Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
File:                     3130332e35312e34342e302f32322d3234203d3e20313333383139.roa (raw, json)
Hash identifier:          +iPaBQP4Ys+oee6RqKOUUvjExvThvITWA8unaa0E58k=
Subject key identifier:   40:7E:15:68:4F:A1:7A:18:85:DB:1F:B6:64:29:E8:C6:53:39:6D:9D
Certificate issuer:       /CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
Certificate serial:       5FA766FA50760FC66A324FC310FF016CA461F148
Authority key identifier: E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa
Signing time:             Mon 01 Jul 2024 01:03:50 +0000
ROA not before:           Mon 01 Jul 2024 00:58:50 +0000
ROA not after:            Mon 30 Jun 2025 01:03:50 +0000
asID:                     133819
IP address blocks:        103.51.44.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl
                          rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:66:fa:50:76:0f:c6:6a:32:4f:c3:10:ff:01:6c:a4:61:f1:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E511E1480615E7AFC915B8E0430D70CA0B31D0F0
        Validity
            Not Before: Jul  1 00:58:50 2024 GMT
            Not After : Jun 30 01:03:50 2025 GMT
        Subject: CN=407E15684FA17A1885DB1FB66429E8C653396D9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:05:01:1f:34:85:d3:65:33:2c:a7:21:0f:77:
                    1d:c1:d3:fd:36:8d:c0:30:c3:35:74:bf:d3:4e:c4:
                    4e:a5:ae:b0:fa:aa:3c:bb:dc:05:99:fa:b9:69:09:
                    bc:35:eb:2c:82:7f:2b:7f:33:41:cb:00:89:c8:9c:
                    38:2f:46:ac:9f:05:10:7f:c2:e5:16:d7:07:4e:af:
                    65:b5:73:e6:25:51:f9:4b:4c:8c:4d:15:2e:cc:4b:
                    75:3c:ae:9b:b4:5b:49:92:52:8b:ff:7f:23:33:12:
                    98:0f:e5:0b:65:a4:44:74:93:80:0f:e0:ab:0c:6d:
                    08:cd:d1:f9:dd:c1:cb:e4:40:9f:60:93:10:0f:1a:
                    e2:66:3b:2d:57:40:c0:e5:7e:68:cc:f3:75:40:11:
                    3d:cd:f2:0c:0a:ca:8b:1b:c7:72:2b:fd:13:a5:b3:
                    c1:f2:8a:7d:81:c4:f0:92:bb:0c:82:34:9e:d2:e3:
                    ca:10:46:74:51:68:fd:1b:65:45:d2:a7:be:53:22:
                    0d:b9:c4:fe:58:f8:80:bd:fd:65:f0:35:70:00:d9:
                    a1:67:b0:91:9f:dc:17:56:1b:35:59:07:91:86:32:
                    6d:9f:80:c7:19:0a:fe:87:76:eb:f7:73:61:c4:59:
                    82:8e:17:50:3a:5a:3a:84:c3:9c:e9:47:3e:1b:f4:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:7E:15:68:4F:A1:7A:18:85:DB:1F:B6:64:29:E8:C6:53:39:6D:9D
            X509v3 Authority Key Identifier:
                keyid:E5:11:E1:48:06:15:E7:AF:C9:15:B8:E0:43:0D:70:CA:0B:31:D0:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E511E1480615E7AFC915B8E0430D70CA0B31D0F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7cc5ffa-5f62-44e5-8fe2-ee8750f2221d/0/3130332e35312e34342e302f32322d3234203d3e20313333383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.51.44.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:25:61:ad:fa:e9:dd:7b:1f:fd:f4:fb:f3:fd:f0:8c:ce:d0:
