Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa
File:                     3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa (raw, json)
Hash identifier:          F4/KJVXNTNm34izb7glpnGYFHc3KADsusKQ08aViHLM=
Subject key identifier:   44:D9:50:8B:E9:B6:44:7A:98:2D:FD:34:B9:57:DC:EB:14:C8:1A:5B
Certificate issuer:       /CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
Certificate serial:       1DDEB1ED294E0F0E4B412648D608313C4156D5F1
Authority key identifier: 92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa
Signing time:             Fri 26 Jul 2024 01:00:00 +0000
ROA not before:           Fri 26 Jul 2024 00:55:00 +0000
ROA not after:            Fri 25 Jul 2025 01:00:00 +0000
asID:                     137330
IP address blocks:        103.112.137.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl
                          rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:de:b1:ed:29:4e:0f:0e:4b:41:26:48:d6:08:31:3c:41:56:d5:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=923D4A10E1DBBF6927183BF3419F512FE4C1D003
        Validity
            Not Before: Jul 26 00:55:00 2024 GMT
            Not After : Jul 25 01:00:00 2025 GMT
        Subject: CN=44D9508BE9B6447A982DFD34B957DCEB14C81A5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ac:aa:8f:ac:ed:ac:1e:46:5e:25:30:fa:fc:
                    48:36:2e:6c:17:d8:03:6a:4f:32:cd:22:5f:7d:16:
                    76:79:91:b6:59:df:b2:9d:3c:14:65:6b:fb:9b:a8:
                    aa:d9:04:30:ee:e4:2b:b3:08:65:12:1a:e5:9a:53:
                    bd:73:b1:bd:45:d4:ae:2f:41:e2:77:3c:8d:74:9e:
                    d9:33:4b:65:fc:1a:f1:d5:b2:ed:c8:47:cf:35:6a:
                    a3:77:cd:f8:fd:75:bc:b2:17:3e:fe:89:c6:ea:8f:
                    1f:36:77:5c:4c:2e:c0:15:81:e2:2b:72:df:47:a6:
                    3c:a7:80:2c:9e:35:11:bd:95:03:bc:16:74:98:ad:
                    a8:eb:cc:c0:c4:ab:6b:59:40:0d:b4:d3:21:b5:fe:
                    1b:49:69:fb:6b:5c:71:d1:bf:7b:9d:e6:15:9a:19:
                    fe:f6:bb:b2:e8:ab:dd:4d:56:4c:a5:15:25:75:99:
                    be:c3:5e:ef:fe:ba:16:e8:80:21:87:a7:fd:fe:c8:
                    dd:98:6b:66:8c:25:7e:70:02:d1:2d:87:69:8d:8c:
                    4f:4e:a2:de:0d:e3:0b:89:9e:90:94:7d:3b:d8:bb:
                    09:d3:70:f4:21:a4:e9:4a:47:59:20:f2:82:f6:82:
                    b2:18:61:75:f1:96:9c:01:1a:2e:e3:af:b9:51:9c:
                    a7:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D9:50:8B:E9:B6:44:7A:98:2D:FD:34:B9:57:DC:EB:14:C8:1A:5B
            X509v3 Authority Key Identifier:
                keyid:92:3D:4A:10:E1:DB:BF:69:27:18:3B:F3:41:9F:51:2F:E4:C1:D0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/923D4A10E1DBBF6927183BF3419F512FE4C1D003.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/923D4A10E1DBBF6927183BF3419F512FE4C1D003.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c34ff08-d21f-420b-87df-53103b6dc253/0/3130332e3131322e3133372e302f32342d3234203d3e20313337333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.112.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:8b:28:5d:40:e5:ba:de:da:06:95:1c:ae:da:cb:cd:9b:23:
