Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa
File:                     3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa (raw, json)
Hash identifier:          p0fXm8VAPJ1d5Sna/ohh1pSiu8Qq6oq4OtVEHlTsmbE=
Subject key identifier:   4C:91:01:95:3B:4D:14:82:22:22:74:44:3A:1C:93:41:9A:0F:FC:EC
Certificate issuer:       /CN=11489A5805B7FE2710AE32C3077C3450579D1288
Certificate serial:       2F29B167629A48A547876418DA6274A29A627877
Authority key identifier: 11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa
Signing time:             Wed 27 Dec 2023 15:57:39 +0000
ROA not before:           Wed 27 Dec 2023 15:52:39 +0000
ROA not after:            Wed 25 Dec 2024 15:57:39 +0000
asID:                     137339
IP address blocks:        103.113.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl
                          rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 16:10:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:29:b1:67:62:9a:48:a5:47:87:64:18:da:62:74:a2:9a:62:78:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11489A5805B7FE2710AE32C3077C3450579D1288
        Validity
            Not Before: Dec 27 15:52:39 2023 GMT
            Not After : Dec 25 15:57:39 2024 GMT
        Subject: CN=4C9101953B4D1482222274443A1C93419A0FFCEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6a:78:bd:74:6f:55:bb:66:d1:78:a3:f7:65:
                    3e:3b:a0:e0:69:30:e5:69:ba:96:4f:fc:a3:61:20:
                    bf:94:ec:43:d2:b2:45:f1:d8:16:d1:cf:8a:e4:aa:
                    b0:06:8e:ee:81:97:04:0a:6a:c6:65:91:66:f1:0a:
                    07:d5:be:92:4a:8b:2e:80:a9:35:4f:96:b6:54:f5:
                    ee:f6:bc:ec:d0:da:7a:7d:8b:6b:2e:a1:5b:43:9e:
                    d4:30:ec:20:9a:d2:57:ec:cb:33:7d:69:67:b5:d4:
                    91:4b:0f:01:f6:20:14:cf:3e:17:ed:be:f9:71:52:
                    92:74:9e:32:15:7c:d6:dd:10:f1:c8:9b:f0:75:df:
                    0a:39:bb:90:58:3f:59:ec:2e:97:37:e0:a3:f7:7f:
                    51:fd:ae:61:39:59:80:ee:f8:da:79:2c:f6:4f:1b:
                    3a:93:a2:b2:d2:56:6e:81:dc:f9:d3:94:72:a9:7a:
                    10:49:06:08:45:81:34:44:8d:25:e1:22:6e:af:34:
                    65:c5:cd:22:73:a0:5b:74:2c:1e:1b:a3:82:06:ae:
                    9f:77:15:34:c7:dc:5c:d3:04:35:40:13:13:1c:cb:
                    f3:4c:fa:0c:87:6b:fe:cc:18:fc:d0:21:48:90:ab:
                    b5:a3:1e:c2:55:70:eb:12:8b:dd:a3:13:7a:eb:16:
                    f5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:91:01:95:3B:4D:14:82:22:22:74:44:3A:1C:93:41:9A:0F:FC:EC
            X509v3 Authority Key Identifier:
                keyid:11:48:9A:58:05:B7:FE:27:10:AE:32:C3:07:7C:34:50:57:9D:12:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/11489A5805B7FE2710AE32C3077C3450579D1288.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/11489A5805B7FE2710AE32C3077C3450579D1288.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dabce71e-4ee4-4590-94fb-37ffd9f0d6b7/0/3130332e3131332e32362e302f32342d3234203d3e20313337333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:ae:99:51:3a:b1:a0:35:3a:df:60:c4:ff:ef:70:03:e6:26:
