Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa
File:                     3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa (raw, json)
Hash identifier:          vYSSiPVfjHBRD1DbhEq71sSwPeD8q/o4Uv0WnfeglN4=
Subject key identifier:   6E:E3:C4:CD:F3:B1:BF:4E:C6:4F:96:92:5F:11:AE:86:54:25:65:95
Certificate issuer:       /CN=580F61C23A4857BE23095E060FE36642F86DA6E8
Certificate serial:       18AA3F43E6DD0D0ADD2108B6EFABB1473CA7E3E9
Authority key identifier: 58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa
Signing time:             Sat 31 Aug 2024 18:00:02 +0000
ROA not before:           Sat 31 Aug 2024 17:55:02 +0000
ROA not after:            Sat 30 Aug 2025 18:00:02 +0000
asID:                     147087
IP address blocks:        103.173.231.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl
                          rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:3f:43:e6:dd:0d:0a:dd:21:08:b6:ef:ab:b1:47:3c:a7:e3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=580F61C23A4857BE23095E060FE36642F86DA6E8
        Validity
            Not Before: Aug 31 17:55:02 2024 GMT
            Not After : Aug 30 18:00:02 2025 GMT
        Subject: CN=6EE3C4CDF3B1BF4EC64F96925F11AE8654256595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:22:43:33:9f:47:07:6f:0b:14:23:51:b6:
                    38:c0:b4:57:08:0d:c4:f3:98:0c:5a:05:7e:fb:2c:
                    cd:fd:39:d9:27:5b:d1:b7:42:31:a7:65:0c:75:4d:
                    65:e2:bd:43:5e:c6:f1:98:dd:96:84:1a:86:30:89:
                    5c:5d:0d:ad:b3:0a:dd:03:26:67:c4:50:a9:21:e5:
                    a7:cd:76:c7:11:bd:a9:12:0d:f3:2a:f1:b1:2c:c1:
                    e3:9f:b8:7c:60:fb:36:5f:c0:b2:3d:c2:11:22:44:
                    d5:e3:e0:4b:28:2c:23:b9:bd:6d:4a:17:b8:93:a3:
                    0e:cd:54:3e:e6:63:15:2b:d9:b4:14:52:b1:ae:ec:
                    e4:b5:24:4f:18:29:15:1b:e7:d2:ec:6a:88:3a:45:
                    ab:6d:07:62:88:14:0f:89:7a:f4:0a:af:4c:c0:d2:
                    f4:4f:49:2d:7c:e6:c3:3c:d9:4e:f3:7c:17:a9:0b:
                    e1:3a:9a:63:ea:4f:fe:dd:cc:a9:fe:df:ac:56:7d:
                    01:1b:51:81:f8:da:24:9d:ca:81:f0:30:a8:2e:f2:
                    d8:b6:d0:13:8f:d9:da:59:a7:33:84:5d:f9:57:a2:
                    a2:f1:7d:c9:78:e4:e1:32:92:0a:07:b9:7e:c7:8c:
                    cf:30:de:72:c0:95:5d:d0:e5:fa:9b:62:25:44:15:
                    57:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E3:C4:CD:F3:B1:BF:4E:C6:4F:96:92:5F:11:AE:86:54:25:65:95
            X509v3 Authority Key Identifier:
                keyid:58:0F:61:C2:3A:48:57:BE:23:09:5E:06:0F:E3:66:42:F8:6D:A6:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/580F61C23A4857BE23095E060FE36642F86DA6E8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/580F61C23A4857BE23095E060FE36642F86DA6E8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d00f9cc7-4a69-4c9e-bba6-4d9abb56eff6/0/3130332e3137332e3233312e302f32342d3234203d3e20313437303837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.173.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d4:6a:3c:fc:00:93:d4:e7:95:3c:ff:0b:de:83:39:3e:e1:13:
         7c:d8:b0:8e:6e:83:8a:eb:49:6b:ff:7e:9f:92:e3:04:64:f8:
         7d:15:1a:68:03:42:aa:8c:98:2b:fe:eb:f0:0f:0e:bc:08:f6:
         7f:9e:23:d8:fd:19:ab:dc:73:6d:e8:e9:d8:d2:28:12:09:aa:
         12:9c:61:80:f7:b8:6b:c4:54:09:1b:6e:21:65:76:c3:6f:56:
         26:29:0b:72:db:d5:8b:15:77:eb:56:0e:cc:6c:f0:0b:9c:e8:
         f8:e0:60:35:65:ae:85:4a:f4:66:80:50:a8:35:92:f4:b7:dc:
         f9:ef:3f:14:ef:ba:af:0f:c7:e9:9e:04:75:88:02:de:d5:2c:
         a1:b0:6b:d3:9f:c5:26:0a:ff:69:22:a2:45:e3:be:5e:57:93:
         71:75:10:45:16:15:5e:4a:67:72:ca:52:1e:f2:62:b1:6a:4a:
         1a:54:0e:47:e7:48:35:39:b4:35:4c:29:79:22:a2:5b:56:8e:
         6d:9e:7b:f3:64:5e:d3:8d:01:9a:ae:33:20:3e:07:a5:5d:0f:
         e7:af:9e:cd:87:b2:dd:01:f8:1b:79:2b:c7:48:61:c1:ff:0b:
         63:a8:cc:77:cc:e4:cc:2f:9a:34:d9:00:1e:83:a3:fb:4a:39:
         9b:2a:ad:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 09:17:39 2024 by rpki-client on console-fra.rpki-client.org