Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
File:                     3130332e3131372e33302e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          r8z7bDbjNyHi7VzYSSCbno+5xl3u6VN0WnpOY+FTh0M=
Subject key identifier:   DC:95:32:16:B7:53:CB:5A:78:9C:16:D2:BD:24:71:4D:13:54:13:07
Certificate issuer:       /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial:       67F352DA9858F22C9C32F9EF7B79BB34AA933610
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 25 Jun 2024 06:00:01 +0000
ROA not before:           Tue 25 Jun 2024 05:55:01 +0000
ROA not after:            Tue 24 Jun 2025 06:00:01 +0000
asID:                     9341
IP address blocks:        103.117.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl
                          rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:f3:52:da:98:58:f2:2c:9c:32:f9:ef:7b:79:bb:34:aa:93:36:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
        Validity
            Not Before: Jun 25 05:55:01 2024 GMT
            Not After : Jun 24 06:00:01 2025 GMT
        Subject: CN=DC953216B753CB5A789C16D2BD24714D13541307
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:18:bf:1f:47:5c:19:a3:ea:6c:f5:4e:43:e2:
                    a0:60:7e:69:3e:7e:67:41:8e:4b:b5:68:95:39:7e:
                    12:74:16:70:85:17:38:06:c9:94:90:53:43:b5:66:
                    e6:00:10:6b:e2:be:dd:d8:5f:f9:11:c1:e7:5d:bc:
                    d6:11:c4:49:60:93:6d:0c:13:a2:20:1a:49:c9:b2:
                    83:c9:d8:46:94:2c:9e:f6:5b:cc:e2:49:67:50:77:
                    a3:73:f7:88:24:66:80:a4:24:c9:3b:dd:4a:39:2c:
                    ad:d9:fa:52:46:29:e6:b0:5c:75:fd:19:00:86:1e:
                    38:be:10:47:7d:c9:06:fa:62:da:13:ce:d9:d0:05:
                    3b:74:28:d2:f5:90:6d:69:6b:58:b4:7a:cf:9c:94:
                    58:48:78:13:a2:45:ac:71:5c:b5:30:97:d5:95:da:
                    9a:f4:25:4a:36:03:74:cf:6d:b5:cd:1c:3d:37:4b:
                    76:11:11:50:c6:9d:66:21:77:c1:5a:29:84:e5:ef:
                    f6:63:8a:f4:02:9e:10:17:d8:41:b6:07:85:59:29:
                    72:1b:58:ba:41:fd:cc:cb:f9:04:28:a4:3b:00:a3:
                    c6:30:31:4b:0c:33:75:93:c6:27:a8:4d:fd:e5:f7:
                    a4:ae:aa:38:07:29:08:01:4b:1d:6c:ca:aa:ae:2a:
                    d6:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:95:32:16:B7:53:CB:5A:78:9C:16:D2:BD:24:71:4D:13:54:13:07
            X509v3 Authority Key Identifier:
                keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33302e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:c3:9c:d8:75:c7:fe:74:ed:c7:1d:a3:9f:a5:90:f3:86:fd:
         16:af:75:22:ec:c1:e8:45:0c:d1:62:b6:4f:7e:a5:78:0a:08:
         5f:58:de:2b:42:94:d0:23:d2:01:b8:fc:84:d6:1a:df:e2:96:
         42:4d:55:6e:b6:bb:c2:1d:83:1d:cd:90:fb:a4:14:82:f4:d6:
         86:11:72:b2:fc:af:9a:99:8f:c1:26:ed:dd:8d:b6:88:e6:d4:
         31:d1:a8:70:f5:27:a5:8b:23:e9:2c:7b:f8:04:71:5d:75:cd:
         04:ba:86:ea:a5:29:e8:76:52:5e:a2:f3:57:43:a3:7c:a6:15:
         31:a9:4c:73:c8:4f:b9:c8:1e:f5:86:f0:0d:c6:15:43:d1:f9:
         20:90:40:02:f9:a9:a1:c3:1f:a1:f6:75:a1:53:79:63:0a:f4:
         72:16:4c:0b:91:32:1b:a4:e6:94:16:7d:e7:63:fa:af:2d:36:
         5c:17:49:00:f6:8c:b1:a9:78:70:fe:37:d1:fa:4a:c8:7d:17:
         9c:c7:a6:60:b4:d8:46:b6:c0:1b:4c:f4:b5:07:7e:a9:da:89:
         92:06:f8:9a:1a:79:3e:b9:f6:34:d2:53:73:b5:54:cb:d4:06:
         f0:2e:90:72:d1:41:2c:8b:bc:ae:d8:80:17:25:72:64:1b:67:
         34:74:47:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org