Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
File:                     3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa (raw, json)
Hash identifier:          lVEj7yVRgPAOnA7GTJazM1LkRb/e2JCSnpV+CcugS70=
Subject key identifier:   E1:65:60:07:80:02:AB:4B:BA:B5:E2:6C:E2:CC:58:2D:E3:42:07:26
Certificate issuer:       /CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
Certificate serial:       7770D757829DDA36920D120961D7B61099A767E0
Authority key identifier: D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa
Signing time:             Mon 01 Jul 2024 01:04:20 +0000
ROA not before:           Mon 01 Jul 2024 00:59:20 +0000
ROA not after:            Mon 30 Jun 2025 01:04:20 +0000
asID:                     136088
IP address blocks:        103.87.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl
                          rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:70:d7:57:82:9d:da:36:92:0d:12:09:61:d7:b6:10:99:a7:67:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F
        Validity
            Not Before: Jul  1 00:59:20 2024 GMT
            Not After : Jun 30 01:04:20 2025 GMT
        Subject: CN=E16560078002AB4BBAB5E26CE2CC582DE3420726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f5:a9:47:b8:92:ee:0f:3f:e7:d4:41:f2:2d:
                    4b:85:2b:f2:7d:a2:22:51:ac:b1:73:07:1a:bf:b8:
                    21:96:94:f2:ec:0c:c3:19:2e:9e:98:f9:69:71:39:
                    07:c9:36:02:af:d9:73:0b:bf:1e:9c:4d:d2:db:d6:
                    ee:9c:29:a1:03:30:7f:30:6c:40:e4:09:1c:22:66:
                    e0:d4:5f:54:45:79:a4:94:33:a6:a4:00:d3:59:c7:
                    48:db:12:88:1f:94:56:3b:4a:96:a2:6e:ae:93:c6:
                    21:e7:b5:bf:b4:f3:33:ba:ee:b7:ff:9c:f4:48:74:
                    8f:32:d3:d7:3e:5b:96:e8:bd:49:77:49:37:9a:9c:
                    a0:47:05:52:2c:3a:ed:72:bf:ac:ff:21:31:d8:88:
                    89:91:d0:98:7b:b9:5d:ea:43:f6:5e:1f:3c:bc:1a:
                    53:a8:ac:35:b4:6a:d4:df:df:e2:f0:c1:a7:b4:65:
                    26:25:7a:6e:7b:ed:4b:ca:07:5b:ef:58:2e:70:4d:
                    28:75:20:4c:74:29:7d:66:ff:ce:a4:73:6d:24:63:
                    90:89:72:72:df:57:15:1d:dd:05:81:aa:9c:2d:18:
                    db:ad:8f:16:c6:d5:8f:9e:d6:48:03:de:0c:0a:01:
                    5d:d0:e5:0f:92:a7:01:17:98:58:eb:91:f0:45:f3:
                    a3:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:65:60:07:80:02:AB:4B:BA:B5:E2:6C:E2:CC:58:2D:E3:42:07:26
            X509v3 Authority Key Identifier:
                keyid:D3:FB:61:D7:46:A4:47:67:D4:51:8D:6E:9F:D1:FB:D8:D0:BE:92:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3FB61D746A44767D4518D6E9FD1FBD8D0BE923F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f4ec1c-9535-4cbf-9c7a-fd32c830edba/0/3130332e38372e3233302e302f32342d3234203d3e20313336303838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.87.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:49:86:6f:25:cf:0e:3c:fd:a0:c5:be:36:34:9b:e9:ff:02:
         79:b4:a1:f9:9f:08:38:fa:0b:c7:fe:17:df:30:75:6b:b5:75:
         53:ba:25:d9:94:8f:43:98:e4:63:78:88:6e:4f:9b:f1:2e:1c:
         81:90:ee:8f:fd:d8:da:70:cf:4d:ae:62:c4:40:32:de:ae:72:
         8a:07:5c:31:69:79:0a:e9:d2:0a:3a:f8:4d:1a:03:3d:4c:c0:
         c3:c4:41:99:d2:51:c8:d8:f7:63:97:29:b8:e5:69:2f:62:72:
         55:35:a2:73:c8:a4:d6:7c:fb:e6:de:b0:34:0f:22:c4:27:0b:
         41:d3:ea:02:ee:ac:b2:f0:54:9c:6d:89:e5:29:b3:9c:7b:ab:
         cf:4f:01:27:aa:ff:ee:d3:92:6d:2b:fe:5c:66:d2:59:10:a2:
         2e:3e:ff:9d:ce:f6:ef:90:85:c1:28:4f:6d:e0:7a:59:35:cf:
         f6:67:f4:88:6f:57:e7:6b:72:b2:b3:66:cd:d2:bc:95:07:8b:
         e4:50:1a:6f:32:a4:c6:0a:e7:05:95:32:21:df:4f:6a:e6:38:
         be:e8:84:1d:b8:74:3a:30:41:54:71:f9:04:13:4a:2c:7b:80:
         8e:83:88:61:92:89:a4:ff:a8:0d:44:f2:85:a5:7a:ea:43:03:
         eb:35:87:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org