Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e332e35382e302f32342d3234203d3e20313335343737.roa
File:                     3130332e332e35382e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          BrYtifMnKnRRiHxJbZJmvvBOsJOs2dpAKTUH37CnH1c=
Subject key identifier:   17:01:73:C6:BA:85:C0:AF:C9:25:C5:14:CC:E8:C3:0E:69:F5:D0:EE
Certificate issuer:       /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial:       66F8DE1703E0A12067CDDC9B923F04A7B96A5049
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e332e35382e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 24 Oct 2024 08:01:18 +0000
ROA not before:           Thu 24 Oct 2024 07:56:18 +0000
ROA not after:            Thu 23 Oct 2025 08:01:18 +0000
asID:                     135477
IP address blocks:        103.3.58.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl
                          rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 21:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:f8:de:17:03:e0:a1:20:67:cd:dc:9b:92:3f:04:a7:b9:6a:50:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Validity
            Not Before: Oct 24 07:56:18 2024 GMT
            Not After : Oct 23 08:01:18 2025 GMT
        Subject: CN=170173C6BA85C0AFC925C514CCE8C30E69F5D0EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:60:2b:de:23:c8:2d:7b:88:06:22:07:76:4e:
                    cd:df:76:39:7f:7c:67:93:12:43:54:34:cd:73:cd:
                    9a:66:53:8f:60:35:c9:49:b3:28:b7:2d:fa:0f:ce:
                    16:aa:1c:51:7f:79:61:92:6f:2e:c5:f0:94:e1:0f:
                    1a:29:d9:b6:0a:84:49:de:1a:dc:ef:24:ff:62:8f:
                    83:ff:d9:03:ba:74:f8:f3:07:a1:a8:45:88:b8:99:
                    a5:8c:c5:ca:dc:fe:83:22:e9:ae:4e:bd:c8:d0:b1:
                    ad:ae:88:59:87:99:8d:18:4f:1f:a3:6d:d4:12:43:
                    af:dc:b7:89:4a:78:18:38:1f:57:e1:bb:c9:4d:3c:
                    76:55:5b:70:bb:ea:96:71:86:79:5a:25:0c:96:13:
                    ae:1b:c7:a7:9b:23:ff:ac:69:d0:30:af:e3:8c:8f:
                    b3:f4:86:a0:d6:76:f0:2b:3d:03:ad:ed:c9:37:83:
                    b3:9c:30:21:a6:4c:7a:1e:ed:c1:53:a5:81:eb:a5:
                    80:11:b2:94:87:57:2b:df:99:d1:cd:7e:1d:66:9d:
                    5b:65:c7:92:67:b3:a1:91:ca:ce:eb:d5:48:72:ac:
                    a2:75:98:26:a3:58:16:87:59:4c:53:7a:9c:55:dd:
                    ea:ae:10:1e:cf:b0:8d:58:22:59:f6:51:01:0d:b0:
                    f0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:01:73:C6:BA:85:C0:AF:C9:25:C5:14:CC:E8:C3:0E:69:F5:D0:EE
            X509v3 Authority Key Identifier:
                keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3130332e332e35382e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.3.58.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:b6:32:ed:e9:a6:d4:b8:59:6d:30:c7:a4:6a:21:9b:0b:c4:
         da:ff:28:a5:93:6a:4d:b8:97:b2:0f:a0:8b:bf:2c:60:2b:7a:
         d1:46:c4:f1:cb:02:54:b1:f6:41:38:b1:7b:91:ee:f6:a0:78:
         b1:06:1b:97:c6:62:43:65:22:5e:aa:5c:19:5c:3f:34:6a:84:
         08:84:04:32:37:a4:1f:37:ce:04:90:a0:dc:cd:9f:21:1c:fd:
         6a:27:42:64:f8:34:f4:7c:39:ad:0e:2d:c1:47:d1:37:01:31:
         8e:a8:6b:5c:61:30:42:84:88:d2:b7:f9:8c:55:94:5b:99:74:
         5e:c8:93:30:d3:4c:73:6a:e0:8c:b6:1e:47:ae:cc:23:2b:a2:
         df:85:c6:ea:c2:92:d1:6b:b5:47:7f:ba:c1:77:5c:b3:2d:ac:
         1d:34:fd:5b:55:06:31:1a:5c:10:f3:d5:5d:5e:06:07:ed:80:
         88:81:94:0f:8a:87:49:fe:68:2a:e0:a1:47:72:64:de:4c:34:
         65:32:80:e9:a0:a5:f3:61:4d:31:21:15:97:25:26:14:db:9f:
         0e:79:be:70:53:91:9b:f2:29:2a:e8:5a:57:95:56:9a:1b:25:
         89:53:41:8c:d2:16:2d:de:73:75:72:3d:2e:5d:b2:21:3f:4e:
         89:9f:d4:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:43 2024 by rpki-client on console-ams.rpki-client.org