Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
File:                     3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa (raw, json)
Hash identifier:          j19CwC6oXE1xABc49ApOJzMUCOc8ikXJ4kRD8QJoOQA=
Subject key identifier:   70:CA:DE:6B:B9:51:B5:E0:CC:70:96:B3:B4:19:22:52:3D:63:46:94
Certificate issuer:       /CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
Certificate serial:       4C778C9ADC4AD7C493412D7A4D3DBD4953341E09
Authority key identifier: 4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa
Signing time:             Mon 15 Apr 2024 03:00:02 +0000
ROA not before:           Mon 15 Apr 2024 02:55:02 +0000
ROA not after:            Mon 14 Apr 2025 03:00:02 +0000
asID:                     63488
IP address blocks:        103.233.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl
                          rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:77:8c:9a:dc:4a:d7:c4:93:41:2d:7a:4d:3d:bd:49:53:34:1e:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A4CC1D625A4519B23D73717C879F10A6173AEAB
        Validity
            Not Before: Apr 15 02:55:02 2024 GMT
            Not After : Apr 14 03:00:02 2025 GMT
        Subject: CN=70CADE6BB951B5E0CC7096B3B41922523D634694
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:1a:cc:02:c5:78:8d:80:0a:d4:38:44:ab:0b:
                    3d:a1:86:ff:32:2d:63:6b:86:bf:61:e0:7d:a0:74:
                    7d:c6:5a:7d:38:74:b6:b1:d5:66:2a:16:e4:ea:d6:
                    a0:52:73:5d:42:6b:0d:2d:56:bc:20:b5:af:7a:5e:
                    64:8e:0b:b0:08:6a:83:69:f6:a0:8d:79:1a:d0:7f:
                    df:11:a8:61:ca:7e:4d:e7:ad:75:49:09:b2:3c:67:
                    9e:40:a2:81:fa:db:3b:bf:8d:0f:0a:28:0b:7e:49:
                    aa:9e:ce:af:6f:d5:8b:8c:29:84:3b:1d:49:6b:b1:
                    db:66:b4:d8:9c:87:4c:e7:a9:1e:e4:00:2a:0e:7b:
                    f8:22:d9:c3:c3:12:9e:95:a2:62:73:68:83:eb:f0:
                    56:98:0b:27:ed:4f:e4:f8:d7:ef:2e:44:cd:96:f7:
                    42:9f:88:a8:f6:c9:62:5c:54:d5:7e:d2:f8:6a:45:
                    6f:af:d2:9a:4c:0d:2c:33:25:94:ed:0d:03:df:fa:
                    30:2c:b5:90:dd:80:83:97:04:fc:09:c9:89:ac:3c:
                    20:90:61:25:93:61:9b:cb:a9:4c:de:50:18:6b:f8:
                    9d:09:c1:e6:85:46:c0:51:8d:30:11:41:be:cd:4f:
                    84:54:9c:6b:ad:d6:f4:ea:0b:19:b5:36:a5:cd:f9:
                    eb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:CA:DE:6B:B9:51:B5:E0:CC:70:96:B3:B4:19:22:52:3D:63:46:94
            X509v3 Authority Key Identifier:
                keyid:4A:4C:C1:D6:25:A4:51:9B:23:D7:37:17:C8:79:F1:0A:61:73:AE:AB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/4A4CC1D625A4519B23D73717C879F10A6173AEAB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4A4CC1D625A4519B23D73717C879F10A6173AEAB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ed46f82-cf11-4e32-b051-6ac334a92622/0/3130332e3233332e3131312e302f32342d3234203d3e203633343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:6f:ee:47:af:89:9c:25:72:7c:cf:01:8a:1b:00:68:22:3b:
