Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
File:                     3130332e39342e392e302f32342d3234203d3e203435373232.roa (raw, json)
Hash identifier:          7RROuYODVVhNO2+bjbdOGIl/UFrzyWOSbw909j2VmTo=
Subject key identifier:   05:29:BF:D2:21:56:35:C4:07:04:9A:94:20:61:32:99:4B:09:56:CF
Certificate issuer:       /CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
Certificate serial:       38E3F502079FED656AA4C76CC70E8C6699D9A977
Authority key identifier: 51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa
Signing time:             Mon 01 Jul 2024 01:03:48 +0000
ROA not before:           Mon 01 Jul 2024 00:58:48 +0000
ROA not after:            Mon 30 Jun 2025 01:03:48 +0000
asID:                     45722
IP address blocks:        103.94.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl
                          rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 21:34:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:e3:f5:02:07:9f:ed:65:6a:a4:c7:6c:c7:0e:8c:66:99:d9:a9:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C
        Validity
            Not Before: Jul  1 00:58:48 2024 GMT
            Not After : Jun 30 01:03:48 2025 GMT
        Subject: CN=0529BFD2215635C407049A94206132994B0956CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:97:aa:d8:30:5e:98:20:73:19:89:1f:e5:f3:
                    41:d1:34:65:e7:2f:13:1b:76:91:c6:b5:41:0f:1e:
                    51:80:ef:b9:46:cc:44:99:6c:6c:6e:2d:04:35:95:
                    92:61:18:62:61:c4:bd:e7:23:dc:59:b7:25:89:d5:
                    4d:ed:3e:fc:a5:89:9a:1c:ed:26:83:40:04:f0:9f:
                    78:bc:a1:37:4e:0d:0a:0c:37:9f:5f:aa:ac:4d:a1:
                    ff:23:ef:29:1b:86:d6:88:de:cd:b8:a2:03:7e:38:
                    bc:03:26:b3:4a:e6:39:62:90:c0:a4:21:b3:d9:a7:
                    ec:22:b3:a3:95:27:3e:cd:b0:1c:85:e2:89:81:f9:
                    73:db:92:c8:c0:58:cf:62:b4:1b:0e:d8:8b:c1:39:
                    65:7c:a0:28:08:65:a3:d2:b6:b5:75:2a:2c:28:39:
                    6b:8e:32:fb:3b:0c:93:25:a5:72:40:d0:b0:6f:59:
                    88:9f:45:de:ad:90:7c:0f:1f:97:ab:c1:3d:2b:cd:
                    4e:0c:8f:7f:0d:88:aa:fd:72:db:52:61:60:70:4c:
                    9f:4e:86:00:a2:15:74:c0:dc:8e:fc:72:64:79:0b:
                    cf:a7:d4:72:5f:b9:db:34:8e:35:69:94:74:56:ba:
                    3f:d3:3f:25:4c:87:f5:05:58:31:57:7b:3b:ec:55:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:29:BF:D2:21:56:35:C4:07:04:9A:94:20:61:32:99:4B:09:56:CF
            X509v3 Authority Key Identifier:
                keyid:51:10:A7:17:EF:E9:6B:12:E5:D3:A4:75:E9:B2:17:9E:5D:E0:EA:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5110A717EFE96B12E5D3A475E9B2179E5DE0EA0C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e607d929-4ca8-4f53-a298-5e33be1f8604/0/3130332e39342e392e302f32342d3234203d3e203435373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:f6:2d:e0:95:b5:89:98:ef:13:64:75:7d:14:5d:73:9e:2d:
         d9:fa:f7:82:13:2d:58:cb:1b:8a:88:f7:dd:63:6a:03:4c:41:
         3f:90:db:fa:db:ae:ea:ac:be:dd:45:65:72:c8:30:ab:b8:11:
         27:25:77:85:a8:16:5f:9e:66:15:a0:42:5a:ce:a9:a6:d5:cc:
         52:9b:f5:f0:9f:c7:0b:aa:4f:47:38:ee:ba:7f:86:32:53:4f:
         f9:d3:88:9f:6a:05:c9:cc:e1:fb:09:75:64:70:41:81:a8:eb:
         e8:76:87:6f:42:b7:57:a9:b0:c9:08:ca:3d:d0:f1:6d:da:31:
         ac:40:34:6e:98:e2:23:c2:4b:d8:1f:e2:ee:4a:14:83:0c:5a:
         a3:fd:7d:d9:86:c5:7d:5f:7f:61:20:4e:f7:3e:03:7a:e8:2e:
         94:4a:6d:d1:11:eb:d4:51:dc:3e:90:3c:56:6d:f9:6d:c0:f9:
         cd:b8:10:93:04:f7:a5:d6:44:de:0c:b1:00:10:e0:fd:c3:99:
         86:39:54:f8:3f:24:e9:a4:b2:49:0e:ae:14:be:3a:44:df:e7:
         f5:8e:37:e5:8b:60:b6:f0:dc:d2:f1:b9:ae:39:d0:fd:f2:e3:
         83:b4:23:cb:84:35:b3:a8:ed:a6:4c:70:68:85:04:66:88:36:
         66:e9:8b:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:33:00 2024 by rpki-client on console-ams.rpki-client.org