Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
File:                     3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa (raw, json)
Hash identifier:          TvLODdVnXuE2Yr2FRnlK05HAaGjB3EU+xIIX1UmnRZI=
Subject key identifier:   88:72:71:61:63:A2:20:2E:4E:F8:86:39:D2:BE:A7:FD:B8:A8:FC:69
Certificate issuer:       /CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
Certificate serial:       47C27CE9E70AC035B8761032048E559CEBD154B0
Authority key identifier: 90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa
Signing time:             Fri 12 Apr 2024 04:01:27 +0000
ROA not before:           Fri 12 Apr 2024 03:56:27 +0000
ROA not after:            Fri 11 Apr 2025 04:01:27 +0000
asID:                     139455
IP address blocks:        103.145.52.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl
                          rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:c2:7c:e9:e7:0a:c0:35:b8:76:10:32:04:8e:55:9c:eb:d1:54:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3
        Validity
            Not Before: Apr 12 03:56:27 2024 GMT
            Not After : Apr 11 04:01:27 2025 GMT
        Subject: CN=8872716163A2202E4EF88639D2BEA7FDB8A8FC69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:b2:f3:68:c4:01:0f:33:13:0d:16:5f:a5:ea:
                    dd:39:9c:99:06:ad:16:70:7a:3f:28:54:8c:c7:3e:
                    32:e8:a5:bd:5f:d5:68:7d:15:09:b3:1a:17:51:be:
                    c9:84:89:88:0c:26:cb:0e:ed:b5:ba:90:be:1f:9a:
                    ec:f7:4d:db:36:eb:84:64:f0:ab:f0:10:7f:b6:b4:
                    11:e3:d9:ab:34:11:9c:2a:ed:db:fa:a3:0f:68:4d:
                    af:89:36:ae:27:97:bf:87:80:1d:f8:03:9e:df:9e:
                    6e:10:91:d0:9e:f2:24:49:a4:9c:37:f1:41:2e:95:
                    dc:13:75:cd:52:f5:b6:3a:09:80:4b:6e:d7:96:22:
                    11:c7:f4:75:b7:13:f1:b5:14:1c:20:8a:46:84:75:
                    79:33:06:de:54:40:f3:6d:7b:d4:f5:2a:f3:09:6f:
                    33:7c:60:11:3c:00:bb:17:f1:58:81:04:9a:c2:c1:
                    b4:e5:8a:ea:f6:db:1d:94:93:a4:5c:0b:7c:2b:c6:
                    d0:e5:8d:50:6d:97:d7:96:ab:4c:47:4c:e6:74:7f:
                    0d:35:f7:f9:2f:7b:10:e0:1f:9e:8f:c2:ff:04:f7:
                    af:24:e7:51:ad:79:41:4e:cb:50:3d:1d:f9:05:19:
                    12:34:1d:7f:4a:f5:8d:76:0a:43:38:1d:67:30:d3:
                    a5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:71:61:63:A2:20:2E:4E:F8:86:39:D2:BE:A7:FD:B8:A8:FC:69
            X509v3 Authority Key Identifier:
                keyid:90:E2:CC:AC:A3:23:EA:B2:14:5F:54:B7:CF:65:C5:FA:EC:EF:83:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90E2CCACA323EAB2145F54B7CF65C5FAECEF83A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f77ffe2a-31e4-4800-97d4-7874c1231911/0/3130332e3134352e35322e302f32332d3233203d3e20313339343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.145.52.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:60:1a:59:69:7c:e2:f8:ec:5c:f0:55:30:21:e3:bd:53:c4:
