Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa
File:                     3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa (raw, json)
Hash identifier:          gvdTawMjuZSpigUwAj2qBDjrcCcWCvIuD4DqGYmqvk4=
Subject key identifier:   0F:9D:07:3B:74:3D:39:18:B7:AF:A6:53:FC:3B:32:4E:C4:73:9B:56
Certificate issuer:       /CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
Certificate serial:       10053097204C04CA9E7BD45E774995073291A3E7
Authority key identifier: 5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa
Signing time:             Mon 01 Jul 2024 01:02:53 +0000
ROA not before:           Mon 01 Jul 2024 00:57:53 +0000
ROA not after:            Mon 30 Jun 2025 01:02:53 +0000
asID:                     46032
IP address blocks:        103.148.110.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl
                          rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:05:30:97:20:4c:04:ca:9e:7b:d4:5e:77:49:95:07:32:91:a3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5FCDFAAAB84905868D4FBDBE718B949501D97DC4
        Validity
            Not Before: Jul  1 00:57:53 2024 GMT
            Not After : Jun 30 01:02:53 2025 GMT
        Subject: CN=0F9D073B743D3918B7AFA653FC3B324EC4739B56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ff:12:e8:2e:dd:2d:90:cd:05:e4:e2:2c:1f:
                    73:c4:04:b2:cb:1d:dc:33:a6:bc:86:9a:ca:1b:c1:
                    13:2e:9b:e4:ce:b7:36:65:05:b0:39:38:ae:e7:6e:
                    0a:0b:74:2a:16:c5:d1:24:4c:aa:d4:e2:de:b8:a4:
                    6e:e7:0c:12:3f:15:bf:7c:35:53:0d:ee:a7:9f:99:
                    9a:fc:12:ac:33:08:9d:50:06:7a:89:78:0f:a7:f0:
                    62:1d:3e:c4:c9:6b:ca:b3:c2:26:8e:93:bf:21:f0:
                    bb:29:f9:7c:0f:d1:db:a2:a5:b1:a9:8f:a6:38:1d:
                    f6:8a:6d:66:b4:ec:29:93:37:ea:ff:22:25:c0:b6:
                    35:c7:13:b2:5c:52:e2:65:0c:25:aa:39:b7:f9:bb:
                    ac:41:d0:67:70:2c:ed:ea:92:25:ff:2e:d8:75:e0:
                    b8:3f:ee:d4:69:a5:8b:a7:14:cf:9d:03:f5:83:f0:
                    9a:a1:51:88:13:f1:82:7d:24:e5:31:c5:73:fa:14:
                    ba:82:e4:1e:ca:77:bb:d3:31:fa:c0:46:87:9e:5d:
                    80:29:95:5d:4b:69:cf:bf:a7:98:04:3b:05:58:f6:
                    55:b0:e0:33:96:ee:30:93:db:85:5c:49:d5:22:95:
                    03:4a:da:da:c1:52:ac:e5:a4:37:2c:8f:2d:9c:2c:
                    18:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9D:07:3B:74:3D:39:18:B7:AF:A6:53:FC:3B:32:4E:C4:73:9B:56
            X509v3 Authority Key Identifier:
                keyid:5F:CD:FA:AA:B8:49:05:86:8D:4F:BD:BE:71:8B:94:95:01:D9:7D:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5FCDFAAAB84905868D4FBDBE718B949501D97DC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98f92447-acd3-427c-b5e7-db3917f185c8/0/3130332e3134382e3131302e302f32342d3234203d3e203436303332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.110.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:e7:11:98:4a:da:a1:cb:08:c7:0e:9f:05:ca:44:b7:68:cb:
         35:85:9a:94:44:fa:d5:e0:69:f9:ab:f6:46:1e:ac:ab:de:61:
         32:a3:5a:42:18:cc:6f:19:48:56:ef:ec:4d:e3:4c:c3:72:f6:
         69:d5:aa:6d:5a:ad:e9:eb:6a:2b:41:42:69:9b:25:75:5c:c9:
         19:81:98:d9:dd:cc:4e:7a:22:33:22:ac:dd:0a:d9:c8:e9:a4:
         a1:c8:04:17:34:a8:17:7d:da:81:14:0f:eb:0e:c2:f7:bc:2a:
         a6:1a:91:8b:7b:09:d5:59:c6:ea:34:c3:c8:6a:5c:b7:96:b4:
         02:90:7a:be:1b:64:82:6b:56:01:95:3c:b0:d9:b8:a1:dd:f6:
         51:9d:a9:ef:87:6d:bc:dd:a0:8a:49:f2:98:86:46:8f:c1:67:
         8f:b2:8a:8b:03:69:79:d0:6f:b1:c0:48:32:4e:e6:bf:23:e3:
         1f:77:e4:1b:1d:90:66:68:41:7c:76:80:d8:6b:1d:ad:0a:4a:
         6d:b0:14:17:b3:64:a2:60:17:24:4c:1a:76:68:7b:22:81:87:
         c7:ec:08:72:90:68:85:f0:e6:5f:a1:96:67:97:1c:71:d3:d6:
         69:13:49:f4:84:8d:29:90:d4:b2:21:2f:c6:77:ee:b5:c2:cd:
         10:c0:c3:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:04 2024 by rpki-client on console-ams.rpki-client.org