         ae:56:48:71:ab:a9:43:a1:aa:bf:9d:b3:b9:99:4a:e3:e0:50:
         d0:df:5b:e9:d4:d0:06:a4:f8:b7:80:b7:f1:12:f6:97:74:4d:
         88:a8:3b:eb:e7:c8:ee:d9:bc:25:23:d5:ef:5d:fe:d7:c9:dd:
         73:22:a5:e7:29:3a:cf:08:c2:d7:0d:c9:29:7e:14:f6:8e:6a:
         f3:37:2e:c6:37:53:49:81:65:c0:5a:d8:fe:9c:4b:de:6c:08:
         96:a5:f2:51:ce:06:a8:9e:bf:10:3a:e2:7a:f6:7b:1f:87:03:
         89:59:f2:db:42:59:d9:90:af:8f:b1:c4:5f:7b:f3:5b:c9:f9:
         7a:87:ca:58:cf:47:7a:15:2b:b0:5d:bc:3e:07:8d:21:a9:19:
         27:e1:94:95:63:8b:2e:48:48:f6:01:e6:1d:e1:0c:e2:3a:22:
         49:77:e9:b5:02:f5:87:76:fa:ef:a2:fd:5c:ed:2f:67:a0:ee:
         d0:d7:7a:f1:fe:c0:b5:9f:cf:44:ad:b7:be:3b:07:53:3f:a1:
         ad:fa:fa:cc:a0:e0:ce:b7:31:e6:a3:65:6b:2f:ea:8e:cb:3e:
         0d:99:8d:5c:ef:5f:89:a9:1c:51:ba:88:0c:52:28:39:4a:5c:
         7b:cc:6d:c0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULymxZ2KaSKVHh2QY2mJ0oppieHcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1
NzlEMTI4ODAeFw0yMzEyMjcxNTUyMzlaFw0yNDEyMjUxNTU3MzlaMDMxMTAvBgNV
BAMTKDRDOTEwMTk1M0I0RDE0ODIyMjIyNzQ0NDNBMUM5MzQxOUEwRkZDRUMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTani9dG9Vu2bReKP3ZT47oOBp
MOVpupZP/KNhIL+U7EPSskXx2BbRz4rkqrAGju6BlwQKasZlkWbxCgfVvpJKiy6A
qTVPlrZU9e72vOzQ2np9i2suoVtDntQw7CCa0lfsyzN9aWe11JFLDwH2IBTPPhft
vvlxUpJ0njIVfNbdEPHIm/B13wo5u5BYP1nsLpc34KP3f1H9rmE5WYDu+Np5LPZP
GzqTorLSVm6B3PnTlHKpehBJBghFgTREjSXhIm6vNGXFzSJzoFt0LB4bo4IGrp93
FTTH3FzTBDVAExMcy/NM+gyHa/7MGPzQIUiQq7WjHsJVcOsSi92jE3rrFvXxAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTJEBlTtNFIIiInREOhyTQZoP/OwwHwYDVR0j
BBgwFoAUEUiaWAW3/icQrjLDB3w0UFedEogwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k
YWJjZTcxZS00ZWU0LTQ1OTAtOTRmYi0zN2ZmZDlmMGQ2YjcvMC8xMTQ4OUE1ODA1
QjdGRTI3MTBBRTMyQzMwNzdDMzQ1MDU3OUQxMjg4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTE0ODlBNTgwNUI3RkUyNzEwQUUzMkMzMDc3QzM0NTA1NzlE
MTI4OC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2RhYmNlNzFlLTRlZTQtNDU5MC05
NGZiLTM3ZmZkOWYwZDZiNy8wLzMxMzAzMzJlMzEzMTMzMmUzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM3MzMzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ3EaMA0GCSqG
SIb3DQEBCwUAA4IBAQAmrplROrGgNTrfYMT/73AD5iauVkhxq6lDoaq/nbO5mUrj
4FDQ31vp1NAGpPi3gLfxEvaXdE2IqDvr58ju2bwlI9XvXf7Xyd1zIqXnKTrPCMLX
DckpfhT2jmrzNy7GN1NJgWXAWtj+nEvebAiWpfJRzgaonr8QOuJ69nsfhwOJWfLb
QlnZkK+PscRfe/Nbyfl6h8pYz0d6FSuwXbw+B40hqRkn4ZSVY4suSEj2AeYd4Qzi
OiJJd+m1AvWHdvrvov1c7S9noO7Q13rx/sC1n89Erbe+OwdTP6Gt+vrMoODOtzHm
o2VrL+qOyz4NmY1c71+JqRxRuogMUig5Slx7zG3A
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:39:13 2024 by rpki-client on console-ams.rpki-client.org