         e7:7e:0c:c9:06:1e:eb:f8:0c:89:73:69:26:56:fd:52:d1:ee:
         f9:73:21:2d:cf:1d:89:fb:df:45:ee:50:59:05:a7:56:cb:7d:
         1d:66:28:f4:62:cc:64:1b:ff:c7:fd:47:66:6c:d4:ef:ad:86:
         a0:fe:23:1e:1e:10:80:c0:22:79:6c:21:66:9a:dc:5d:25:5a:
         de:06:39:00:4d:e4:90:4d:f9:64:bf:fe:e9:94:9d:eb:59:8f:
         a4:e6:64:65:c3:49:01:04:9f:1b:61:3b:50:d3:08:be:6c:6f:
         bb:85:c5:fe:cb:b5:3d:eb:aa:60:d6:ff:90:bc:81:97:12:2e:
         a5:57:e9:85:89:d4:82:41:df:fe:48:6c:de:c9:db:91:d7:d9:
         82:57:62:89:58:0d:b5:05:bf:66:29:78:ca:8e:32:da:68:3e:
         5b:a1:43:d7:7b:64:4f:13:f0:f0:0e:3f:66:f5:14:89:f1:0f:
         7f:93:e0:e2:58:fc:a2:34:e0:86:07:c9:86:72:3a:ed:a4:48:
         77:05:2c:d0:8f:c3:db:19:3e:38:5b:b2:ad:f1:35:eb:1a:5e:
         c3:68:05:39:03:27:ba:34:33:9d:72:bb:15:be:76:f0:a8:74:
         69:ef:ff:10
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTHeMmtxK18STQS16TT29SVM0HgkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2
MTczQUVBQjAeFw0yNDA0MTUwMjU1MDJaFw0yNTA0MTQwMzAwMDJaMDMxMTAvBgNV
BAMTKDcwQ0FERTZCQjk1MUI1RTBDQzcwOTZCM0I0MTkyMjUyM0Q2MzQ2OTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHGswCxXiNgArUOESrCz2hhv8y
LWNrhr9h4H2gdH3GWn04dLax1WYqFuTq1qBSc11Caw0tVrwgta96XmSOC7AIaoNp
9qCNeRrQf98RqGHKfk3nrXVJCbI8Z55AooH62zu/jQ8KKAt+Saqezq9v1YuMKYQ7
HUlrsdtmtNich0znqR7kACoOe/gi2cPDEp6VomJzaIPr8FaYCyftT+T41+8uRM2W
90KfiKj2yWJcVNV+0vhqRW+v0ppMDSwzJZTtDQPf+jAstZDdgIOXBPwJyYmsPCCQ
YSWTYZvLqUzeUBhr+J0JweaFRsBRjTARQb7NT4RUnGut1vTqCxm1NqXN+esvAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcMrea7lRteDMcJaztBkiUj1jRpQwHwYDVR0j
BBgwFoAUSkzB1iWkUZsj1zcXyHnxCmFzrqswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
ZWQ0NmY4Mi1jZjExLTRlMzItYjA1MS02YWMzMzRhOTI2MjIvMC80QTRDQzFENjI1
QTQ1MTlCMjNENzM3MTdDODc5RjEwQTYxNzNBRUFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEE0Q0MxRDYyNUE0NTE5QjIzRDczNzE3Qzg3OUYxMEE2MTcz
QUVBQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFlZDQ2ZjgyLWNmMTEtNGUzMi1i
MDUxLTZhYzMzNGE5MjYyMi8wLzMxMzAzMzJlMzIzMzMzMmUzMTMxMzEyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNjMzMzQzODM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ+lvMA0GCSqG
SIb3DQEBCwUAA4IBAQAyb+5Hr4mcJXJ8zwGKGwBoIjvnfgzJBh7r+AyJc2kmVv1S
0e75cyEtzx2J+99F7lBZBadWy30dZij0YsxkG//H/UdmbNTvrYag/iMeHhCAwCJ5
bCFmmtxdJVreBjkATeSQTflkv/7plJ3rWY+k5mRlw0kBBJ8bYTtQ0wi+bG+7hcX+
y7U966pg1v+QvIGXEi6lV+mFidSCQd/+SGzeyduR19mCV2KJWA21Bb9mKXjKjjLa
aD5boUPXe2RPE/DwDj9m9RSJ8Q9/k+DiWPyiNOCGB8mGcjrtpEh3BSzQj8PbGT44
W7Kt8TXrGl7DaAU5Aye6NDOdcrsVvnbwqHRp7/8Q
-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org