Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3131302e33342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          hpDDjXhf9eocrb2aWJ0rrzVtERGsFI/jmmAXSbOPclw=
Subject key identifier:   BD:3E:A2:0C:18:1E:9E:70:A3:B9:3E:EE:AD:5B:7F:4E:5C:FE:FF:8F
Certificate issuer:       /CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
Certificate serial:       331592D97A86AF0676916F52BCB3187E90F96104
Authority key identifier: E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 03:09:26 +0000
ROA not before:           Mon 15 Jul 2024 03:04:26 +0000
ROA not after:            Mon 14 Jul 2025 03:09:26 +0000
asID:                     48465
IP address blocks:        103.110.34.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl
                          rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:15:92:d9:7a:86:af:06:76:91:6f:52:bc:b3:18:7e:90:f9:61:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12
        Validity
            Not Before: Jul 15 03:04:26 2024 GMT
            Not After : Jul 14 03:09:26 2025 GMT
        Subject: CN=BD3EA20C181E9E70A3B93EEEAD5B7F4E5CFEFF8F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:70:66:8b:0b:83:fc:2f:70:9f:a1:2c:6a:c0:
                    f4:59:ed:c5:fd:20:e2:ba:9e:cf:90:9b:d5:b3:db:
                    17:dd:b7:40:b4:5c:99:d3:d7:33:44:a6:fc:f6:a4:
                    59:fc:c6:f0:16:da:61:9a:dc:7e:9f:fa:0d:d7:b6:
                    57:f9:bd:59:e9:13:06:ca:f2:9b:06:cb:33:fb:00:
                    de:80:37:21:a0:1d:78:b6:6c:7b:2a:99:78:7a:67:
                    db:7f:71:bb:e4:b5:00:e3:74:7d:23:72:00:39:37:
                    1f:1e:db:76:f4:12:96:3c:81:e1:31:f2:c2:26:74:
                    5e:84:4f:e0:17:99:01:53:10:b7:d3:4b:9f:c9:94:
                    ca:95:4f:07:3d:ca:4e:56:5d:59:ad:d7:24:e5:44:
                    08:16:54:7f:b9:db:00:f5:86:b4:bd:0a:eb:19:51:
                    8c:17:e9:49:ef:71:2a:4f:b4:52:70:e1:24:38:a2:
                    29:fa:c1:34:b9:ae:9f:20:75:10:25:8b:b0:c8:1f:
                    7e:4f:a8:2c:fe:a7:70:3c:de:8c:f7:b7:21:f6:b7:
                    19:af:37:e3:95:87:6e:df:f6:10:2c:63:3c:40:10:
                    d4:8e:14:7d:c6:9c:06:25:0b:7a:c9:c3:29:f3:c2:
                    7e:b2:b6:6b:4b:1f:d9:60:08:7e:da:c1:e7:7c:53:
                    94:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:3E:A2:0C:18:1E:9E:70:A3:B9:3E:EE:AD:5B:7F:4E:5C:FE:FF:8F
            X509v3 Authority Key Identifier:
                keyid:E1:F7:E7:39:D5:E9:2C:EF:AA:F8:DB:4F:DE:24:B4:02:DF:2F:5F:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E1F7E739D5E92CEFAAF8DB4FDE24B402DF2F5F12.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/74bf07cf-50a9-428a-90d2-d44d6b762b55/0/3130332e3131302e33342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.110.34.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:76:26:06:aa:d6:eb:ef:bf:0d:a0:9c:3f:5b:78:b8:15:62:
         d7:28:b4:bf:14:3b:43:3f:b8:70:61:b5:f9:ac:1c:29:64:fe:
         db:44:a3:f6:81:fd:67:be:42:13:50:e3:d0:68:96:7f:23:f1:
         92:9a:2a:ff:4b:79:7c:d7:03:fd:d8:46:cc:e7:73:8e:44:7a:
         46:6e:94:d2:c4:f8:d7:0a:c4:d0:33:f9:7d:62:38:be:d5:fd:
         e5:27:fc:15:db:ce:40:51:0c:9e:09:8b:1d:fd:a9:a6:1f:1c:
         cc:e9:0d:3c:eb:01:60:fa:ab:03:1a:37:7f:61:7b:52:43:92:
         1f:4d:a4:aa:9d:e2:17:3f:62:1e:e2:cf:24:6a:5d:4c:c8:5a:
         b2:6b:e4:d5:c2:dc:14:83:28:90:c9:e3:be:94:35:8a:a4:a1:
         c6:21:ab:a1:6b:6c:a5:c5:06:c2:fa:0f:5e:b3:d0:bf:65:95:
         92:40:36:0e:1b:62:c9:21:5a:7a:fe:19:8f:c3:37:a5:7c:3c:
         4e:71:64:fa:f4:a5:ab:a6:d6:3e:4f:1f:7e:ed:d9:5e:64:66:
         fd:89:fa:6c:5d:00:b2:64:5f:28:4d:d8:fc:65:06:9d:f2:6c:
         a8:f6:e1:61:76:dd:75:55:fb:81:c4:ed:15:47:b9:1c:77:22:
         23:f7:d5:2c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMxWS2XqGrwZ2kW9SvLMYfpD5YQQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJE
RjJGNUYxMjAeFw0yNDA3MTUwMzA0MjZaFw0yNTA3MTQwMzA5MjZaMDMxMTAvBgNV
BAMTKEJEM0VBMjBDMTgxRTlFNzBBM0I5M0VFRUFENUI3RjRFNUNGRUZGOEYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFcGaLC4P8L3CfoSxqwPRZ7cX9
IOK6ns+Qm9Wz2xfdt0C0XJnT1zNEpvz2pFn8xvAW2mGa3H6f+g3Xtlf5vVnpEwbK
8psGyzP7AN6ANyGgHXi2bHsqmXh6Z9t/cbvktQDjdH0jcgA5Nx8e23b0EpY8geEx
8sImdF6ET+AXmQFTELfTS5/JlMqVTwc9yk5WXVmt1yTlRAgWVH+52wD1hrS9CusZ
UYwX6UnvcSpPtFJw4SQ4oin6wTS5rp8gdRAli7DIH35PqCz+p3A83oz3tyH2txmv
N+OVh27f9hAsYzxAENSOFH3GnAYlC3rJwynzwn6ytmtLH9lgCH7awed8U5R9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUvT6iDBgennCjuT7urVt/Tlz+/48wHwYDVR0j
BBgwFoAU4ffnOdXpLO+q+NtP3iS0At8vXxIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NGJmMDdjZi01MGE5LTQyOGEtOTBkMi1kNDRkNmI3NjJiNTUvMC9FMUY3RTczOUQ1
RTkyQ0VGQUFGOERCNEZERTI0QjQwMkRGMkY1RjEyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTFGN0U3MzlENUU5MkNFRkFBRjhEQjRGREUyNEI0MDJERjJG
NUYxMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc0YmYwN2NmLTUwYTktNDI4YS05
MGQyLWQ0NGQ2Yjc2MmI1NS8wLzMxMzAzMzJlMzEzMTMwMmUzMzM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODM0MzYzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGduIjANBgkqhkiG
9w0BAQsFAAOCAQEAwnYmBqrW6++/DaCcP1t4uBVi1yi0vxQ7Qz+4cGG1+awcKWT+
20Sj9oH9Z75CE1Dj0GiWfyPxkpoq/0t5fNcD/dhGzOdzjkR6Rm6U0sT41wrE0DP5
fWI4vtX95Sf8FdvOQFEMngmLHf2pph8czOkNPOsBYPqrAxo3f2F7UkOSH02kqp3i
Fz9iHuLPJGpdTMhasmvk1cLcFIMokMnjvpQ1iqShxiGroWtspcUGwvoPXrPQv2WV
kkA2DhtiySFaev4Zj8M3pXw8TnFk+vSlq6bWPk8ffu3ZXmRm/Yn6bF0AsmRfKE3Y
/GUGnfJsqPbhYXbddVX7gcTtFUe5HHciI/fVLA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org