Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
File:                     3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa (raw, json)
Hash identifier:          Ln5Z8ccUeGrlnQ20DfbZRqINCn2+komW7fJKFCt/jbE=
Subject key identifier:   06:96:7F:2E:D6:6F:F0:3C:45:0D:1B:1A:4A:2A:02:A7:EA:69:05:81
Certificate issuer:       /CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4
Certificate serial:       54F0BE285CA68E4184B91D6E2C50C4A0CECC66F0
Authority key identifier: 8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa
Signing time:             Wed 28 Aug 2024 07:00:00 +0000
ROA not before:           Wed 28 Aug 2024 06:55:00 +0000
ROA not after:            Wed 27 Aug 2025 07:00:00 +0000
asID:                     147077
IP address blocks:        103.172.30.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl
                          rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:f0:be:28:5c:a6:8e:41:84:b9:1d:6e:2c:50:c4:a0:ce:cc:66:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DC2ED0870A005152606E2E6BEB6B6C78A522AF4
        Validity
            Not Before: Aug 28 06:55:00 2024 GMT
            Not After : Aug 27 07:00:00 2025 GMT
        Subject: CN=06967F2ED66FF03C450D1B1A4A2A02A7EA690581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:06:2c:70:69:1c:9a:83:11:42:5e:aa:47:
                    c0:27:34:3d:87:51:20:90:11:0a:72:70:0c:a8:8f:
                    88:23:59:49:db:97:1f:73:28:2e:d2:8c:d7:1e:0b:
                    d5:c9:fc:6c:96:6e:d1:e8:57:9b:1c:ca:2e:4b:f3:
                    d5:0a:d7:f5:86:bf:9e:a5:54:c4:05:6c:d8:39:99:
                    81:02:30:e8:c6:cb:27:74:42:5d:ec:b7:1a:fc:6a:
                    25:7b:c2:c9:46:2e:88:ee:17:66:cb:60:c2:ed:7b:
                    c5:cf:8c:4a:ac:9e:c6:50:5c:15:77:69:42:25:d1:
                    d8:70:18:d9:7b:e0:8d:0f:0e:89:2f:ad:c3:7e:ee:
                    d3:48:34:49:ff:93:63:d1:72:84:20:0e:54:44:0f:
                    2d:b3:c1:0c:3c:f4:9e:e0:be:67:bc:6a:84:56:e4:
                    0b:b3:a2:8c:a0:9d:f2:b6:76:1e:af:91:04:db:7f:
                    17:1c:8b:0f:08:a6:9f:e4:10:df:2f:93:c9:2d:b1:
                    c4:7f:c8:17:4c:0d:87:2b:7f:cc:d9:a7:37:99:ac:
                    70:a1:4c:2a:5f:94:e2:48:c6:9a:e1:34:9e:98:1b:
                    7c:2f:df:de:19:01:bc:1d:2e:21:9e:86:02:70:59:
                    0f:e1:c8:0e:7b:22:9f:58:be:34:d8:32:4c:ce:00:
                    f9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:96:7F:2E:D6:6F:F0:3C:45:0D:1B:1A:4A:2A:02:A7:EA:69:05:81
            X509v3 Authority Key Identifier:
                keyid:8D:C2:ED:08:70:A0:05:15:26:06:E2:E6:BE:B6:B6:C7:8A:52:2A:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DC2ED0870A005152606E2E6BEB6B6C78A522AF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8919b80d-4693-4095-a9e3-412e12828ff2/0/3130332e3137322e33302e302f32342d3234203d3e20313437303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:a1:4a:c9:ee:86:eb:cf:a6:16:96:3c:87:7d:df:77:9d:5d:
         66:37:32:69:a5:66:d4:99:42:4f:74:c4:85:45:ed:bf:20:11:
         62:58:6d:9f:94:ae:c6:b2:69:0b:b1:48:20:c7:c5:24:2e:e9:
         0e:9f:91:f9:73:a7:20:27:c0:9f:39:df:ed:15:2e:9c:09:b2:
         dc:96:0e:d0:dd:4d:af:82:fa:8e:26:16:29:ba:c2:53:b3:57:
         e1:ec:66:cb:1c:7a:1b:ff:f7:12:1b:4b:c2:04:44:68:fe:82:
         5a:e9:61:60:95:82:6c:b0:1b:e5:65:3b:58:af:d9:ef:6d:16:
         fb:4f:49:9a:6e:a5:7a:f4:94:68:97:f1:3c:90:2e:36:c0:cc:
         cd:2d:37:56:c2:01:7c:49:96:77:08:67:82:f5:90:19:05:cc:
         24:d3:2e:0b:2e:a5:45:f9:4c:43:d9:1d:66:5b:c9:e7:e1:a2:
         d4:48:0e:86:99:6b:3a:a5:49:09:07:e3:ba:ba:95:ee:ae:f6:
         f7:fd:e0:76:ab:df:7b:a6:69:e5:8c:9b:76:1d:4d:47:12:74:
         8c:2f:46:68:a5:e9:c0:a3:e7:6c:98:b3:d5:3e:dd:8c:34:fb:
         aa:53:95:49:e3:fb:01:6b:22:c8:fc:44:bf:8b:8a:3d:ec:c9:
         64:35:e9:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 08:01:26 2024 by rpki-client on console-fra.rpki-client.org