Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
File:                     3130332e33312e3235302e302f32342d3234203d3e203538343737.roa (raw, json)
Hash identifier:          J9RyaaTNCRmU97L0q9iRAICyoIS0qwuYrWC5xmDY390=
Subject key identifier:   FC:99:89:4C:B3:F7:E6:01:AC:A9:9F:0B:0F:15:45:DA:69:78:F1:40
Certificate issuer:       /CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
Certificate serial:       2592F986B1C92596DEEA0F2D9BAEB59BF5EE9079
Authority key identifier: 10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa
Signing time:             Mon 31 Jul 2023 00:09:30 +0000
ROA not before:           Mon 31 Jul 2023 00:04:30 +0000
ROA not after:            Mon 29 Jul 2024 00:09:30 +0000
asID:                     58477
IP address blocks:        103.31.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl
                          rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:92:f9:86:b1:c9:25:96:de:ea:0f:2d:9b:ae:b5:9b:f5:ee:90:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10CA1776EFA8AF35292E76AE2B09C23427C191A6
        Validity
            Not Before: Jul 31 00:04:30 2023 GMT
            Not After : Jul 29 00:09:30 2024 GMT
        Subject: CN=FC99894CB3F7E601ACA99F0B0F1545DA6978F140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:de:ac:21:34:90:49:33:0d:b7:be:d9:d2:53:
                    c8:b0:92:2f:6b:30:99:25:df:82:70:aa:49:92:9b:
                    34:75:7d:0d:62:09:29:91:31:4a:26:87:9b:ba:47:
                    fc:27:cd:db:0a:88:b5:26:69:9c:62:e9:bc:c2:eb:
                    7c:13:6d:1b:d8:86:d1:88:f1:43:85:a5:42:4a:ea:
                    37:82:74:9f:69:28:5d:80:24:33:55:77:2e:21:75:
                    52:5d:ba:af:5f:eb:bd:4a:f0:9d:68:5f:5b:6a:bd:
                    9e:b0:f4:df:ab:23:00:0d:75:27:92:c1:ee:45:90:
                    4f:f4:15:96:f0:37:f0:2d:ae:94:4f:a2:e3:f8:2e:
                    bb:95:be:d9:cd:24:26:79:31:9c:c6:3c:13:de:4b:
                    23:9a:50:1b:35:59:d9:53:86:5b:bd:b8:5a:1f:43:
                    d2:7f:7d:1d:d8:06:30:fd:7a:cf:f3:19:87:1e:12:
                    a4:14:bc:96:1a:9d:52:35:4a:c5:18:5c:f3:cf:73:
                    56:4b:d8:4b:91:5c:9d:42:38:1d:d6:88:79:35:d1:
                    8d:6f:2a:d4:ac:e6:11:5a:f5:e8:66:84:2a:df:c0:
                    7b:51:2e:64:51:9f:97:86:be:7f:64:c0:62:96:03:
                    cb:10:e3:54:66:f2:4b:61:25:93:94:1c:2b:59:7a:
                    7f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:99:89:4C:B3:F7:E6:01:AC:A9:9F:0B:0F:15:45:DA:69:78:F1:40
            X509v3 Authority Key Identifier:
                keyid:10:CA:17:76:EF:A8:AF:35:29:2E:76:AE:2B:09:C2:34:27:C1:91:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/10CA1776EFA8AF35292E76AE2B09C23427C191A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10CA1776EFA8AF35292E76AE2B09C23427C191A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc6aa03-1b4d-438e-a9f3-efeaae6b0921/0/3130332e33312e3235302e302f32342d3234203d3e203538343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9c:4b:a2:77:11:c4:89:a3:50:7a:4e:a6:62:88:40:05:5d:4b:
         be:5a:c8:c7:cd:09:87:68:71:27:fe:d9:08:39:22:0d:b4:1a:
         19:3f:ee:f9:f1:cc:f1:32:96:c8:77:20:57:bf:1a:40:96:f1:
         bd:38:6b:91:40:83:e4:2f:e3:15:a6:6b:7e:90:5d:11:11:4c:
         11:0b:d8:bf:5d:82:67:b4:5a:54:08:95:f5:e3:b9:fb:58:68:
         60:33:3b:85:ab:51:0c:9a:6f:75:80:1b:e7:ab:9a:b7:13:76:
         5b:44:b2:ec:8b:f3:13:f0:2d:89:9b:e7:fd:12:f8:0b:df:1a:
         c9:ab:2d:08:d7:f4:cd:49:4e:be:32:e7:20:03:7a:74:3f:dd:
         6d:f5:ac:9c:24:6f:54:10:ab:e0:71:16:47:9a:ef:c7:db:f5:
         a5:ce:53:21:40:f9:c8:de:8c:70:a9:3c:75:64:56:99:e1:4d:
         54:18:16:66:dd:62:66:83:12:aa:12:c2:cb:93:de:fa:61:27:
         75:ca:46:77:fa:f6:5f:ba:49:fd:59:47:e1:4c:8c:57:8e:a8:
         64:e0:c0:f4:29:b4:23:4c:e8:83:e1:2f:f0:62:7a:30:be:9d:
         b7:6d:f5:0d:ef:00:59:6c:6c:fc:ff:93:2e:b2:b1:d9:1b:17:
         ef:0b:af:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 20:37:36 2024 by rpki-client on console-fra.rpki-client.org