Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          1AXu9VMwS+8knSVXl2hI8iHOcYa+VjnkUxjjL7VCI30=
Subject key identifier:   91:62:33:4C:9D:4C:FB:4D:54:FB:BE:98:AD:13:62:95:7C:83:AA:22
Certificate issuer:       /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial:       202D1005AB272422F36355504448D2C0AEA544C5
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
Signing time:             Thu 25 Jul 2024 09:00:02 +0000
ROA not before:           Thu 25 Jul 2024 08:55:02 +0000
ROA not after:            Thu 24 Jul 2025 09:00:02 +0000
asID:                     141674
IP address blocks:        103.177.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl
                          rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:2d:10:05:ab:27:24:22:f3:63:55:50:44:48:d2:c0:ae:a5:44:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
        Validity
            Not Before: Jul 25 08:55:02 2024 GMT
            Not After : Jul 24 09:00:02 2025 GMT
        Subject: CN=9162334C9D4CFB4D54FBBE98AD1362957C83AA22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:a2:b2:c5:69:bf:cd:2f:2b:7f:0c:73:1c:
                    d5:49:f2:e7:6a:b3:05:6a:cc:6c:ad:e5:83:35:07:
                    2c:8c:f4:2f:52:ec:eb:45:1d:94:2c:7b:c5:09:7b:
                    d4:7b:f3:79:a3:d7:86:98:5c:2b:2d:b4:5f:c0:03:
                    4f:aa:b5:55:43:e8:a9:75:47:8e:95:dd:3f:04:94:
                    96:1f:ac:ca:b3:ea:58:f3:40:93:73:83:ab:cb:b9:
                    65:0d:dd:9c:08:7f:ef:19:e1:12:94:d1:b3:f3:2b:
                    f4:94:8c:d0:bf:60:00:23:5b:1f:91:6a:67:f7:99:
                    ec:48:72:24:c4:d0:fa:95:20:ab:1c:aa:7e:50:7b:
                    66:8b:7b:09:c2:5b:2d:1c:61:8a:e7:2c:70:17:1a:
                    8a:4a:bc:7c:25:da:ed:03:67:a5:04:34:a2:70:91:
                    df:e6:e3:ef:81:e5:8d:36:b7:f5:d5:f5:95:56:8b:
                    ef:34:ce:ea:b1:6a:f5:02:84:0c:f1:18:8d:f8:6e:
                    e0:f9:ef:fa:3a:e7:56:de:7e:ef:49:df:6f:89:05:
                    84:57:4f:58:31:7f:1b:14:64:64:e1:85:9e:2a:c1:
                    57:3f:44:72:5a:68:5c:ff:db:52:2f:99:20:1c:dd:
                    8f:a0:b6:59:f0:3b:0f:ee:30:0e:cc:e4:7f:53:7b:
                    00:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:62:33:4C:9D:4C:FB:4D:54:FB:BE:98:AD:13:62:95:7C:83:AA:22
            X509v3 Authority Key Identifier:
                keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:90:07:f9:2e:be:0a:78:f8:6b:c2:a9:b1:7c:f9:81:dc:cf:
         08:4d:84:3c:7b:1c:f0:b5:d6:7e:fe:06:b0:13:e1:c3:88:be:
         f6:3a:8e:be:ee:be:3f:4d:33:b0:ef:f7:5a:e8:20:6f:16:ad:
         6a:44:fe:7d:ac:18:0c:4d:3e:01:08:bd:78:f9:4e:63:95:24:
         55:eb:39:93:12:5a:2d:85:52:b1:03:82:24:c2:57:61:15:54:
         97:fa:be:79:b2:7b:a0:60:04:30:19:7c:1c:5d:ae:42:46:dc:
         26:7b:0c:a9:7f:11:83:d2:bb:48:ea:84:bf:37:a8:38:3b:2e:
         65:1a:7b:99:89:3f:ce:a7:2b:3b:14:cb:bf:0b:a9:2c:0d:c0:
         fd:2d:39:07:50:81:79:ed:95:7f:86:71:91:01:e3:f6:a0:04:
         2c:40:bd:8a:08:e9:4d:b8:a2:63:06:31:91:49:c0:66:6e:1e:
         ac:fa:f6:5c:dd:a2:66:f2:1f:7c:8f:ce:cf:86:03:b1:d6:67:
         2a:ff:f0:46:80:71:63:ee:ab:03:5a:80:2e:5e:b1:32:e6:4f:
         55:06:57:1e:8c:02:c6:5b:1d:35:24:0c:3d:18:25:b4:54:21:
         7f:41:f7:6e:27:a7:18:2d:c0:38:cd:8f:13:c7:dd:ba:d6:d7:
         93:2a:19:a6
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUIC0QBasnJCLzY1VQREjSwK6lRMUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0
NzBCNDFGMzAeFw0yNDA3MjUwODU1MDJaFw0yNTA3MjQwOTAwMDJaMDMxMTAvBgNV
BAMTKDkxNjIzMzRDOUQ0Q0ZCNEQ1NEZCQkU5OEFEMTM2Mjk1N0M4M0FBMjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAyKKyxWm/zS8rfwxzHNVJ8udq
swVqzGyt5YM1ByyM9C9S7OtFHZQse8UJe9R783mj14aYXCsttF/AA0+qtVVD6Kl1
R46V3T8ElJYfrMqz6ljzQJNzg6vLuWUN3ZwIf+8Z4RKU0bPzK/SUjNC/YAAjWx+R
amf3mexIciTE0PqVIKscqn5Qe2aLewnCWy0cYYrnLHAXGopKvHwl2u0DZ6UENKJw
kd/m4++B5Y02t/XV9ZVWi+80zuqxavUChAzxGI34buD57/o651befu9J32+JBYRX
T1gxfxsUZGThhZ4qwVc/RHJaaFz/21IvmSAc3Y+gtlnwOw/uMA7M5H9TewC9AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUkWIzTJ1M+01U+76YrRNilXyDqiIwHwYDVR0j
BBgwFoAUQMBVPJCX7EpPI+7cBSBbxUcLQfMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NGNjNjllOS1lZjc0LTRiODEtOTFmNC03YmZkZjkzZjdiYWEvMC80MEMwNTUzQzkw
OTdFQzRBNEYyM0VFREMwNTIwNUJDNTQ3MEI0MUYzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDBDMDU1M0M5MDk3RUM0QTRGMjNFRURDMDUyMDVCQzU0NzBC
NDFGMy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE0Y2M2OWU5LWVmNzQtNGI4MS05
MWY0LTdiZmRmOTNmN2JhYS8wLzMxMzAzMzJlMzEzNzM3MmUzMTMwMzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsWswDQYJ
KoZIhvcNAQELBQADggEBAIWQB/kuvgp4+GvCqbF8+YHczwhNhDx7HPC11n7+BrAT
4cOIvvY6jr7uvj9NM7Dv91roIG8WrWpE/n2sGAxNPgEIvXj5TmOVJFXrOZMSWi2F
UrEDgiTCV2EVVJf6vnmye6BgBDAZfBxdrkJG3CZ7DKl/EYPSu0jqhL83qDg7LmUa
e5mJP86nKzsUy78LqSwNwP0tOQdQgXntlX+GcZEB4/agBCxAvYoI6U24omMGMZFJ
wGZuHqz69lzdombyH3yPzs+GA7HWZyr/8EaAcWPuqwNagC5esTLmT1UGVx6MAsZb
HTUkDD0YJbRUIX9B924npxgtwDjNjxPH3brW15MqGaY=
-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org