Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e203234323036.roa
File:                     3131302e34342e3137352e302f32342d3234203d3e203234323036.roa (raw, json)
Hash identifier:          koqHz3GsmNcyywiMno1YrDxuDqM3JoWOvYZD8KJ8xd8=
Subject key identifier:   9D:C1:C4:67:8A:A1:2E:39:69:4C:FE:06:54:29:22:40:2E:EF:5D:45
Certificate issuer:       /CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
Certificate serial:       0EEE7D200956CA02DCAF0ADD2E1B09DD7D004520
Authority key identifier: 98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e203234323036.roa
Signing time:             Thu 10 Aug 2023 08:00:49 +0000
ROA not before:           Thu 10 Aug 2023 07:55:49 +0000
ROA not after:            Thu 08 Aug 2024 08:00:49 +0000
asID:                     24206
IP address blocks:        110.44.175.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl
                          rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 15:38:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:ee:7d:20:09:56:ca:02:dc:af:0a:dd:2e:1b:09:dd:7d:00:45:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=981E5677AC602950ABE1A442C2779E7CB0C108A9
        Validity
            Not Before: Aug 10 07:55:49 2023 GMT
            Not After : Aug  8 08:00:49 2024 GMT
        Subject: CN=9DC1C4678AA12E39694CFE06542922402EEF5D45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:30:49:be:41:69:1e:b7:bf:c1:8a:b0:53:c6:
                    c2:6d:de:7e:c2:0e:26:2b:6d:b8:db:0b:8c:ac:6f:
                    1a:64:48:00:01:2a:04:fe:23:fe:21:cb:e0:1e:fe:
                    80:89:b4:81:d5:6d:68:b5:d2:87:b7:b9:b9:68:05:
                    51:56:3d:d8:b4:5a:99:0e:7f:9e:09:e4:5a:82:e7:
                    0e:c0:e0:03:e7:36:a0:64:29:45:32:96:5a:a7:1e:
                    35:ee:b1:f7:02:a7:08:fc:5b:96:be:d9:3a:6d:fa:
                    ae:9d:d1:a3:85:60:2b:3d:13:ac:fa:2e:d8:ee:cc:
                    03:9b:9c:18:ea:77:61:55:37:e7:1a:25:96:ae:ab:
                    f4:76:f0:6e:02:b9:fb:8c:ef:40:df:a8:92:5c:7a:
                    a2:ab:f7:9a:da:68:7a:29:1d:18:80:f6:eb:24:31:
                    ee:92:3a:79:34:8f:fe:6c:71:11:94:e6:a4:62:10:
                    c9:b1:52:d6:a8:8e:46:62:2b:23:c3:7f:05:0f:42:
                    6b:56:30:f3:d5:f6:56:70:7f:f6:2c:8f:3c:92:86:
                    75:62:3e:b3:bb:4e:34:6c:2f:f2:2e:e1:63:b0:6e:
                    d2:3c:1d:ff:3c:91:54:5c:4a:80:25:86:ac:80:5a:
                    e9:65:93:7d:3c:ca:b1:3e:07:52:8b:50:53:7c:7c:
                    99:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C1:C4:67:8A:A1:2E:39:69:4C:FE:06:54:29:22:40:2E:EF:5D:45
            X509v3 Authority Key Identifier:
