Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa
File:                     3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa (raw, json)
Hash identifier:          n4clkKv/SOU90V5TxuH94mWY1smtgcsAQKkiUQvHG/Y=
Subject key identifier:   72:92:D8:7B:55:16:BB:6F:B4:99:70:99:2F:38:01:62:EB:12:58:C7
Certificate issuer:       /CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
Certificate serial:       5DBD5A703B8C22959A64953CFD5C5593BF74A064
Authority key identifier: 9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa
Signing time:             Fri 31 May 2024 10:00:01 +0000
ROA not before:           Fri 31 May 2024 09:55:01 +0000
ROA not after:            Fri 30 May 2025 10:00:01 +0000
asID:                     150478
IP address blocks:        103.117.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl
                          rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 01:48:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:bd:5a:70:3b:8c:22:95:9a:64:95:3c:fd:5c:55:93:bf:74:a0:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D97131B953D97C18D6B71F6DE63209F6541DB0E
        Validity
            Not Before: May 31 09:55:01 2024 GMT
            Not After : May 30 10:00:01 2025 GMT
        Subject: CN=7292D87B5516BB6FB49970992F380162EB1258C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c4:d5:d3:d9:00:2e:6e:33:6a:a6:a5:28:b3:
                    cf:54:19:1f:24:29:5b:27:ea:05:bf:15:97:5b:0e:
                    aa:fa:ee:f7:7c:58:19:92:e0:7f:11:80:d6:47:9e:
                    ed:f0:c8:b4:02:bf:8a:0d:6c:f5:c1:20:0d:62:29:
                    70:a5:de:e9:dc:36:4d:1b:48:09:5f:34:29:89:76:
                    23:ee:b9:6f:8b:b4:46:d8:04:dd:e0:58:3a:a6:6f:
                    df:23:9e:e5:7f:a4:17:76:72:35:3b:28:57:70:b6:
                    38:2a:34:a3:7e:ce:23:72:5e:e6:c4:45:8b:19:95:
                    f0:d3:48:3b:72:f5:bb:72:b0:95:ba:a0:c4:b7:6f:
                    a0:10:95:99:2d:61:e7:d8:76:c5:83:05:e2:3a:c5:
                    74:ef:cb:54:95:c7:8f:d0:4e:07:b5:78:44:df:d9:
                    5d:ac:e5:51:0b:3e:59:d5:f0:48:84:1f:a3:05:4d:
                    40:5d:72:f3:62:d4:a6:2d:14:ac:fa:61:5b:1e:32:
                    2b:93:24:b8:f7:5f:08:e3:5e:68:ce:95:87:13:79:
                    1f:db:b2:91:8b:94:3f:3f:76:89:57:ef:bb:4f:ef:
                    b3:f5:65:b2:0d:9c:2b:4a:99:85:70:a1:59:b5:b7:
                    d6:bf:d2:38:e6:c9:9f:db:17:d6:0f:8c:67:cb:65:
                    57:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:92:D8:7B:55:16:BB:6F:B4:99:70:99:2F:38:01:62:EB:12:58:C7
            X509v3 Authority Key Identifier:
                keyid:9D:97:13:1B:95:3D:97:C1:8D:6B:71:F6:DE:63:20:9F:65:41:DB:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/9D97131B953D97C18D6B71F6DE63209F6541DB0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9D97131B953D97C18D6B71F6DE63209F6541DB0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9dc6ccd2-8897-4a4e-81ce-c361a5e68dd6/0/3130332e3131372e31302e302f32342d3234203d3e20313530343738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:61:ff:90:28:57:fb:b4:1d:94:3d:2a:19:c1:f0:80:a6:
