Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
File:                     3130332e3134302e33342e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          C9S93KSRFkwttxm+dA73MfUYSpF8WqYsMyjSI8YO+Ws=
Subject key identifier:   CD:2D:13:C2:5A:72:F3:81:47:43:B7:CB:F8:37:5F:F9:0D:A4:D1:18
Certificate issuer:       /CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
Certificate serial:       4944A4326FAB165EA752D67C54C67294C8A7ED66
Authority key identifier: 9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa
Signing time:             Mon 01 Jul 2024 01:04:30 +0000
ROA not before:           Mon 01 Jul 2024 00:59:30 +0000
ROA not after:            Mon 30 Jun 2025 01:04:30 +0000
asID:                     58369
IP address blocks:        103.140.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl
                          rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 08:05:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:44:a4:32:6f:ab:16:5e:a7:52:d6:7c:54:c6:72:94:c8:a7:ed:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312
        Validity
            Not Before: Jul  1 00:59:30 2024 GMT
            Not After : Jun 30 01:04:30 2025 GMT
        Subject: CN=CD2D13C25A72F3814743B7CBF8375FF90DA4D118
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:43:7c:19:ea:f7:04:d6:54:86:57:41:4b:77:
                    a7:87:5a:00:67:08:19:26:4d:29:18:fc:e3:23:64:
                    f0:71:9f:15:79:ba:b6:31:96:e4:5d:e2:69:1c:a1:
                    fe:8c:d3:51:6e:be:23:a2:ab:f7:cb:f9:22:06:a7:
                    9b:86:8d:1c:fc:ad:c6:d8:2a:98:d6:70:cc:64:d1:
                    86:17:16:f3:31:95:b5:7f:e2:ef:d3:05:42:5d:05:
                    93:86:7f:86:fe:0f:b1:bc:cf:c8:b3:e6:aa:49:d3:
                    3e:67:9d:f3:9c:b8:2c:5a:e0:90:44:11:88:f5:1a:
                    4b:f8:2d:7e:c2:fc:79:37:e9:0b:67:60:09:29:5a:
                    a1:1b:2f:53:1b:30:98:fe:14:3c:fa:40:2d:97:0b:
                    79:27:e0:d7:19:0a:3f:ec:30:0f:6b:b5:55:5c:9b:
                    d8:ed:6c:a5:47:fa:20:aa:ae:3d:cc:50:d1:8e:86:
                    ef:01:92:51:61:06:97:9e:a2:69:d8:03:76:be:60:
                    3b:87:04:ea:dd:e2:e7:3f:c6:dd:11:b1:10:86:29:
                    a6:79:d1:1f:11:9d:5b:d4:3c:92:76:47:1e:56:65:
                    9b:e2:a5:a2:c5:88:e4:98:d5:a5:51:f3:17:15:00:
                    e9:da:32:87:f9:50:62:db:31:1b:0f:e2:d8:09:3e:
                    b4:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2D:13:C2:5A:72:F3:81:47:43:B7:CB:F8:37:5F:F9:0D:A4:D1:18
            X509v3 Authority Key Identifier:
                keyid:9F:5E:7C:D1:CF:2E:52:B2:82:C4:03:FC:C0:AF:8B:02:D0:E8:93:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9F5E7CD1CF2E52B282C403FCC0AF8B02D0E89312.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/152226ea-5e26-4ea5-a689-4757ad05f952/0/3130332e3134302e33342e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.140.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:e1:8e:69:e0:c3:0e:bd:61:d5:68:35:26:2c:4b:76:19:4a:
