Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa
File:                     3130332e31342e37342e302f32342d3234203d3e20313334363332.roa (raw, json)
Hash identifier:          GPQi1ZCbD5PHjUfxdoEfFcZzOBMWiTMJEsNlZSa3ch0=
Subject key identifier:   AC:4F:0C:13:E8:D4:3C:0B:0C:B8:3C:BA:80:BA:AA:0E:D7:74:EC:11
Certificate issuer:       /CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731
Certificate serial:       5354DC2E66CBDA2E120A79C6FABC8C6C15E6B9E3
Authority key identifier: 1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa
Signing time:             Mon 03 Jun 2024 09:02:06 +0000
ROA not before:           Mon 03 Jun 2024 08:57:06 +0000
ROA not after:            Mon 02 Jun 2025 09:02:06 +0000
asID:                     134632
IP address blocks:        103.14.74.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl
                          rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:54:dc:2e:66:cb:da:2e:12:0a:79:c6:fa:bc:8c:6c:15:e6:b9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EEA71B4C70A47D53BE3204FE2C48CEF927EC731
        Validity
            Not Before: Jun  3 08:57:06 2024 GMT
            Not After : Jun  2 09:02:06 2025 GMT
        Subject: CN=AC4F0C13E8D43C0B0CB83CBA80BAAA0ED774EC11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:1c:32:4a:92:8a:e1:18:a4:54:62:37:ee:76:
                    2b:7a:96:0f:64:d3:f4:9c:b1:fe:81:68:b2:90:03:
                    0d:32:04:94:09:46:9b:10:6d:35:ba:98:fa:e2:2c:
                    52:b2:a6:ca:5e:2b:ca:16:db:b4:34:4f:f8:8a:b6:
                    65:68:14:d3:fe:0a:75:c3:f7:be:9c:25:24:3f:6d:
                    f0:87:f2:94:43:ea:cc:25:a6:18:65:c7:64:3f:64:
                    ad:c4:e5:ec:fe:9d:17:8b:22:44:af:a2:2a:ed:65:
                    6f:5b:9f:a4:9e:a3:4f:80:8b:53:29:fa:be:06:80:
                    95:79:03:f0:9b:ba:8f:ad:78:94:0d:a2:a8:5a:3b:
                    87:28:43:54:22:e9:db:02:e8:e5:ca:ed:7c:7c:b3:
                    3d:cc:81:a3:2f:f3:7a:1f:2e:81:76:16:fb:05:cb:
                    93:5c:2a:1f:13:9b:57:a7:63:74:97:bf:1b:ba:d1:
                    cc:87:4d:f7:2b:0e:00:3f:c1:b6:19:4d:fa:a0:96:
                    17:b7:80:ae:41:5a:9f:de:4e:a4:30:05:75:27:9e:
                    29:cf:ad:ba:3f:c4:87:ee:82:a2:ee:fa:d1:f0:e2:
                    ce:03:55:db:5b:24:5b:27:6f:c2:45:72:f4:41:33:
                    d6:77:df:7e:85:43:d2:2b:d9:4a:4a:47:10:f3:d4:
                    bf:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4F:0C:13:E8:D4:3C:0B:0C:B8:3C:BA:80:BA:AA:0E:D7:74:EC:11
            X509v3 Authority Key Identifier:
                keyid:1E:EA:71:B4:C7:0A:47:D5:3B:E3:20:4F:E2:C4:8C:EF:92:7E:C7:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1EEA71B4C70A47D53BE3204FE2C48CEF927EC731.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1000e23e-f44a-4cfc-bf56-d99a092d7314/0/3130332e31342e37342e302f32342d3234203d3e20313334363332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.14.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:63:b3:4e:31:9b:ad:ae:5d:d9:27:55:ab:53:d9:3a:f9:38:
         54:90:82:b9:e0:c8:6c:b8:2d:c5:ce:10:56:8c:fc:8b:58:dc:
         f2:bf:ea:51:8d:8b:e4:7c:ea:4c:58:c8:e6:33:8f:a0:bc:99:
         de:e4:5c:ce:6d:77:fe:c8:c5:77:13:14:6c:3f:79:be:82:12:
         b9:b3:65:d6:2c:47:37:34:1d:cb:9e:21:68:1f:a8:f1:ce:f6:
         14:9d:bb:94:4c:8a:b1:4e:0a:5f:e5:0d:5a:9e:dc:02:ea:27:
         93:90:6d:8d:d4:f8:b4:8e:c5:c8:80:fd:d9:35:05:3b:61:b6:
         a4:40:80:69:ab:16:98:56:25:81:3a:5f:5f:ad:52:9f:31:de:
         69:e0:50:99:19:ec:cd:61:29:68:c8:c1:8c:1e:d0:89:cf:05:
         45:ee:81:bc:f3:24:0e:a7:33:d8:40:8b:b6:02:8b:15:b0:e6:
         a8:47:d5:20:a6:f9:97:7d:e0:b1:9a:9f:1f:01:cc:f7:ae:32:
         e1:de:4b:c1:de:15:e7:6a:c5:92:67:7d:c1:5b:f1:68:cb:87:
         f5:84:8b:15:a0:7f:32:15:26:ce:ba:93:42:28:0f:da:ba:24:
         0d:9f:04:7e:ab:fa:d2:a8:b0:20:9c:ad:ba:92:e2:88:ea:b3:
         45:39:b3:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:31:57 2024 by rpki-client on console-ams.rpki-client.org