4ZTEzMDJjMjYvMC82NUM1MEVBRjg0
QTg0MDgyMUNERkY2RTI3RjVCRkQ5RUFEQzI4MjNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjVDNTBFQUY4NEE4NDA4MjFDREZGNkUyN0Y1QkZEOUVBREMy
ODIzRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwODcyMDg2LTgwNWMtNDBhYS04
N2IxLWJlYjhlMTMwMmMyNi8wLzMxMzAzMzJlMzEzODM2MmUzOTM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzYzOTM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7pjMA0GCSqG
SIb3DQEBCwUAA4IBAQBiglpkvkxRo0m8biOcjq+c4Tp8tjkEgTchb5bh4qUnTti3
YgBaBHDqGCS8myg1T4m9c2iCCk+p7yIEV6NJuPRvSLAjL/gXizRGfVB+YIyYb2DU
vqidPcNzlx9eBmpUloJomr/B2TjbEh88Q6X6bYWdp30b9/7bBcARDcn3hZ5Ts5rI
D0vxDvyImVJ2zjsDj+/Aowu2X/Uj6ILBucqiF3Gepw0wFOIKb4eBUVSoerpUuUX2
2p7+35bJLgZTrh2nLcR6XA7GsOaIlqpPepqJjT9WOkzrOgnPNF1JAmMb5HL9Urr1
fitm7yRPpA8mYfhEhHOY3II0zS2C9aVevXYkFclo
-----END CERTIFICATE-----
Generated at Thu Nov 21 15:45:24 2024 by rpki-client on console-ams.rpki-client.org