Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          soOwOsKEClipawNtfhPlc/7q78qMlxe1VK6YTqJKRFg=
Subject key identifier:   14:79:B8:C5:62:13:B3:07:EC:74:E1:62:EA:B7:B8:93:1E:EF:77:A4
Certificate issuer:       /CN=E118E8E6144A59677DB6D05BDF713DB23BC61342
Certificate serial:       529350DE3D7249FA0408122278ECB83BD5B7367A
Authority key identifier: E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa
Signing time:             Thu 01 Aug 2024 08:02:17 +0000
ROA not before:           Thu 01 Aug 2024 07:57:17 +0000
ROA not after:            Thu 31 Jul 2025 08:02:17 +0000
asID:                     131111
IP address blocks:        103.174.18.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl
                          rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:58:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:93:50:de:3d:72:49:fa:04:08:12:22:78:ec:b8:3b:d5:b7:36:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E118E8E6144A59677DB6D05BDF713DB23BC61342
        Validity
            Not Before: Aug  1 07:57:17 2024 GMT
            Not After : Jul 31 08:02:17 2025 GMT
        Subject: CN=1479B8C56213B307EC74E162EAB7B8931EEF77A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:71:1e:4c:10:2c:bb:1d:cc:c0:a4:27:4c:19:
                    0c:cb:e0:55:4a:ce:a5:3f:f9:5e:40:e9:25:c2:4a:
                    65:30:9e:56:d8:79:38:7f:78:8b:4b:78:a3:bd:b1:
                    92:94:fe:23:f5:80:ee:a6:9f:6d:d4:1b:d8:76:be:
                    ca:f8:91:3e:d3:12:f5:34:fc:1c:d9:0c:1d:e6:6c:
                    42:f7:a1:7c:fd:79:c0:41:93:c6:11:36:d8:af:5c:
                    e1:d9:63:a1:f5:c8:8d:93:80:d1:02:bb:ed:a1:ba:
                    6c:9f:1c:7b:79:08:f4:2f:54:4e:b7:ea:ec:ca:fc:
                    d4:bc:e8:ac:38:51:f8:64:18:a2:b9:96:74:43:9d:
                    b4:a9:b6:c4:ad:77:c7:6a:eb:be:48:9b:06:6b:37:
                    49:22:5f:87:8d:61:ad:93:be:e5:92:c5:fb:ee:2e:
                    3f:97:1a:ab:22:82:10:ba:7d:b0:e9:a7:fb:73:33:
                    fc:ec:a2:18:1c:f5:a4:af:aa:43:b1:2d:c7:89:4d:
                    05:d1:8e:65:af:35:2c:c6:78:86:6b:93:d7:c4:96:
                    f6:57:7a:19:cb:36:c6:db:99:0f:f6:45:3b:77:6d:
                    cc:bc:bc:c5:86:4b:ce:a6:f7:3a:75:b6:21:b5:78:
                    b7:4f:c1:51:67:a1:97:6c:6d:8f:6c:5d:16:80:37:
                    b8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:79:B8:C5:62:13:B3:07:EC:74:E1:62:EA:B7:B8:93:1E:EF:77:A4
            X509v3 Authority Key Identifier:
                keyid:E1:18:E8:E6:14:4A:59:67:7D:B6:D0:5B:DF:71:3D:B2:3B:C6:13:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/E118E8E6144A59677DB6D05BDF713DB23BC61342.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E118E8E6144A59677DB6D05BDF713DB23BC61342.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/101dbafc-c0cc-496a-b5e0-4f48ba946cd3/0/3130332e3137342e31382e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.174.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:1f:47:b6:8d:c0:f2:10:17:bb:40:2d:6a:4c:cd:56:68:
         5a:69:d5:53:08:27:b3:60:c9:44:a0:bf:15:7d:31:d6:19:7c:
         8a:7f:be:1f:cd:a1:78:bb:73:41:5c:12:e4:f8:48:05:67:97:
         20:61:1d:ec:63:2a:ec:e1:4c:56:e8:a9:fa:2f:8b:e7:bb:d6:
         23:7e:f1:e9:1c:85:50:3d:ae:ee:d6:09:1f:aa:6c:a8:52:2f:
         c2:f6:76:bf:33:84:de:b8:a1:78:2c:07:f1:73:33:09:aa:d0:
         78:78:ca:14:4b:24:89:67:36:67:c3:14:38:4b:ab:87:0a:db:
         40:e6:b7:a4:32:ce:a0:26:bb:4e:eb:9c:61:c6:71:ff:7f:91:
         cc:c8:c8:93:82:56:6a:a9:a3:ea:19:3a:cb:a8:b2:dc:d5:a0:
         2e:1a:c9:dd:92:8f:bb:37:bb:69:97:55:a6:47:76:64:10:fa:
         6b:98:b7:a2:b7:5f:d7:ca:43:e3:92:7f:0a:c7:3b:da:5b:2e:
         b3:22:0a:82:f1:6d:ac:08:3f:ac:27:1c:e1:2c:51:12:d5:b6:
         54:89:5c:30:9b:d0:6a:35:f8:3e:25:b9:9d:be:66:e2:72:7d:
         f7:e0:87:1a:19:6c:96:70:9e:95:10:df:46:69:96:4d:e7:de:
         27:5f:9f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:03 2024 by rpki-client on console-ams.rpki-client.org