Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa
File:                     3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa (raw, json)
Hash identifier:          nkL+/BJ66r9ycq46IbjHs6cSITmbbcl1sX/xlDvMmSg=
Subject key identifier:   80:AB:57:89:5E:B3:02:4C:C5:83:B3:2D:F0:C7:7D:19:78:D7:25:BD
Certificate issuer:       /CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
Certificate serial:       6BF07138F9EE2CF5EA80E9CA346DD8BF18E30FB7
Authority key identifier: 22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa
Signing time:             Mon 31 Jul 2023 00:08:24 +0000
ROA not before:           Mon 31 Jul 2023 00:03:24 +0000
ROA not after:            Mon 29 Jul 2024 00:08:24 +0000
asID:                     136879
IP address blocks:        103.107.71.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl
                          rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Jun 2024 03:42:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:f0:71:38:f9:ee:2c:f5:ea:80:e9:ca:34:6d:d8:bf:18:e3:0f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2247520F1208C8D9AC33B3035016DC4EC62CDEB1
        Validity
            Not Before: Jul 31 00:03:24 2023 GMT
            Not After : Jul 29 00:08:24 2024 GMT
        Subject: CN=80AB57895EB3024CC583B32DF0C77D1978D725BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:e5:5d:4c:1f:6d:c4:a0:9b:ea:91:c9:cd:
                    d7:39:ff:e0:c5:b8:b7:36:30:89:ba:68:34:51:55:
                    6c:81:35:61:91:5d:aa:ce:9c:2b:ef:2c:a2:9c:5e:
                    39:1a:0d:ef:ba:41:8f:6c:be:96:a7:ee:aa:e6:40:
                    83:71:44:76:41:02:30:c7:fe:fb:1e:89:5f:71:3c:
                    08:2d:87:ca:fa:84:28:d3:87:7c:da:8f:92:9c:e4:
                    f1:da:df:6f:5c:0f:bf:ca:41:14:6a:c9:ab:d2:34:
                    00:92:55:43:81:12:49:75:69:34:56:16:41:a0:a2:
                    e7:a2:42:8a:2c:21:79:3a:ba:74:95:d1:34:c0:27:
                    ed:c4:11:01:16:a6:b7:58:44:dc:94:28:0e:6f:67:
                    a5:34:6c:a8:d7:08:8d:d0:0a:69:47:7a:08:2c:d1:
                    2b:9a:f7:62:1a:59:14:ec:aa:6e:95:45:cd:a4:62:
                    6a:1d:91:69:99:3d:36:f3:48:5e:1e:21:6c:f5:e8:
                    ca:bb:1d:9a:ef:f8:c5:f4:e1:0d:01:fc:f7:c3:89:
                    0c:f2:71:00:f4:b7:b9:9c:e9:15:5d:27:9a:67:da:
                    e2:b1:21:53:6a:bc:e3:a9:35:72:09:d1:fe:7c:5f:
                    2a:e9:37:bb:ab:72:76:79:cb:4a:46:2c:4c:7e:90:
                    af:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:AB:57:89:5E:B3:02:4C:C5:83:B3:2D:F0:C7:7D:19:78:D7:25:BD
            X509v3 Authority Key Identifier:
                keyid:22:47:52:0F:12:08:C8:D9:AC:33:B3:03:50:16:DC:4E:C6:2C:DE:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2247520F1208C8D9AC33B3035016DC4EC62CDEB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/addf181f-1e89-4022-82f8-e0dba859ee2e/0/3130332e3130372e37312e302f32342d3234203d3e20313336383739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ba:a3:d2:75:72:50:18:5c:2f:5b:30:78:42:a0:45:12:96:
         4f:40:b3:89:59:31:59:b7:dd:25:b8:de:dc:04:eb:3e:2c:2f:
         e2:17:c0:97:22:7d:3d:70:11:f8:f6:6b:a2:ad:73:ee:04:b7:
         ea:5e:d8:7e:e3:f7:4e:32:52:a0:2e:69:64:57:0c:fd:f1:de:
         58:4c:54:74:ac:43:c3:08:f6:e7:ba:b4:97:91:54:c2:f4:77:
         5a:88:bd:b4:fa:ba:06:9f:03:76:0e:f0:6a:9a:0d:b4:0f:2b:
         9d:c9:10:70:80:01:db:73:26:6c:53:c8:54:48:01:6b:96:71:
         26:30:a0:83:ce:7f:d7:16:95:1e:bb:f8:06:fd:22:5d:70:b5:
         71:ae:42:c7:b2:75:31:3e:83:8d:b2:af:31:1c:cc:74:36:00:
         cd:34:0c:eb:3a:e1:6b:d4:3b:fa:00:8f:d3:bb:90:6b:8c:91:
         02:d3:26:d2:0c:9f:dc:96:4f:36:12:40:64:4e:b1:7d:2f:88:
         83:b7:67:79:de:9f:ae:91:1f:8c:6e:06:c7:f7:de:c4:36:88:
         c6:f7:36:7f:49:53:6f:f6:cb:ff:09:74:87:61:13:e8:b9:85:
         e3:95:f9:d7:81:a1:d6:cf:57:ad:97:18:08:f7:41:40:f4:51:
         cc:1a:84:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 03:50:20 2024 by rpki-client on console-ams.rpki-client.org