Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa
File:                     3130332e35342e39332e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          fSsOBYlxuYnH0+qA0e+Tb5xwW7bUSMK9yabTrlBiDF0=
Subject key identifier:   39:55:BE:70:CD:2E:54:81:92:8D:74:14:89:97:49:11:FE:07:1D:1E
Certificate issuer:       /CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
Certificate serial:       02B7C53FD31C6AFB138C6B081DE32122D87B3433
Authority key identifier: 22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa
Signing time:             Fri 08 Sep 2023 08:00:01 +0000
ROA not before:           Fri 08 Sep 2023 07:55:01 +0000
ROA not after:            Fri 06 Sep 2024 08:00:01 +0000
asID:                     133823
IP address blocks:        103.54.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl
                          rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 17:33:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:b7:c5:3f:d3:1c:6a:fb:13:8c:6b:08:1d:e3:21:22:d8:7b:34:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229F9618AE3F0667EC17C977F266B2BE74C81AB7
        Validity
            Not Before: Sep  8 07:55:01 2023 GMT
            Not After : Sep  6 08:00:01 2024 GMT
        Subject: CN=3955BE70CD2E5481928D741489974911FE071D1E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0f:de:e4:b3:d8:dd:39:db:6a:6f:7a:98:e2:
                    e7:2f:3f:29:c3:39:17:00:9b:f3:f3:17:12:36:f4:
                    61:ee:cf:07:89:91:f9:f4:73:0b:0f:e2:c1:68:6d:
                    ad:38:d7:a4:39:18:9e:19:6f:78:0a:4d:0d:01:5a:
                    a5:81:6b:03:16:e0:08:a1:85:72:a7:7e:5e:4a:73:
                    29:b2:8c:a2:15:3d:6c:55:eb:b1:03:4e:75:87:ae:
                    76:f5:0c:bb:9b:b0:66:b5:34:d4:22:bf:25:f8:87:
                    13:6f:b2:00:79:20:54:cb:79:a5:51:b2:88:a5:2c:
                    09:79:61:8e:55:00:b8:b7:d3:83:02:76:37:69:2c:
                    0a:91:bb:88:08:63:19:0a:15:cf:75:97:7e:69:f7:
                    9c:69:d8:f1:c7:d4:f0:0c:90:68:63:a7:86:0d:19:
                    84:e9:8a:e3:95:21:f3:e2:bf:10:87:f9:98:dc:c6:
                    10:a0:6e:7a:a8:1d:9d:af:d0:17:f3:b8:84:30:a5:
                    8d:7e:e2:6d:1f:ed:6a:4e:3f:b9:5d:0c:75:e9:d5:
                    a8:7c:2b:5f:2c:33:66:4a:f4:2a:4e:d7:7a:2d:b3:
                    1e:e6:61:9b:63:09:43:ec:1a:11:57:2c:57:f2:37:
                    e5:63:9b:13:6e:03:79:48:e9:ad:2c:83:26:ab:f7:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:55:BE:70:CD:2E:54:81:92:8D:74:14:89:97:49:11:FE:07:1D:1E
            X509v3 Authority Key Identifier:
                keyid:22:9F:96:18:AE:3F:06:67:EC:17:C9:77:F2:66:B2:BE:74:C8:1A:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/229F9618AE3F0667EC17C977F266B2BE74C81AB7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229F9618AE3F0667EC17C977F266B2BE74C81AB7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44791b1f-6da9-400d-8b14-992aae63746c/0/3130332e35342e39332e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.54.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:95:51:71:f7:58:46:d8:67:0d:4d:54:29:65:f3:4e:87:66:
         23:1b:71:b3:53:44:f9:6d:8f:5e:eb:13:8d:44:f4:ef:5b:f2:
         8d:cf:c7:dd:ab:b8:b1:1c:52:c6:db:87:e6:91:68:06:d9:9a:
         8d:b3:9e:fc:a0:c6:2c:33:47:3f:30:34:e8:18:1b:fc:fa:72:
         cf:b7:64:35:48:be:e6:77:30:2d:3f:b2:be:4e:e9:42:b1:e7:
         09:ce:ae:fd:f4:ca:53:d1:5b:47:f4:f3:c2:4a:5c:88:de:aa:
         87:e6:de:d4:e0:9f:9b:13:76:1c:c5:73:64:73:fd:91:62:45:
         bc:db:ec:6a:dd:0a:9c:38:fd:7a:97:7e:88:86:81:96:0b:43:
         b3:f7:bc:46:d7:e4:97:94:4e:b0:26:cc:40:c0:5b:e1:be:5d:
         9c:fe:79:95:e7:3b:0f:6e:be:8c:44:93:70:87:96:d8:78:05:
         8e:8e:83:7e:81:7b:f4:30:27:8b:28:d3:4e:50:50:f4:94:fe:
         17:18:db:a7:fd:bd:70:0b:e2:1d:d1:78:cd:c1:d4:22:76:cd:
         c2:fa:be:ed:c9:ae:f2:cc:ff:e8:4c:1c:7c:a9:ae:21:71:47:
         45:b5:06:07:1e:53:fb:00:32:21:bb:8c:a9:99:86:be:5d:bf:
         67:e6:86:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 26 10:57:38 2024 by rpki-client on console-ams.rpki-client.org