Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
File:                     3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa (raw, json)
Hash identifier:          1IkODvXidoD/gpowm8RlZSrde5VBfqIBySUSOGikSnc=
Subject key identifier:   46:F2:2B:F4:7C:F2:1C:A0:23:05:A0:4F:2F:02:2E:6A:2E:C9:14:88
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       0E7C36ADB7A934320E01BE8A7F450FFBAC316FC9
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa
Signing time:             Thu 20 Jun 2024 01:11:17 +0000
ROA not before:           Thu 20 Jun 2024 01:06:17 +0000
ROA not after:            Thu 19 Jun 2025 01:11:17 +0000
asID:                     150936
IP address blocks:        103.110.34.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:7c:36:ad:b7:a9:34:32:0e:01:be:8a:7f:45:0f:fb:ac:31:6f:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Jun 20 01:06:17 2024 GMT
            Not After : Jun 19 01:11:17 2025 GMT
        Subject: CN=46F22BF47CF21CA02305A04F2F022E6A2EC91488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:f7:31:3d:b8:6b:f1:b1:32:10:e6:db:39:09:
                    e8:44:4e:0f:06:85:69:fd:66:1c:2f:fc:2a:4c:ac:
                    de:d1:ce:05:44:a4:f1:cb:76:e0:2d:9d:76:c5:1c:
                    a1:d2:d1:97:50:46:52:f6:67:60:1e:18:d8:31:f3:
                    58:85:4f:e3:e1:13:9b:e0:9f:46:98:1a:82:94:a4:
                    47:35:7a:7c:23:49:d2:ee:4e:e6:5f:49:4c:13:6d:
                    c7:af:6a:ea:ba:7d:bb:52:15:81:04:19:ee:f5:04:
                    54:98:b6:86:fb:83:75:91:ce:99:e8:2e:70:cc:39:
                    61:bb:7a:d2:d8:95:b8:c7:18:a1:5a:cf:48:08:ce:
                    65:4e:46:a6:23:f1:17:5e:73:aa:e3:8a:4f:07:f2:
                    18:a8:af:02:11:c1:2f:7b:50:56:21:24:81:11:45:
                    c1:cc:d6:0f:0e:6e:82:f3:5e:c5:24:d5:cb:9a:86:
                    ff:68:9a:24:d0:f3:0e:10:3a:ee:1f:ca:31:2f:a5:
                    98:82:73:f9:b7:69:3b:b3:0b:a0:1f:c7:16:b8:75:
                    2a:87:ca:11:2e:af:73:97:de:d4:e6:e8:05:9c:68:
                    8e:5c:70:26:53:fa:69:0d:93:0b:24:a6:ee:a4:0c:
                    c7:2e:75:84:37:fa:e7:33:ea:25:9a:aa:db:50:57:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:F2:2B:F4:7C:F2:1C:A0:23:05:A0:4F:2F:02:2E:6A:2E:C9:14:88
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32332d3234203d3e20313530393336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:05:56:c7:b9:73:d7:7e:b4:df:a9:60:a2:26:12:ce:ff:7c:
         33:ad:9a:56:45:fb:19:2a:d1:40:2c:c4:06:04:54:cf:27:c2:
         c8:bf:af:a5:56:23:fd:a7:23:a6:1e:7c:ec:18:40:8c:4e:5c:
         01:47:54:ed:ab:47:32:cb:f2:79:81:75:55:b8:9a:43:99:e0:
         39:88:4c:9e:24:d6:48:5d:63:ea:07:25:39:fb:c7:9d:25:44:
         a7:6e:73:b6:4f:cb:92:4b:e7:dc:91:d1:5e:b9:eb:fb:fa:d0:
         e3:03:73:d5:b3:7c:62:bc:9e:37:80:bc:8b:0e:69:40:e2:ca:
         e1:55:61:f1:08:16:9a:7e:05:36:d0:b8:c0:da:a2:45:f4:c2:
         9d:8c:f5:7d:f6:fe:2a:2a:73:ec:0a:f2:e1:2b:97:21:c5:2e:
         4d:40:7c:48:20:dd:b6:67:c5:3a:7b:0f:cf:ce:a5:fb:93:58:
         af:1c:c0:49:fd:06:53:a9:8d:30:3a:14:8d:ce:d5:f1:25:3d:
         ac:8b:e0:a6:db:fc:b2:e6:a4:0c:94:58:9b:49:ac:f1:f4:5f:
         3b:13:ba:72:c9:ca:0c:fb:50:88:c5:10:10:c7:d9:43:26:b4:
         9f:72:11:c6:64:a5:0f:99:8f:08:a4:56:cf:46:19:bf:03:29:
         de:c0:20:c9
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUDnw2rbepNDIOAb6Kf0UP+6wxb8kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE
RjJGNUYxMjAeFw0yNDA2MjAwMTA2MTdaFw0yNTA2MTkwMTExMTdaMDMxMTAvBgNV
BAMTKDQ2RjIyQkY0N0NGMjFDQTAyMzA1QTA0RjJGMDIyRTZBMkVDOTE0ODgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCY9zE9uGvxsTIQ5ts5CehETg8G
hWn9Zhwv/CpMrN7RzgVEpPHLduAtnXbFHKHS0ZdQRlL2Z2AeGNgx81iFT+PhE5vg
n0aYGoKUpEc1enwjSdLuTuZfSUwTbcevauq6fbtSFYEEGe71BFSYtob7g3WRzpno
LnDMOWG7etLYlbjHGKFaz0gIzmVORqYj8Rdec6rjik8H8hiorwIRwS97UFYhJIER
RcHM1g8OboLzXsUk1cuahv9omiTQ8w4QOu4fyjEvpZiCc/m3aTuzC6Afxxa4dSqH
yhEur3OX3tTm6AWcaI5ccCZT+mkNkwskpu6kDMcudYQ3+ucz6iWaqttQVxsDAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQURvIr9HzyHKAjBaBPLwIuai7JFIgwHwYDVR0j
BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1
RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG
NUYxMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0YmYwN2NmLTUwYTktNDI4YS05
MGQyLWQ0NGQ2Yjc2MmI1NS8wLzMxMzAzMzJlMzEzMTMwMmUzMzM0MmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNTMwMzkzMzM2LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ24iMA0GCSqG
SIb3DQEBCwUAA4IBAQCeBVbHuXPXfrTfqWCiJhLO/3wzrZpWRfsZKtFALMQGBFTP
J8LIv6+lViP9pyOmHnzsGECMTlwBR1Ttq0cyy/J5gXVVuJpDmeA5iEyeJNZIXWPq
ByU5+8edJUSnbnO2T8uSS+fckdFeuev7+tDjA3PVs3xivJ43gLyLDmlA4srhVWHx
CBaafgU20LjA2qJF9MKdjPV99v4qKnPsCvLhK5chxS5NQHxIIN22Z8U6ew/PzqX7
k1ivHMBJ/QZTqY0wOhSNztXxJT2si+Cm2/yy5qQMlFibSazx9F87E7pyycoM+1CI
xRAQx9lDJrSfchHGZKUPmY8IpFbPRhm/AynewCDJ
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org