Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa
File:                     3130332e37312e392e302f32342d3234203d3e203535363632.roa (raw, json)
Hash identifier:          7O+AvnULpeJy5aJ05kQrhljlfkV5ExWXqcP1gSPlqXU=
Subject key identifier:   BF:9D:24:31:F7:41:84:45:7B:4F:4E:67:61:31:34:B5:BC:DA:95:F6
Certificate issuer:       /CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
Certificate serial:       5B11CCCBCE5385B5B16B1F28C5D7B5A1C95187A1
Authority key identifier: 87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa
Signing time:             Tue 14 May 2024 08:02:08 +0000
ROA not before:           Tue 14 May 2024 07:57:08 +0000
ROA not after:            Tue 13 May 2025 08:02:08 +0000
asID:                     55662
IP address blocks:        103.71.9.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl
                          rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:11:cc:cb:ce:53:85:b5:b1:6b:1f:28:c5:d7:b5:a1:c9:51:87:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87CE66700720FB0B31EA1EA3295AF636C6F3B2F9
        Validity
            Not Before: May 14 07:57:08 2024 GMT
            Not After : May 13 08:02:08 2025 GMT
        Subject: CN=BF9D2431F74184457B4F4E67613134B5BCDA95F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:52:c3:17:f9:4b:68:2c:9e:ad:ec:63:b6:db:
                    41:c0:c6:1d:1d:78:7d:8c:87:fa:b9:0f:15:66:33:
                    d1:8e:21:e9:72:9b:63:2d:f1:78:6a:c4:78:36:1f:
                    44:5e:f3:fc:41:b2:46:e6:46:e2:f9:42:ba:ab:96:
                    ab:23:6a:06:d7:f6:3d:9a:47:37:a9:3d:32:4f:d3:
                    cc:22:b1:92:06:92:77:6b:9e:dc:e8:f3:dd:69:3a:
                    5e:d9:95:5a:27:5a:99:22:1b:a4:7c:dc:70:d6:d0:
                    eb:90:63:0a:85:f6:e4:88:46:76:51:44:6e:43:a0:
                    e3:f6:5e:d0:bd:29:fa:fb:87:cc:ef:a6:06:08:4b:
                    9b:eb:27:a6:42:e0:6d:00:dd:38:98:5c:0f:08:de:
                    3c:75:2b:da:5d:7a:97:fe:db:4a:d7:78:0a:aa:ce:
                    19:bc:58:a9:57:b8:04:de:ce:45:6a:9d:99:be:42:
                    f0:74:87:ec:d9:26:b9:ef:9d:21:c4:3c:b1:cb:e3:
                    8d:48:bc:05:58:ea:98:1f:67:96:8b:e7:1e:56:3b:
                    76:12:34:f8:80:cc:c6:0c:cc:34:b5:da:90:1e:7b:
                    3a:a0:88:e0:06:3b:b7:d5:d8:08:34:21:6d:90:9d:
                    9f:e1:34:f9:c5:f9:2c:cd:90:5d:5c:6a:ec:61:50:
                    1c:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:24:31:F7:41:84:45:7B:4F:4E:67:61:31:34:B5:BC:DA:95:F6
            X509v3 Authority Key Identifier:
                keyid:87:CE:66:70:07:20:FB:0B:31:EA:1E:A3:29:5A:F6:36:C6:F3:B2:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/87CE66700720FB0B31EA1EA3295AF636C6F3B2F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a496082-a0aa-4836-b587-973dd7e297af/0/3130332e37312e392e302f32342d3234203d3e203535363632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:0a:45:49:4a:22:62:c9:af:9f:94:b2:85:ca:64:ac:61:37:
         bd:f6:89:9c:68:7e:f3:73:0b:01:c3:46:88:01:f1:ed:e8:5e:
         f5:f5:d2:c0:4a:19:a7:5f:02:4c:46:be:19:36:b2:82:ef:8d:
         a4:b9:a3:a6:c3:12:f8:d4:72:88:7d:f4:c1:29:12:9b:da:f1:
         78:af:b6:14:75:f0:a5:2c:d6:60:e2:be:8b:8c:33:7b:09:09:
         fe:0a:c3:74:ac:dd:45:3e:fa:2b:ba:c7:8e:ec:07:6d:59:a8:
         1b:8f:df:71:2a:1b:0e:82:00:8d:58:b8:79:88:08:16:e4:44:
         ab:a3:cc:cb:ba:12:34:de:29:5a:07:52:78:d0:32:a5:7c:cf:
         ce:27:ab:cd:d1:de:5f:1b:92:cd:d4:25:ad:2f:02:b7:07:b1:
         36:18:99:db:25:5a:af:e3:ca:a3:fb:85:e4:61:dd:67:c6:a4:
         de:e8:d1:a9:d2:b5:4b:1a:85:d6:8a:9e:ba:dc:b6:7c:32:5a:
         f7:06:84:5c:b8:1e:d6:dd:86:8b:b8:2f:d7:35:71:98:94:cb:
         c4:3b:ea:45:7c:15:08:33:35:a4:bd:4c:09:69:a0:4d:88:22:
         da:4c:19:55:85:8c:74:59:ea:98:e3:31:e9:1a:f3:9f:c5:41:
         cc:41:40:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org