                keyid:98:1E:56:77:AC:60:29:50:AB:E1:A4:42:C2:77:9E:7C:B0:C1:08:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/981E5677AC602950ABE1A442C2779E7CB0C108A9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/981E5677AC602950ABE1A442C2779E7CB0C108A9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7922f89-3e9b-4b21-9186-a648c2da3f7b/0/3131302e34342e3137352e302f32342d3234203d3e203234323036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         04:a6:14:9b:57:8e:32:df:db:d5:bc:4f:32:c2:fb:1d:61:03:
         19:47:f2:f1:dd:88:b3:b8:ed:84:b7:15:79:50:e3:31:5c:00:
         0a:04:13:84:f5:9c:2a:09:a8:32:ff:d9:69:63:57:fc:78:04:
         91:3b:75:31:c0:6a:ab:da:5c:c9:3a:20:fc:d9:d5:cc:af:b1:
         9d:ce:cd:aa:ac:a4:3d:19:95:1c:dd:47:ad:2a:2d:93:19:00:
         13:4e:89:71:d2:75:53:87:5f:b5:81:68:24:d4:49:e3:44:cb:
         8e:08:38:47:ff:bd:2f:86:5a:8f:6b:43:a9:3c:eb:f0:85:6a:
         1a:0e:ac:d7:d2:09:e8:ee:2a:1d:21:b5:ff:67:42:1e:63:cf:
         56:32:e5:af:5c:7a:ce:73:5a:d7:04:9f:7c:21:f8:f7:82:a2:
         86:eb:15:d4:95:32:d1:14:ef:8a:6b:13:41:63:ea:ec:81:d1:
         f8:4f:2f:91:f0:38:03:08:51:69:c3:db:f4:a8:1c:8b:11:f0:
         e5:63:20:a6:ad:2f:a1:43:19:33:83:25:b7:b8:17:33:3d:61:
         b5:8d:c5:43:e7:92:9d:08:0b:7a:64:66:1d:30:a0:c7:61:b4:
         34:e3:11:02:86:c8:3a:72:65:1c:25:10:cb:63:17:a8:8d:84:
         bc:29:f3:c6
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDu59IAlWygLcrwrdLhsJ3X0ARSAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NC
MEMxMDhBOTAeFw0yMzA4MTAwNzU1NDlaFw0yNDA4MDgwODAwNDlaMDMxMTAvBgNV
BAMTKDlEQzFDNDY3OEFBMTJFMzk2OTRDRkUwNjU0MjkyMjQwMkVFRjVENDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTMEm+QWket7/BirBTxsJt3n7C
DiYrbbjbC4ysbxpkSAABKgT+I/4hy+Ae/oCJtIHVbWi10oe3ubloBVFWPdi0WpkO
f54J5FqC5w7A4APnNqBkKUUyllqnHjXusfcCpwj8W5a+2Tpt+q6d0aOFYCs9E6z6
LtjuzAObnBjqd2FVN+caJZauq/R28G4CufuM70DfqJJceqKr95raaHopHRiA9usk
Me6SOnk0j/5scRGU5qRiEMmxUtaojkZiKyPDfwUPQmtWMPPV9lZwf/YsjzyShnVi
PrO7TjRsL/Iu4WOwbtI8Hf88kVRcSoAlhqyAWullk308yrE+B1KLUFN8fJkbAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUncHEZ4qhLjlpTP4GVCkiQC7vXUUwHwYDVR0j
BBgwFoAUmB5Wd6xgKVCr4aRCwneefLDBCKkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzkyMmY4OS0zZTliLTRiMjEtOTE4Ni1hNjQ4YzJkYTNmN2IvMC85ODFFNTY3N0FD
NjAyOTUwQUJFMUE0NDJDMjc3OUU3Q0IwQzEwOEE5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTgxRTU2NzdBQzYwMjk1MEFCRTFBNDQyQzI3NzlFN0NCMEMx
MDhBOS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E3OTIyZjg5LTNlOWItNGIyMS05
MTg2LWE2NDhjMmRhM2Y3Yi8wLzMxMzEzMDJlMzQzNDJlMzEzNzM1MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG4srzANBgkqhkiG
9w0BAQsFAAOCAQEABKYUm1eOMt/b1bxPMsL7HWEDGUfy8d2Is7jthLcVeVDjMVwA
CgQThPWcKgmoMv/ZaWNX/HgEkTt1McBqq9pcyTog/NnVzK+xnc7NqqykPRmVHN1H
rSotkxkAE06JcdJ1U4dftYFoJNRJ40TLjgg4R/+9L4Zaj2tDqTzr8IVqGg6s19IJ
6O4qHSG1/2dCHmPPVjLlr1x6znNa1wSffCH494KihusV1JUy0RTvimsTQWPq7IHR
+E8vkfA4AwhRacPb9KgcixHw5WMgpq0voUMZM4Mlt7gXMz1htY3FQ+eSnQgLemRm
HTCgx2G0NOMRAobIOnJlHCUQy2MXqI2EvCnzxg==
-----END CERTIFICATE-----
Generated at Thu Apr 25 07:17:58 2024 by rpki-client on console-fra.rpki-client.org