Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          /ux2kePKCtcJt/H4xt770XYnntc51Gy2zRjOsEI7g3U=
Subject key identifier:   90:14:B3:60:47:C2:2E:C7:F5:09:B6:24:6D:5E:DB:DD:92:F5:78:90
Certificate issuer:       /CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
Certificate serial:       465464981383F057166CC77CA52CD6C7498D29A5
Authority key identifier: 9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa
Signing time:             Fri 17 May 2024 16:00:01 +0000
ROA not before:           Fri 17 May 2024 15:55:01 +0000
ROA not after:            Fri 16 May 2025 16:00:01 +0000
asID:                     141674
IP address blocks:        103.171.244.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl
                          rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:54:64:98:13:83:f0:57:16:6c:c7:7c:a5:2c:d6:c7:49:8d:29:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E
        Validity
            Not Before: May 17 15:55:01 2024 GMT
            Not After : May 16 16:00:01 2025 GMT
        Subject: CN=9014B36047C22EC7F509B6246D5EDBDD92F57890
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a5:39:e7:d6:d0:1e:9a:dc:ef:27:6d:f5:19:
                    ec:cb:48:70:29:ec:12:56:24:fa:de:00:78:bf:ff:
                    b4:18:3c:70:4c:7c:e8:72:38:05:c5:15:04:f0:10:
                    84:f2:6b:eb:7f:be:08:43:0d:c2:a7:32:68:4f:81:
                    e5:b6:6b:e2:d5:cb:c6:22:45:bd:4f:a7:a0:f3:09:
                    12:95:e1:68:1b:3b:d0:0d:33:c8:34:75:6f:a4:8b:
                    8d:67:4a:db:ec:9b:50:15:8f:13:8f:8c:07:1b:53:
                    b6:56:4b:19:02:4c:fe:99:24:aa:a9:9a:7c:c7:af:
                    38:52:21:74:b7:ba:68:17:d2:8b:a3:7d:c7:65:7b:
                    5a:43:2d:de:0a:c0:12:d6:63:5b:fa:84:d5:e1:9f:
                    d2:0d:40:89:56:95:61:66:f9:57:36:8f:51:be:3d:
                    29:fb:39:de:44:07:f6:e7:18:6e:a4:bd:5f:e5:c0:
                    13:e6:27:37:93:00:60:1e:e7:43:0e:03:40:5e:bb:
                    33:7a:6c:57:05:69:8e:2b:65:d5:c1:f9:00:e0:c9:
                    c8:48:07:60:18:89:e2:ec:c8:0d:d5:ce:65:62:0c:
                    df:d6:82:76:0f:28:3f:ca:c1:e7:e7:23:89:70:99:
                    a5:63:b7:c4:04:04:79:d1:41:e1:ad:4f:45:21:e0:
                    ef:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:14:B3:60:47:C2:2E:C7:F5:09:B6:24:6D:5E:DB:DD:92:F5:78:90
            X509v3 Authority Key Identifier:
                keyid:9C:E1:4E:1A:AA:05:8B:35:B9:AD:5B:97:41:2E:4E:1A:0D:B2:FD:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9CE14E1AAA058B35B9AD5B97412E4E1A0DB2FD8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1aac1bb9-45f6-4667-b194-9a69a4a4d755/0/3130332e3137312e3234342e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.244.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:18:1c:15:71:6b:ee:42:6e:05:c4:fd:b2:f0:8b:0f:4d:2f:
