Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa
File:                     3131302e34342e3137312e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          BK/MmUeO31c+AcqXh1EYrYm7gSz9W5J5dBIePPpCaAI=
Subject key identifier:   9A:52:A4:84:86:C8:1A:38:E0:AE:08:B0:CB:15:C7:EC:98:B5:27:7A
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       4DC4691ABF13383FBADBDEE2AA207C04B3731D5A
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa
Signing time:             Fri 29 Sep 2023 15:18:51 +0000
ROA not before:           Fri 29 Sep 2023 15:13:51 +0000
ROA not after:            Fri 27 Sep 2024 15:18:51 +0000
asID:                     24206
IP address blocks:        110.44.171.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 08:24:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:c4:69:1a:bf:13:38:3f:ba:db:de:e2:aa:20:7c:04:b3:73:1d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Sep 29 15:13:51 2023 GMT
            Not After : Sep 27 15:18:51 2024 GMT
        Subject: CN=9A52A48486C81A38E0AE08B0CB15C7EC98B5277A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:a1:80:ae:5b:a6:23:08:71:cc:0a:9e:96:a0:
                    cc:9a:15:bf:94:08:17:da:7e:35:b0:fd:12:99:04:
                    16:70:c1:45:6c:de:0f:12:b1:71:75:ac:11:83:55:
                    5e:73:0e:69:53:47:3e:84:cd:14:a7:5f:4f:ba:2f:
                    f7:9b:b8:40:9c:51:d7:24:33:f7:7a:bc:c5:28:a7:
                    10:28:2a:8e:59:07:41:de:43:db:d4:b0:92:89:66:
                    96:6d:f2:04:39:7e:60:be:0e:a7:11:0c:5c:e0:0d:
                    2d:83:e1:da:e6:a9:06:97:d7:46:76:bc:4b:af:6b:
                    40:88:ce:11:cc:02:1f:bd:36:5b:d5:5b:13:74:b1:
                    a3:56:5f:8e:07:01:05:03:64:f4:e2:ad:11:39:d5:
                    cc:83:03:e6:21:d6:93:80:19:65:33:5e:4e:94:53:
                    bb:21:f0:8f:ad:24:67:a8:3a:76:6e:b6:0a:95:f2:
                    a6:41:5a:0c:5c:9f:2e:69:60:51:8d:70:22:b3:e3:
                    96:a3:6c:f1:6a:9b:7e:69:85:31:fc:f2:6c:4b:3f:
                    a6:21:90:e7:95:d2:81:b3:e5:e7:81:5c:79:39:f7:
                    ae:f6:49:2d:06:39:7d:23:a2:26:7a:c3:fe:42:c9:
                    34:2f:75:28:a1:8e:6a:5b:c5:3b:02:21:7a:e4:49:
                    c2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:52:A4:84:86:C8:1A:38:E0:AE:08:B0:CB:15:C7:EC:98:B5:27:7A
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137312e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.171.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:e1:b2:07:c0:c7:99:e3:a8:c6:33:fc:40:03:db:ad:0c:78:
         7c:9d:37:d3:30:38:21:61:13:82:6b:af:90:95:82:e9:3d:44:
         80:57:c4:0a:d6:da:6d:ba:b9:03:a3:81:d6:c9:76:af:3f:37:
         97:a6:20:69:ec:ad:f7:f9:0b:ea:5b:84:e3:19:cb:a4:4d:f4:
         42:dc:34:3a:19:57:3f:71:5f:ce:71:1b:81:60:e5:60:e1:53:
         9d:48:86:67:b9:75:6a:84:2f:da:3e:78:51:88:bc:b3:f3:39:
         2e:33:37:20:89:52:02:b7:66:6d:aa:a4:ce:07:91:74:97:40:
         68:73:a0:2b:78:bf:95:ae:49:67:36:d4:62:0c:fa:ae:eb:b0:
         c6:74:dc:b6:39:3d:3a:9d:9b:55:41:f0:69:a3:26:64:16:81:
         ab:66:fd:d0:1a:c6:c9:43:b3:c9:c9:ca:d1:38:c5:4b:ce:bf:
         e3:a4:6c:56:05:47:86:b4:01:77:34:7b:a2:15:58:8f:d8:d0:
         f5:46:37:ca:c7:7e:d2:e0:df:c8:81:6a:cb:87:f4:ed:f6:dd:
         1f:87:b1:d5:68:7d:d0:fb:ba:c4:5b:bc:78:f2:3f:16:10:2a:
         61:12:2d:7e:6e:6d:bb:22:ad:32:35:23:a4:6c:f5:aa:16:4a:
         97:66:9b:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 10:17:06 2024 by rpki-client on console-ams.rpki-client.org