Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa
File:                     3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier:          txV2TBpIrI4EhuMk5WEiKWOIUR7Gs9/rwkL2lA0I5tk=
Subject key identifier:   D9:93:2C:9D:72:F7:6C:F4:A0:C3:DC:4F:3E:4C:BF:DB:C4:20:7C:04
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       259C495B169F094A6DFB35EE829B2DBFECCCE054
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa
Signing time:             Mon 31 Jul 2023 00:03:02 +0000
ROA not before:           Sun 30 Jul 2023 23:58:02 +0000
ROA not after:            Mon 29 Jul 2024 00:03:02 +0000
asID:                     131749
IP address blocks:        103.31.134.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 06:35:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9c:49:5b:16:9f:09:4a:6d:fb:35:ee:82:9b:2d:bf:ec:cc:e0:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul 30 23:58:02 2023 GMT
            Not After : Jul 29 00:03:02 2024 GMT
        Subject: CN=D9932C9D72F76CF4A0C3DC4F3E4CBFDBC4207C04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ce:12:7e:91:1d:6f:f6:68:30:55:0b:fd:f7:
                    c0:6f:5a:0d:72:39:f9:e6:4a:73:99:4c:72:82:de:
                    19:99:d0:3b:3d:d9:68:2f:ad:15:24:62:db:b2:45:
                    35:a4:e0:77:3f:fb:9c:9e:2b:d9:e9:79:71:2d:f9:
                    57:30:89:5e:ff:ed:75:19:de:4d:fd:e4:fc:b3:f3:
                    6a:f9:56:77:b4:62:77:44:6b:7d:3a:77:a5:9f:e0:
                    93:89:a3:8e:03:6c:44:43:c9:d6:a9:a1:10:bd:c8:
                    62:4f:c3:29:4e:a8:1d:c6:0b:ce:3c:52:30:73:24:
                    2d:7c:83:e2:cb:54:27:43:c7:10:8f:79:07:90:25:
                    9c:82:91:2b:4d:a7:e2:8e:2b:79:e1:af:75:79:85:
                    3e:b5:e1:7e:c1:bc:40:69:6f:8d:66:db:c5:ca:7c:
                    74:40:cd:39:0e:64:80:2d:05:0b:80:45:31:fd:e7:
                    49:68:4a:af:2a:61:43:92:ab:55:05:b1:a0:ba:e0:
                    42:db:92:ac:ce:18:09:4e:08:3a:fe:96:5c:3d:5b:
                    6a:fd:d3:ce:a0:38:ac:91:f8:be:a6:06:7e:ea:55:
                    8b:4b:ba:b6:2a:03:d8:56:aa:96:55:38:45:9b:4b:
                    fd:31:bc:f0:6c:fd:d1:ce:24:a0:a9:9c:4c:a4:29:
                    69:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:93:2C:9D:72:F7:6C:F4:A0:C3:DC:4F:3E:4C:BF:DB:C4:20:7C:04
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133342e302f32332d3233203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:4a:84:d4:fb:35:c7:2c:d9:75:55:72:b6:b2:53:92:30:ee:
         9c:85:98:3b:b4:d5:fc:a2:a4:95:5c:98:00:74:2d:06:f5:43:
         a4:14:3e:a8:16:6d:c4:b9:fd:05:ec:3d:40:36:4a:cf:15:35:
         11:39:98:7d:f9:65:2f:4e:45:a2:ea:5a:3c:e8:6a:eb:63:99:
         6b:6a:e4:ca:1f:71:39:5c:6b:73:3e:37:a0:0e:1b:b6:67:2a:
         b9:23:ef:cd:fb:56:43:7f:8e:25:72:cc:96:77:27:7b:0f:dd:
         0e:8d:b3:15:d9:be:cc:0d:3f:28:f8:ca:be:35:40:1d:ba:db:
         36:85:2d:87:fe:3c:c3:5f:df:68:f3:8f:d2:08:16:83:cd:e9:
         3a:1c:62:89:89:2d:5c:13:fe:ee:9e:17:dc:c7:a2:0e:b5:42:
         46:03:d1:67:94:4a:68:e9:2a:64:1e:32:c8:ad:4e:65:80:14:
         30:36:8d:20:ca:9e:85:51:7d:e5:ad:15:5a:bb:39:a5:27:64:
         39:31:68:29:a7:4d:4e:ea:16:46:67:8d:44:2f:cb:e4:57:72:
         8e:68:80:f9:2a:8f:7f:99:35:01:2c:df:f9:ff:e5:02:19:b4:
         62:4b:b0:89:3f:ae:2e:93:ae:5f:e4:3c:b7:10:af:c5:68:14:
         f2:fb:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 24 06:27:08 2024 by rpki-client on console-ams.rpki-client.org