Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa
File:                     3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa (raw, json)
Hash identifier:          RAUp4E18WxwpLZQADq9T4viLruNPe6zZ9TuKyZ36WGg=
Subject key identifier:   EA:E6:E7:F2:59:41:1B:A7:57:40:4A:81:CE:1E:05:B2:A9:2F:F9:B3
Certificate issuer:       /CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582
Certificate serial:       58595E4B4115BB49E1B1459F553FA435F874ED5A
Authority key identifier: C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa
Signing time:             Fri 03 Nov 2023 16:00:02 +0000
ROA not before:           Fri 03 Nov 2023 15:55:02 +0000
ROA not after:            Fri 01 Nov 2024 16:00:02 +0000
asID:                     141077
IP address blocks:        103.156.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl
                          rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:59:5e:4b:41:15:bb:49:e1:b1:45:9f:55:3f:a4:35:f8:74:ed:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C25D5056A69CE0D0685BAD8E48F33A4A62A5C582
        Validity
            Not Before: Nov  3 15:55:02 2023 GMT
            Not After : Nov  1 16:00:02 2024 GMT
        Subject: CN=EAE6E7F259411BA757404A81CE1E05B2A92FF9B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:81:8c:6e:c1:26:5c:3c:31:6e:3c:84:15:3d:
                    b0:d0:dd:9a:49:db:db:de:a0:9a:62:ca:a1:46:06:
                    e3:d4:de:00:6f:4a:61:89:0d:ab:f7:b1:75:a8:b4:
                    dc:c8:96:8a:15:34:62:9c:4d:83:cd:00:9f:26:f4:
                    86:04:93:72:90:d5:cc:5b:e3:78:2f:37:1d:19:b3:
                    60:dc:72:2e:4d:9c:e4:39:8c:38:07:3c:3b:24:4a:
                    72:de:88:97:e0:23:58:23:47:f5:c1:2c:7e:c9:28:
                    0b:7c:64:d5:d5:42:67:fe:a6:c6:14:ae:44:52:f8:
                    8c:d5:71:86:75:84:60:a0:a8:01:9d:c0:a2:15:b5:
                    a7:65:4b:7c:c4:5a:69:41:3d:71:58:c0:38:22:5d:
                    05:d4:c1:dc:62:53:dd:9b:bc:be:67:2e:69:2f:77:
                    3c:3a:a5:1d:6b:7b:e7:cc:fe:22:62:d2:76:b7:ab:
                    b2:8f:03:7c:02:02:77:1d:a8:19:b6:5d:9d:05:08:
                    42:6b:59:e5:b3:0d:2d:ad:b6:99:2b:cd:c8:d9:13:
                    ac:44:9b:56:09:c9:31:d2:8d:b8:bb:4d:c1:1a:07:
                    cf:17:3f:7e:eb:b2:d4:f7:aa:8a:be:d1:06:97:9a:
                    4f:b2:62:86:1b:8b:02:1a:4c:14:c2:ed:a3:f3:8d:
                    f5:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:E6:E7:F2:59:41:1B:A7:57:40:4A:81:CE:1E:05:B2:A9:2F:F9:B3
            X509v3 Authority Key Identifier:
                keyid:C2:5D:50:56:A6:9C:E0:D0:68:5B:AD:8E:48:F3:3A:4A:62:A5:C5:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C25D5056A69CE0D0685BAD8E48F33A4A62A5C582.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f96401e3-9f62-4b3c-bffb-783355ae6770/0/3130332e3135362e31362e302f32332d3234203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.156.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:fe:6b:25:55:31:c3:6c:c8:2e:78:84:8a:2e:10:03:7a:ca:
         22:e1:7e:1b:49:af:3c:a9:d8:7f:c8:bb:48:22:a0:80:32:56:
         fa:44:15:78:a8:b8:3b:24:8b:2f:51:04:56:92:83:0f:f7:13:
         4c:03:44:af:eb:de:be:f9:82:54:a9:d3:a3:c3:e6:93:63:d7:
         40:d9:51:8e:de:bd:c8:4b:ce:ab:cb:1f:7c:34:dc:5e:d8:ca:
         ae:e9:0d:2b:04:01:3c:72:b1:c0:3a:3e:03:e0:21:54:5f:ec:
         ea:cf:86:67:02:e3:97:17:74:c1:ff:77:fc:fa:e9:f7:ab:c0:
         e2:98:1e:e3:b8:7b:28:2f:8f:9c:0f:fd:96:67:3c:4c:13:32:
         1c:13:0c:02:e8:71:75:a7:4d:48:9b:8e:cd:95:e3:cf:7d:16:
         13:3c:8e:63:40:dd:0e:71:39:c2:77:57:c9:6b:36:a3:44:e9:
         2e:bc:6a:63:88:87:ef:4f:e5:be:42:1c:4f:52:f7:77:8a:51:
         9b:49:9a:ea:d5:57:14:63:89:b1:f9:bc:5d:a5:81:d1:d6:b5:
         12:19:7b:28:bc:15:ac:06:51:18:e1:83:4d:42:5f:3b:a3:e6:
         fa:fa:14:ff:ee:e9:f1:70:43:a6:4b:3a:50:be:a9:9d:d4:27:
         1a:95:92:01
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUWFleS0EVu0nhsUWfVT+kNfh07VowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2
MkE1QzU4MjAeFw0yMzExMDMxNTU1MDJaFw0yNDExMDExNjAwMDJaMDMxMTAvBgNV
BAMTKEVBRTZFN0YyNTk0MTFCQTc1NzQwNEE4MUNFMUUwNUIyQTkyRkY5QjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7gYxuwSZcPDFuPIQVPbDQ3ZpJ
29veoJpiyqFGBuPU3gBvSmGJDav3sXWotNzIlooVNGKcTYPNAJ8m9IYEk3KQ1cxb
43gvNx0Zs2Dcci5NnOQ5jDgHPDskSnLeiJfgI1gjR/XBLH7JKAt8ZNXVQmf+psYU
rkRS+IzVcYZ1hGCgqAGdwKIVtadlS3zEWmlBPXFYwDgiXQXUwdxiU92bvL5nLmkv
dzw6pR1re+fM/iJi0na3q7KPA3wCAncdqBm2XZ0FCEJrWeWzDS2ttpkrzcjZE6xE
m1YJyTHSjbi7TcEaB88XP37rstT3qoq+0QaXmk+yYoYbiwIaTBTC7aPzjfWTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6ubn8llBG6dXQEqBzh4Fsqkv+bMwHwYDVR0j
BBgwFoAUwl1QVqac4NBoW62OSPM6SmKlxYIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
OTY0MDFlMy05ZjYyLTRiM2MtYmZmYi03ODMzNTVhZTY3NzAvMC9DMjVENTA1NkE2
OUNFMEQwNjg1QkFEOEU0OEYzM0E0QTYyQTVDNTgyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzI1RDUwNTZBNjlDRTBEMDY4NUJBRDhFNDhGMzNBNEE2MkE1
QzU4Mi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2Y5NjQwMWUzLTlmNjItNGIzYy1i
ZmZiLTc4MzM1NWFlNjc3MC8wLzMxMzAzMzJlMzEzNTM2MmUzMTM2MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDMxMzAzNzM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5wQMA0GCSqG
SIb3DQEBCwUAA4IBAQAY/mslVTHDbMgueISKLhADesoi4X4bSa88qdh/yLtIIqCA
Mlb6RBV4qLg7JIsvUQRWkoMP9xNMA0Sv696++YJUqdOjw+aTY9dA2VGO3r3IS86r
yx98NNxe2Mqu6Q0rBAE8crHAOj4D4CFUX+zqz4ZnAuOXF3TB/3f8+un3q8DimB7j
uHsoL4+cD/2WZzxMEzIcEwwC6HF1p01Im47NlePPfRYTPI5jQN0OcTnCd1fJazaj
ROkuvGpjiIfvT+W+QhxPUvd3ilGbSZrq1VcUY4mx+bxdpYHR1rUSGXsovBWsBlEY
4YNNQl87o+b6+hT/7unxcEOmSzpQvqmd1CcalZIB
-----END CERTIFICATE-----
Generated at Sun Jun 2 21:13:19 2024 by rpki-client on console-ams.rpki-client.org