Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier:          recVvKDf/IQz7LjQvEukzcw15BxDZFe45XowFDusAg4=
Subject key identifier:   4A:99:BA:D3:5D:CF:0E:2C:26:0D:DF:B1:28:9C:36:FC:55:DF:31:F9
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       3603FF8CFD972BFBFC1AB94BD5E5AC2888606942
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:02 +0000
ROA not before:           Sun 30 Jul 2023 23:58:02 +0000
ROA not after:            Mon 29 Jul 2024 00:03:02 +0000
asID:                     131749
IP address blocks:        103.31.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:03:ff:8c:fd:97:2b:fb:fc:1a:b9:4b:d5:e5:ac:28:88:60:69:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:02 2023 GMT
            Not After : Jul 29 00:03:02 2024 GMT
        Subject: CN=4A99BAD35DCF0E2C260DDFB1289C36FC55DF31F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c6:58:e8:e5:67:fb:61:b3:db:13:05:d0:7f:
                    88:97:4c:5b:62:38:ef:80:5c:4c:d3:3c:fc:79:24:
                    3c:5d:51:66:fe:ca:dd:fd:92:08:bc:a0:d8:40:ce:
                    62:b3:eb:fe:73:5a:a6:69:b0:87:fc:62:b8:04:e5:
                    01:af:7e:72:65:da:d8:11:ee:d2:3d:36:4c:b8:88:
                    27:89:ef:9b:98:17:e2:a2:59:29:cf:84:93:52:66:
                    53:2c:a0:9d:75:08:ef:a5:cf:ac:45:e4:83:4e:00:
                    a3:b8:e2:61:b6:cd:de:51:a7:bf:2f:15:48:71:2c:
                    35:74:ff:4b:5e:39:4d:d6:2a:10:09:b7:2e:e4:26:
                    32:56:02:fc:37:57:79:24:9b:db:7d:70:ed:d6:49:
                    3e:45:44:e0:2e:87:99:b5:b0:54:4a:e5:16:fa:79:
                    b5:3c:9c:c4:88:02:30:f2:c2:c7:1f:09:f2:c9:47:
                    2f:0d:d8:19:7f:4e:9c:a2:fe:b5:ef:cc:db:82:72:
                    0c:89:60:3b:f4:de:39:4a:84:d8:7c:d9:9f:71:1e:
                    e6:21:bb:48:be:f4:42:52:8f:9e:36:7e:2f:87:82:
                    98:f2:b7:09:e6:4c:53:87:a2:31:1b:65:da:c6:d2:
                    a6:6c:7c:a0:b4:88:ed:d6:a5:b6:2d:70:8d:47:c1:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:99:BA:D3:5D:CF:0E:2C:26:0D:DF:B1:28:9C:36:FC:55:DF:31:F9
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:7e:e3:55:a1:d5:a5:6f:cf:a6:bc:c2:10:1d:7a:0d:9b:
         38:2d:0d:96:f4:30:07:e8:99:af:40:8c:f7:0b:5b:c1:bc:04:
         4d:db:27:cc:33:fb:17:87:32:8f:f7:fc:30:11:68:a9:38:d9:
         73:41:f0:8d:17:3f:f2:a3:b8:10:15:ac:fd:1a:c8:5e:10:a0:
         78:f9:48:8f:d3:da:d6:9b:29:91:22:0b:eb:d1:d7:f7:26:e0:
         96:5c:9d:44:c9:35:4d:f7:c2:7b:47:18:1e:d5:6a:9a:80:a0:
         e1:14:18:e2:82:0f:f1:c9:73:6b:ab:16:07:33:42:11:fc:9e:
         3b:5e:13:58:c2:68:9d:30:5f:62:98:20:0a:35:e4:bd:a2:a7:
         c4:b1:ba:fa:18:bb:f3:a0:02:a2:f9:eb:0a:6f:88:dc:04:df:
         dc:ac:43:42:0e:45:25:49:c6:c3:24:df:21:cb:76:ae:ff:a5:
         fb:7f:85:91:94:dc:fc:6b:42:c3:85:ab:60:a0:f1:f4:08:b9:
         d0:9a:5f:d9:7c:f9:3d:8a:1a:91:83:43:b5:7d:a8:46:0b:54:
         82:9f:1c:e6:d5:a9:45:26:6a:c4:9c:70:c2:6d:b8:1a:89:a9:
         c9:17:52:a9:1f:7e:1b:c7:58:95:13:cb:9e:f8:a2:ec:8f:f6:
         98:bc:39:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:08:03 2024 by rpki-client on console-fra.rpki-client.org