Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
File:                     3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa (raw, json)
Hash identifier:          SJM68Diowj8hC0pS0Wq7dK7Td5tPfALIDaCNsswgRaE=
Subject key identifier:   9F:95:4F:AB:8B:23:C6:A0:8B:23:1F:CC:89:0D:D8:FB:2B:7E:CB:E9
Certificate issuer:       /CN=C710954C7B301C60B82BA6372CACEB81DA08F190
Certificate serial:       1C125F1246B52528835EEE60DD4B0434AF8C611F
Authority key identifier: C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa
Signing time:             Sat 09 Sep 2023 08:01:49 +0000
ROA not before:           Sat 09 Sep 2023 07:56:49 +0000
ROA not after:            Sat 07 Sep 2024 08:01:49 +0000
asID:                     133832
IP address blocks:        103.58.111.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl
                          rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:12:5f:12:46:b5:25:28:83:5e:ee:60:dd:4b:04:34:af:8c:61:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C710954C7B301C60B82BA6372CACEB81DA08F190
        Validity
            Not Before: Sep  9 07:56:49 2023 GMT
            Not After : Sep  7 08:01:49 2024 GMT
        Subject: CN=9F954FAB8B23C6A08B231FCC890DD8FB2B7ECBE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:33:1f:de:82:c6:55:cb:5f:c1:b1:74:96:b4:
                    10:28:f8:bb:a1:7a:82:d1:fb:a5:8f:5d:29:04:a2:
                    3a:01:76:32:63:72:7b:97:32:3c:84:bc:db:70:e2:
                    a1:f7:f7:31:e2:02:8a:28:28:8d:97:af:3a:2b:b2:
                    72:3b:30:35:f3:b5:cf:88:17:b1:37:4f:a1:d3:c0:
                    18:2d:2c:49:52:58:9f:b0:fe:14:91:8f:0d:2e:11:
                    4d:36:2b:bf:9f:9b:f3:5a:27:d8:46:83:8d:f7:3d:
                    a2:02:60:b5:53:49:04:6d:8f:73:fd:d3:8b:c7:6d:
                    4c:33:c9:53:09:20:2f:48:3d:ae:fa:f5:36:a0:df:
                    e8:d8:f3:79:ac:a0:db:22:31:77:08:97:86:82:c3:
                    e1:69:a7:4e:07:2d:7d:ec:2b:ae:55:c8:56:43:81:
                    5d:f9:49:e8:b2:15:6d:29:8d:c4:e3:df:0f:8d:c3:
                    9b:01:67:ea:0e:d8:b4:2b:6f:61:d8:9d:6f:5b:27:
                    16:79:15:f9:5c:bf:7d:c4:4b:46:08:53:34:85:89:
                    5f:6a:83:44:dc:bd:60:2f:b9:8e:0a:87:f7:1e:6b:
                    d6:01:1b:aa:60:59:8d:fc:92:d5:3f:73:54:83:11:
                    28:33:9e:26:41:4d:60:6a:99:51:8f:ac:02:37:1b:
                    e8:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:95:4F:AB:8B:23:C6:A0:8B:23:1F:CC:89:0D:D8:FB:2B:7E:CB:E9
            X509v3 Authority Key Identifier:
                keyid:C7:10:95:4C:7B:30:1C:60:B8:2B:A6:37:2C:AC:EB:81:DA:08:F1:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/C710954C7B301C60B82BA6372CACEB81DA08F190.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C710954C7B301C60B82BA6372CACEB81DA08F190.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/43e4177d-8093-447c-87b5-c79c8cb4c733/0/3130332e35382e3131312e302f32342d3234203d3e20313333383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.58.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b1:15:91:a2:60:a8:e6:4f:d1:c7:fd:90:5e:46:b1:5c:d4:3c:
         2d:c6:90:82:65:db:d0:a7:bd:25:5a:b0:f0:39:1e:9a:2a:ff:
         4a:3e:a8:dc:40:6a:df:71:5c:da:f5:0f:10:8a:18:47:c9:d0:
         7a:67:81:64:85:f8:29:a5:95:c2:e8:61:a3:ea:b1:96:ec:00:
         c3:03:4b:98:39:e5:e3:39:06:a3:04:ae:2c:0a:f1:af:4a:38:
         3f:1d:e5:01:b3:e2:fd:c7:24:36:99:ad:b7:50:83:de:16:f0:
         5b:c6:04:a6:6d:0a:47:97:84:8b:54:56:96:4c:aa:b3:67:d6:
         09:5d:fd:59:91:3b:7f:1b:16:60:ec:06:7a:a7:4a:8d:51:59:
         28:12:10:c9:3d:3a:20:27:4c:78:e9:86:37:97:0a:de:34:f6:
         42:95:02:b5:58:84:b1:28:17:3e:31:a7:7f:af:67:ca:75:ec:
         c0:09:2f:8e:b1:d6:d6:3c:93:9f:24:72:e4:bd:00:ba:d8:3a:
         c4:9a:3e:c7:c3:48:8c:aa:22:80:bb:ac:6e:01:50:f5:ff:72:
         fc:14:91:f5:dd:46:ff:05:6a:35:e1:db:e1:91:4a:4f:a3:25:
         ed:2c:b0:27:a4:b9:73:87:e5:8b:f3:2b:e6:a1:f2:25:d7:86:
         f4:3e:8c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 06:56:15 2024 by rpki-client on console-fra.rpki-client.org