         ee:25:d0:4f:03:49:2e:52:eb:bc:d8:f7:b7:5c:60:df:e0:29:
         56:38:82:fa:55:5e:ab:f5:bb:cf:6c:47:e2:a9:40:2e:f0:f2:
         c4:dc:15:f5:f4:cb:1d:93:7f:2c:21:37:2d:7a:1a:e8:8b:66:
         1d:87:65:02:df:3e:7c:2f:d0:25:27:a4:e3:db:0a:28:1b:17:
         1d:cd:14:c4:b6:a9:53:ef:81:20:ff:49:6a:11:a9:7d:94:9b:
         d4:49:dd:cc:98:ea:c0:60:9e:94:10:dc:61:e0:ec:ce:da:35:
         ba:68:6a:8f:00:95:ca:b1:72:fe:5d:17:b1:55:da:87:7e:89:
         2e:d5:f0:35:10:db:e2:4a:3e:3e:47:c6:bd:5d:0a:36:d5:8f:
         11:ef:4a:38:db:86:5f:cf:bd:87:4b:5c:d6:85:c1:3e:84:a0:
         14:b3:57:01:df:0e:9a:aa:55:4c:8c:2b:b7:23:44:ae:3d:bc:
         1c:e0:ff:05:5f:7b:54:fa:a5:f9:cd:75:32:c9:d0:41:79:d5:
         25:e1:b2:78:88:f4:84:fc:8a:5b:6b:ec:73:12:56:a6:bc:b2:
         7c:36:84:44:8d:7a:ef:13:17:8d:89:40:e8:20:5d:58:5f:e8:
         9f:c6:ae:6e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUHd6x7SlODw5LQSZI1ggxPEFW1fEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZF
NEMxRDAwMzAeFw0yNDA3MjYwMDU1MDBaFw0yNTA3MjUwMTAwMDBaMDMxMTAvBgNV
BAMTKDQ0RDk1MDhCRTlCNjQ0N0E5ODJERkQzNEI5NTdEQ0VCMTRDODFBNUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtrKqPrO2sHkZeJTD6/Eg2LmwX
2ANqTzLNIl99FnZ5kbZZ37KdPBRla/ubqKrZBDDu5CuzCGUSGuWaU71zsb1F1K4v
QeJ3PI10ntkzS2X8GvHVsu3IR881aqN3zfj9dbyyFz7+icbqjx82d1xMLsAVgeIr
ct9HpjyngCyeNRG9lQO8FnSYrajrzMDEq2tZQA200yG1/htJaftrXHHRv3ud5hWa
Gf72u7Loq91NVkylFSV1mb7DXu/+uhbogCGHp/3+yN2Ya2aMJX5wAtEth2mNjE9O
ot4N4wuJnpCUfTvYuwnTcPQhpOlKR1kg8oL2grIYYXXxlpwBGi7jr7lRnKfhAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQURNlQi+m2RHqYLf00uVfc6xTIGlswHwYDVR0j
BBgwFoAUkj1KEOHbv2knGDvzQZ9RL+TB0AMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
YzM0ZmYwOC1kMjFmLTQyMGItODdkZi01MzEwM2I2ZGMyNTMvMC85MjNENEExMEUx
REJCRjY5MjcxODNCRjM0MTlGNTEyRkU0QzFEMDAzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTIzRDRBMTBFMURCQkY2OTI3MTgzQkYzNDE5RjUxMkZFNEMx
RDAwMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzBjMzRmZjA4LWQyMWYtNDIwYi04
N2RmLTUzMTAzYjZkYzI1My8wLzMxMzAzMzJlMzEzMTMyMmUzMTMzMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzczMzMzMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABncIkwDQYJ
KoZIhvcNAQELBQADggEBAEaLKF1A5bre2gaVHK7ay82bI+4l0E8DSS5S67zY97dc
YN/gKVY4gvpVXqv1u89sR+KpQC7w8sTcFfX0yx2TfywhNy16GuiLZh2HZQLfPnwv
0CUnpOPbCigbFx3NFMS2qVPvgSD/SWoRqX2Um9RJ3cyY6sBgnpQQ3GHg7M7aNbpo
ao8Alcqxcv5dF7FV2od+iS7V8DUQ2+JKPj5Hxr1dCjbVjxHvSjjbhl/PvYdLXNaF
wT6EoBSzVwHfDpqqVUyMK7cjRK49vBzg/wVfe1T6pfnNdTLJ0EF51SXhsniI9IT8
iltr7HMSVqa8snw2hESNeu8TF42JQOggXVhf6J/Grm4=
-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:45 2024 by rpki-client on console-ams.rpki-client.org