Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
File:                     3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (raw, json)
Hash identifier:          n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=
Subject key identifier:   04:2C:6A:AA:55:89:5C:4C:91:FC:44:F2:9E:D4:FB:37:2A:03:A2:EB
Certificate issuer:       /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7
Certificate serial:       6370010989E72765E310E0D4B0307E8224BC40CC
Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa
Signing time:             Mon 14 Oct 2024 09:00:01 +0000
ROA not before:           Mon 14 Oct 2024 08:55:01 +0000
ROA not after:            Mon 13 Oct 2025 09:00:01 +0000
asID:                     139433
IP address blocks:        103.144.128.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl
                          rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:70:01:09:89:e7:27:65:e3:10:e0:d4:b0:30:7e:82:24:bc:40:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7
        Validity
            Not Before: Oct 14 08:55:01 2024 GMT
            Not After : Oct 13 09:00:01 2025 GMT
        Subject: CN=042C6AAA55895C4C91FC44F29ED4FB372A03A2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:a9:c1:bf:2e:11:0d:9c:06:a2:ef:1b:80:
                    91:cd:3e:22:5d:a2:a0:28:e3:d1:65:25:a4:f9:f3:
                    f9:3d:fa:00:d2:5e:88:6b:88:22:aa:50:82:6a:88:
                    58:20:d1:45:f5:92:a9:ce:de:ac:0e:9f:38:79:fb:
                    a6:44:d2:5e:74:d2:e9:79:b7:74:d0:62:13:e8:ed:
                    95:3a:88:6f:71:1a:3a:00:91:67:00:a9:09:ca:24:
                    55:83:74:34:4a:cc:41:50:01:ab:aa:95:1d:36:55:
                    1b:d7:ba:49:3d:08:d7:a5:9c:cc:02:f2:ab:c4:16:
                    51:5f:2a:14:b9:d7:9d:54:5c:d6:78:b3:3f:62:14:
                    4d:27:41:0f:2a:8c:5c:03:23:aa:d0:b5:f4:f2:08:
                    5f:ed:2b:90:91:9c:73:9a:2a:b8:62:eb:9b:7a:b7:
                    e2:2d:6b:9d:fa:8c:fe:2f:e6:06:b6:ea:7d:2e:2f:
                    90:53:41:11:c9:cb:3c:88:f6:4d:8d:79:62:d1:90:
                    e4:1c:e1:1c:6a:fd:18:6b:7b:30:7f:33:b0:29:84:
                    72:2b:c0:68:78:32:f9:c1:4a:7f:5b:a2:39:75:77:
                    c4:8c:d0:60:2b:f5:1b:f4:2c:7a:ff:09:e0:26:71:
                    1c:71:ad:e3:af:f1:3f:6e:6c:db:f3:72:61:d3:cf:
                    24:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:2C:6A:AA:55:89:5C:4C:91:FC:44:F2:9E:D4:FB:37:2A:03:A2:EB
            X509v3 Authority Key Identifier:
                keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.144.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:64:5b:c6:1d:cd:e9:df:31:7c:e3:4c:92:aa:68:38:f0:18:
         41:fc:40:52:ed:a9:17:cc:ad:70:75:aa:5e:65:95:f9:b1:fc:
         2f:50:5b:81:14:e7:f6:53:b0:cb:09:dd:c0:db:ec:1e:77:7a:
         5f:df:04:c2:77:ac:c7:a9:59:21:f3:5b:57:2b:ea:4a:58:8a:
         74:d2:e9:88:ee:4f:95:2d:43:08:36:8d:fd:4e:a0:63:3d:52:
         90:cd:47:69:fe:37:7b:46:0b:e9:c7:6c:36:3d:ba:dd:f7:2f:
         b0:4b:97:aa:f1:3b:2c:8a:ed:ca:a9:43:3b:88:56:73:74:09:
         5a:65:66:9f:a8:58:11:f4:b7:73:a0:f4:dc:82:51:2b:ad:05:
         7e:cf:fd:16:5b:c6:09:79:45:ee:92:82:66:8a:8b:22:1a:86:
         05:71:24:0d:07:7b:81:f2:50:bd:c1:c5:5f:ee:12:36:9a:ec:
         6d:bc:75:e3:94:ee:67:6d:39:bd:b0:dc:3a:1c:c0:10:94:57:
         2c:06:85:d1:88:6e:f1:74:45:33:be:9f:ae:ba:63:4b:98:ec:
         63:f8:2c:69:98:db:6e:e5:d8:e1:7b:3d:84:5c:fc:b3:2a:76:
         df:21:08:1e:5f:83:6a:15:ee:97:54:9a:f1:da:96:ee:83:fd:
         7a:d4:c9:34
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUY3ABCYnnJ2XjEODUsDB+giS8QMwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy
Nzc5NjJCNzAeFw0yNDEwMTQwODU1MDFaFw0yNTEwMTMwOTAwMDFaMDMxMTAvBgNV
BAMTKDA0MkM2QUFBNTU4OTVDNEM5MUZDNDRGMjlFRDRGQjM3MkEwM0EyRUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4I6nBvy4RDZwGou8bgJHNPiJd
oqAo49FlJaT58/k9+gDSXohriCKqUIJqiFgg0UX1kqnO3qwOnzh5+6ZE0l500ul5
t3TQYhPo7ZU6iG9xGjoAkWcAqQnKJFWDdDRKzEFQAauqlR02VRvXukk9CNelnMwC
8qvEFlFfKhS5151UXNZ4sz9iFE0nQQ8qjFwDI6rQtfTyCF/tK5CRnHOaKrhi65t6
t+Ita536jP4v5ga26n0uL5BTQRHJyzyI9k2NeWLRkOQc4Rxq/RhrezB/M7AphHIr
wGh4MvnBSn9bojl1d8SM0GAr9Rv0LHr/CeAmcRxxreOv8T9ubNvzcmHTzyQfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUBCxqqlWJXEyR/ETyntT7NyoDouswHwYDVR0j
BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0
OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5
NjJCNy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5ZjU3NWRiLWM3MzgtNGI4ZS1i
MzZhLTZiMDIwYzY2ODQ5ZC8wLzMxMzAzMzJlMzEzNDM0MmUzMTMyMzgyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzkzNDMzMzMucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnkIAwDQYJ
KoZIhvcNAQELBQADggEBAG9kW8YdzenfMXzjTJKqaDjwGEH8QFLtqRfMrXB1ql5l
lfmx/C9QW4EU5/ZTsMsJ3cDb7B53el/fBMJ3rMepWSHzW1cr6kpYinTS6YjuT5Ut
Qwg2jf1OoGM9UpDNR2n+N3tGC+nHbDY9ut33L7BLl6rxOyyK7cqpQzuIVnN0CVpl
Zp+oWBH0t3Og9NyCUSutBX7P/RZbxgl5Re6SgmaKiyIahgVxJA0He4HyUL3BxV/u
Ejaa7G28deOU7mdtOb2w3DocwBCUVywGhdGIbvF0RTO+n666Y0uY7GP4LGmY227l
2OF7PYRc/LMqdt8hCB5fg2oV7pdUmvHalu6D/XrUyTQ=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:58:45 2024 by rpki-client on console-fra.rpki-client.org