         d9:9e:60:9c:6a:7d:24:a2:11:58:18:6a:c3:b4:17:17:9c:40:
         33:ca:21:a2:df:85:c6:fa:32:04:ff:75:4d:92:ca:0a:c8:20:
         b1:ce:59:b6:d3:27:80:0b:fa:be:14:75:0d:26:e5:31:ee:64:
         71:91:e0:ce:e9:7b:d5:a9:a9:31:34:00:20:23:d8:43:0b:05:
         81:cb:04:4e:87:79:bf:52:5c:2c:25:61:04:c7:94:de:12:a4:
         3b:b3:00:1d:f8:e0:ee:38:bb:eb:81:57:26:32:91:e1:e7:cb:
         44:f7:16:29:00:72:04:dc:bf:8b:93:f6:f7:15:e9:f0:ee:06:
         06:84:7d:17:bc:a1:82:29:2b:2e:6d:95:98:e9:cb:b2:7f:36:
         d7:0e:65:31:ce:42:94:01:be:e1:85:52:1d:d4:ec:ae:25:85:
         fd:65:73:f5:bf:6d:d1:d8:cd:e4:ce:ea:36:bb:b5:74:be:de:
         04:1a:67:41:c2:9c:64:e8:2f:29:ae:4b:62:a3:31:02:f8:df:
         3a:d4:57:c3:b7:03:bc:15:5e:38:3e:f1:b6:b5:d1:ba:e6:17:
         0e:90:10:d5:f3:0b:0f:78:f3:c6:a3:98:b2:7b:d3:2b:e6:f4:
         1e:99:60:69
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUX6dm+lB2D8ZqMk/DEP8BbKRh8UgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0Ew
QjMxRDBGMDAeFw0yNDA3MDEwMDU4NTBaFw0yNTA2MzAwMTAzNTBaMDMxMTAvBgNV
BAMTKDQwN0UxNTY4NEZBMTdBMTg4NURCMUZCNjY0MjlFOEM2NTMzOTZEOUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGBQEfNIXTZTMspyEPdx3B0/02
jcAwwzV0v9NOxE6lrrD6qjy73AWZ+rlpCbw16yyCfyt/M0HLAInInDgvRqyfBRB/
wuUW1wdOr2W1c+YlUflLTIxNFS7MS3U8rpu0W0mSUov/fyMzEpgP5QtlpER0k4AP
4KsMbQjN0fndwcvkQJ9gkxAPGuJmOy1XQMDlfmjM83VAET3N8gwKyosbx3Ir/ROl
s8Hyin2BxPCSuwyCNJ7S48oQRnRRaP0bZUXSp75TIg25xP5Y+IC9/WXwNXAA2aFn
sJGf3BdWGzVZB5GGMm2fgMcZCv6Hduv3c2HEWYKOF1A6WjqEw5zpRz4b9DCPAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUQH4VaE+hehiF2x+2ZCnoxlM5bZ0wHwYDVR0j
BBgwFoAU5RHhSAYV56/JFbjgQw1wygsx0PAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
N2NjNWZmYS01ZjYyLTQ0ZTUtOGZlMi1lZTg3NTBmMjIyMWQvMC9FNTExRTE0ODA2
MTVFN0FGQzkxNUI4RTA0MzBENzBDQTBCMzFEMEYwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTUxMUUxNDgwNjE1RTdBRkM5MTVCOEUwNDMwRDcwQ0EwQjMx
RDBGMC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y3Y2M1ZmZhLTVmNjItNDRlNS04
ZmUyLWVlODc1MGYyMjIxZC8wLzMxMzAzMzJlMzUzMTJlMzQzNDJlMzAyZjMyMzIy
ZDMyMzQyMDNkM2UyMDMxMzMzMzM4MzEzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAmczLDANBgkqhkiG
9w0BAQsFAAOCAQEAuSVhrfrp3Xsf/fT78/3wjM7Q2Z5gnGp9JKIRWBhqw7QXF5xA
M8ohot+FxvoyBP91TZLKCsggsc5ZttMngAv6vhR1DSblMe5kcZHgzul71ampMTQA
ICPYQwsFgcsETod5v1JcLCVhBMeU3hKkO7MAHfjg7ji764FXJjKR4efLRPcWKQBy
BNy/i5P29xXp8O4GBoR9F7yhgikrLm2VmOnLsn821w5lMc5ClAG+4YVSHdTsriWF
/WVz9b9t0djN5M7qNru1dL7eBBpnQcKcZOgvKa5LYqMxAvjfOtRXw7cDvBVeOD7x
trXRuuYXDpAQ1fMLD3jzxqOYsnvTK+b0HplgaQ==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:43:38 2024 by rpki-client on console-ams.rpki-client.org