         11:c2:eb:3a:8c:9f:87:bf:ad:7e:97:1e:f5:f0:1d:f1:3c:6d:
         12:26:79:bd:04:16:68:6e:12:d2:a6:af:81:bc:96:61:66:db:
         34:39:f6:ec:1a:6d:73:fb:85:c8:a3:cf:38:07:ae:fb:ea:c1:
         96:6d:1d:1a:ba:51:46:3a:2f:3f:ce:a1:b5:f1:de:04:9c:76:
         1f:b8:bd:9b:6d:fc:06:cd:cc:8c:0d:f0:6e:b8:cf:7d:61:a4:
         fc:ba:ea:b2:98:28:c8:b0:c9:f8:8e:3d:01:7a:dd:35:42:c7:
         dc:f1:c6:ce:0f:a0:c1:79:4c:bd:92:59:11:9b:bb:a8:da:d0:
         45:1e:83:35:6a:0b:89:7b:26:6c:ed:c8:6b:4b:26:96:c8:5c:
         ae:4d:d1:46:29:d9:ca:95:bd:f3:06:9b:bb:37:b6:91:8d:7f:
         d9:31:52:99:5b:8e:e1:e7:7a:e3:aa:db:3d:0f:e3:e1:cd:fc:
         89:2d:63:bc:78:bd:b8:18:58:cd:3c:4a:1f:21:91:f5:75:e8:
         c5:c0:ed:50:6c:df:52:a0:cf:c3:5c:2b:5d:10:65:94:7b:1a:
         57:b4:72:7c:a0:5b:79:4e:2d:8f:3a:12:28:53:85:c7:02:9c:
         06:c4:b1:8c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUXb1acDuMIpWaZJU8/VxVk790oGQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2
NTQxREIwRTAeFw0yNDA1MzEwOTU1MDFaFw0yNTA1MzAxMDAwMDFaMDMxMTAvBgNV
BAMTKDcyOTJEODdCNTUxNkJCNkZCNDk5NzA5OTJGMzgwMTYyRUIxMjU4QzcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8xNXT2QAubjNqpqUos89UGR8k
KVsn6gW/FZdbDqr67vd8WBmS4H8RgNZHnu3wyLQCv4oNbPXBIA1iKXCl3uncNk0b
SAlfNCmJdiPuuW+LtEbYBN3gWDqmb98jnuV/pBd2cjU7KFdwtjgqNKN+ziNyXubE
RYsZlfDTSDty9btysJW6oMS3b6AQlZktYefYdsWDBeI6xXTvy1SVx4/QTge1eETf
2V2s5VELPlnV8EiEH6MFTUBdcvNi1KYtFKz6YVseMiuTJLj3XwjjXmjOlYcTeR/b
spGLlD8/dolX77tP77P1ZbINnCtKmYVwoVm1t9a/0jjmyZ/bF9YPjGfLZVfVAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUcpLYe1UWu2+0mXCZLzgBYusSWMcwHwYDVR0j
BBgwFoAUnZcTG5U9l8GNa3H23mMgn2VB2w4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ZGM2Y2NkMi04ODk3LTRhNGUtODFjZS1jMzYxYTVlNjhkZDYvMC85RDk3MTMxQjk1
M0Q5N0MxOEQ2QjcxRjZERTYzMjA5RjY1NDFEQjBFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOUQ5NzEzMUI5NTNEOTdDMThENkI3MUY2REU2MzIwOUY2NTQx
REIwRS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzlkYzZjY2QyLTg4OTctNGE0ZS04
MWNlLWMzNjFhNWU2OGRkNi8wLzMxMzAzMzJlMzEzMTM3MmUzMTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNTMwMzQzNzM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3UKMA0GCSqG
SIb3DQEBCwUAA4IBAQAfu2H/kChX+7QdlD0qGcHwgKYRwus6jJ+Hv61+lx718B3x
PG0SJnm9BBZobhLSpq+BvJZhZts0OfbsGm1z+4XIo884B6776sGWbR0aulFGOi8/
zqG18d4EnHYfuL2bbfwGzcyMDfBuuM99YaT8uuqymCjIsMn4jj0Bet01Qsfc8cbO
D6DBeUy9klkRm7uo2tBFHoM1aguJeyZs7chrSyaWyFyuTdFGKdnKlb3zBpu7N7aR
jX/ZMVKZW47h53rjqts9D+PhzfyJLWO8eL24GFjNPEofIZH1dejFwO1QbN9SoM/D
XCtdEGWUexpXtHJ8oFt5Ti2POhIoU4XHApwGxLGM
-----END CERTIFICATE-----
Generated at Thu Nov 21 03:17:34 2024 by rpki-client on console-ams.rpki-client.org