Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa
File:                     3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa (raw, json)
Hash identifier:          9ijjdIcsn67Wi+4IfpASGFLlNQdAFvlj65R9rPd03oc=
Subject key identifier:   A7:73:BB:A9:57:D4:85:85:15:9B:33:2E:21:A7:97:79:7A:C3:BD:97
Certificate issuer:       /CN=94980F009D62A16111BD1186549F0579B0CED71F
Certificate serial:       4867630969A68E2B8FA77D52E1F13076D9052075
Authority key identifier: 94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa
Signing time:             Sat 04 Nov 2023 05:00:01 +0000
ROA not before:           Sat 04 Nov 2023 04:55:01 +0000
ROA not after:            Sat 02 Nov 2024 05:00:01 +0000
asID:                     141051
IP address blocks:        103.155.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl
                          rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Jun 2024 07:40:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:67:63:09:69:a6:8e:2b:8f:a7:7d:52:e1:f1:30:76:d9:05:20:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94980F009D62A16111BD1186549F0579B0CED71F
        Validity
            Not Before: Nov  4 04:55:01 2023 GMT
            Not After : Nov  2 05:00:01 2024 GMT
        Subject: CN=A773BBA957D48585159B332E21A797797AC3BD97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:72:f7:de:72:c1:56:5e:ba:34:7e:e2:5b:
                    18:dc:ba:be:a4:03:a6:b5:0d:14:a3:35:d7:47:9f:
                    d4:58:93:16:78:1a:68:61:0c:d8:3b:09:b6:9d:f3:
                    c9:63:12:78:d9:ac:68:3d:2a:63:b2:ef:00:1c:a1:
                    ff:f0:27:6b:6c:d0:f5:7f:ba:54:60:0a:0f:a0:ec:
                    e3:cb:ee:0f:d5:e3:39:4d:c3:44:ea:62:c0:8d:71:
                    7d:1c:b2:97:79:3d:3c:d9:f0:af:39:2a:ca:54:04:
                    a2:83:1f:88:8c:a5:c2:88:ba:25:f8:74:11:e9:59:
                    2f:33:b8:8d:be:83:ab:66:2e:3a:e6:f4:90:86:a6:
                    d5:9c:04:66:4f:22:65:0b:f4:04:ee:6f:4b:9f:38:
                    20:3a:5e:13:a9:f7:8f:91:8d:74:d2:88:bb:b4:13:
                    63:d0:6e:dc:e2:17:82:ac:56:c7:3a:e1:da:8c:af:
                    8c:33:dd:30:28:cb:b9:a9:f9:d5:01:41:f9:b1:e0:
                    34:6d:a0:c2:0e:ee:20:e0:4c:23:61:8c:c5:c2:c0:
                    19:a2:cb:f7:24:ee:d5:f9:0c:fa:5e:1d:3f:56:62:
                    78:3f:76:47:3b:23:c1:f3:95:83:5b:a2:14:c7:89:
                    21:15:b6:99:f7:a2:74:21:52:39:c2:19:b2:4b:4f:
                    23:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:73:BB:A9:57:D4:85:85:15:9B:33:2E:21:A7:97:79:7A:C3:BD:97
            X509v3 Authority Key Identifier:
                keyid:94:98:0F:00:9D:62:A1:61:11:BD:11:86:54:9F:05:79:B0:CE:D7:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/94980F009D62A16111BD1186549F0579B0CED71F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94980F009D62A16111BD1186549F0579B0CED71F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f46c5f2c-2412-4264-aa0a-1899c37b62bb/0/3130332e3135352e3130342e302f32342d3234203d3e20313431303531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:c8:57:87:28:d2:6b:6d:7b:96:03:a6:be:4d:c4:19:9f:6a:
         71:e6:27:bc:2b:00:b6:12:9f:34:3c:88:57:9f:dc:32:e9:97:
         ad:d9:b1:07:51:0b:f6:fb:e0:33:d4:ee:6d:54:d3:da:6e:de:
         df:57:84:1d:50:ab:08:df:3d:a6:dc:2c:b3:22:d8:60:9d:ce:
         5f:1a:27:ce:9a:6c:e7:ac:f0:17:88:4f:ce:05:c2:37:4b:ca:
         58:35:b7:a9:70:79:25:eb:a1:24:4d:9f:ab:76:a9:db:de:3a:
         1c:8c:96:e4:a4:19:5f:57:84:53:5a:40:35:6f:49:1a:53:ab:
         11:c5:84:90:c1:85:7e:27:2e:90:39:aa:fb:77:b0:c7:dd:ce:
         fe:a3:f4:9f:f7:7c:2a:50:bc:00:10:f4:6e:1c:e9:ec:7b:50:
         91:b4:82:85:ef:da:02:2d:96:9d:00:57:4b:dd:f3:89:bf:03:
         09:d4:09:7e:17:2c:2d:4a:7a:8c:38:d2:4f:77:87:ed:7f:73:
         9d:d9:10:92:71:09:8b:b2:af:03:f7:51:20:fb:3d:29:e9:72:
         c1:41:92:eb:2d:68:8e:d4:c8:d6:48:8e:ec:40:eb:d7:4b:9f:
         ee:d6:92:11:80:9e:9b:5e:4e:94:44:db:e3:39:f6:b3:e8:de:
         43:e1:f8:8e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUSGdjCWmmjiuPp31S4fEwdtkFIHUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTQ5ODBGMDA5RDYyQTE2MTExQkQxMTg2NTQ5RjA1NzlC
MENFRDcxRjAeFw0yMzExMDQwNDU1MDFaFw0yNDExMDIwNTAwMDFaMDMxMTAvBgNV
BAMTKEE3NzNCQkE5NTdENDg1ODUxNTlCMzMyRTIxQTc5Nzc5N0FDM0JEOTcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCor3L33nLBVl66NH7iWxjcur6k
A6a1DRSjNddHn9RYkxZ4GmhhDNg7Cbad88ljEnjZrGg9KmOy7wAcof/wJ2ts0PV/
ulRgCg+g7OPL7g/V4zlNw0TqYsCNcX0cspd5PTzZ8K85KspUBKKDH4iMpcKIuiX4
dBHpWS8zuI2+g6tmLjrm9JCGptWcBGZPImUL9ATub0ufOCA6XhOp94+RjXTSiLu0
E2PQbtziF4KsVsc64dqMr4wz3TAoy7mp+dUBQfmx4DRtoMIO7iDgTCNhjMXCwBmi
y/ck7tX5DPpeHT9WYng/dkc7I8HzlYNbohTHiSEVtpn3onQhUjnCGbJLTyOjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUp3O7qVfUhYUVmzMuIaeXeXrDvZcwHwYDVR0j
BBgwFoAUlJgPAJ1ioWERvRGGVJ8FebDO1x8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NDZjNWYyYy0yNDEyLTQyNjQtYWEwYS0xODk5YzM3YjYyYmIvMC85NDk4MEYwMDlE
NjJBMTYxMTFCRDExODY1NDlGMDU3OUIwQ0VENzFGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTQ5ODBGMDA5RDYyQTE2MTExQkQxMTg2NTQ5RjA1NzlCMENF
RDcxRi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y0NmM1ZjJjLTI0MTItNDI2NC1h
YTBhLTE4OTljMzdiNjJiYi8wLzMxMzAzMzJlMzEzNTM1MmUzMTMwMzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzMDM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnm2gwDQYJ
KoZIhvcNAQELBQADggEBAA7IV4co0mtte5YDpr5NxBmfanHmJ7wrALYSnzQ8iFef
3DLpl63ZsQdRC/b74DPU7m1U09pu3t9XhB1QqwjfPabcLLMi2GCdzl8aJ86abOes
8BeIT84FwjdLylg1t6lweSXroSRNn6t2qdveOhyMluSkGV9XhFNaQDVvSRpTqxHF
hJDBhX4nLpA5qvt3sMfdzv6j9J/3fCpQvAAQ9G4c6ex7UJG0goXv2gItlp0AV0vd
84m/AwnUCX4XLC1Keow40k93h+1/c53ZEJJxCYuyrwP3USD7PSnpcsFBkustaI7U
yNZIjuxA69dLn+7WkhGAnpteTpRE2+M59rPo3kPh+I4=
-----END CERTIFICATE-----
Generated at Sat Jun 22 07:09:51 2024 by rpki-client on console-ams.rpki-client.org