Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
File:                     3130332e3139302e34362e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          zR665DTyJA/CfbJT9XZ1rRiLHbhOu+eqALD6NRCm228=
Subject key identifier:   91:BF:A4:A5:14:A9:02:1B:BA:6E:6A:A0:55:46:02:20:B7:1B:D7:F1
Certificate issuer:       /CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
Certificate serial:       23A65C87892281E471DB33ED354E61495086A663
Authority key identifier: 5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa
Signing time:             Wed 08 May 2024 06:00:00 +0000
ROA not before:           Wed 08 May 2024 05:55:00 +0000
ROA not after:            Wed 07 May 2025 06:00:00 +0000
asID:                     9341
IP address blocks:        103.190.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl
                          rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 19:34:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a6:5c:87:89:22:81:e4:71:db:33:ed:35:4e:61:49:50:86:a6:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5C7240CA135C93835F95A8E1F3526942D3214EC2
        Validity
            Not Before: May  8 05:55:00 2024 GMT
            Not After : May  7 06:00:00 2025 GMT
        Subject: CN=91BFA4A514A9021BBA6E6AA055460220B71BD7F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:95:34:d4:a6:93:e2:af:49:5c:94:f1:5c:f8:
                    87:de:ff:79:67:eb:71:cc:4c:73:03:8a:7d:f1:33:
                    e0:ef:0f:d1:bb:99:91:0f:56:58:1b:e5:f1:f1:58:
                    90:bc:23:6f:6b:9c:c7:ab:63:45:a2:16:1f:7b:87:
                    0e:9a:9a:9c:ae:1d:cb:da:d5:52:61:49:54:08:c1:
                    c6:4e:8e:5a:53:e1:f3:ab:2e:63:35:36:35:b0:93:
                    32:56:3f:ff:dc:18:3e:8f:db:44:8a:ad:78:fa:c0:
                    1a:6e:7d:7d:82:2a:2b:46:77:26:29:a5:54:c3:ec:
                    79:fc:f6:d6:46:75:99:e9:32:bf:96:f0:a3:30:ed:
                    94:2c:a1:a7:a2:f6:7a:24:15:a2:69:00:7d:52:62:
                    77:9c:8a:e3:80:ca:b6:c2:a1:d2:5d:f8:d4:29:e3:
                    f0:87:6b:92:eb:50:c9:2c:c2:0a:a6:8b:3c:24:2f:
                    94:77:8d:1a:65:dc:63:7f:ad:d3:7f:0a:c4:bd:5f:
                    40:fa:1b:fc:e3:de:63:e8:fd:a9:64:89:81:6d:e5:
                    94:3c:61:ac:08:a7:99:9e:43:e2:2d:04:62:bf:a5:
                    d7:54:f5:4f:80:10:bb:13:f9:91:76:39:3b:4c:36:
                    27:cd:b0:d0:ee:05:93:db:e5:4c:99:ea:8f:3a:41:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BF:A4:A5:14:A9:02:1B:BA:6E:6A:A0:55:46:02:20:B7:1B:D7:F1
            X509v3 Authority Key Identifier:
                keyid:5C:72:40:CA:13:5C:93:83:5F:95:A8:E1:F3:52:69:42:D3:21:4E:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/5C7240CA135C93835F95A8E1F3526942D3214EC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5C7240CA135C93835F95A8E1F3526942D3214EC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/021f999b-abce-4fa9-8e79-93b9c5e454e1/0/3130332e3139302e34362e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:4b:f3:dc:ae:42:d1:4a:13:21:49:b9:23:ff:63:c4:48:9d:
         4a:eb:c0:a9:d0:5d:bd:91:92:53:b9:40:e9:c6:6f:9e:76:39:
         38:01:9e:47:02:40:fb:96:46:b5:e8:33:e2:7b:19:65:f7:20:
         79:d9:30:01:70:8c:2a:25:0b:e3:0a:92:d9:f0:5e:7b:12:d4:
         02:78:dd:b2:ab:ae:21:76:c9:ac:35:32:82:61:53:7f:da:60:
         be:e1:78:c5:60:ed:e4:6b:dd:5f:54:e8:40:17:e2:ad:89:3f:
         6c:9c:1d:a6:f6:cd:08:a1:71:cd:bb:7e:db:48:f0:4f:48:93:
         a4:94:aa:e5:90:0a:99:8b:0d:7b:cb:07:d3:91:8b:48:0a:22:
         c2:af:f4:8b:0c:65:09:9b:da:bb:60:91:57:1b:1a:c2:a7:cc:
         c3:1d:ea:af:c1:71:0c:8b:75:48:02:d6:e9:f0:7b:53:f1:b3:
         bf:fa:8e:eb:e9:7e:55:2e:da:db:76:62:d9:aa:f4:ec:f6:72:
         7f:b5:b4:96:cd:23:bf:d9:8d:76:6a:e3:5f:61:c0:2e:6b:9c:
         c5:af:29:a0:a2:d3:fc:e3:10:70:d3:c3:e2:cf:74:73:ea:ea:
         8e:1b:4f:d4:65:fa:10:12:8d:c2:1e:4a:57:26:11:cf:ea:27:
         a2:b5:5e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 17:49:50 2024 by rpki-client on console-fra.rpki-client.org