Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa
File:                     3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier:          qgfha00pYYMcksaq2+JUhPWSf25KpZIfyFc9lsfpKQo=
Subject key identifier:   41:FC:A1:DE:77:F0:5E:D9:CD:3D:60:18:68:FA:85:C3:9F:2C:0B:5B
Certificate issuer:       /CN=580F61C23A4857BE23095E060FE36642F86DA6E8
Certificate serial:       300963941A3CDF02E2D30AE247D7C46FEE57B0D6
Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa
Signing time:             Sat 31 Aug 2024 18:00:01 +0000
ROA not before:           Sat 31 Aug 2024 17:55:01 +0000
ROA not after:            Sat 30 Aug 2025 18:00:01 +0000
asID:                     147087
IP address blocks:        103.173.230.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl
                          rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:09:63:94:1a:3c:df:02:e2:d3:0a:e2:47:d7:c4:6f:ee:57:b0:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8
        Validity
            Not Before: Aug 31 17:55:01 2024 GMT
            Not After : Aug 30 18:00:01 2025 GMT
        Subject: CN=41FCA1DE77F05ED9CD3D601868FA85C39F2C0B5B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5c:94:fc:e3:79:27:e7:40:b5:0d:ad:d9:07:
                    ea:ff:31:3a:d4:39:51:b8:11:97:99:33:75:5a:51:
                    51:33:47:7a:19:f2:ec:88:ef:14:49:b1:f6:dd:de:
                    e8:3e:c3:ef:3c:1d:83:55:87:aa:0a:62:19:ce:65:
                    72:bb:73:b2:cd:44:43:44:03:66:e4:a2:19:31:c9:
                    60:e0:17:4c:8a:85:57:b2:6e:91:f0:91:f1:c3:3f:
                    73:56:e4:9b:87:07:0e:33:a9:dd:b0:e0:78:9d:25:
                    27:6e:ad:20:37:e6:c4:74:c2:87:5a:e2:f8:27:e2:
                    f5:19:ed:97:41:94:25:04:a7:e2:2f:c2:d4:61:75:
                    91:79:91:5f:db:8f:1c:a7:55:77:7c:64:13:3e:f2:
                    65:cb:26:53:d8:4f:91:fe:0c:94:65:98:cc:6b:16:
                    9d:94:6f:38:85:32:9a:44:ef:6d:50:d5:07:58:56:
                    d1:89:b8:c9:a3:24:ce:58:ea:9e:76:67:96:c5:97:
                    6e:b9:c6:6f:e8:88:94:54:24:45:29:4e:7d:c2:6a:
                    fa:07:d2:7f:5b:6c:fd:79:14:41:0f:08:78:23:d4:
                    0d:13:a5:95:bf:37:9f:e7:a9:69:d0:30:ed:31:a8:
                    cc:68:c2:3c:f6:9e:e5:09:0f:5d:9b:22:d5:d7:88:
                    4e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:FC:A1:DE:77:F0:5E:D9:CD:3D:60:18:68:FA:85:C3:9F:2C:0B:5B
            X509v3 Authority Key Identifier:
                keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233302e302f32342d3234203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b3:7c:1a:45:c3:c1:a2:f9:75:38:8c:81:af:23:a2:1b:75:6a:
         13:68:92:82:d8:46:68:36:62:37:b3:c6:d0:9d:16:30:03:2f:
         4d:a9:9f:ab:d4:34:af:64:7c:31:7a:62:02:3e:c8:8c:94:33:
         1e:63:bd:82:f3:7a:9c:43:d2:60:72:35:b6:16:e0:7c:64:d1:
         2e:79:bc:16:40:e1:d3:32:ac:ed:d7:af:34:a1:fc:90:bb:0d:
         32:a0:72:7c:bc:67:16:63:3b:ab:56:08:d7:bd:9a:22:64:1b:
         74:56:33:29:da:08:b6:44:c9:89:84:0d:7c:db:1d:80:b4:f6:
         6c:11:d4:0e:0c:bb:f9:d5:fe:ef:73:48:34:32:7c:57:37:52:
         99:09:1c:aa:d5:70:1f:d1:0a:1b:45:d8:fe:2e:6c:81:da:1c:
         93:5c:92:0e:05:04:11:14:86:c4:b8:da:6b:ca:76:a2:68:fd:
         a4:54:2e:1b:53:cb:14:9e:38:61:95:4f:7f:87:8b:05:79:79:
         6d:01:22:55:25:13:1e:b3:49:11:a2:50:62:84:74:2d:81:5c:
         75:f4:4f:df:55:21:b7:c0:57:49:e9:2f:91:f7:c5:7f:e0:c6:
         cc:9b:2f:fa:ff:8c:4c:52:2d:b6:90:54:c7:98:7b:d5:52:53:
         69:48:c8:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:07:22 2024 by rpki-client on console-ams.rpki-client.org