Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa
File:                     3130332e37312e31302e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier:          iq4zdyWuYQ9zfhh7R084abIYQNuWQgzRr+n2plfHB7I=
Subject key identifier:   1C:38:AE:23:49:A8:11:62:15:BD:B5:F5:01:50:FB:88:2F:6D:A2:F2
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       3E439198E1CC415037573FB9388DE0AC2AA2119B
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa
Signing time:             Tue 14 May 2024 08:02:08 +0000
ROA not before:           Tue 14 May 2024 07:57:08 +0000
ROA not after:            Tue 13 May 2025 08:02:08 +0000
asID:                     55662
IP address blocks:        103.71.10.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl
                          rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:43:91:98:e1:cc:41:50:37:57:3f:b9:38:8d:e0:ac:2a:a2:11:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: May 14 07:57:08 2024 GMT
            Not After : May 13 08:02:08 2025 GMT
        Subject: CN=1C38AE2349A8116215BDB5F50150FB882F6DA2F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:3a:f2:8c:54:d1:06:f8:96:98:1f:98:c5:
                    88:db:7c:c9:43:ba:0c:37:48:56:6b:04:5e:4a:c9:
                    ec:12:5d:d4:3b:e9:ee:ba:cf:20:ad:32:4a:97:7a:
                    83:25:6e:3e:2a:30:73:66:11:c1:4e:fe:e3:38:b9:
                    88:fb:2c:ac:3f:b5:63:90:96:eb:45:56:6d:00:49:
                    7e:a0:4b:f0:70:ea:89:39:02:80:33:86:ec:b4:fc:
                    22:c4:da:0b:f3:b7:47:b8:60:bc:c5:cb:61:08:dc:
                    e2:ac:ea:c1:9e:90:80:14:36:79:6b:13:59:ff:77:
                    a8:62:97:eb:ac:79:bd:f8:e1:f8:13:22:5c:08:c9:
                    e8:8e:b9:74:8d:42:0a:3e:86:e1:59:c3:55:08:c2:
                    c2:9c:81:55:9a:61:88:a2:b6:ad:1e:c7:54:9c:da:
                    87:bf:81:bd:0b:6b:3a:91:1c:7e:af:b8:08:3f:f8:
                    9f:7a:bb:87:1f:04:29:f6:d0:44:7e:63:05:83:73:
                    b8:a5:4c:7f:a6:63:b8:5b:88:a9:ff:60:6e:55:d7:
                    5d:83:29:88:61:b4:bf:22:35:e8:61:7d:5b:98:60:
                    72:36:b0:f4:a3:5b:8b:62:de:5d:9c:4c:6f:5e:2a:
                    c4:82:8a:ee:26:1c:b5:e4:87:40:fe:14:1c:37:75:
                    92:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:38:AE:23:49:A8:11:62:15:BD:B5:F5:01:50:FB:88:2F:6D:A2:F2
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e31302e302f32342d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:0f:21:01:52:20:f9:a5:d2:0b:5b:89:23:a0:ca:ef:fb:09:
         2d:1c:16:27:d3:cf:3c:a6:41:cf:84:d7:73:d6:de:c3:11:85:
         6d:02:ba:6e:ec:99:32:7d:7d:7a:aa:76:f0:b3:04:4c:de:9a:
         07:5f:89:5d:07:43:1d:1b:e8:87:e8:69:f4:9c:69:c1:2f:4f:
         47:2f:63:a4:bd:c4:7d:d6:cf:ab:29:fe:5e:68:a6:6b:94:0f:
         60:69:42:5f:cc:ca:17:21:d1:d8:9f:16:1f:4c:fa:94:56:86:
         58:75:be:e6:eb:bc:4a:3d:88:15:a8:33:23:42:bc:54:49:5c:
         70:14:dd:de:11:30:81:0e:eb:06:b3:23:57:93:22:a0:15:d9:
         00:05:3a:b8:a3:2f:8d:1d:ad:ca:c8:02:ec:9c:a4:4b:54:16:
         8d:6e:75:f3:90:1a:48:b9:af:b1:16:cc:0c:1e:d5:07:ee:dc:
         9a:b0:fd:20:f8:ec:14:32:33:55:ee:a7:df:d3:19:d9:88:d9:
         58:5a:7f:9f:1b:a9:da:9f:92:f7:4f:15:12:0c:c4:e3:4f:38:
         97:7a:b4:e7:16:4f:b8:47:39:ca:fd:37:18:e0:e1:df:37:3c:
         f5:49:39:e2:1c:8c:5c:c9:28:2f:b8:c8:8e:29:63:74:9b:ae:
         d9:e3:d3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:39 2024 by rpki-client on console-fra.rpki-client.org