Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e31312e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          zXSqQBvlzL5Qd7ukUJxUD+iaVT3g/E6NjHe1W2xTBhw=
Subject key identifier:   1F:88:3A:7A:5D:4F:CC:42:30:56:FD:C1:AA:D9:91:66:6E:25:FC:3C
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       26B8860311AE9EA4A73336CAAC8C476915E64A16
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 01 Jul 2024 01:03:49 +0000
ROA not before:           Mon 01 Jul 2024 00:58:49 +0000
ROA not after:            Mon 30 Jun 2025 01:03:49 +0000
asID:                     45722
IP address blocks:        103.94.11.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:b8:86:03:11:ae:9e:a4:a7:33:36:ca:ac:8c:47:69:15:e6:4a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul  1 00:58:49 2024 GMT
            Not After : Jun 30 01:03:49 2025 GMT
        Subject: CN=1F883A7A5D4FCC423056FDC1AAD991666E25FC3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:17:e5:44:9e:c6:5c:df:7b:2b:7d:fc:ce:91:
                    fb:6f:cc:83:17:3f:4b:71:19:2b:90:ea:b0:bc:97:
                    6e:35:2d:ad:37:3f:cf:80:78:5e:58:26:51:48:22:
                    43:b0:8f:a9:ff:d9:8e:67:ae:78:44:17:d0:18:c0:
                    d3:d2:ee:62:ae:1b:2f:f1:a8:60:91:01:63:62:46:
                    77:87:1c:7c:d1:f5:68:28:8e:a3:99:82:8f:27:ba:
                    4f:cc:73:99:6f:19:16:73:79:71:4f:ae:6e:2a:5a:
                    dc:6b:6b:14:2b:ca:38:e3:c1:a7:ac:f7:08:5b:32:
                    2f:96:48:86:b6:77:d2:58:4b:10:96:61:92:7a:97:
                    41:fe:70:bb:50:33:de:4d:31:06:83:92:b2:f5:a3:
                    05:89:55:f9:f2:aa:e0:24:f6:99:8b:99:40:a8:ac:
                    1a:87:5d:5d:28:42:b6:ee:57:11:ae:97:c4:c0:0c:
                    c2:94:27:7f:6b:18:e2:e3:ae:09:c8:f9:e3:06:49:
                    98:20:2f:65:0b:4c:62:1a:40:fa:a0:5f:e0:ca:a9:
                    e0:cb:27:cf:34:ae:bf:18:72:0c:cd:f4:74:47:7c:
                    2e:a0:dd:fb:ab:46:2f:6e:a5:d6:98:94:60:7d:8f:
                    66:42:d3:d0:fe:c4:91:a2:3b:86:01:58:70:61:28:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:88:3A:7A:5D:4F:CC:42:30:56:FD:C1:AA:D9:91:66:6E:25:FC:3C
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e31312e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:c3:96:f8:78:72:d3:4a:ca:28:e4:2f:b5:64:5d:0c:40:e8:
         7a:2f:fc:16:37:b2:14:4f:61:c0:2d:9a:07:8f:0a:7d:bb:3c:
         18:84:1f:d4:49:70:89:d7:0d:21:5e:51:2a:2e:8f:8d:9c:6a:
         0a:b4:5d:c3:8f:81:ec:94:57:78:31:e9:45:08:69:e0:82:03:
         9f:87:ae:55:4d:90:39:35:19:4a:72:b5:ee:28:8f:90:85:52:
         47:a0:46:75:07:39:86:51:69:79:34:e0:52:7d:c3:41:13:36:
         bc:0f:7c:16:cc:4e:4a:f4:76:96:54:05:f2:f2:71:10:eb:67:
         16:c4:37:d4:3e:2a:62:5c:19:e9:9e:b1:47:58:59:8c:18:3b:
         63:49:63:a2:7a:d8:a7:ca:a9:a0:57:9e:fc:41:34:d5:52:84:
         a9:5c:6b:a1:b2:ca:a7:ee:b1:70:90:44:48:5b:ec:1d:dc:89:
         bc:7d:92:97:2c:5d:72:aa:1a:1e:d5:8d:5e:ed:b6:d0:36:0e:
         b6:2f:ed:8f:a1:af:39:97:78:64:30:f9:ca:ca:4e:15:9c:0e:
         a0:81:d7:42:20:ce:05:c3:45:14:1a:c4:0a:d5:e6:82:6f:5b:
         09:6d:bd:27:83:ee:66:60:e4:b8:e1:8c:db:e9:b2:5a:41:39:
         b5:46:85:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org