Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa
File:                     3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa (raw, json)
Hash identifier:          ZmE0uf9/iZ5x5AhGLe576HZvZBzHVGOQEwR68YflQsM=
Subject key identifier:   44:73:32:21:53:09:75:91:24:91:22:D5:CA:A9:DE:99:04:B3:92:22
Certificate issuer:       /CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
Certificate serial:       6D91E7AA421F4C4B219A426C3BDF29E1B85B2EF0
Authority key identifier: 98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa
Signing time:             Mon 31 Jul 2023 00:08:16 +0000
ROA not before:           Mon 31 Jul 2023 00:03:16 +0000
ROA not after:            Mon 29 Jul 2024 00:08:16 +0000
asID:                     137374
IP address blocks:        103.110.184.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl
                          rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 28 Apr 2024 20:55:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:91:e7:aa:42:1f:4c:4b:21:9a:42:6c:3b:df:29:e1:b8:5b:2e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9852ABB8508DE551F1723BC9AC5EC39B35056AE2
        Validity
            Not Before: Jul 31 00:03:16 2023 GMT
            Not After : Jul 29 00:08:16 2024 GMT
        Subject: CN=4473322153097591249122D5CAA9DE9904B39222
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:13:4b:b0:ad:dd:57:47:1f:7e:d1:e8:ef:d2:
                    e1:eb:6c:69:64:48:de:6f:32:e3:30:9f:38:14:5d:
                    3b:34:7f:02:13:19:c2:da:74:84:38:82:be:d7:1a:
                    ff:04:cd:81:69:bd:ed:b2:91:20:0d:e9:65:12:38:
                    87:39:f2:5e:84:44:4e:98:2d:67:0a:e6:19:5c:79:
                    6c:d8:a0:29:a0:d6:2d:e0:c1:14:cf:6c:2f:85:62:
                    a6:b8:f4:d9:38:f1:6d:6a:9d:10:a5:21:eb:9c:2d:
                    fc:52:4d:2f:3e:3b:c1:2a:c7:81:03:96:0a:46:3a:
                    c1:03:72:a8:a9:c3:96:f9:c6:ad:f0:12:0f:05:c3:
                    9a:7d:b0:5f:35:85:79:40:6c:06:83:fa:d4:cb:77:
                    66:1b:51:39:19:50:6e:44:a2:3a:13:93:eb:6e:b6:
                    13:cb:60:2c:06:9c:d0:e7:97:49:eb:12:dd:64:01:
                    e2:84:68:15:1e:f7:a2:31:ed:b2:72:ab:85:7c:06:
                    94:62:7e:68:9a:85:90:05:30:15:13:18:39:71:21:
                    5c:dc:64:5f:d1:c2:21:a3:08:c0:b4:9a:09:d8:be:
                    9b:1f:49:d0:6a:e5:80:6a:e6:06:02:20:c8:51:dc:
                    ef:18:5c:d0:15:db:07:d1:6b:36:12:4f:73:74:99:
                    bb:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:73:32:21:53:09:75:91:24:91:22:D5:CA:A9:DE:99:04:B3:92:22
            X509v3 Authority Key Identifier:
