Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
File:                     3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa (raw, json)
Hash identifier:          75Wta+uwJrqDvHsVCmnRjVlduNfxnIK2f2jA8o86w1U=
Subject key identifier:   4E:6C:0D:12:1F:AB:B6:2E:CA:86:E3:73:47:C7:07:40:3D:05:2F:2D
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       086F8AD8B2255EA35BCE6E1A2671D2430D7D2F99
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa
Signing time:             Fri 31 May 2024 04:00:00 +0000
ROA not before:           Fri 31 May 2024 03:55:00 +0000
ROA not after:            Fri 30 May 2025 04:00:00 +0000
asID:                     9326
IP address blocks:        103.148.110.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:6f:8a:d8:b2:25:5e:a3:5b:ce:6e:1a:26:71:d2:43:0d:7d:2f:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: May 31 03:55:00 2024 GMT
            Not After : May 30 04:00:00 2025 GMT
        Subject: CN=4E6C0D121FABB62ECA86E37347C707403D052F2D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:99:e2:ef:4c:af:71:f3:b2:51:21:7f:c3:a2:
                    2b:b5:59:ca:b6:a0:24:94:71:9d:71:3d:97:65:78:
                    8b:f0:85:3c:f5:b8:5d:e4:d4:6a:ff:ad:dc:17:3f:
                    5e:a3:e2:ac:a0:9a:5c:fa:3d:89:0f:73:8b:a1:74:
                    d1:52:dc:6d:a5:3d:43:fd:ba:fc:31:48:f6:f2:55:
                    0a:3c:59:82:44:73:8e:ff:24:d1:61:a3:18:cd:02:
                    d0:40:ec:32:0e:f1:f2:28:d0:fa:a5:9b:95:58:17:
                    f0:dd:7e:7f:b7:cd:e5:ef:f8:8f:59:7b:bb:b8:40:
                    37:a2:71:66:ad:bd:fc:24:06:97:91:85:1a:bb:33:
                    56:e3:d4:07:b2:eb:08:2b:4e:49:2e:44:6c:a9:f1:
                    7d:ce:73:73:86:72:25:6b:08:81:f9:92:2e:0a:3e:
                    49:77:92:29:fb:af:33:50:e3:1a:c9:a3:a9:c8:5e:
                    f4:25:de:08:2d:1f:46:7d:f7:37:e1:4b:7d:59:07:
                    f9:ec:0b:af:f3:c4:99:5c:6f:66:ba:73:93:5e:bf:
                    fd:7b:ed:16:8a:15:3f:32:14:07:2c:57:b4:50:f8:
                    23:72:67:51:ee:c6:7c:fc:86:53:d5:37:39:06:e1:
                    f9:32:a4:5e:3f:64:12:0e:1d:97:da:52:27:64:d4:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:6C:0D:12:1F:AB:B6:2E:CA:86:E3:73:47:C7:07:40:3D:05:2F:2D
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32332d3234203d3e2039333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:8f:8f:32:ac:cd:8b:d1:32:0c:5b:84:f5:47:d3:a5:56:05:
         fe:9e:25:7e:f9:16:32:0b:e7:a5:a2:e9:fe:77:53:c0:5b:e0:
         80:bd:75:e6:2e:53:35:39:83:c4:91:9b:18:89:b4:54:28:18:
         a1:53:67:9e:ae:bc:04:b5:ff:4c:b4:0e:39:a0:5c:cf:63:28:
         d0:29:99:8f:cb:72:7a:f0:d1:d8:e0:04:f6:13:86:9c:e8:d8:
         13:3c:33:a7:0b:eb:de:d0:f5:1e:30:c9:73:2b:e7:40:27:3d:
         a7:96:54:2e:ba:e0:e2:ba:ed:78:5c:24:77:8d:cb:f6:05:53:
         53:45:0b:71:a6:7a:19:f5:a0:d0:13:e8:f6:48:74:19:34:16:
         ae:db:b9:44:59:e4:67:05:67:73:c9:d2:67:49:00:ee:ec:28:
         8a:eb:f7:5e:f6:a4:e0:51:4a:51:90:53:3d:68:95:b8:7e:be:
         b0:e5:7f:db:1f:67:85:52:bf:2d:97:0d:e8:99:b6:95:59:cf:
         ae:88:3a:9d:e1:e4:3a:10:bd:50:41:f6:09:61:a1:16:32:30:
         86:fb:82:be:bc:9b:73:fc:2a:00:35:44:a3:45:c7:ce:cf:1f:
         a8:02:8a:ef:0d:4f:7e:dc:41:13:bc:eb:5f:67:aa:00:92:51:
         78:e1:76:b7
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUCG+K2LIlXqNbzm4aJnHSQw19L5kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUw
MUQ5N0RDNDAeFw0yNDA1MzEwMzU1MDBaFw0yNTA1MzAwNDAwMDBaMDMxMTAvBgNV
BAMTKDRFNkMwRDEyMUZBQkI2MkVDQTg2RTM3MzQ3QzcwNzQwM0QwNTJGMkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdmeLvTK9x87JRIX/Doiu1Wcq2
oCSUcZ1xPZdleIvwhTz1uF3k1Gr/rdwXP16j4qygmlz6PYkPc4uhdNFS3G2lPUP9
uvwxSPbyVQo8WYJEc47/JNFhoxjNAtBA7DIO8fIo0Pqlm5VYF/Ddfn+3zeXv+I9Z
e7u4QDeicWatvfwkBpeRhRq7M1bj1Aey6wgrTkkuRGyp8X3Oc3OGciVrCIH5ki4K
Pkl3kin7rzNQ4xrJo6nIXvQl3ggtH0Z99zfhS31ZB/nsC6/zxJlcb2a6c5Nev/17
7RaKFT8yFAcsV7RQ+CNyZ1Huxnz8hlPVNzkG4fkypF4/ZBIOHZfaUidk1ACTAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUTmwNEh+rti7KhuNzR8cHQD0FLy0wHwYDVR0j
BBgwFoAUX836qrhJBYaNT72+cYuUlQHZfcQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
OGY5MjQ0Ny1hY2QzLTQyN2MtYjVlNy1kYjM5MTdmMTg1YzgvMC81RkNERkFBQUI4
NDkwNTg2OEQ0RkJEQkU3MThCOTQ5NTAxRDk3REM0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNUZDREZBQUFCODQ5MDU4NjhENEZCREJFNzE4Qjk0OTUwMUQ5
N0RDNC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4ZjkyNDQ3LWFjZDMtNDI3Yy1i
NWU3LWRiMzkxN2YxODVjOC8wLzMxMzAzMzJlMzEzNDM4MmUzMTMxMzAyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzOTMzMzIzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAWeUbjANBgkqhkiG
9w0BAQsFAAOCAQEAG4+PMqzNi9EyDFuE9UfTpVYF/p4lfvkWMgvnpaLp/ndTwFvg
gL115i5TNTmDxJGbGIm0VCgYoVNnnq68BLX/TLQOOaBcz2Mo0CmZj8tyevDR2OAE
9hOGnOjYEzwzpwvr3tD1HjDJcyvnQCc9p5ZULrrg4rrteFwkd43L9gVTU0ULcaZ6
GfWg0BPo9kh0GTQWrtu5RFnkZwVnc8nSZ0kA7uwoiuv3Xvak4FFKUZBTPWiVuH6+
sOV/2x9nhVK/LZcN6Jm2lVnProg6neHkOhC9UEH2CWGhFjIwhvuCvrybc/wqADVE
o0XHzs8fqAKK7w1PftxBE7zrX2eqAJJReOF2tw==
-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org