Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa
File:                     3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa (raw, json)
Hash identifier:          m7mAYTc7iCuKCxV3rw8LcPMvMx67xGzo+y4I7ZdAIog=
Subject key identifier:   A2:02:20:F3:52:DA:CD:76:F1:39:5A:65:02:A6:D3:B5:18:1E:A9:35
Certificate issuer:       /CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
Certificate serial:       63061E9B4E7652D3EEF57CFFEF1DF72D305CF0BE
Authority key identifier: 53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa
Signing time:             Tue 12 Sep 2023 09:00:01 +0000
ROA not before:           Tue 12 Sep 2023 08:55:01 +0000
ROA not after:            Tue 10 Sep 2024 09:00:01 +0000
asID:                     139988
IP address blocks:        103.148.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl
                          rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:06:1e:9b:4e:76:52:d3:ee:f5:7c:ff:ef:1d:f7:2d:30:5c:f0:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5335076B95F2978BE3ACDB39360AE5A22D0D4B55
        Validity
            Not Before: Sep 12 08:55:01 2023 GMT
            Not After : Sep 10 09:00:01 2024 GMT
        Subject: CN=A20220F352DACD76F1395A6502A6D3B5181EA935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b1:cb:dc:cb:9f:67:79:e0:5d:10:79:08:a7:
                    11:6c:21:5a:20:9f:b1:5a:18:6b:7a:fe:a8:f9:06:
                    b4:db:b0:37:e0:da:c0:05:ac:29:b9:fa:04:93:be:
                    d8:9f:93:08:59:53:53:c1:ed:ad:cc:d5:6b:2c:62:
                    27:e1:13:52:f3:ba:9a:96:12:a2:00:2b:58:2c:6b:
                    24:99:7d:38:80:a6:0b:63:0e:f3:64:e5:e0:e2:5f:
                    52:21:ec:e7:4b:33:c0:8d:90:2b:fe:f9:2d:d0:33:
                    ab:2f:23:5a:ae:a5:3a:97:f8:e4:54:62:8e:d6:5f:
                    d6:0f:f0:15:24:d6:69:f3:c8:71:84:14:76:0b:8d:
                    61:fc:f1:6f:28:f5:5b:e8:3f:5e:92:69:8b:c1:a0:
                    60:31:d2:50:08:74:a9:c5:c4:cd:e9:68:2b:e2:ec:
                    2e:4b:fc:82:d0:1a:25:79:dc:78:e6:67:d9:42:b5:
                    01:52:70:c7:7c:dc:44:b7:56:d0:de:91:f2:b4:5a:
                    42:5c:99:27:47:f3:65:78:20:46:27:e6:e5:b5:46:
                    b6:8a:01:c4:d7:0f:cb:93:7d:a5:81:cf:e7:2d:ec:
                    17:95:03:fa:46:e1:58:11:af:72:31:45:b9:f0:97:
                    59:97:6f:32:02:52:1e:32:81:73:64:49:37:08:6b:
                    46:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:02:20:F3:52:DA:CD:76:F1:39:5A:65:02:A6:D3:B5:18:1E:A9:35
            X509v3 Authority Key Identifier:
                keyid:53:35:07:6B:95:F2:97:8B:E3:AC:DB:39:36:0A:E5:A2:2D:0D:4B:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5335076B95F2978BE3ACDB39360AE5A22D0D4B55.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f2d66d10-b857-4bef-9395-45d5ab2c44f9/0/3130332e3134382e3130302e302f32332d3234203d3e20313339393838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         76:6f:0d:38:31:17:b8:db:7f:3f:6b:94:c1:c8:40:5f:65:cc:
         8a:01:8e:ae:07:55:b3:6c:83:68:60:d0:cd:ae:e2:91:da:e2:
         a2:5a:f4:42:5a:6d:21:1b:58:f5:83:64:91:53:84:92:e4:87:
         d7:a4:2d:bf:07:d8:1d:fa:c3:df:ba:c1:48:45:30:80:a3:24:
         ea:15:fb:b9:43:67:63:e7:40:6d:1a:58:94:02:45:93:fd:54:
         e4:66:4c:92:79:c9:99:3c:8e:49:5b:e0:52:7f:dd:0e:fb:85:
         18:3c:c6:46:24:d6:8b:b0:e9:17:e5:51:db:c1:87:0a:03:81:
         5d:48:c6:5d:b0:d1:4b:1f:72:dc:a2:c3:7b:cd:06:74:f3:4b:
         ea:23:34:92:1c:33:31:d4:73:de:81:e5:50:73:aa:47:89:77:
         d9:9b:58:29:27:fb:18:35:85:49:7f:15:11:63:d2:41:ba:c2:
         a1:78:b7:81:18:fb:e5:85:db:dc:e5:4a:c0:e8:39:dd:05:93:
         d2:87:76:7a:13:96:57:c3:a7:e3:7b:ae:8a:8c:a9:aa:07:38:
         98:b4:3f:23:41:03:31:45:33:49:9c:e0:3b:a6:f7:b1:42:76:
         5f:f0:3d:07:d4:f5:af:c8:ff:9a:58:55:44:ec:a8:62:3a:ee:
         92:ff:75:bd
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUYwYem052UtPu9Xz/7x33LTBc8L4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIy
RDBENEI1NTAeFw0yMzA5MTIwODU1MDFaFw0yNDA5MTAwOTAwMDFaMDMxMTAvBgNV
BAMTKEEyMDIyMEYzNTJEQUNENzZGMTM5NUE2NTAyQTZEM0I1MTgxRUE5MzUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBscvcy59neeBdEHkIpxFsIVog
n7FaGGt6/qj5BrTbsDfg2sAFrCm5+gSTvtifkwhZU1PB7a3M1WssYifhE1LzupqW
EqIAK1gsaySZfTiApgtjDvNk5eDiX1Ih7OdLM8CNkCv++S3QM6svI1qupTqX+ORU
Yo7WX9YP8BUk1mnzyHGEFHYLjWH88W8o9VvoP16SaYvBoGAx0lAIdKnFxM3paCvi
7C5L/ILQGiV53HjmZ9lCtQFScMd83ES3VtDekfK0WkJcmSdH82V4IEYn5uW1RraK
AcTXD8uTfaWBz+ct7BeVA/pG4VgRr3IxRbnwl1mXbzICUh4ygXNkSTcIa0btAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUogIg81LazXbxOVplAqbTtRgeqTUwHwYDVR0j
BBgwFoAUUzUHa5Xyl4vjrNs5Ngrloi0NS1UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MmQ2NmQxMC1iODU3LTRiZWYtOTM5NS00NWQ1YWIyYzQ0ZjkvMC81MzM1MDc2Qjk1
RjI5NzhCRTNBQ0RCMzkzNjBBRTVBMjJEMEQ0QjU1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTMzNTA3NkI5NUYyOTc4QkUzQUNEQjM5MzYwQUU1QTIyRDBE
NEI1NS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YyZDY2ZDEwLWI4NTctNGJlZi05
Mzk1LTQ1ZDVhYjJjNDRmOS8wLzMxMzAzMzJlMzEzNDM4MmUzMTMwMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM4Mzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnlGQwDQYJ
KoZIhvcNAQELBQADggEBAHZvDTgxF7jbfz9rlMHIQF9lzIoBjq4HVbNsg2hg0M2u
4pHa4qJa9EJabSEbWPWDZJFThJLkh9ekLb8H2B36w9+6wUhFMICjJOoV+7lDZ2Pn
QG0aWJQCRZP9VORmTJJ5yZk8jklb4FJ/3Q77hRg8xkYk1ouw6RflUdvBhwoDgV1I
xl2w0Usfctyiw3vNBnTzS+ojNJIcMzHUc96B5VBzqkeJd9mbWCkn+xg1hUl/FRFj
0kG6wqF4t4EY++WF29zlSsDoOd0Fk9KHdnoTllfDp+N7roqMqaoHOJi0PyNBAzFF
M0mc4Dum97FCdl/wPQfU9a/I/5pYVUTsqGI67pL/db0=
-----END CERTIFICATE-----
Generated at Sun Jun 2 19:19:47 2024 by rpki-client on console-fra.rpki-client.org