Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36322e302f32342d3234203d3e203338373538.roa
File:                     3130332e31302e36322e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          ZDywncesSAjMu6O/tvcMI1s4FDR1nuIEwpOi5m0PtTE=
Subject key identifier:   42:B7:5C:5F:36:57:AD:6E:C4:46:69:38:EA:69:EB:47:2C:4E:A9:F1
Certificate issuer:       /CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
Certificate serial:       7ACBD79230AB1BB921D4D7EE6D0217A39CA189EE
Authority key identifier: 9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36322e302f32342d3234203d3e203338373538.roa
Signing time:             Mon 01 Jul 2024 00:02:13 +0000
ROA not before:           Sun 30 Jun 2024 23:57:13 +0000
ROA not after:            Mon 30 Jun 2025 00:02:13 +0000
asID:                     38758
IP address blocks:        103.10.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl
                          rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 04:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cb:d7:92:30:ab:1b:b9:21:d4:d7:ee:6d:02:17:a3:9c:a1:89:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB25155CF1AFF90AE11DA0298F164D554986F4
        Validity
            Not Before: Jun 30 23:57:13 2024 GMT
            Not After : Jun 30 00:02:13 2025 GMT
        Subject: CN=42B75C5F3657AD6EC4466938EA69EB472C4EA9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:02:ef:04:2e:ed:de:e7:1a:8c:9a:e8:f8:6c:
                    4d:ef:4b:37:1a:1b:3b:9d:a8:a8:18:a2:17:be:58:
                    9e:f9:fa:6f:d4:57:09:39:0e:68:b0:00:bf:7b:34:
                    6c:7d:de:c7:a6:6e:d2:50:97:3e:e9:6f:51:ae:9d:
                    1c:d2:1a:72:70:a0:72:7e:a5:4a:24:98:30:8f:c1:
                    07:24:1f:5f:07:66:5e:d8:0b:a0:41:68:4e:7b:17:
                    b3:58:c9:8d:04:62:df:9d:61:82:c2:4b:3b:ca:8d:
                    9e:38:b6:48:e1:8e:24:c2:02:40:5c:54:1c:16:57:
                    c4:b2:d4:4a:12:c7:7e:11:e1:a9:c5:b0:e6:ba:05:
                    cb:96:38:4e:ff:ad:e3:0a:58:4b:d9:3b:3e:f5:91:
                    42:6d:c7:91:0f:14:90:5d:39:07:e8:85:c5:e7:6b:
                    4b:cb:9d:8d:14:fe:36:38:6f:d8:a2:a7:fb:5e:41:
                    30:5c:4a:7a:bf:e9:b4:da:31:92:cb:06:4d:51:a8:
                    eb:01:4d:ce:f2:4b:c4:79:62:51:e4:f1:0a:2f:1d:
                    72:58:af:42:18:ec:8f:9f:02:ba:8a:75:ea:48:9e:
                    51:2d:7b:79:f3:4c:9a:8b:00:00:c2:e0:f9:f0:75:
                    30:54:35:08:91:5d:5c:0a:a7:40:ef:a1:7a:7b:85:
                    ee:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:B7:5C:5F:36:57:AD:6E:C4:46:69:38:EA:69:EB:47:2C:4E:A9:F1
            X509v3 Authority Key Identifier:
                keyid:9F:EB:25:15:5C:F1:AF:F9:0A:E1:1D:A0:29:8F:16:4D:55:49:86:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/9FEB25155CF1AFF90AE11DA0298F164D554986F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9FEB25155CF1AFF90AE11DA0298F164D554986F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b4e195e-12de-4c3c-93e5-522ee54018d6/0/3130332e31302e36322e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.10.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:12:16:1b:cd:8b:d2:1f:90:04:ac:db:bd:b3:db:17:e5:02:
         ec:28:49:7f:88:4a:40:6f:d1:ad:db:82:89:ee:8f:8c:49:b0:
         53:2d:10:58:24:26:06:88:6e:c2:f5:39:d3:70:aa:97:44:f3:
         3a:53:e3:2a:af:1a:95:6c:f2:02:69:1d:2a:32:f6:cc:e6:00:
         0d:92:d4:56:56:95:87:da:af:63:17:3d:73:60:c9:de:d0:06:
         00:99:21:68:39:36:f7:3c:42:83:bb:fb:e8:bc:65:75:5d:4f:
         80:1d:f3:35:26:b1:ff:e0:1d:b4:69:5b:46:57:06:1a:62:74:
         1f:78:6c:ee:6f:23:90:a6:78:2b:30:1a:f7:e6:ad:1a:b1:3d:
         5f:3c:8d:c7:7d:e0:b9:e1:1e:36:ef:e8:1f:a5:e9:c3:8a:64:
         7c:4e:80:c5:ea:d6:4b:5d:fa:cb:2e:c3:22:a2:a3:44:b2:33:
         c9:12:b6:f1:31:bb:6b:30:0c:a6:5a:19:11:d1:01:af:4d:ba:
         21:e6:11:2f:2f:d0:ec:e9:89:a0:af:48:a5:cd:f2:4c:c5:b1:
         5b:d6:48:74:d1:c2:c2:12:3f:5c:9b:10:69:c6:ce:27:d7:8e:
         41:9f:b2:86:fa:43:d5:08:26:1d:e8:23:16:69:43:2c:4a:19:
         9a:8f:5f:5d
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUesvXkjCrG7kh1NfubQIXo5yhie4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1
NTQ5ODZGNDAeFw0yNDA2MzAyMzU3MTNaFw0yNTA2MzAwMDAyMTNaMDMxMTAvBgNV
BAMTKDQyQjc1QzVGMzY1N0FENkVDNDQ2NjkzOEVBNjlFQjQ3MkM0RUE5RjEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Au8ELu3e5xqMmuj4bE3vSzca
GzudqKgYohe+WJ75+m/UVwk5DmiwAL97NGx93sembtJQlz7pb1GunRzSGnJwoHJ+
pUokmDCPwQckH18HZl7YC6BBaE57F7NYyY0EYt+dYYLCSzvKjZ44tkjhjiTCAkBc
VBwWV8Sy1EoSx34R4anFsOa6BcuWOE7/reMKWEvZOz71kUJtx5EPFJBdOQfohcXn
a0vLnY0U/jY4b9iip/teQTBcSnq/6bTaMZLLBk1RqOsBTc7yS8R5YlHk8QovHXJY
r0IY7I+fArqKdepInlEte3nzTJqLAADC4PnwdTBUNQiRXVwKp0DvoXp7he77AgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUQrdcXzZXrW7ERmk46mnrRyxOqfEwHwYDVR0j
BBgwFoAUn+slFVzxr/kK4R2gKY8WTVVJhvQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
YjRlMTk1ZS0xMmRlLTRjM2MtOTNlNS01MjJlZTU0MDE4ZDYvMC85RkVCMjUxNTVD
RjFBRkY5MEFFMTFEQTAyOThGMTY0RDU1NDk4NkY0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUZFQjI1MTU1Q0YxQUZGOTBBRTExREEwMjk4RjE2NEQ1NTQ5
ODZGNC5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFiNGUxOTVlLTEyZGUtNGMzYy05
M2U1LTUyMmVlNTQwMThkNi8wLzMxMzAzMzJlMzEzMDJlMzYzMjJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMzMzgzNzM1Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnCj4wDQYJKoZIhvcN
AQELBQADggEBAMASFhvNi9IfkASs272z2xflAuwoSX+ISkBv0a3bgonuj4xJsFMt
EFgkJgaIbsL1OdNwqpdE8zpT4yqvGpVs8gJpHSoy9szmAA2S1FZWlYfar2MXPXNg
yd7QBgCZIWg5Nvc8QoO7++i8ZXVdT4Ad8zUmsf/gHbRpW0ZXBhpidB94bO5vI5Cm
eCswGvfmrRqxPV88jcd94LnhHjbv6B+l6cOKZHxOgMXq1ktd+ssuwyKio0SyM8kS
tvExu2swDKZaGRHRAa9NuiHmES8v0OzpiaCvSKXN8kzFsVvWSHTRwsISP1ybEGnG
zifXjkGfsob6Q9UIJh3oIxZpQyxKGZqPX10=
-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:05 2024 by rpki-client on console-ams.rpki-client.org