Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3131302e392e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          CAz4EFFuV39K7Yj6bXuCbRxkDhyk69KXBlvgMI1myCM=
Subject key identifier:   1E:C1:F9:0A:6B:F3:5C:A7:53:AE:8A:AE:60:31:88:3A:D2:D2:26:49
Certificate issuer:       /CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
Certificate serial:       1BAC03A1B921E7F1BD6F9DC018306370125A31F5
Authority key identifier: 2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa
Signing time:             Mon 01 Jul 2024 01:05:21 +0000
ROA not before:           Mon 01 Jul 2024 01:00:21 +0000
ROA not after:            Mon 30 Jun 2025 01:05:21 +0000
asID:                     131717
IP address blocks:        103.110.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl
                          rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:ac:03:a1:b9:21:e7:f1:bd:6f:9d:c0:18:30:63:70:12:5a:31:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FB994CD1282292E6D2907FCECD7F9E472F49985
        Validity
            Not Before: Jul  1 01:00:21 2024 GMT
            Not After : Jun 30 01:05:21 2025 GMT
        Subject: CN=1EC1F90A6BF35CA753AE8AAE6031883AD2D22649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:c1:d5:28:9d:cf:25:91:b9:e3:0a:20:9a:67:
                    f3:21:6d:28:69:7a:41:b8:c4:30:70:c4:d7:93:1c:
                    ee:ec:fd:c1:a7:e7:3a:1f:4d:15:66:eb:bc:fb:f3:
                    a9:95:e8:f4:1e:43:6d:11:1a:2c:12:2e:0c:43:ca:
                    02:48:61:a0:ee:6d:76:10:a5:7a:94:ce:3b:47:31:
                    9d:7a:44:b4:ff:e6:b3:10:4a:06:a0:60:9d:da:f7:
                    7d:eb:91:5b:36:1e:c3:04:44:5c:b4:eb:be:16:f1:
                    f8:97:8a:fe:41:ee:65:41:07:6d:82:a7:89:34:00:
                    2d:98:8d:d9:83:b0:2b:7a:84:70:ec:5d:67:e3:c6:
                    41:11:f0:cf:68:6a:a0:a5:73:b9:47:85:ae:56:67:
                    d5:f8:f9:71:cc:d3:70:81:c2:91:d0:d2:15:8e:67:
                    d2:0f:73:c9:17:e9:0e:83:7b:a3:31:f3:10:16:a3:
                    e6:8b:cd:62:d0:1a:ad:5d:6b:f0:77:1b:2a:64:a2:
                    91:9a:0a:ea:de:11:1b:89:84:d5:fd:fe:2d:57:71:
                    80:b0:a3:e1:80:ad:50:b8:8d:2d:c5:9d:c9:86:97:
                    34:73:e1:6e:d7:7b:f6:e5:fd:13:da:d2:4a:50:8f:
                    d6:89:cd:68:8e:4f:2a:9a:b9:08:e5:29:82:74:14:
                    cb:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:C1:F9:0A:6B:F3:5C:A7:53:AE:8A:AE:60:31:88:3A:D2:D2:26:49
            X509v3 Authority Key Identifier:
                keyid:2F:B9:94:CD:12:82:29:2E:6D:29:07:FC:EC:D7:F9:E4:72:F4:99:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/2FB994CD1282292E6D2907FCECD7F9E472F49985.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2FB994CD1282292E6D2907FCECD7F9E472F49985.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2da773dd-95aa-447e-993d-4cf4a1273b31/0/3130332e3131302e392e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:45:14:1a:21:b7:76:7a:b0:92:d3:ae:1a:09:2c:22:34:c7:
         89:94:27:06:d3:c9:25:50:b4:49:fe:e8:81:51:a1:e5:bd:c9:
         4c:3a:95:49:ec:dd:7a:1e:7c:c5:30:30:ba:0f:d9:4b:08:a3:
         37:a3:7c:ff:d2:a0:2d:81:8a:be:65:21:3a:ba:37:5f:ae:1e:
         3f:d9:0d:0f:ab:a8:c8:d9:19:02:f5:8b:de:ec:a8:2e:75:52:
         24:bb:f9:a2:32:ab:d6:8d:8f:00:14:83:57:02:2c:26:b7:f2:
         cc:ae:a8:0c:5d:f6:27:9e:50:88:51:bc:be:3e:f7:fa:74:32:
         f0:9c:b9:15:dc:09:84:d5:59:de:a0:8b:f9:3f:8e:ae:8b:c8:
         14:e2:f7:7c:03:3d:a0:36:64:70:aa:db:eb:6d:dc:e5:e8:71:
         e5:b8:ae:55:66:37:b7:5e:a4:e2:9a:b7:12:d6:4a:8c:72:2e:
         b1:58:df:aa:fd:37:64:b6:69:1a:e3:a6:ff:ae:f2:dd:7b:56:
         60:41:43:2c:72:1e:18:bb:7e:ae:14:74:92:fe:f1:b0:6e:bb:
         ea:0b:0d:a0:9e:a2:4b:4e:35:5e:59:93:58:2a:31:da:84:58:
         d3:3f:46:92:85:e6:f9:e0:36:ac:ff:04:2c:ab:b4:97:3e:05:
         74:70:f9:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org