Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          rjD6qLPnx8NqaEYwX4uisI58IjWLoX7aREw2tBigNKM=
Subject key identifier:   DB:B9:00:FA:0E:1C:68:78:B4:0F:1A:D5:00:34:26:3F:B2:F2:9D:B9
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       08F075EFBFA7AB6D985B07B88CFF69F16041935B
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 31 Jul 2023 00:09:25 +0000
ROA not before:           Mon 31 Jul 2023 00:04:25 +0000
ROA not after:            Mon 29 Jul 2024 00:09:25 +0000
asID:                     131717
IP address blocks:        103.110.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 21 Apr 2024 19:36:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:f0:75:ef:bf:a7:ab:6d:98:5b:07:b8:8c:ff:69:f1:60:41:93:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Jul 31 00:04:25 2023 GMT
            Not After : Jul 29 00:09:25 2024 GMT
        Subject: CN=DBB900FA0E1C6878B40F1AD50034263FB2F29DB9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:52:1a:22:bf:87:3f:f1:bf:e1:22:1b:c0:6e:
                    50:94:49:d9:1c:c6:3f:db:b4:30:9a:92:26:30:20:
                    96:63:91:cf:9a:d4:e2:33:94:78:a7:c6:7c:e6:7f:
                    64:90:88:50:18:e7:7c:48:9e:79:b7:4d:d6:9c:80:
                    88:49:bf:cc:75:2c:1d:3c:6a:63:38:22:93:16:03:
                    06:36:6d:4a:ee:85:7d:e5:9f:06:c2:2d:88:84:b8:
                    2c:ad:e2:23:9c:b5:3b:45:2f:a1:81:79:3f:73:bc:
                    6f:d0:f9:2a:10:1c:38:16:3e:18:1e:74:c1:33:dc:
                    f4:26:0b:90:72:b4:43:10:5f:f8:8d:72:aa:e3:94:
                    02:3e:97:04:cb:5a:c6:29:b0:f5:8d:94:d6:3c:ba:
                    5f:f0:48:f0:01:97:99:2c:23:2b:98:2d:08:e6:72:
                    47:27:b8:e1:ea:87:88:cb:e7:68:3f:48:16:3a:68:
                    99:84:fe:c3:84:ec:03:f0:1b:47:86:6e:d8:e0:d1:
                    da:4f:fa:58:60:1d:92:6f:0e:6d:04:17:83:31:1a:
                    b5:90:fb:c0:c0:f3:c7:3b:ea:45:bc:7a:b5:93:7a:
                    0a:fd:f9:9d:42:31:d2:e6:0a:57:d7:b8:96:0d:77:
                    7a:74:18:42:4a:23:2f:1e:be:ad:be:ad:19:8e:dd:
                    c1:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:B9:00:FA:0E:1C:68:78:B4:0F:1A:D5:00:34:26:3F:B2:F2:9D:B9
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31302e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:03:a0:fe:a4:88:d6:5d:05:fd:24:e0:2e:cb:b1:8c:84:f5:
         b6:b3:87:fd:2a:87:e2:b6:47:ca:16:32:39:27:4d:d5:00:ea:
         bd:37:9c:a4:ce:88:5f:a4:0e:a8:ed:93:bb:6f:d8:ce:24:6b:
         8c:90:c3:fa:5f:74:03:6f:c3:e9:35:33:2e:97:bd:e5:10:19:
         35:ef:d8:9f:e4:e4:d0:b5:a0:0b:7f:77:eb:1d:70:a9:d3:c7:
         8c:92:c3:86:dd:24:a8:1c:f5:21:d0:c6:bc:96:02:8e:7f:4c:
         4b:c4:d6:b9:86:60:a6:ac:37:40:f3:87:97:ff:5f:5d:3d:4c:
         8a:be:94:3a:80:bd:dd:71:8c:a3:f9:28:d3:11:7a:ea:24:09:
         27:1e:42:4e:c8:30:ac:2b:36:0e:64:e4:64:0b:9c:cc:48:35:
         b6:c4:fd:34:74:71:bf:bc:d1:df:0a:21:15:18:d2:dc:9f:9b:
         be:46:e7:31:61:c6:2f:b0:c0:53:22:bc:ae:b2:39:e3:1c:79:
         3e:4a:71:bf:5d:36:cc:e4:15:37:8d:76:1a:c3:c3:5c:2e:6e:
         35:50:91:06:eb:6d:72:2c:63:c2:e6:27:27:d4:00:ff:aa:44:
         6a:33:0c:3c:b1:9e:b4:de:32:0c:40:17:75:65:8b:0b:0e:bd:
         6c:55:36:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 18 14:06:39 2024 by rpki-client on console-fra.rpki-client.org