Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa
File:                     3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa (raw, json)
Hash identifier:          B22oYPyMT/OSdCCpI9b5ZjNciq4f5rM/63hoAKd4Eh4=
Subject key identifier:   DF:F4:0D:87:AA:DC:64:E5:76:E7:75:D0:47:91:18:48:88:9B:EC:83
Certificate issuer:       /CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2
Certificate serial:       3FBFCE311BB9FB5728164E23970B4F493524EDDA
Authority key identifier: B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa
Signing time:             Fri 19 Jan 2024 07:02:31 +0000
ROA not before:           Fri 19 Jan 2024 06:57:31 +0000
ROA not after:            Fri 17 Jan 2025 07:02:31 +0000
asID:                     137371
IP address blocks:        103.116.168.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl
                          rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:bf:ce:31:1b:b9:fb:57:28:16:4e:23:97:0b:4f:49:35:24:ed:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2
        Validity
            Not Before: Jan 19 06:57:31 2024 GMT
            Not After : Jan 17 07:02:31 2025 GMT
        Subject: CN=DFF40D87AADC64E576E775D047911848889BEC83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:fb:55:b1:95:c8:55:ca:74:fe:83:cb:5b:79:
                    22:aa:a4:16:57:54:90:6d:18:d6:9d:67:0c:3a:95:
                    a4:4b:5f:4f:67:2a:1e:5c:21:66:6a:bb:c3:aa:9c:
                    8c:4c:8d:6d:f0:d6:64:d5:a7:11:f7:9f:24:41:04:
                    5b:fb:8c:73:b9:8e:74:22:3f:4e:ed:74:99:12:66:
                    ee:68:b1:48:31:52:53:ea:1a:89:91:01:28:ea:2e:
                    24:ac:70:da:31:e8:af:c9:ef:8b:ae:a1:ff:32:f3:
                    d4:23:92:88:12:a6:3b:47:f4:04:7a:02:83:6e:43:
                    e9:aa:51:9b:82:10:2f:b1:d5:6c:ac:90:6b:e2:5a:
                    7d:0b:b1:10:08:12:26:dd:61:bb:d0:6e:4f:02:75:
                    14:5a:03:d1:04:82:68:74:0c:45:77:ba:14:9d:8a:
                    42:34:aa:ac:b6:0b:ab:9b:04:41:a9:b6:c4:94:72:
                    5f:2f:6d:b8:9c:ab:71:83:5c:3f:19:17:de:54:9c:
                    ef:d2:6e:7c:89:e7:3c:c8:2c:a0:8a:30:c7:e6:a5:
                    6e:6e:79:a6:d2:b9:c2:4e:fd:43:30:9a:08:da:26:
                    48:93:b8:ba:f0:c1:da:da:05:4e:1b:4a:f2:f3:39:
                    79:3a:f5:8c:33:f6:bf:49:23:cf:c5:84:39:ff:c0:
                    53:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:F4:0D:87:AA:DC:64:E5:76:E7:75:D0:47:91:18:48:88:9B:EC:83
            X509v3 Authority Key Identifier:
                keyid:B5:8E:67:4F:E8:3A:74:66:7F:EF:1B:69:A0:7E:AA:FA:02:B2:AC:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B58E674FE83A74667FEF1B69A07EAAFA02B2ACA2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f326e4ca-54e4-48bc-9e79-a62efaead032/0/3130332e3131362e3136382e302f32342d3234203d3e20313337333731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.116.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0d:22:dc:ec:ab:1f:45:12:27:55:41:3d:fa:d5:44:28:54:18:
         f6:88:c7:8b:ad:bb:e7:d9:4c:4d:56:39:02:37:f4:16:4c:6f:
         eb:d0:20:9d:eb:98:9f:a9:3a:f2:45:57:6b:52:4d:f1:32:9a:
         55:c5:2e:d9:7f:ff:e7:45:ad:a3:31:78:f0:97:83:36:41:d6:
         4f:9c:3d:61:b7:34:88:e4:7e:ab:df:09:e9:67:df:40:8b:f8:
         a3:c0:52:4d:47:db:9d:d1:05:de:88:fc:45:9f:fe:f8:ce:51:
         6c:14:c0:70:76:dd:05:0a:ab:20:3d:76:53:a9:a9:b1:b3:84:
         bb:70:b3:5b:c9:c5:34:f7:70:9f:70:63:2e:fa:7a:44:a7:fb:
         df:7e:45:9e:59:e7:6e:d5:ed:01:86:56:52:1f:fa:84:30:e8:
         71:42:66:e6:46:f7:3d:f0:08:a5:eb:25:01:3d:6a:df:c0:2e:
         df:04:48:27:2e:4f:75:ac:a1:e5:ad:ef:8d:87:21:b4:38:c0:
         66:24:cd:0a:14:4f:32:7b:83:4c:55:69:3d:7e:3b:39:d8:20:
         0a:e1:29:33:42:a3:a5:a9:c7:7e:ea:77:11:97:6c:0e:0f:49:
         2f:f1:e2:17:43:6a:50:5a:c2:7a:cf:20:71:4b:b2:5f:e9:ff:
         04:fe:fc:36
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUP7/OMRu5+1coFk4jlwtPSTUk7dowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEw
MkIyQUNBMjAeFw0yNDAxMTkwNjU3MzFaFw0yNTAxMTcwNzAyMzFaMDMxMTAvBgNV
BAMTKERGRjQwRDg3QUFEQzY0RTU3NkU3NzVEMDQ3OTExODQ4ODg5QkVDODMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8+1WxlchVynT+g8tbeSKqpBZX
VJBtGNadZww6laRLX09nKh5cIWZqu8OqnIxMjW3w1mTVpxH3nyRBBFv7jHO5jnQi
P07tdJkSZu5osUgxUlPqGomRASjqLiSscNox6K/J74uuof8y89QjkogSpjtH9AR6
AoNuQ+mqUZuCEC+x1WyskGviWn0LsRAIEibdYbvQbk8CdRRaA9EEgmh0DEV3uhSd
ikI0qqy2C6ubBEGptsSUcl8vbbicq3GDXD8ZF95UnO/SbnyJ5zzILKCKMMfmpW5u
eabSucJO/UMwmgjaJkiTuLrwwdraBU4bSvLzOXk69Ywz9r9JI8/FhDn/wFPtAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQU3/QNh6rcZOV253XQR5EYSIib7IMwHwYDVR0j
BBgwFoAUtY5nT+g6dGZ/7xtpoH6q+gKyrKIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MzI2ZTRjYS01NGU0LTQ4YmMtOWU3OS1hNjJlZmFlYWQwMzIvMC9CNThFNjc0RkU4
M0E3NDY2N0ZFRjFCNjlBMDdFQUFGQTAyQjJBQ0EyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjU4RTY3NEZFODNBNzQ2NjdGRUYxQjY5QTA3RUFBRkEwMkIy
QUNBMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2YzMjZlNGNhLTU0ZTQtNDhiYy05
ZTc5LWE2MmVmYWVhZDAzMi8wLzMxMzAzMzJlMzEzMTM2MmUzMTM2MzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzM3MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABndKgwDQYJ
KoZIhvcNAQELBQADggEBAA0i3OyrH0USJ1VBPfrVRChUGPaIx4utu+fZTE1WOQI3
9BZMb+vQIJ3rmJ+pOvJFV2tSTfEymlXFLtl//+dFraMxePCXgzZB1k+cPWG3NIjk
fqvfCeln30CL+KPAUk1H253RBd6I/EWf/vjOUWwUwHB23QUKqyA9dlOpqbGzhLtw
s1vJxTT3cJ9wYy76ekSn+99+RZ5Z527V7QGGVlIf+oQw6HFCZuZG9z3wCKXrJQE9
at/ALt8ESCcuT3WsoeWt742HIbQ4wGYkzQoUTzJ7g0xVaT1+OznYIArhKTNCo6Wp
x37qdxGXbA4PSS/x4hdDalBawnrPIHFLsl/p/wT+/DY=
-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:23 2024 by rpki-client on console-fra.rpki-client.org