Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
File:                     3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa (raw, json)
Hash identifier:          +fTWVnisU5zfSXuSkSvhcxLgx8Nk43l9WO2KO9RbJbk=
Subject key identifier:   87:0C:8B:DC:3E:05:99:18:87:75:C8:93:EE:5F:BA:28:2F:FC:CE:FC
Certificate issuer:       /CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
Certificate serial:       768F95BE274D25BAEF39386D886D267C109AD8FD
Authority key identifier: 40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa
Signing time:             Thu 24 Aug 2023 09:00:01 +0000
ROA not before:           Thu 24 Aug 2023 08:55:01 +0000
ROA not after:            Thu 22 Aug 2024 09:00:01 +0000
asID:                     141674
IP address blocks:        103.177.107.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl
                          rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:8f:95:be:27:4d:25:ba:ef:39:38:6d:88:6d:26:7c:10:9a:d8:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40C0553C9097EC4A4F23EEDC05205BC5470B41F3
        Validity
            Not Before: Aug 24 08:55:01 2023 GMT
            Not After : Aug 22 09:00:01 2024 GMT
        Subject: CN=870C8BDC3E0599188775C893EE5FBA282FFCCEFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c0:d1:df:1f:93:a8:19:c4:9a:02:61:ae:7e:
                    e2:b2:a0:9a:e9:90:d3:61:b9:ec:e5:fe:08:18:77:
                    b8:14:32:23:24:f8:da:70:3b:0e:25:cf:fc:5b:d1:
                    0e:b1:c1:8c:df:70:06:d6:2e:b2:f0:78:77:26:30:
                    dd:23:21:e5:61:90:53:0d:e4:cc:34:b8:20:50:71:
                    f7:bb:2e:90:aa:e2:9a:61:00:29:ef:a1:35:dd:82:
                    bd:94:ab:be:40:d2:f3:c3:ba:68:67:a7:1b:f0:36:
                    55:68:db:5b:4a:52:25:5d:24:fe:d7:bd:a9:5f:e0:
                    20:12:fc:9a:7c:33:22:a7:be:c1:e3:46:da:56:de:
                    f8:ba:0c:b2:76:75:10:cf:c1:c4:1b:f7:3f:aa:6f:
                    f4:03:dd:4d:a0:7e:7b:27:c1:4f:97:f8:3a:2f:d5:
                    c2:9c:4b:55:2e:70:08:7c:61:e3:71:65:26:a2:5e:
                    6f:e3:00:24:16:e1:f7:09:73:72:8c:4b:41:39:65:
                    6d:24:f4:0b:e7:b0:e1:0e:2c:0f:8f:a0:72:90:bc:
                    46:b2:e8:ff:32:27:77:4c:86:75:f5:28:39:29:7b:
                    54:ee:a0:7b:41:3c:01:48:28:76:e6:c2:d4:9c:ae:
                    8c:10:f0:5a:f6:03:97:32:30:10:49:1c:53:03:32:
                    c2:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:0C:8B:DC:3E:05:99:18:87:75:C8:93:EE:5F:BA:28:2F:FC:CE:FC
            X509v3 Authority Key Identifier:
                keyid:40:C0:55:3C:90:97:EC:4A:4F:23:EE:DC:05:20:5B:C5:47:0B:41:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40C0553C9097EC4A4F23EEDC05205BC5470B41F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14cc69e9-ef74-4b81-91f4-7bfdf93f7baa/0/3130332e3137372e3130372e302f32342d3234203d3e20313431363734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:a5:5f:26:bc:75:db:91:70:13:b3:65:be:19:0b:40:39:a3:
         7e:3f:7b:9d:69:4e:37:b0:dd:17:02:57:d5:0b:22:11:c7:79:
         0b:e3:3f:ad:45:1f:89:cc:fb:54:8d:e8:43:a0:c7:c8:e5:5d:
         9d:2b:f9:44:7e:1d:96:50:00:26:75:d2:58:1f:cd:82:2a:41:
         56:3a:fc:bc:d5:55:43:67:d0:63:be:97:db:85:14:66:f9:8a:
         32:d3:b3:85:d7:da:5b:43:22:d4:a3:48:0b:66:f9:27:96:67:
         94:5e:5c:54:bc:40:f0:73:03:c0:2e:0a:83:a2:f1:f2:f8:aa:
         dc:bd:ec:ae:e9:12:52:b3:20:86:7c:d3:42:b8:10:17:63:7b:
         e5:30:70:ff:c9:11:b1:35:8b:a2:69:1f:d7:35:ec:74:c6:90:
         7e:e4:1a:a7:d6:ea:fc:23:c7:57:26:7f:0f:1e:40:31:a8:ec:
         90:e8:f0:f1:bb:af:40:f0:60:9d:85:98:68:71:11:e1:be:1e:
         a7:0a:59:3d:c6:5b:9f:9c:1f:97:2d:b3:82:56:61:5f:b2:93:
         65:85:05:88:96:ec:44:f0:06:ea:f9:bb:1b:08:0f:02:cc:b3:
         e7:8f:a8:a7:3b:87:38:20:ca:e9:8d:1d:71:e4:d6:db:1e:f4:
         c5:1a:a4:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:32:08 2024 by rpki-client on console-ams.rpki-client.org