Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa (raw, json)
Hash identifier:          on6NmTLt0hyb59bhLv5loqW3SFDFGns5PC0v82xOVaw=
Subject key identifier:   BF:60:03:2B:6C:2C:AF:F4:32:83:78:BB:1D:29:88:74:F0:77:D5:EB
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       0561811AF491A836CF5317B2BBC3DA6BFC39A5A6
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:04 +0000
ROA not before:           Sun 30 Jul 2023 23:58:04 +0000
ROA not after:            Mon 29 Jul 2024 00:03:04 +0000
asID:                     131749
IP address blocks:        103.31.132.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 10:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:61:81:1a:f4:91:a8:36:cf:53:17:b2:bb:c3:da:6b:fc:39:a5:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:04 2023 GMT
            Not After : Jul 29 00:03:04 2024 GMT
        Subject: CN=BF60032B6C2CAFF4328378BB1D298874F077D5EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:ca:1f:8d:4a:cd:b0:35:72:bd:f0:24:23:
                    7b:cc:ba:44:aa:b0:98:25:5e:3d:fc:f0:63:92:02:
                    5c:2d:d8:85:6c:b0:05:f3:8c:45:a9:56:81:9c:3e:
                    77:f2:d9:8e:d7:88:c2:49:63:d7:6f:40:b1:9c:2b:
                    b1:4c:e6:9e:3d:43:20:eb:c7:90:58:1b:06:77:cb:
                    47:66:77:a2:87:41:84:23:f3:0e:c5:cf:27:9b:d8:
                    6e:ee:f1:58:2c:77:ed:cd:60:89:6e:24:12:81:b9:
                    d8:c1:5e:f6:69:4d:46:da:54:9a:f5:13:91:34:c8:
                    27:5b:0d:36:e7:c2:51:75:9b:e0:6e:12:38:e3:f8:
                    70:8c:39:f1:0e:3b:86:7e:9a:f6:4e:6e:46:dc:45:
                    f7:f8:cd:2b:2f:8c:e6:e2:37:76:75:5e:ef:c0:17:
                    02:82:76:12:f8:d8:ef:4c:7c:20:1e:19:9d:05:b6:
                    0f:f4:8c:48:5a:0b:a5:a1:21:83:02:7c:87:1f:d7:
                    e6:c9:7f:dc:ce:f4:73:e3:61:1b:95:f0:91:d4:3a:
                    0e:d0:bc:d7:03:46:16:54:44:f4:60:d0:a5:c2:06:
                    85:94:a2:c9:7c:94:12:f0:83:40:bc:d0:62:2c:26:
                    21:df:bd:78:9c:a1:6f:91:65:a3:d4:d4:2a:27:15:
                    45:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:60:03:2B:6C:2C:AF:F4:32:83:78:BB:1D:29:88:74:F0:77:D5:EB
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32322d3232203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/22

    Signature Algorithm: sha256WithRSAEncryption
         24:30:35:cc:4a:bd:01:fe:fe:20:3e:c5:0e:26:ee:42:e1:68:
         c3:5c:f2:cf:ca:53:fe:1e:40:1f:67:c0:f5:50:55:23:9a:0c:
         ef:d7:ae:59:1c:59:a4:ae:c4:5d:6e:ed:34:ad:4c:ec:b4:f4:
         33:ba:09:b4:0a:34:30:c3:66:d2:11:1e:f9:78:81:1b:05:39:
         20:27:ae:e8:62:3c:0e:86:f9:be:f9:dc:f1:b1:9c:ac:e0:4a:
         a6:f2:be:8a:54:2b:f8:68:b3:2d:cb:ff:50:ed:38:67:ba:b2:
         bc:52:87:a3:0a:64:34:fe:a3:3e:64:00:4c:30:0b:dd:dd:87:
         c9:a3:d5:a8:19:7d:a4:03:11:e8:af:7a:fd:98:64:ca:59:c1:
         a5:54:c8:80:69:03:cd:36:a7:25:ba:67:8b:5f:75:fa:04:2d:
         c1:18:a1:a9:08:b0:33:e7:b3:e1:0b:d3:8a:a7:3e:9e:2f:4c:
         87:9b:3c:fb:5c:81:8a:d9:6f:33:2e:5e:11:22:19:18:71:0c:
         ab:3a:8e:bd:01:99:18:68:2f:d8:83:7d:63:3c:5a:81:7e:9e:
         86:60:55:3f:03:51:98:ec:06:fc:32:cb:ba:a2:16:39:7d:74:
         df:25:2b:9f:ae:f2:ae:f7:22:04:9c:67:66:ef:30:3b:a8:6c:
         55:6d:c4:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 13:13:45 2024 by rpki-client on console-ams.rpki-client.org