Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          i3C/wQwiKdnZqtOupiR0iSjRraA5BBCMUtyn15+H21A=
Subject key identifier:   EA:FF:E6:93:26:9F:93:DB:D6:2E:6E:9D:CA:BF:DD:E4:FF:E0:48:A9
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       411E1D0E834A2DD088B7253022E632A05B39A829
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 31 Jul 2023 00:09:25 +0000
ROA not before:           Mon 31 Jul 2023 00:04:25 +0000
ROA not after:            Mon 29 Jul 2024 00:09:25 +0000
asID:                     131717
IP address blocks:        103.110.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 16:29:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1e:1d:0e:83:4a:2d:d0:88:b7:25:30:22:e6:32:a0:5b:39:a8:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Jul 31 00:04:25 2023 GMT
            Not After : Jul 29 00:09:25 2024 GMT
        Subject: CN=EAFFE693269F93DBD62E6E9DCABFDDE4FFE048A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:98:fa:76:47:9f:7a:bb:af:3b:4c:1e:19:89:
                    0d:74:69:55:5a:6d:6a:8a:cd:68:a8:4d:cf:cf:63:
                    7e:50:9e:ee:b6:85:5a:ea:0f:77:6e:31:ee:9f:1f:
                    59:09:ac:5a:39:08:c0:68:1a:d1:ec:ad:d5:93:a6:
                    35:39:1a:df:65:eb:c5:69:08:90:04:b2:17:28:5e:
                    3f:ca:a6:8f:2a:f6:0e:2a:c7:2b:1a:d0:fc:42:00:
                    be:a4:ab:a7:ef:7a:51:d0:37:c6:74:c9:c3:8c:e9:
                    56:1b:d3:80:d9:73:b2:a3:23:ce:eb:cf:25:f9:34:
                    6f:26:30:ce:f9:26:40:e6:48:ab:b9:ad:e4:81:de:
                    e6:52:84:10:b2:16:4c:22:90:da:bf:47:be:85:71:
                    35:3d:93:81:40:b3:f5:43:17:ea:cc:c8:38:8e:d4:
                    1f:2b:ca:27:85:2d:2b:19:ae:f9:fd:0b:b6:65:6f:
                    18:63:3d:e6:ff:97:2c:05:90:8c:8f:f9:9b:c4:9b:
                    c0:c6:52:e1:96:22:ea:a0:ed:60:1e:08:72:90:1a:
                    07:20:a8:22:52:64:3d:0b:5a:a5:fa:88:cb:dc:87:
                    20:14:d1:5b:42:40:48:b7:f7:f5:82:54:e3:a7:5e:
                    62:b5:4c:cd:82:3e:10:16:93:70:c3:17:35:ac:e3:
                    0d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FF:E6:93:26:9F:93:DB:D6:2E:6E:9D:CA:BF:DD:E4:FF:E0:48:A9
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e31312e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:6b:76:9a:fd:d5:76:97:8a:d9:7c:13:18:de:27:c1:20:b9:
         38:d6:90:15:fc:36:15:48:f1:fb:7e:e8:ba:7a:b4:68:2e:0e:
         68:b0:8d:bd:7f:80:c4:0a:f9:ec:f2:36:df:3a:a7:79:09:8c:
         1b:bd:c0:93:f5:7d:90:7c:cc:de:38:06:84:12:b9:33:69:7f:
         12:37:4b:d9:8f:1d:98:dd:b6:d4:87:85:53:7c:0c:5b:9d:90:
         d7:b2:65:de:40:3b:ba:c4:9a:e7:14:98:e9:a2:84:d0:2c:18:
         ab:2a:08:64:81:e6:9c:69:1b:03:21:b2:ba:08:03:02:93:c3:
         bf:fd:e4:ec:af:a4:b7:e1:03:d9:fd:a7:d7:78:ad:99:6e:c9:
         ed:81:62:5a:6d:91:dc:02:eb:94:26:98:7d:d2:6d:28:b0:a0:
         54:84:82:f6:88:c1:3e:95:55:e1:92:ee:bf:6c:ee:b2:e7:ee:
         26:65:ec:26:51:b3:f7:14:b1:f9:8f:45:56:44:09:76:78:69:
         f8:da:1c:04:e4:d4:22:4c:eb:39:db:9e:42:15:73:29:37:5d:
         45:1d:4d:72:18:2c:1f:4e:b8:3a:3c:af:53:c6:db:d3:cf:b8:
         5a:40:15:30:fc:70:83:f7:32:ba:bb:19:91:66:3e:5d:09:47:
         6b:92:a5:e1
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUQR4dDoNKLdCItyUwIuYyoFs5qCkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3
MkY0OTk4NTAeFw0yMzA3MzEwMDA0MjVaFw0yNDA3MjkwMDA5MjVaMDMxMTAvBgNV
BAMTKEVBRkZFNjkzMjY5RjkzREJENjJFNkU5RENBQkZEREU0RkZFMDQ4QTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+mPp2R596u687TB4ZiQ10aVVa
bWqKzWioTc/PY35Qnu62hVrqD3duMe6fH1kJrFo5CMBoGtHsrdWTpjU5Gt9l68Vp
CJAEshcoXj/Kpo8q9g4qxysa0PxCAL6kq6fvelHQN8Z0ycOM6VYb04DZc7KjI87r
zyX5NG8mMM75JkDmSKu5reSB3uZShBCyFkwikNq/R76FcTU9k4FAs/VDF+rMyDiO
1B8ryieFLSsZrvn9C7ZlbxhjPeb/lywFkIyP+ZvEm8DGUuGWIuqg7WAeCHKQGgcg
qCJSZD0LWqX6iMvchyAU0VtCQEi39/WCVOOnXmK1TM2CPhAWk3DDFzWs4w1fAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU6v/mkyafk9vWLm6dyr/d5P/gSKkwHwYDVR0j
BBgwFoAUL7mUzRKCKS5tKQf87Nf55HL0mYUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
ZGE3NzNkZC05NWFhLTQ0N2UtOTkzZC00Y2Y0YTEyNzNiMzEvMC8yRkI5OTRDRDEy
ODIyOTJFNkQyOTA3RkNFQ0Q3RjlFNDcyRjQ5OTg1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMkZCOTk0Q0QxMjgyMjkyRTZEMjkwN0ZDRUNEN0Y5RTQ3MkY0
OTk4NS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJkYTc3M2RkLTk1YWEtNDQ3ZS05
OTNkLTRjZjRhMTI3M2IzMS8wLzMxMzAzMzJlMzEzMTMwMmUzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ24LMA0GCSqG
SIb3DQEBCwUAA4IBAQCDa3aa/dV2l4rZfBMY3ifBILk41pAV/DYVSPH7fui6erRo
Lg5osI29f4DECvns8jbfOqd5CYwbvcCT9X2QfMzeOAaEErkzaX8SN0vZjx2Y3bbU
h4VTfAxbnZDXsmXeQDu6xJrnFJjpooTQLBirKghkgeacaRsDIbK6CAMCk8O//eTs
r6S34QPZ/afXeK2ZbsntgWJabZHcAuuUJph90m0osKBUhIL2iME+lVXhku6/bO6y
5+4mZewmUbP3FLH5j0VWRAl2eGn42hwE5NQiTOs5255CFXMpN11FHU1yGCwfTrg6
PK9TxtvTz7haQBUw/HCD9zK6uxmRZj5dCUdrkqXh
-----END CERTIFICATE-----
Generated at Thu Apr 25 22:30:51 2024 by rpki-client on console-fra.rpki-client.org