Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa
File:                     3130332e3234372e31372e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          6LRt0fcyRQdkMwpKOAZ7R5EV3hsXiWk7pl3Kk3abi5k=
Subject key identifier:   AF:5C:E5:28:7C:F6:80:A3:AF:2E:EE:9D:B8:46:CE:19:92:F3:8A:D5
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       35B1B369A7EDB40FE6843DA6121E59E7386F00D0
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 26 Feb 2024 02:17:23 +0000
ROA not before:           Mon 26 Feb 2024 02:12:23 +0000
ROA not after:            Mon 24 Feb 2025 02:17:23 +0000
asID:                     38165
IP address blocks:        103.247.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b1:b3:69:a7:ed:b4:0f:e6:84:3d:a6:12:1e:59:e7:38:6f:00:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Feb 26 02:12:23 2024 GMT
            Not After : Feb 24 02:17:23 2025 GMT
        Subject: CN=AF5CE5287CF680A3AF2EEE9DB846CE1992F38AD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9e:eb:96:72:73:a7:c3:8c:d9:56:35:63:45:
                    5a:5d:74:fe:d3:ff:ab:af:5b:ba:46:6c:f6:ee:58:
                    af:38:9e:48:ff:ee:1c:d8:bd:d3:a6:40:cb:0b:a8:
                    b0:61:54:bb:70:6e:ab:12:8e:19:d2:37:ed:b7:08:
                    30:8d:ed:f6:f6:23:b3:30:5f:e7:0d:a9:00:8b:6e:
                    d4:c9:10:a6:bf:4a:97:0a:8d:9e:d0:0c:29:d6:b2:
                    3f:f5:43:02:8d:86:36:b5:59:7a:b3:1b:33:fa:ed:
                    2b:1b:45:6d:37:d3:10:80:a6:30:c4:b3:6c:27:c8:
                    11:cc:8b:0f:83:31:e7:f9:d1:eb:2d:91:3f:b9:ea:
                    c5:da:dd:89:9b:64:5a:20:a1:e1:07:fd:f5:06:93:
                    e3:a4:91:8e:05:c4:2b:4a:e3:11:ea:54:19:12:6f:
                    be:36:85:4d:53:94:5b:57:7b:cb:81:0e:09:e0:00:
                    9c:c7:bf:5f:73:c0:42:20:7e:1d:3c:35:3f:13:af:
                    62:56:d0:92:78:90:8b:e3:fc:3f:6c:74:a0:af:d6:
                    cb:92:02:46:23:d0:b4:e9:19:8f:5a:6c:b0:ea:a6:
                    42:83:2f:86:7f:a6:ff:58:a7:84:87:70:10:da:19:
                    da:ff:7b:60:73:2d:93:4e:60:84:6b:64:4d:35:eb:
                    4a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:5C:E5:28:7C:F6:80:A3:AF:2E:EE:9D:B8:46:CE:19:92:F3:8A:D5
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e3234372e31372e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:9b:91:d3:a7:18:04:95:b8:a1:74:23:8f:f4:03:c6:ee:87:
         93:44:7a:ef:9e:f2:7c:8e:26:64:ed:ca:f0:0f:ce:bb:53:27:
         f4:d9:f6:0c:ba:b5:69:60:76:6b:7c:46:72:5d:3a:3b:df:f8:
         45:62:dc:b0:d0:95:81:94:6a:46:a6:1c:6e:57:c6:a8:7e:43:
         59:10:18:e6:54:69:4d:9d:c6:89:10:b3:db:11:86:f9:75:b2:
         8f:9c:20:00:ec:a9:4a:b8:db:e5:af:17:6a:63:1b:46:f3:08:
         82:0c:1d:ab:84:f7:89:28:44:b4:8d:11:de:55:3c:20:0b:c4:
         46:86:0e:ad:f9:e6:e0:3d:6e:90:8a:95:1a:01:1c:77:90:29:
         14:c1:69:14:f9:05:d6:f9:dd:04:fe:c5:46:67:74:ef:c6:5a:
         12:9e:68:0b:35:d1:c5:7b:fa:4a:b8:4e:51:37:56:a1:8b:b4:
         8f:5c:ec:bb:16:21:5f:14:2f:54:76:58:63:03:9d:fe:92:f2:
         41:4f:c2:d2:13:25:24:23:8f:14:63:89:73:fa:15:5b:f1:5c:
         b3:70:e1:d7:38:05:22:f8:9e:5d:84:5e:d0:38:20:3d:8f:a6:
         f6:16:dc:e0:8b:2c:d9:b1:cc:f9:97:f0:69:26:83:a6:ce:9a:
         d1:cd:3e:c7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUNbGzaafttA/mhD2mEh5Z5zhvANAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5
NzlEMTA1MzAeFw0yNDAyMjYwMjEyMjNaFw0yNTAyMjQwMjE3MjNaMDMxMTAvBgNV
BAMTKEFGNUNFNTI4N0NGNjgwQTNBRjJFRUU5REI4NDZDRTE5OTJGMzhBRDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnuuWcnOnw4zZVjVjRVpddP7T
/6uvW7pGbPbuWK84nkj/7hzYvdOmQMsLqLBhVLtwbqsSjhnSN+23CDCN7fb2I7Mw
X+cNqQCLbtTJEKa/SpcKjZ7QDCnWsj/1QwKNhja1WXqzGzP67SsbRW030xCApjDE
s2wnyBHMiw+DMef50estkT+56sXa3YmbZFogoeEH/fUGk+OkkY4FxCtK4xHqVBkS
b742hU1TlFtXe8uBDgngAJzHv19zwEIgfh08NT8Tr2JW0JJ4kIvj/D9sdKCv1suS
AkYj0LTpGY9abLDqpkKDL4Z/pv9Yp4SHcBDaGdr/e2BzLZNOYIRrZE0160qjAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUr1zlKHz2gKOvLu6duEbOGZLzitUwHwYDVR0j
BBgwFoAU8sIkFL8I/Aiwrr9E+vhahZedEFMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzQ0OGMxMS1mOGQzLTQ1N2QtOGUyMi04NDg4N2FiMjJhMzAvMC9GMkMyMjQxNEJG
MDhGQzA4QjBBRUJGNDRGQUY4NUE4NTk3OUQxMDUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjJDMjI0MTRCRjA4RkMwOEIwQUVCRjQ0RkFGODVBODU5NzlE
MTA1My5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3NDQ4YzExLWY4ZDMtNDU3ZC04
ZTIyLTg0ODg3YWIyMmEzMC8wLzMxMzAzMzJlMzIzNDM3MmUzMTM3MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3ETANBgkqhkiG
9w0BAQsFAAOCAQEAbJuR06cYBJW4oXQjj/QDxu6Hk0R6757yfI4mZO3K8A/Ou1Mn
9Nn2DLq1aWB2a3xGcl06O9/4RWLcsNCVgZRqRqYcblfGqH5DWRAY5lRpTZ3GiRCz
2xGG+XWyj5wgAOypSrjb5a8XamMbRvMIggwdq4T3iShEtI0R3lU8IAvERoYOrfnm
4D1ukIqVGgEcd5ApFMFpFPkF1vndBP7FRmd078ZaEp5oCzXRxXv6SrhOUTdWoYu0
j1zsuxYhXxQvVHZYYwOd/pLyQU/C0hMlJCOPFGOJc/oVW/Fcs3Dh1zgFIvieXYRe
0DggPY+m9hbc4Iss2bHM+ZfwaSaDps6a0c0+xw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:52 2024 by rpki-client on console-ams.rpki-client.org