Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa
File:                     3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa (raw, json)
Hash identifier:          TK2zQ1lMAsO0e9vDJ9BmIb7hc/0xRtkEeDiCzeOXuRk=
Subject key identifier:   4E:5B:81:F7:A3:5B:64:C4:6F:AA:62:27:41:A5:61:72:E4:D8:83:82
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       7D73C0297BFD645EDE1FD0F6144B658795E8B82D
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:03 +0000
ROA not before:           Sun 30 Jul 2023 23:58:03 +0000
ROA not after:            Mon 29 Jul 2024 00:03:03 +0000
asID:                     131749
IP address blocks:        103.31.133.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:73:c0:29:7b:fd:64:5e:de:1f:d0:f6:14:4b:65:87:95:e8:b8:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:03 2023 GMT
            Not After : Jul 29 00:03:03 2024 GMT
        Subject: CN=4E5B81F7A35B64C46FAA622741A56172E4D88382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:84:dc:1f:3d:dd:66:c6:a5:25:73:3e:90:f7:
                    24:ec:0e:60:de:cf:6a:35:34:32:1d:24:06:d1:4b:
                    14:db:97:59:75:2a:e7:ab:7a:04:fa:43:56:0e:73:
                    b6:67:8a:2f:a8:a6:8b:a5:17:07:ed:89:ad:f8:5f:
                    94:b9:12:10:12:e7:2c:bc:88:ad:7a:bf:2f:73:a6:
                    9f:91:d5:c3:be:c1:3c:34:2e:b5:2d:c1:c1:c7:f8:
                    b6:74:73:88:88:dc:35:56:c1:dc:99:cc:75:a3:47:
                    55:9e:bb:8f:ad:91:62:64:0f:15:1c:a5:94:c0:5e:
                    63:cb:ce:1e:b5:5d:6c:53:af:1c:68:d7:49:d2:2c:
                    e5:59:12:ae:7d:7d:23:30:e5:04:81:b1:14:d2:53:
                    86:63:ac:1c:c9:fe:5b:3e:70:a9:b8:76:42:9b:78:
                    43:55:cd:d9:70:58:98:5d:19:4c:c3:80:d0:9c:81:
                    f2:d6:8f:8a:56:e8:d0:c0:44:2b:a9:7e:a2:eb:5b:
                    ad:40:1f:d3:12:4f:5a:91:5c:ba:ec:3e:46:2a:df:
                    9f:7e:a9:f8:02:d9:b3:15:2f:3b:45:4b:78:7f:48:
                    4b:01:e2:c4:af:ba:cc:32:62:ad:0b:a9:6a:c3:1b:
                    9c:73:e6:d2:26:79:9c:68:48:26:ad:68:9f:15:fd:
                    58:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:5B:81:F7:A3:5B:64:C4:6F:AA:62:27:41:A5:61:72:E4:D8:83:82
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133332e302f32342d3234203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:3e:64:7b:25:f0:69:31:0f:51:7c:91:42:84:83:4e:63:
         23:f3:c4:73:8d:91:7f:9b:c9:9d:86:25:44:b4:c9:46:64:24:
         9a:b6:64:f8:b9:a7:4e:0b:ad:51:14:d5:db:bb:72:e6:aa:51:
         2a:b2:97:19:51:09:ed:a2:aa:6c:17:bf:83:75:63:6b:b4:ab:
         35:da:21:60:f0:7f:34:f0:45:ce:dd:3d:55:37:85:61:7f:d4:
         42:df:f8:a9:ad:e7:8e:ab:f2:62:37:c9:3a:cd:51:18:87:76:
         82:5c:fc:d7:5d:bf:1c:81:34:79:49:f5:99:2a:cc:12:85:75:
         1e:a9:dd:2c:38:d1:c4:70:19:d9:ee:92:58:2f:4e:27:e5:fd:
         88:d7:f4:cc:5a:41:fe:24:97:bd:3f:ee:70:e1:59:76:b7:0a:
         80:a4:b1:e7:9d:7b:1a:b0:1a:32:59:5b:c7:ca:20:63:95:c6:
         48:7b:73:13:ad:07:86:5e:59:7e:53:25:4b:46:36:84:a7:77:
         ab:51:6d:2a:3b:7b:b1:fb:29:50:29:71:d0:e7:a9:32:d5:41:
         84:79:fb:29:6a:6d:87:09:46:82:17:2a:09:78:85:80:23:b7:
         22:14:b8:03:7f:15:bc:01:f3:62:9c:b5:aa:95:be:27:a6:b4:
         cf:0b:1c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:27:08 2024 by rpki-client on console-ams.rpki-client.org