         23:f8:c7:3c:8b:03:bd:e4:92:aa:7f:65:0a:14:ef:ec:cd:fc:
         b9:9a:ab:b9:74:9c:2a:e6:fb:85:3d:43:3a:ce:42:2f:6a:3b:
         68:8e:a4:12:e2:e1:51:b1:92:87:18:a1:97:c7:68:79:0a:8d:
         fe:4e:49:25:6c:74:79:1f:33:8d:11:54:a9:ec:13:c3:0d:68:
         78:af:30:f9:f7:91:cc:08:f1:90:fb:74:90:03:15:ec:7c:de:
         e6:31:15:6d:0f:49:e6:4a:b7:cf:09:c2:8d:0f:3a:02:95:42:
         30:af:31:da:b0:98:67:c1:d2:fe:d8:70:9c:da:d9:c0:3f:74:
         88:e3:00:e7:52:29:64:8f:52:81:c2:e9:b4:18:b0:59:4e:77:
         6e:4e:dd:a1:ae:ed:d0:d0:a7:67:a6:9b:1a:49:73:09:26:4a:
         37:ff:d5:11:e7:77:5e:a7:79:2f:22:28:47:b8:92:12:e0:c3:
         0e:a3:f5:ef:46:b7:aa:95:81:d6:ea:61:93:00:bd:4a:4c:22:
         2e:cf:17:c0:8a:95:3a:8d:38:97:b7:65:8a:77:fb:48:d6:64:
         0e:3f:d9:c9:22:b2:09:e3:0e:a2:9d:85:f0:19:a7:97:cf:80:
         fd:2d:da:20
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUR8J86ecKwDW4dhAyBI5VnOvRVLAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFF
Q0VGODNBMzAeFw0yNDA0MTIwMzU2MjdaFw0yNTA0MTEwNDAxMjdaMDMxMTAvBgNV
BAMTKDg4NzI3MTYxNjNBMjIwMkU0RUY4ODYzOUQyQkVBN0ZEQjhBOEZDNjkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDisvNoxAEPMxMNFl+l6t05nJkG
rRZwej8oVIzHPjLopb1f1Wh9FQmzGhdRvsmEiYgMJssO7bW6kL4fmuz3Tds264Rk
8KvwEH+2tBHj2as0EZwq7dv6ow9oTa+JNq4nl7+HgB34A57fnm4QkdCe8iRJpJw3
8UEuldwTdc1S9bY6CYBLbteWIhHH9HW3E/G1FBwgikaEdXkzBt5UQPNte9T1KvMJ
bzN8YBE8ALsX8ViBBJrCwbTliur22x2Uk6RcC3wrxtDljVBtl9eWq0xHTOZ0fw01
9/kvexDgH56Pwv8E968k51GteUFOy1A9HfkFGRI0HX9K9Y12CkM4HWcw06XhAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUiHJxYWOiIC5O+IY50r6n/bio/GkwHwYDVR0j
BBgwFoAUkOLMrKMj6rIUX1S3z2XF+uzvg6MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
NzdmZmUyYS0zMWU0LTQ4MDAtOTdkNC03ODc0YzEyMzE5MTEvMC85MEUyQ0NBQ0Ez
MjNFQUIyMTQ1RjU0QjdDRjY1QzVGQUVDRUY4M0EzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTBFMkNDQUNBMzIzRUFCMjE0NUY1NEI3Q0Y2NUM1RkFFQ0VG
ODNBMy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3N2ZmZTJhLTMxZTQtNDgwMC05
N2Q0LTc4NzRjMTIzMTkxMS8wLzMxMzAzMzJlMzEzNDM1MmUzNTMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzM5MzQzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5E0MA0GCSqG
SIb3DQEBCwUAA4IBAQAWYBpZaXzi+Oxc8FUwIeO9U8Qj+Mc8iwO95JKqf2UKFO/s
zfy5mqu5dJwq5vuFPUM6zkIvajtojqQS4uFRsZKHGKGXx2h5Co3+TkklbHR5HzON
EVSp7BPDDWh4rzD595HMCPGQ+3SQAxXsfN7mMRVtD0nmSrfPCcKNDzoClUIwrzHa
sJhnwdL+2HCc2tnAP3SI4wDnUilkj1KBwum0GLBZTnduTt2hru3Q0KdnppsaSXMJ
Jko3/9UR53dep3kvIihHuJIS4MMOo/XvRreqlYHW6mGTAL1KTCIuzxfAipU6jTiX
t2WKd/tI1mQOP9nJIrIJ4w6inYXwGaeXz4D9Ldog
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:49 2024 by rpki-client on console-ams.rpki-client.org