                keyid:98:52:AB:B8:50:8D:E5:51:F1:72:3B:C9:AC:5E:C3:9B:35:05:6A:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9852ABB8508DE551F1723BC9AC5EC39B35056AE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a66f350-e642-402f-8ac3-6aef7e11aac3/0/3130332e3131302e3138342e302f32332d3234203d3e20313337333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:90:af:56:56:0a:ae:f7:27:f4:5a:1b:03:86:23:09:23:a5:
         2b:c5:9f:0e:7c:4b:c5:a9:ed:22:9a:25:bd:2c:b6:ce:37:82:
         c3:98:50:df:19:cc:cd:75:e8:73:19:84:08:99:fd:38:ae:12:
         4f:00:58:7d:0d:00:7b:9b:0e:d8:8b:15:1f:e2:8c:ac:bf:2a:
         fe:c5:76:c1:85:b2:cb:1b:55:62:96:ea:26:05:1a:b7:52:1f:
         86:f5:8b:55:7f:3a:26:12:e7:0d:86:64:ad:db:a2:2d:89:03:
         84:32:a5:e9:a4:9b:09:30:02:a0:42:c7:e1:2a:98:3f:d0:fb:
         16:f0:c2:7f:5f:80:48:ac:d4:5e:a1:e6:9b:c7:1b:87:ff:8f:
         67:1e:67:8d:f5:fe:f3:56:a8:6a:db:44:e4:83:82:8b:7e:11:
         50:3c:17:d6:62:d1:46:3d:8b:62:e7:03:91:47:c8:cf:10:fa:
         9e:a7:ac:89:df:df:9b:d3:59:3a:63:41:e9:a2:fd:8c:b9:be:
         1e:c5:2a:ff:ab:1b:87:f3:6d:2e:07:8c:6a:66:fb:eb:58:29:
         d7:6e:51:b5:55:b9:9a:b4:8c:96:13:05:51:b4:b6:8a:fb:73:
         9c:da:5c:79:b3:e7:ef:a3:c0:81:e7:d4:78:d4:1b:b8:50:88:
         1c:d6:3f:60
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUbZHnqkIfTEshmkJsO98p4bhbLvAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIz
NTA1NkFFMjAeFw0yMzA3MzEwMDAzMTZaFw0yNDA3MjkwMDA4MTZaMDMxMTAvBgNV
BAMTKDQ0NzMzMjIxNTMwOTc1OTEyNDkxMjJENUNBQTlERTk5MDRCMzkyMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNE0uwrd1XRx9+0ejv0uHrbGlk
SN5vMuMwnzgUXTs0fwITGcLadIQ4gr7XGv8EzYFpve2ykSAN6WUSOIc58l6ERE6Y
LWcK5hlceWzYoCmg1i3gwRTPbC+FYqa49Nk48W1qnRClIeucLfxSTS8+O8Eqx4ED
lgpGOsEDcqipw5b5xq3wEg8Fw5p9sF81hXlAbAaD+tTLd2YbUTkZUG5EojoTk+tu
thPLYCwGnNDnl0nrEt1kAeKEaBUe96Ix7bJyq4V8BpRifmiahZAFMBUTGDlxIVzc
ZF/RwiGjCMC0mgnYvpsfSdBq5YBq5gYCIMhR3O8YXNAV2wfRazYST3N0mbu1AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURHMyIVMJdZEkkSLVyqnemQSzkiIwHwYDVR0j
BBgwFoAUmFKruFCN5VHxcjvJrF7DmzUFauIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YTY2ZjM1MC1lNjQyLTQwMmYtOGFjMy02YWVmN2UxMWFhYzMvMC85ODUyQUJCODUw
OERFNTUxRjE3MjNCQzlBQzVFQzM5QjM1MDU2QUUyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTg1MkFCQjg1MDhERTU1MUYxNzIzQkM5QUM1RUMzOUIzNTA1
NkFFMi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhhNjZmMzUwLWU2NDItNDAyZi04
YWMzLTZhZWY3ZTExYWFjMy8wLzMxMzAzMzJlMzEzMTMwMmUzMTM4MzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzczMzM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnbrgwDQYJ
KoZIhvcNAQELBQADggEBAMWQr1ZWCq73J/RaGwOGIwkjpSvFnw58S8Wp7SKaJb0s
ts43gsOYUN8ZzM116HMZhAiZ/TiuEk8AWH0NAHubDtiLFR/ijKy/Kv7FdsGFsssb
VWKW6iYFGrdSH4b1i1V/OiYS5w2GZK3boi2JA4QypemkmwkwAqBCx+EqmD/Q+xbw
wn9fgEis1F6h5pvHG4f/j2ceZ431/vNWqGrbROSDgot+EVA8F9Zi0UY9i2LnA5FH
yM8Q+p6nrInf35vTWTpjQemi/Yy5vh7FKv+rG4fzbS4HjGpm++tYKdduUbVVuZq0
jJYTBVG0tor7c5zaXHmz5++jwIHn1HjUG7hQiBzWP2A=
-----END CERTIFICATE-----
Generated at Fri Apr 26 00:39:31 2024 by rpki-client on console-fra.rpki-client.org