Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa (raw, json)
Hash identifier:          mXhe1SOPGOjEujpFn4WYPdptH8833mG6Jmm9Pncq37c=
Subject key identifier:   1A:2E:1D:90:50:EA:AF:FE:B4:7A:9B:70:C6:B1:97:C5:9A:CC:85:59
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       1A3061115C2A66032061F9CC5444FB3DE676F3EB
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:02 +0000
ROA not before:           Sun 30 Jul 2023 23:58:02 +0000
ROA not after:            Mon 29 Jul 2024 00:03:02 +0000
asID:                     131749
IP address blocks:        103.31.132.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 11:04:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:30:61:11:5c:2a:66:03:20:61:f9:cc:54:44:fb:3d:e6:76:f3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:02 2023 GMT
            Not After : Jul 29 00:03:02 2024 GMT
        Subject: CN=1A2E1D9050EAAFFEB47A9B70C6B197C59ACC8559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:0e:fc:d3:3b:f5:4e:a9:c9:e2:22:57:17:1b:
                    a6:dc:0f:97:3c:71:2d:0e:d6:56:51:53:cb:9d:69:
                    a1:95:25:92:da:2f:9c:59:f0:09:cc:0c:34:22:86:
                    b6:52:ae:bb:15:ae:97:a8:51:8d:46:ff:e1:c1:63:
                    a5:bc:25:73:79:12:91:a8:f1:fd:ff:b1:22:45:10:
                    96:d9:db:0d:7d:c9:a4:b2:4d:67:69:d1:ec:9e:6e:
                    e5:fe:05:b2:a4:c2:eb:80:f5:53:e4:71:67:ef:49:
                    b3:a0:71:6f:2f:a7:ed:9e:92:e7:3f:d3:fd:e4:75:
                    98:b0:b2:ef:18:6e:ee:75:73:fd:e2:20:62:44:a4:
                    bf:76:aa:24:50:9c:de:b1:67:f4:4e:3d:02:62:08:
                    dc:c5:a9:88:f3:1b:0b:02:c0:59:e5:ef:3e:c5:99:
                    fa:a8:12:2a:d2:79:14:9a:de:a0:a5:b2:f0:f9:36:
                    13:da:e8:51:c1:25:97:68:92:65:2d:d3:99:0a:c8:
                    53:f0:a3:55:3f:d2:d4:d9:35:37:29:a2:ee:30:36:
                    97:00:ab:83:2d:c6:bd:08:e5:9d:1d:08:40:5e:b3:
                    f1:35:2f:2f:85:78:c1:f6:3c:a9:e9:60:09:71:7d:
                    7c:0a:c8:bd:7b:d3:4b:33:31:2b:84:88:82:ed:87:
                    b4:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2E:1D:90:50:EA:AF:FE:B4:7A:9B:70:C6:B1:97:C5:9A:CC:85:59
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32342d3234203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:d8:80:b1:43:f9:ff:c4:02:f2:f6:6d:48:3c:03:37:e0:d2:
         c5:8b:da:ef:c0:96:c4:e2:66:21:3a:55:7c:ba:fe:44:3b:51:
         ff:3c:3b:ed:5d:34:72:0a:fa:8c:a7:72:0f:4d:f0:94:c1:a6:
         9c:60:0b:98:73:75:78:6a:0e:c4:1d:cb:b3:99:07:eb:02:ef:
         a2:1a:ac:76:d5:f0:b2:d1:ae:22:09:cc:e9:21:b6:c0:28:37:
         f6:1a:4c:97:0c:35:ca:ae:fd:10:99:d8:39:ec:23:9f:f4:d7:
         b0:d6:6e:c2:e6:b9:d6:a7:c8:75:d0:c0:33:94:7f:73:99:68:
         27:fc:1c:88:ff:ca:a3:bd:a4:53:4b:5d:3b:e5:0e:45:19:7b:
         db:fe:38:c0:45:1b:01:9e:f5:b0:11:a0:fe:24:2f:59:f9:7c:
         41:16:ec:c8:b1:ef:d5:fc:92:9f:93:d9:86:df:21:e5:bd:48:
         78:35:e7:7b:1c:dd:8c:cd:0d:f2:b6:17:88:ac:12:fc:1d:53:
         cc:07:6e:0f:d9:14:b1:67:5b:eb:5d:50:4e:03:7f:26:54:a2:
         8f:2c:9a:7e:60:43:f0:8f:43:99:95:09:42:ed:e8:6d:3c:c3:
         e3:ee:a8:c1:5b:17:21:6e:33:37:ae:6e:ca:71:31:7e:a3:d0:
         c5:cf:d9:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 13:34:41 2024 by rpki-client on console-ams.rpki-client.org