Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa
File:                     3130332e33312e34342e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier:          x0B9KXjFcWpCbgs4OQ08o1s+Zna7P1qeyR3RnLgM3tg=
Subject key identifier:   8D:26:2F:30:00:C3:D8:B5:28:A6:03:4F:6F:6B:9A:61:D0:87:CB:88
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       581CE845A70DB811756A5DAE5B6DE02209FE5FF5
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa
Signing time:             Fri 08 Sep 2023 05:01:50 +0000
ROA not before:           Fri 08 Sep 2023 04:56:50 +0000
ROA not after:            Fri 06 Sep 2024 05:01:50 +0000
asID:                     23679
IP address blocks:        103.31.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:1c:e8:45:a7:0d:b8:11:75:6a:5d:ae:5b:6d:e0:22:09:fe:5f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Sep  8 04:56:50 2023 GMT
            Not After : Sep  6 05:01:50 2024 GMT
        Subject: CN=8D262F3000C3D8B528A6034F6F6B9A61D087CB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4a:30:56:44:a1:de:e3:ca:94:78:26:c2:9e:
                    dc:a6:cb:ad:13:ef:99:d7:0f:cc:06:5a:34:dc:81:
                    01:d9:e3:41:3e:a8:cb:5a:e5:a1:a9:b5:75:eb:9e:
                    4d:e3:99:51:9f:47:38:2e:c3:66:2e:c3:d5:80:8b:
                    b2:f4:dc:70:b7:ea:b0:0b:be:4d:d7:cb:81:fb:9e:
                    09:95:48:fd:83:24:7e:72:5b:71:91:fe:35:34:11:
                    56:2d:66:75:32:b0:b5:62:89:65:eb:b5:83:58:aa:
                    3a:42:b2:65:38:55:c1:71:f9:e3:30:f8:4f:bf:3a:
                    71:f7:da:30:01:fc:91:c3:77:7b:61:0f:11:a2:09:
                    be:d4:a4:eb:b5:03:e7:3a:a8:73:33:92:44:17:be:
                    83:76:0a:0b:37:d5:8b:15:1f:fa:55:96:73:9b:10:
                    0b:ad:66:30:a4:3c:ce:5e:1b:99:d2:2a:a1:5a:4a:
                    97:8d:df:70:16:92:20:fe:61:67:3d:c6:20:10:fa:
                    57:55:f8:ae:91:97:6c:00:39:1f:6a:2d:82:51:e9:
                    3c:c8:59:b3:71:b1:61:94:ca:e0:c3:c3:2b:6c:f1:
                    93:cd:56:24:8e:79:bc:5f:cf:78:c3:68:85:da:c8:
                    ec:ee:f0:42:07:d8:46:5a:15:b8:82:be:ef:69:a7:
                    a0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:26:2F:30:00:C3:D8:B5:28:A6:03:4F:6F:6B:9A:61:D0:87:CB:88
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:37:e9:28:16:68:a3:9b:18:18:41:47:24:75:98:69:f3:b4:
         24:2a:14:20:43:93:a5:8d:f7:29:54:54:02:4e:7e:bc:1b:43:
         74:29:a4:1e:22:ac:f9:03:e1:e3:16:b0:ef:13:87:e3:1b:be:
         a2:84:06:65:07:02:dc:4c:34:09:89:5a:34:1a:05:0c:36:f8:
         8b:e3:ce:fe:f3:7d:99:54:e7:2c:28:06:40:ae:e4:8b:4f:ab:
         83:e9:2d:2c:67:f8:79:4d:39:81:f2:86:c0:cf:01:44:0b:43:
         27:2d:2d:25:5a:60:61:0a:3b:88:be:82:f6:4f:54:8f:db:aa:
         50:cc:6a:84:3f:10:c7:ac:30:f1:c6:22:73:9f:3a:81:37:0a:
         12:bb:2f:e1:2a:d8:21:c6:70:23:a5:4b:33:0a:e8:cf:70:46:
         c2:41:07:46:6e:41:86:13:b6:5d:ce:e2:b5:85:f5:56:56:2f:
         73:ab:5c:90:dc:2c:6e:2b:09:4a:9d:07:44:47:c4:db:4d:02:
         ca:5c:35:35:80:44:32:71:64:6b:d1:82:00:c3:c9:c7:9c:b0:
         71:f8:97:a6:fe:f8:ce:6f:8e:f7:98:d2:95:7c:4f:57:74:f2:
         98:c1:b1:a9:2c:ec:43:fa:7c:a9:6a:05:76:ce:d5:99:3d:ed:
         4a:9b:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 12:58:05 2024 by rpki-client on console-ams.rpki-client.org