         f6:87:09:90:20:72:98:5f:b5:2d:29:3b:ed:ec:94:9b:a8:e2:
         2f:8f:f0:4b:53:6c:92:72:de:4e:1a:00:04:6f:b1:c6:74:4d:
         94:01:32:55:05:61:2c:9d:f8:a0:06:d1:e2:10:58:b9:8d:d9:
         45:96:d1:3e:c2:6f:35:ea:ef:50:79:3d:94:5b:27:81:7a:4c:
         33:02:44:34:36:61:da:96:30:5e:36:84:28:57:c5:14:fd:f6:
         dd:53:0c:95:82:71:ea:b2:e1:75:03:90:95:d1:2b:a3:42:f8:
         2d:7f:15:1a:8b:f5:ab:24:6e:52:19:b2:97:24:12:d0:49:76:
         e0:4e:27:94:cf:eb:f0:0c:68:5b:ee:ec:f2:b5:ed:50:2b:07:
         b7:69:17:3e:02:84:27:fd:64:2b:9f:49:1a:19:90:21:5c:23:
         3f:35:97:a4:dc:3a:fa:b3:94:2e:56:dd:2d:6b:af:48:85:a0:
         fd:1f:d5:58:ce:5f:f9:82:05:dc:ae:25:9f:2c:50:ea:6a:ae:
         ba:b1:be:7d:06:7d:16:8e:7a:ff:42:ee:66:e6:d6:96:cb:ce:
         8b:cc:aa:01:12:17:a1:e8:fe:df:22:2a:b1:7c:d0:69:e0:b7:
         db:56:ea:92
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIURlRkmBOD8FcWbMd8pSzWx0mNKaUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEw
REIyRkQ4RTAeFw0yNDA1MTcxNTU1MDFaFw0yNTA1MTYxNjAwMDFaMDMxMTAvBgNV
BAMTKDkwMTRCMzYwNDdDMjJFQzdGNTA5QjYyNDZENUVEQkREOTJGNTc4OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkpTnn1tAemtzvJ231GezLSHAp
7BJWJPreAHi//7QYPHBMfOhyOAXFFQTwEITya+t/vghDDcKnMmhPgeW2a+LVy8Yi
Rb1Pp6DzCRKV4WgbO9ANM8g0dW+ki41nStvsm1AVjxOPjAcbU7ZWSxkCTP6ZJKqp
mnzHrzhSIXS3umgX0oujfcdle1pDLd4KwBLWY1v6hNXhn9INQIlWlWFm+Vc2j1G+
PSn7Od5EB/bnGG6kvV/lwBPmJzeTAGAe50MOA0BeuzN6bFcFaY4rZdXB+QDgychI
B2AYieLsyA3VzmViDN/WgnYPKD/KwefnI4lwmaVjt8QEBHnRQeGtT0Uh4O/ZAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUkBSzYEfCLsf1CbYkbV7b3ZL1eJAwHwYDVR0j
BBgwFoAUnOFOGqoFizW5rVuXQS5OGg2y/Y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YWFjMWJiOS00NWY2LTQ2NjctYjE5NC05YTY5YTRhNGQ3NTUvMC85Q0UxNEUxQUFB
MDU4QjM1QjlBRDVCOTc0MTJFNEUxQTBEQjJGRDhFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUNFMTRFMUFBQTA1OEIzNUI5QUQ1Qjk3NDEyRTRFMUEwREIy
RkQ4RS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFhYWMxYmI5LTQ1ZjYtNDY2Ny1i
MTk0LTlhNjlhNGE0ZDc1NS8wLzMxMzAzMzJlMzEzNzMxMmUzMjM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzEzNjM3MzQucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnq/QwDQYJ
KoZIhvcNAQELBQADggEBACYYHBVxa+5CbgXE/bLwiw9NL/aHCZAgcphftS0pO+3s
lJuo4i+P8EtTbJJy3k4aAARvscZ0TZQBMlUFYSyd+KAG0eIQWLmN2UWW0T7CbzXq
71B5PZRbJ4F6TDMCRDQ2YdqWMF42hChXxRT99t1TDJWCceqy4XUDkJXRK6NC+C1/
FRqL9askblIZspckEtBJduBOJ5TP6/AMaFvu7PK17VArB7dpFz4ChCf9ZCufSRoZ
kCFcIz81l6TcOvqzlC5W3S1rr0iFoP0f1VjOX/mCBdyuJZ8sUOpqrrqxvn0GfRaO
ev9C7mbm1pbLzovMqgESF6Ho/t8iKrF80Gngt9tW6pI=
-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org