Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e203234323036.roa
File:                     3131302e34342e3137342e302f32332d3233203d3e203234323036.roa (raw, json)
Hash identifier:          ELACx8uRp2KXqnUlDujf5iDKlj+iwc4yy+McFrAS6Eg=
Subject key identifier:   F9:97:8F:8B:AE:FC:F5:55:A8:76:F9:2E:C0:24:96:C7:18:57:AF:6B
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       43B10462F3E719215AE0D4C1E322846934C7F347
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e203234323036.roa
Signing time:             Thu 10 Aug 2023 08:00:49 +0000
ROA not before:           Thu 10 Aug 2023 07:55:49 +0000
ROA not after:            Thu 08 Aug 2024 08:00:49 +0000
asID:                     24206
IP address blocks:        110.44.174.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:b1:04:62:f3:e7:19:21:5a:e0:d4:c1:e3:22:84:69:34:c7:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Aug 10 07:55:49 2023 GMT
            Not After : Aug  8 08:00:49 2024 GMT
        Subject: CN=F9978F8BAEFCF555A876F92EC02496C71857AF6B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:52:20:e6:60:a9:51:c0:7f:2d:83:c5:0e:c6:
                    fe:5c:28:9e:e9:33:dc:dd:08:0c:df:cc:36:ce:19:
                    c7:0b:af:4e:04:a1:20:0e:21:3a:23:cd:62:b3:30:
                    49:50:12:8a:15:60:4d:85:b5:11:cc:13:19:af:03:
                    cd:db:0c:c2:1a:11:09:3a:e0:81:eb:d6:bf:5b:df:
                    3a:d5:ea:f3:d1:b7:6c:5e:43:3f:5b:3b:e5:b6:b4:
                    40:ac:fa:4e:e0:3d:f3:1a:72:dd:da:26:86:bd:cc:
                    a8:4a:a2:3e:19:5e:63:df:cc:eb:f8:ca:17:f9:ab:
                    04:f6:2e:4a:20:37:56:65:1b:ca:39:07:49:11:3a:
                    b1:c3:6e:34:dd:ec:0a:85:55:f3:43:b6:4d:a9:f0:
                    77:17:03:53:0a:47:0e:8a:52:10:05:b9:8a:59:48:
                    c2:72:37:ce:66:38:92:56:2a:06:88:a4:5c:cb:84:
                    a5:fa:44:93:67:a4:c7:6e:0e:96:a0:4e:e3:5d:a2:
                    58:0a:bc:a3:c0:cb:42:66:4a:7d:4b:d7:0c:1d:b4:
                    95:c0:7c:77:6a:31:b2:65:20:7e:65:de:c0:ca:be:
                    40:48:93:34:43:33:b8:7b:a5:05:e7:37:f5:f7:4c:
                    8e:ac:ba:b8:41:fc:0d:1b:df:1a:79:88:3f:be:5d:
                    55:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:97:8F:8B:AE:FC:F5:55:A8:76:F9:2E:C0:24:96:C7:18:57:AF:6B
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137342e302f32332d3233203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         39:5e:84:6e:87:f2:ca:29:78:0a:6d:c0:00:95:54:da:09:87:
         ae:8d:f3:ee:b4:0a:0e:2f:cd:04:15:1b:46:6d:ea:b2:ee:b8:
         96:e4:53:b5:91:6f:e2:61:62:99:4b:3d:cb:c7:af:35:3e:97:
         15:16:0e:78:59:1c:b8:fc:e8:5f:c6:33:93:5d:fd:70:d5:af:
         0e:a0:a3:ef:45:ed:9a:1a:52:8f:c9:77:8b:a8:3a:62:aa:c1:
         5d:92:92:80:6d:ec:db:ce:be:7a:93:38:7f:06:57:a0:f0:d7:
         f7:57:7f:76:58:da:2c:f4:39:66:3f:d8:63:49:18:2d:aa:66:
         5d:be:68:39:39:19:6e:d2:ec:46:75:56:74:62:f0:71:4c:3b:
         1d:c7:0c:e4:2f:99:97:ed:5d:fe:d5:2a:56:34:a8:42:34:f8:
         36:df:0c:7c:d0:9c:9f:4a:96:49:03:0a:04:7e:b3:c7:59:b7:
         84:39:85:22:50:ec:91:77:ce:b5:7c:46:98:37:f4:db:53:50:
         4e:f7:cf:06:45:97:bd:a6:a0:4b:62:40:b9:04:da:97:b9:29:
         1e:cc:ab:57:e8:6e:20:1e:52:54:7c:31:cf:4a:b1:78:2b:09:
         c5:d3:b1:06:28:4d:b6:34:fe:fa:e4:0e:d8:89:2d:ba:42:b4:
         0b:e4:7a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 07:20:18 2024 by rpki-client on console-ams.rpki-client.org