Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
File:                     3130332e33312e34322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          y45woR+frHwDPz+XrJyAsnYy051jps7RCl331frKeSU=
Subject key identifier:   34:55:22:28:3D:FC:14:BF:53:84:BF:AE:48:01:56:52:17:B1:88:F2
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       0A4C2EDFACE9AB13BA6B714F3552346D4A2D34D9
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 04 Oct 2024 08:01:37 +0000
ROA not before:           Fri 04 Oct 2024 07:56:37 +0000
ROA not after:            Fri 03 Oct 2025 08:01:37 +0000
asID:                     9341
IP address blocks:        103.31.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:06:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:4c:2e:df:ac:e9:ab:13:ba:6b:71:4f:35:52:34:6d:4a:2d:34:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Oct  4 07:56:37 2024 GMT
            Not After : Oct  3 08:01:37 2025 GMT
        Subject: CN=345522283DFC14BF5384BFAE4801565217B188F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:9f:b9:cb:07:3c:b7:3e:f7:98:93:2c:90:13:
                    dd:99:07:dd:ad:e0:51:c4:0b:a1:9c:f4:cc:71:51:
                    22:b7:21:6f:92:6d:7c:28:24:a5:21:c2:ae:69:b8:
                    09:26:f8:bc:42:13:35:bf:d7:be:18:c9:9a:dd:91:
                    c7:68:90:df:c3:7e:db:aa:5d:4b:3e:ae:fe:2a:b8:
                    fe:84:73:93:b8:89:0a:b2:a3:2c:79:7d:ae:2d:bd:
                    fe:e2:93:dd:a4:4c:ff:ce:f6:36:f0:4c:75:b2:e3:
                    09:28:88:f2:73:58:8d:12:6c:02:5e:b9:09:44:c5:
                    71:50:6c:f2:92:fb:5f:a5:09:98:2b:24:e3:81:91:
                    7a:b9:d3:c3:b1:f1:df:96:7f:32:82:f8:b7:7a:70:
                    60:12:27:a3:b9:ab:5c:c0:f1:7b:1a:16:f9:92:9e:
                    b2:f7:88:5e:84:1c:e2:a7:cc:1b:b8:f3:e5:70:5c:
                    fd:ad:b1:fc:aa:05:b7:25:32:f4:cd:19:19:e3:f9:
                    da:2a:af:c1:8d:ae:79:24:9a:e3:da:72:05:8d:6b:
                    ca:d9:a8:08:58:b7:47:e6:32:87:f4:c9:9e:f1:c6:
                    27:3a:fe:aa:1f:de:72:65:c6:be:cd:ff:f2:78:83:
                    b9:86:78:73:56:c3:c9:0f:93:89:b4:da:97:a5:63:
                    46:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:55:22:28:3D:FC:14:BF:53:84:BF:AE:48:01:56:52:17:B1:88:F2
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         09:0f:71:bc:38:a1:32:da:10:bd:56:6e:89:ae:05:3e:4b:f6:
         e2:15:0e:e0:e6:d4:a0:b5:f6:9e:92:ad:c9:15:8f:fa:00:c0:
         24:83:81:b3:1e:29:fd:40:b1:5b:18:a0:b4:f5:8c:8b:c4:14:
         16:ed:37:c4:b8:da:43:66:47:d5:b7:0c:fc:c1:07:89:ea:eb:
         4a:eb:86:32:c5:34:33:c8:c8:a0:70:24:ec:15:73:14:80:bf:
         43:cd:a1:79:c6:2d:75:16:56:c3:c3:5c:7c:f2:2e:a9:32:45:
         f6:11:a5:d1:b9:23:dd:2d:8d:4a:0b:07:e7:6b:09:8c:2d:a8:
         ac:77:a4:39:cf:44:5d:a0:a7:77:00:d4:7a:a0:ab:e7:fd:56:
         25:8e:62:de:59:cc:d8:41:8d:a3:ee:f4:da:3a:85:1a:65:b0:
         39:22:c5:86:e2:e7:f0:b5:e3:64:a5:55:e7:07:8f:63:1c:e5:
         20:36:bb:38:3e:f0:b0:b4:86:f2:a4:ce:8b:ce:2a:e8:eb:0a:
         bf:3a:4a:58:7c:fc:c2:f4:72:3e:7f:cd:11:0a:40:46:d1:b9:
         7b:db:89:58:15:09:bf:30:aa:e2:55:2d:f9:2f:66:a9:3a:45:
         53:12:47:f7:2f:75:f0:77:28:f8:3e:4d:67:9d:48:86:07:79:
         c7:cc:2e:28
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUCkwu36zpqxO6a3FPNVI0bUotNNkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3
OEYyNkYzMDAeFw0yNDEwMDQwNzU2MzdaFw0yNTEwMDMwODAxMzdaMDMxMTAvBgNV
BAMTKDM0NTUyMjI4M0RGQzE0QkY1Mzg0QkZBRTQ4MDE1NjUyMTdCMTg4RjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOn7nLBzy3PveYkyyQE92ZB92t
4FHEC6Gc9MxxUSK3IW+SbXwoJKUhwq5puAkm+LxCEzW/174YyZrdkcdokN/Dftuq
XUs+rv4quP6Ec5O4iQqyoyx5fa4tvf7ik92kTP/O9jbwTHWy4wkoiPJzWI0SbAJe
uQlExXFQbPKS+1+lCZgrJOOBkXq508Ox8d+WfzKC+Ld6cGASJ6O5q1zA8XsaFvmS
nrL3iF6EHOKnzBu48+VwXP2tsfyqBbclMvTNGRnj+doqr8GNrnkkmuPacgWNa8rZ
qAhYt0fmMof0yZ7xxic6/qof3nJlxr7N//J4g7mGeHNWw8kPk4m02pelY0a/AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUNFUiKD38FL9ThL+uSAFWUhexiPIwHwYDVR0j
BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG
NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy
NkYzMC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi
YTktMDRiZWRkYzViYzI2LzAvMzEzMDMzMmUzMzMxMmUzNDMyMmUzMDJmMzIzMzJk
MzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnHyowDQYJKoZIhvcNAQEL
BQADggEBAAkPcbw4oTLaEL1WbomuBT5L9uIVDuDm1KC19p6SrckVj/oAwCSDgbMe
Kf1AsVsYoLT1jIvEFBbtN8S42kNmR9W3DPzBB4nq60rrhjLFNDPIyKBwJOwVcxSA
v0PNoXnGLXUWVsPDXHzyLqkyRfYRpdG5I90tjUoLB+drCYwtqKx3pDnPRF2gp3cA
1Hqgq+f9ViWOYt5ZzNhBjaPu9No6hRplsDkixYbi5/C142SlVecHj2Mc5SA2uzg+
8LC0hvKkzovOKujrCr86Slh8/ML0cj5/zREKQEbRuXvbiVgVCb8wquJVLfkvZqk6
RVMSR/cvdfB3KPg+TWedSIYHecfMLig=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:03 2024 by rpki-client on console-fra.rpki-client.org