Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa
File:                     3130332e36372e36392e302f32342d3234203d3e20313531393938.roa (raw, json)
Hash identifier:          kaVFMH8foRRe9PZ1pgPoo5ASjB6/BVJQS9mBarSuCWM=
Subject key identifier:   70:F9:50:E9:AF:68:49:73:33:60:AD:39:C2:F2:73:CA:1C:88:6A:92
Certificate issuer:       /CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B
Certificate serial:       18A66D9FD594C560081A442AE488515280506C74
Authority key identifier: 53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa
Signing time:             Mon 07 Oct 2024 07:00:31 +0000
ROA not before:           Mon 07 Oct 2024 06:55:31 +0000
ROA not after:            Mon 06 Oct 2025 07:00:31 +0000
asID:                     151998
IP address blocks:        103.67.69.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl
                          rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 11:29:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:a6:6d:9f:d5:94:c5:60:08:1a:44:2a:e4:88:51:52:80:50:6c:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53135743CD59EB438954FEB651A5D92D9BCC4F6B
        Validity
            Not Before: Oct  7 06:55:31 2024 GMT
            Not After : Oct  6 07:00:31 2025 GMT
        Subject: CN=70F950E9AF6849733360AD39C2F273CA1C886A92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f1:a4:11:96:d3:b4:d9:0d:04:bb:60:6e:b9:
                    04:21:31:52:ca:61:d6:e2:3f:47:5e:9b:c8:b1:27:
                    cd:d6:95:cb:6f:09:ba:db:8d:ab:4a:08:73:9c:59:
                    21:a6:21:f0:6f:a9:a1:4a:14:9b:a5:1b:99:4e:90:
                    1b:fb:75:3c:44:94:48:94:67:57:1b:79:7e:16:d1:
                    60:80:d0:fe:48:fa:c7:cf:e1:75:cc:18:fc:bf:ca:
                    c6:eb:d0:67:eb:a3:c5:ea:97:ba:36:25:5c:3b:19:
                    06:50:37:0e:20:73:c4:81:ec:b6:14:ce:b2:71:be:
                    5b:63:73:9f:84:b5:84:80:82:d5:32:8b:83:2a:b2:
                    7d:bb:d6:f5:79:2b:6a:e2:dc:9a:65:10:59:dd:42:
                    15:17:9e:59:f9:3b:75:59:f6:40:0e:1c:75:aa:c9:
                    39:da:16:3a:6b:56:03:d4:8b:81:55:0d:53:d1:62:
                    1e:35:5e:0e:89:a5:86:fa:7d:a6:cc:e9:e7:8d:96:
                    b7:1e:0b:11:f8:e7:38:60:2f:27:51:80:82:5f:17:
                    cb:2c:6c:52:fc:88:15:28:c9:5e:8b:66:70:bf:2c:
                    a2:86:2e:1b:ac:8b:85:18:bb:bc:e3:a8:06:2d:0f:
                    7f:db:52:1d:18:76:22:d7:08:be:1c:59:5d:2e:81:
                    06:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:F9:50:E9:AF:68:49:73:33:60:AD:39:C2:F2:73:CA:1C:88:6A:92
            X509v3 Authority Key Identifier:
                keyid:53:13:57:43:CD:59:EB:43:89:54:FE:B6:51:A5:D9:2D:9B:CC:4F:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/53135743CD59EB438954FEB651A5D92D9BCC4F6B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/53135743CD59EB438954FEB651A5D92D9BCC4F6B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0d8da2d-a506-4763-bc3c-e280bf7517a4/0/3130332e36372e36392e302f32342d3234203d3e20313531393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.67.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:05:a7:f4:49:69:69:e7:68:1d:19:b6:5f:1c:ae:b0:e1:bc:
         93:98:d9:c9:67:67:c4:9a:c5:1b:9e:e8:cd:db:f7:72:c7:af:
         4a:a9:42:48:bf:38:77:04:ac:e1:d7:2d:21:0a:4b:52:63:1d:
         9a:0e:27:c3:fc:c0:81:10:1d:92:c9:ac:47:88:71:dc:8d:f5:
         08:9d:03:d4:09:8b:38:47:17:fa:57:a5:df:3e:a4:0a:33:11:
         1c:85:69:78:6b:c5:5c:2c:1a:05:8f:13:05:11:97:8c:00:92:
         ac:b4:81:af:a3:67:84:a6:5b:7e:50:e5:1f:33:1d:a5:59:76:
         35:a7:34:d0:95:72:81:e2:b7:b6:1f:ec:33:9a:89:c2:d9:db:
         3d:3e:d7:9f:ad:a8:f7:a4:6e:19:6c:ba:35:d0:f6:09:23:57:
         15:9b:9b:a6:2d:f1:dd:5d:26:69:da:54:e6:2c:a9:e5:a0:44:
         b7:dd:ff:c4:72:0a:59:4a:42:50:1c:c5:d6:c9:b0:8b:70:f9:
         67:50:b6:61:79:63:ff:94:f5:f7:1a:84:34:cd:43:b3:5b:b0:
         84:8f:6d:eb:dd:6a:d5:34:af:00:3a:77:ea:89:02:62:a8:7e:
         7b:1b:d2:2e:52:2b:ff:a2:47:1e:9c:c4:94:12:98:b9:c2:de:
         ea:e6:e8:0d
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUGKZtn9WUxWAIGkQq5IhRUoBQbHQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5
QkNDNEY2QjAeFw0yNDEwMDcwNjU1MzFaFw0yNTEwMDYwNzAwMzFaMDMxMTAvBgNV
BAMTKDcwRjk1MEU5QUY2ODQ5NzMzMzYwQUQzOUMyRjI3M0NBMUM4ODZBOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo8aQRltO02Q0Eu2BuuQQhMVLK
YdbiP0dem8ixJ83WlctvCbrbjatKCHOcWSGmIfBvqaFKFJulG5lOkBv7dTxElEiU
Z1cbeX4W0WCA0P5I+sfP4XXMGPy/ysbr0Gfro8Xql7o2JVw7GQZQNw4gc8SB7LYU
zrJxvltjc5+EtYSAgtUyi4Mqsn271vV5K2ri3JplEFndQhUXnln5O3VZ9kAOHHWq
yTnaFjprVgPUi4FVDVPRYh41Xg6JpYb6fabM6eeNlrceCxH45zhgLydRgIJfF8ss
bFL8iBUoyV6LZnC/LKKGLhusi4UYu7zjqAYtD3/bUh0YdiLXCL4cWV0ugQZ5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUcPlQ6a9oSXMzYK05wvJzyhyIapIwHwYDVR0j
BBgwFoAUUxNXQ81Z60OJVP62UaXZLZvMT2swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MGQ4ZGEyZC1hNTA2LTQ3NjMtYmMzYy1lMjgwYmY3NTE3YTQvMC81MzEzNTc0M0NE
NTlFQjQzODk1NEZFQjY1MUE1RDkyRDlCQ0M0RjZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTMxMzU3NDNDRDU5RUI0Mzg5NTRGRUI2NTFBNUQ5MkQ5QkND
NEY2Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YwZDhkYTJkLWE1MDYtNDc2My1i
YzNjLWUyODBiZjc1MTdhNC8wLzMxMzAzMzJlMzYzNzJlMzYzOTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzUzMTM5MzkzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGdDRTANBgkqhkiG
9w0BAQsFAAOCAQEAXgWn9ElpaedoHRm2XxyusOG8k5jZyWdnxJrFG57ozdv3csev
SqlCSL84dwSs4dctIQpLUmMdmg4nw/zAgRAdksmsR4hx3I31CJ0D1AmLOEcX+lel
3z6kCjMRHIVpeGvFXCwaBY8TBRGXjACSrLSBr6NnhKZbflDlHzMdpVl2Nac00JVy
geK3th/sM5qJwtnbPT7Xn62o96RuGWy6NdD2CSNXFZubpi3x3V0madpU5iyp5aBE
t93/xHIKWUpCUBzF1smwi3D5Z1C2YXlj/5T19xqENM1Ds1uwhI9t691q1TSvADp3
6okCYqh+exvSLlIr/6JHHpzElBKYucLe6uboDQ==
-----END CERTIFICATE-----
Generated at Mon Nov 25 10:49:34 2024 by rpki-client on console-fra.rpki-client.org