Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa
File:                     3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa (raw, json)
Hash identifier:          YWX6JkhyJIKKQ9YUHXcRrPZ6Zd5X2q+5JRi/csbFgGQ=
Subject key identifier:   18:47:D8:74:0E:FB:6B:14:81:E1:AA:9C:10:82:9D:C2:0C:85:DF:60
Certificate issuer:       /CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E
Certificate serial:       3CF0AECDF0DAB44BE97C40B6F9720544C8C63BF9
Authority key identifier: 0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa
Signing time:             Thu 31 Oct 2024 16:00:01 +0000
ROA not before:           Thu 31 Oct 2024 15:55:01 +0000
ROA not after:            Thu 30 Oct 2025 16:00:01 +0000
asID:                     149328
IP address blocks:        103.177.255.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl
                          rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 09:02:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:f0:ae:cd:f0:da:b4:4b:e9:7c:40:b6:f9:72:05:44:c8:c6:3b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A874A4CB5F8A46DF4501B63FA5487F42800F93E
        Validity
            Not Before: Oct 31 15:55:01 2024 GMT
            Not After : Oct 30 16:00:01 2025 GMT
        Subject: CN=1847D8740EFB6B1481E1AA9C10829DC20C85DF60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fc:ee:5c:3a:05:81:3d:bd:53:17:1f:5a:8c:
                    4a:c1:03:e0:b2:bb:61:08:d2:42:76:90:ab:f8:e9:
                    52:f8:63:d5:90:34:8f:8c:eb:cc:db:40:7f:15:a8:
                    28:fe:fb:ab:11:d0:1d:b3:a0:d1:12:cc:38:5c:93:
                    e3:22:83:cb:6a:a7:14:75:c1:af:ae:47:55:50:8e:
                    af:fb:b3:c7:d4:f7:e7:2e:68:32:56:7e:1d:d8:3f:
                    7c:0d:62:0e:d1:1a:6d:3a:b8:0c:00:81:f4:73:d0:
                    80:93:ed:9a:65:d7:fb:b8:49:9d:28:43:82:ee:cc:
                    9c:ab:34:bb:2c:8f:44:6f:8f:53:e7:79:5e:53:2f:
                    0e:72:83:19:94:74:87:cd:b1:76:c4:34:2a:ef:dd:
                    a6:cd:ef:8d:ea:ba:e8:69:e4:f9:5a:ae:b8:04:78:
                    c1:0f:6f:c2:a8:4c:ec:b3:fc:e9:ea:e7:73:bf:61:
                    21:a2:be:d6:9b:df:89:84:0d:69:af:06:cc:08:20:
                    d7:58:09:09:5f:6b:da:a2:b4:80:c5:a2:1a:7f:3d:
                    6d:ca:db:13:b1:7b:a5:5f:44:ff:c4:9a:c1:78:b8:
                    bd:77:dc:5e:13:88:3c:0f:db:17:60:83:68:3b:12:
                    36:7a:24:52:82:cb:75:f9:f6:06:6f:af:59:9e:ea:
                    e4:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:47:D8:74:0E:FB:6B:14:81:E1:AA:9C:10:82:9D:C2:0C:85:DF:60
            X509v3 Authority Key Identifier:
                keyid:0A:87:4A:4C:B5:F8:A4:6D:F4:50:1B:63:FA:54:87:F4:28:00:F9:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A874A4CB5F8A46DF4501B63FA5487F42800F93E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98035b12-6ca3-4fd2-b9b3-260d573e57c2/0/3130332e3137372e3235352e302f32342d3234203d3e20313439333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.255.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:c0:62:9f:5a:98:1e:28:cd:0a:fc:71:9f:3d:a8:77:9a:18:
         cd:a4:9c:11:30:72:b5:33:ec:0f:f8:73:f7:d4:c7:17:9f:00:
         c8:b9:4d:74:3d:2a:88:25:72:96:af:0d:49:9b:a1:b3:79:9b:
         27:f0:d1:ec:04:8a:e5:d4:0b:49:06:4a:01:86:81:bd:1a:c6:
         88:b6:17:9c:14:b5:01:3b:d4:d5:10:10:8b:d7:27:e2:fa:51:
         6d:eb:03:6e:6e:d5:71:b3:11:f3:bb:e7:de:c0:a1:37:ad:d7:
         5f:9e:c3:ea:5e:a2:33:ab:83:6e:38:8b:1e:1a:1a:6c:ff:bb:
         d3:09:57:8f:08:db:92:2a:f0:bb:33:17:9d:1e:5a:63:1f:5b:
         ca:74:89:20:de:7e:40:77:12:ae:eb:2c:02:a9:0e:0f:c3:db:
         06:9f:8b:45:80:cd:34:77:44:8f:b2:3b:65:e4:9d:99:00:26:
         ea:06:e0:3d:9e:4b:a6:14:9a:14:b9:ab:eb:71:be:42:ca:5d:
         8d:66:f4:52:b3:36:d3:09:09:79:8b:46:79:63:06:5a:cf:54:
         14:36:7d:e4:2e:c9:67:84:3f:af:b9:17:70:f1:2d:7f:c4:42:
         ae:14:e5:1e:83:3e:fe:04:ad:63:da:86:84:6c:01:e9:81:42:
         57:ac:66:d9
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUPPCuzfDatEvpfEC2+XIFRMjGO/kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQy
ODAwRjkzRTAeFw0yNDEwMzExNTU1MDFaFw0yNTEwMzAxNjAwMDFaMDMxMTAvBgNV
BAMTKDE4NDdEODc0MEVGQjZCMTQ4MUUxQUE5QzEwODI5REMyMEM4NURGNjAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCf/O5cOgWBPb1TFx9ajErBA+Cy
u2EI0kJ2kKv46VL4Y9WQNI+M68zbQH8VqCj++6sR0B2zoNESzDhck+Mig8tqpxR1
wa+uR1VQjq/7s8fU9+cuaDJWfh3YP3wNYg7RGm06uAwAgfRz0ICT7Zpl1/u4SZ0o
Q4LuzJyrNLssj0Rvj1PneV5TLw5ygxmUdIfNsXbENCrv3abN743quuhp5PlarrgE
eMEPb8KoTOyz/Onq53O/YSGivtab34mEDWmvBswIINdYCQlfa9qitIDFohp/PW3K
2xOxe6VfRP/EmsF4uL133F4TiDwP2xdgg2g7EjZ6JFKCy3X59gZvr1me6uSlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUGEfYdA77axSB4aqcEIKdwgyF32AwHwYDVR0j
BBgwFoAUCodKTLX4pG30UBtj+lSH9CgA+T4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
ODAzNWIxMi02Y2EzLTRmZDItYjliMy0yNjBkNTczZTU3YzIvMC8wQTg3NEE0Q0I1
RjhBNDZERjQ1MDFCNjNGQTU0ODdGNDI4MDBGOTNFLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEE4NzRBNENCNUY4QTQ2REY0NTAxQjYzRkE1NDg3RjQyODAw
RjkzRS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzk4MDM1YjEyLTZjYTMtNGZkMi1i
OWIzLTI2MGQ1NzNlNTdjMi8wLzMxMzAzMzJlMzEzNzM3MmUzMjM1MzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzkzMzMyMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnsf8wDQYJ
KoZIhvcNAQELBQADggEBAB7AYp9amB4ozQr8cZ89qHeaGM2knBEwcrUz7A/4c/fU
xxefAMi5TXQ9KoglcpavDUmbobN5myfw0ewEiuXUC0kGSgGGgb0axoi2F5wUtQE7
1NUQEIvXJ+L6UW3rA25u1XGzEfO7597AoTet11+ew+peojOrg244ix4aGmz/u9MJ
V48I25Iq8LszF50eWmMfW8p0iSDefkB3Eq7rLAKpDg/D2wafi0WAzTR3RI+yO2Xk
nZkAJuoG4D2eS6YUmhS5q+txvkLKXY1m9FKzNtMJCXmLRnljBlrPVBQ2feQuyWeE
P6+5F3DxLX/EQq4U5R6DPv4ErWPahoRsAemBQlesZtk=
-----END CERTIFICATE-----
Generated at Mon Nov 25 07:18:15 2024 by rpki-client on console-ams.rpki-client.org