Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
File:                     3130332e33302e3232302e302f32342d3234203d3e203338313438.roa (raw, json)
Hash identifier:          5MfpBewFDSPuWTooHE8O1IkKqC/swjstgMNE2K+S+q4=
Subject key identifier:   54:AF:14:FC:8F:FA:56:D0:AB:8C:65:46:98:94:CE:5A:E6:C0:DB:54
Certificate issuer:       /CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
Certificate serial:       7DE32032B06497AABF68395CA8E223A5ABDD33EE
Authority key identifier: B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa
Signing time:             Wed 16 Oct 2024 04:02:05 +0000
ROA not before:           Wed 16 Oct 2024 03:57:05 +0000
ROA not after:            Wed 15 Oct 2025 04:02:05 +0000
asID:                     38148
IP address blocks:        103.30.220.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl
                          rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e3:20:32:b0:64:97:aa:bf:68:39:5c:a8:e2:23:a5:ab:dd:33:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B921DAABB84949DDC2500D4F0A6D93FA0EB384E1
        Validity
            Not Before: Oct 16 03:57:05 2024 GMT
            Not After : Oct 15 04:02:05 2025 GMT
        Subject: CN=54AF14FC8FFA56D0AB8C65469894CE5AE6C0DB54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9e:a9:1f:3d:0f:da:3c:46:16:1d:19:dc:55:
                    1e:f7:47:41:7f:90:f4:af:c0:c6:43:6f:47:09:88:
                    be:32:67:a4:d0:71:55:06:7a:c9:78:03:72:44:c3:
                    5d:ca:db:8a:64:1a:b5:91:31:93:d1:8b:ff:49:fe:
                    a8:96:03:58:3d:fa:3e:43:a8:7b:ac:ae:90:2e:e2:
                    52:a9:5d:db:3b:53:30:a7:d3:40:02:f2:f1:95:b2:
                    0d:70:42:a6:88:8b:a4:e6:4b:47:a2:6a:89:14:bf:
                    24:bb:35:2f:ab:26:20:7d:c7:36:b5:38:98:6a:e2:
                    86:29:fe:36:36:00:e0:2c:6d:df:71:aa:0c:76:7d:
                    e9:ef:23:6b:0e:0a:2c:9d:a0:43:61:b8:8e:13:8d:
                    40:31:87:0a:98:e5:ad:b1:c4:5f:bd:82:15:bf:d2:
                    ce:33:4e:fb:c0:7e:c1:b8:f7:5d:e9:b4:9b:f9:f7:
                    c7:e1:9c:28:36:4b:59:0e:ce:dd:69:e4:76:73:6b:
                    a0:3c:71:9d:66:8a:52:54:76:fc:98:8a:88:17:6c:
                    ae:7c:48:34:96:3a:6c:a0:3a:0b:01:da:e7:e9:4e:
                    ab:3d:c1:50:d3:ee:81:f5:78:87:5c:3b:80:e2:e4:
                    31:fc:83:df:0d:db:99:c5:33:0c:80:22:35:9e:fc:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:AF:14:FC:8F:FA:56:D0:AB:8C:65:46:98:94:CE:5A:E6:C0:DB:54
            X509v3 Authority Key Identifier:
                keyid:B9:21:DA:AB:B8:49:49:DD:C2:50:0D:4F:0A:6D:93:FA:0E:B3:84:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B921DAABB84949DDC2500D4F0A6D93FA0EB384E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1592c274-11db-4127-babb-aeae99284b00/0/3130332e33302e3232302e302f32342d3234203d3e203338313438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:ae:9e:24:f7:fa:12:3d:2e:13:0b:ba:1e:76:96:59:c5:43:
         0f:a5:2d:5a:8a:91:7f:08:74:fe:b2:03:54:8e:f2:9b:0c:7f:
         de:15:9e:b4:17:5d:8e:16:eb:93:3f:1d:05:87:9d:a9:8c:09:
         b4:96:d7:33:ea:00:8c:1b:8f:a1:81:4e:5b:f6:e7:7b:ed:7b:
         4c:0a:8e:d8:b7:c3:81:c3:6c:5b:17:7e:7d:d2:f8:e8:e6:a8:
         f1:94:cc:43:bb:c6:c7:c8:d7:89:39:b2:32:2e:3d:e2:da:32:
         f8:40:d2:ec:db:6c:95:2c:3c:7d:3c:80:2d:63:cc:9b:73:a4:
         44:cb:42:c8:f6:d2:9c:a8:e8:ae:7f:50:22:cf:f5:7a:86:e5:
         23:81:6b:dc:c9:b6:c7:9a:52:15:0d:4c:db:15:c9:31:64:f0:
         ba:61:33:21:bf:1a:53:b2:c9:e8:ec:25:53:b5:b9:49:ed:e8:
         30:4d:1e:ae:df:c5:d8:4c:1b:40:f6:34:7f:4c:f7:49:f3:b3:
         83:b6:68:34:79:35:9a:c3:10:7a:a5:4f:2b:41:c5:5b:82:b0:
         34:9e:51:b5:55:00:49:80:d5:f3:20:bb:81:dc:c5:e8:99:93:
         21:f0:6e:f7:5d:73:38:4b:39:28:ea:a6:18:ad:b7:07:1e:6c:
         ac:a4:75:da
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUfeMgMrBkl6q/aDlcqOIjpavdM+4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEw
RUIzODRFMTAeFw0yNDEwMTYwMzU3MDVaFw0yNTEwMTUwNDAyMDVaMDMxMTAvBgNV
BAMTKDU0QUYxNEZDOEZGQTU2RDBBQjhDNjU0Njk4OTRDRTVBRTZDMERCNTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCunqkfPQ/aPEYWHRncVR73R0F/
kPSvwMZDb0cJiL4yZ6TQcVUGesl4A3JEw13K24pkGrWRMZPRi/9J/qiWA1g9+j5D
qHusrpAu4lKpXds7UzCn00AC8vGVsg1wQqaIi6TmS0eiaokUvyS7NS+rJiB9xza1
OJhq4oYp/jY2AOAsbd9xqgx2fenvI2sOCiydoENhuI4TjUAxhwqY5a2xxF+9ghW/
0s4zTvvAfsG4913ptJv598fhnCg2S1kOzt1p5HZza6A8cZ1milJUdvyYiogXbK58
SDSWOmygOgsB2ufpTqs9wVDT7oH1eIdcO4Di5DH8g98N25nFMwyAIjWe/L7xAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUVK8U/I/6VtCrjGVGmJTOWubA21QwHwYDVR0j
BBgwFoAUuSHaq7hJSd3CUA1PCm2T+g6zhOEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
NTkyYzI3NC0xMWRiLTQxMjctYmFiYi1hZWFlOTkyODRiMDAvMC9COTIxREFBQkI4
NDk0OUREQzI1MDBENEYwQTZEOTNGQTBFQjM4NEUxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQjkyMURBQUJCODQ5NDlEREMyNTAwRDRGMEE2RDkzRkEwRUIz
ODRFMS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE1OTJjMjc0LTExZGItNDEyNy1i
YWJiLWFlYWU5OTI4NGIwMC8wLzMxMzAzMzJlMzMzMDJlMzIzMjMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODMxMzQzOC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGce3DANBgkqhkiG
9w0BAQsFAAOCAQEAeK6eJPf6Ej0uEwu6HnaWWcVDD6UtWoqRfwh0/rIDVI7ymwx/
3hWetBddjhbrkz8dBYedqYwJtJbXM+oAjBuPoYFOW/bne+17TAqO2LfDgcNsWxd+
fdL46Oao8ZTMQ7vGx8jXiTmyMi494toy+EDS7NtslSw8fTyALWPMm3OkRMtCyPbS
nKjorn9QIs/1eoblI4Fr3Mm2x5pSFQ1M2xXJMWTwumEzIb8aU7LJ6OwlU7W5Se3o
ME0ert/F2EwbQPY0f0z3SfOzg7ZoNHk1msMQeqVPK0HFW4KwNJ5RtVUASYDV8yC7
gdzF6JmTIfBu911zOEs5KOqmGK23Bx5srKR12g==
-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:14 2024 by rpki-client on console-ams.rpki-client.org