Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e31302e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          nZcY2gfxAEyBR5vBIabcGR8YJ3boENfhzaPlLrFWCrY=
Subject key identifier:   7D:58:CA:CD:AE:35:CE:F8:6A:C5:E4:79:36:60:A3:7A:EF:72:81:B2
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       4EA43E7CA416DC9DE67A383692699E28B560E73A
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 01 Jul 2024 01:03:49 +0000
ROA not before:           Mon 01 Jul 2024 00:58:49 +0000
ROA not after:            Mon 30 Jun 2025 01:03:49 +0000
asID:                     45722
IP address blocks:        103.94.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a4:3e:7c:a4:16:dc:9d:e6:7a:38:36:92:69:9e:28:b5:60:e7:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul  1 00:58:49 2024 GMT
            Not After : Jun 30 01:03:49 2025 GMT
        Subject: CN=7D58CACDAE35CEF86AC5E4793660A37AEF7281B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:66:5c:0a:b1:b7:83:7d:36:9f:dd:82:fd:8e:
                    66:c8:eb:34:45:9b:f5:33:e5:94:c9:69:b0:d3:fb:
                    01:90:50:dd:4b:76:1a:aa:7b:de:8b:2a:a5:bf:9f:
                    b5:68:5a:9d:7d:13:45:71:e8:2c:2c:a5:32:7d:44:
                    e4:88:1d:a3:8d:1c:57:18:29:fa:cc:6a:85:6c:d7:
                    18:10:db:2f:cd:1c:5d:b9:27:76:20:c4:06:da:8f:
                    de:23:8c:ab:93:f5:2c:46:07:ca:43:aa:a8:90:e1:
                    2b:6d:c7:16:85:bd:8e:04:89:78:78:f9:a5:49:7a:
                    db:2f:e1:0a:e8:8b:b2:0f:fd:3d:2f:01:e8:88:06:
                    f1:f5:64:bb:69:1e:98:45:20:23:ba:da:58:a4:7e:
                    4c:0e:37:91:eb:a3:ec:49:8e:a9:6f:0e:2c:dc:46:
                    fb:b0:ae:6a:b2:e4:39:ff:7e:7f:46:75:24:e3:9e:
                    8d:9e:42:81:ac:63:20:f3:da:3b:43:93:01:40:9c:
                    55:3a:c0:12:9b:9e:74:cc:aa:02:30:78:04:9a:eb:
                    82:a6:f2:a0:b5:7e:64:02:8a:60:bd:7f:27:b4:4a:
                    62:0e:1c:b1:34:e7:1a:7f:b7:a8:08:ad:6d:14:e2:
                    a4:2a:b4:18:3d:15:bf:fe:fb:b0:d3:dc:f3:90:69:
                    33:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:58:CA:CD:AE:35:CE:F8:6A:C5:E4:79:36:60:A3:7A:EF:72:81:B2
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31302e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:0a:20:c4:f7:c2:24:1b:c4:d1:85:27:ce:5a:9f:91:05:
         ba:b0:ef:86:05:0f:b5:46:a9:a6:44:bf:f1:95:09:1e:cc:77:
         1c:61:7e:11:ed:78:62:6b:b8:5e:03:ea:a5:44:f3:6c:35:7d:
         5b:13:a8:c5:83:04:23:0c:71:32:31:ac:95:da:a1:f6:f9:83:
         b1:92:9e:de:74:e5:bc:1a:b6:3e:02:0e:9a:09:62:7c:b1:5d:
         f2:99:53:f2:e9:d9:a7:74:e8:c4:f4:07:ea:82:d6:28:52:7f:
         a7:6f:be:30:74:f8:7b:cb:98:c8:71:57:4b:1d:47:92:db:5c:
         2b:05:94:0c:92:6d:ba:23:da:e7:c0:10:53:cd:59:fc:52:10:
         a0:32:48:73:dd:52:31:a6:14:64:2f:e8:86:b6:1e:6f:41:37:
         d1:be:d6:12:7d:1b:9f:a1:86:8f:3c:36:60:bb:41:d8:9d:98:
         dd:0d:ad:b6:f6:e7:0b:7d:cc:01:97:af:0f:c6:cf:fc:5f:42:
         45:90:ea:2c:7a:4e:ae:10:36:0e:b6:8b:8e:44:91:9d:45:db:
         82:b4:6f:70:00:0f:98:b4:4a:64:32:45:6a:62:23:c7:2c:15:
         41:c5:94:a3:ee:52:62:6c:9d:89:83:b7:9e:81:8c:b2:fc:ee:
         92:cd:3c:89
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUTqQ+fKQW3J3mejg2kmmeKLVg5zowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1
REUwRUEwQzAeFw0yNDA3MDEwMDU4NDlaFw0yNTA2MzAwMTAzNDlaMDMxMTAvBgNV
BAMTKDdENThDQUNEQUUzNUNFRjg2QUM1RTQ3OTM2NjBBMzdBRUY3MjgxQjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClZlwKsbeDfTaf3YL9jmbI6zRF
m/Uz5ZTJabDT+wGQUN1Ldhqqe96LKqW/n7VoWp19E0Vx6CwspTJ9ROSIHaONHFcY
KfrMaoVs1xgQ2y/NHF25J3YgxAbaj94jjKuT9SxGB8pDqqiQ4SttxxaFvY4EiXh4
+aVJetsv4Qroi7IP/T0vAeiIBvH1ZLtpHphFICO62likfkwON5Hro+xJjqlvDizc
Rvuwrmqy5Dn/fn9GdSTjno2eQoGsYyDz2jtDkwFAnFU6wBKbnnTMqgIweASa64Km
8qC1fmQCimC9fye0SmIOHLE05xp/t6gIrW0U4qQqtBg9Fb/++7DT3POQaTNdAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUfVjKza41zvhqxeR5NmCjeu9ygbIwHwYDVR0j
BBgwFoAUURCnF+/paxLl06R16bIXnl3g6gwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
NjA3ZDkyOS00Y2E4LTRmNTMtYTI5OC01ZTMzYmUxZjg2MDQvMC81MTEwQTcxN0VG
RTk2QjEyRTVEM0E0NzVFOUIyMTc5RTVERTBFQTBDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTExMEE3MTdFRkU5NkIxMkU1RDNBNDc1RTlCMjE3OUU1REUw
RUEwQy5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U2MDdkOTI5LTRjYTgtNGY1My1h
Mjk4LTVlMzNiZTFmODYwNC8wLzMxMzAzMzJlMzkzNDJlMzEzMDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM0MzUzNzMyMzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnXgowDQYJKoZIhvcN
AQELBQADggEBAGChCiDE98IkG8TRhSfOWp+RBbqw74YFD7VGqaZEv/GVCR7Mdxxh
fhHteGJruF4D6qVE82w1fVsTqMWDBCMMcTIxrJXaofb5g7GSnt505bwatj4CDpoJ
YnyxXfKZU/Lp2ad06MT0B+qC1ihSf6dvvjB0+HvLmMhxV0sdR5LbXCsFlAySbboj
2ufAEFPNWfxSEKAySHPdUjGmFGQv6Ia2Hm9BN9G+1hJ9G5+hho88NmC7QdidmN0N
rbb25wt9zAGXrw/Gz/xfQkWQ6ix6Tq4QNg62i45EkZ1F24K0b3AAD5i0SmQyRWpi
I8csFUHFlKPuUmJsnYmDt56BjLL87pLNPIk=
-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org