         fc:61:d0:14:81:a7:9a:09:7a:b0:1a:29:ea:0c:74:85:9d:68:
         bb:b8:9e:73:7d:3c:93:2b:23:73:c5:3f:1a:b6:4f:40:ae:77:
         91:45:bf:d5:cd:39:b9:b4:8c:86:2a:24:ee:6e:2c:16:c1:8c:
         74:b0:f9:10:c8:0f:6c:e7:f9:ef:4b:d9:84:4d:af:48:eb:c6:
         39:fe:16:3c:b8:de:3c:b1:c5:eb:e7:11:57:88:99:8e:0d:2c:
         6f:1b:22:b5:ae:d8:ec:59:46:a5:a3:0f:17:7d:51:89:a4:61:
         3c:d9:47:83:de:56:69:d2:b4:92:b6:9c:4a:80:0f:d5:2c:8b:
         b8:c1:9e:c2:ac:18:98:a5:4d:7a:c8:44:1a:99:9c:7f:a4:02:
         cf:11:5b:f7:ae:23:b3:e5:5e:b9:60:43:cd:a2:50:94:69:92:
         9d:a2:43:55:ef:ff:77:d6:fe:66:f3:cd:d1:b8:08:cb:12:b2:
         70:b7:01:a7:94:aa:eb:e8:73:44:52:cb:44:20:bd:2c:85:3e:
         ed:00:be:df:42:7f:fa:59:db:6f:34:05:21:3d:cd:be:32:0c:
         34:00:d8:93:48:d4:f5:e9:d8:7a:16:24:5c:23:d3:b7:50:ed:
         5a:43:20:40
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUSUSkMm+rFl6nUtZ8VMZylMin7WYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJE
MEU4OTMxMjAeFw0yNDA3MDEwMDU5MzBaFw0yNTA2MzAwMTA0MzBaMDMxMTAvBgNV
BAMTKENEMkQxM0MyNUE3MkYzODE0NzQzQjdDQkY4Mzc1RkY5MERBNEQxMTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQ3wZ6vcE1lSGV0FLd6eHWgBn
CBkmTSkY/OMjZPBxnxV5urYxluRd4mkcof6M01FuviOiq/fL+SIGp5uGjRz8rcbY
KpjWcMxk0YYXFvMxlbV/4u/TBUJdBZOGf4b+D7G8z8iz5qpJ0z5nnfOcuCxa4JBE
EYj1Gkv4LX7C/Hk36QtnYAkpWqEbL1MbMJj+FDz6QC2XC3kn4NcZCj/sMA9rtVVc
m9jtbKVH+iCqrj3MUNGOhu8BklFhBpeeomnYA3a+YDuHBOrd4uc/xt0RsRCGKaZ5
0R8RnVvUPJJ2Rx5WZZvipaLFiOSY1aVR8xcVAOnaMof5UGLbMRsP4tgJPrS5AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUzS0Twlpy84FHQ7fL+Ddf+Q2k0RgwHwYDVR0j
BBgwFoAUn1580c8uUrKCxAP8wK+LAtDokxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTIyMjZlYS01ZTI2LTRlYTUtYTY4OS00NzU3YWQwNWY5NTIvMC85RjVFN0NEMUNG
MkU1MkIyODJDNDAzRkNDMEFGOEIwMkQwRTg5MzEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUY1RTdDRDFDRjJFNTJCMjgyQzQwM0ZDQzBBRjhCMDJEMEU4
OTMxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1MjIyNmVhLTVlMjYtNGVhNS1h
Njg5LTQ3NTdhZDA1Zjk1Mi8wLzMxMzAzMzJlMzEzNDMwMmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzODMzMzYzOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGeMIjANBgkqhkiG
9w0BAQsFAAOCAQEAfuGOaeDDDr1h1Wg1JixLdhlK/GHQFIGnmgl6sBop6gx0hZ1o
u7iec308kysjc8U/GrZPQK53kUW/1c05ubSMhiok7m4sFsGMdLD5EMgPbOf570vZ
hE2vSOvGOf4WPLjePLHF6+cRV4iZjg0sbxsita7Y7FlGpaMPF31RiaRhPNlHg95W
adK0kracSoAP1SyLuMGewqwYmKVNeshEGpmcf6QCzxFb964js+VeuWBDzaJQlGmS
naJDVe//d9b+ZvPN0bgIyxKycLcBp5Sq6+hzRFLLRCC9LIU+7QC+30J/+lnbbzQF
IT3NvjIMNADYk0jU9enYehYkXCPTt1DtWkMgQA==
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:09:21 2024 by rpki-client on console-fra.rpki-client.org