Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e33312e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          B4uSrijALF83ZvKw3VCQPocGPLascdKfhLRE/oAuho0=
Subject key identifier:   DA:4D:F8:F3:03:90:9F:73:02:64:6B:5C:73:DB:54:23:7D:02:77:56
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       33CFF3A687252C8D3087A241B4BA7BC967A1D514
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 31 Jul 2023 00:14:31 +0000
ROA not before:           Mon 31 Jul 2023 00:09:31 +0000
ROA not after:            Mon 29 Jul 2024 00:14:31 +0000
asID:                     63862
IP address blocks:        103.49.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Apr 2024 14:22:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:cf:f3:a6:87:25:2c:8d:30:87:a2:41:b4:ba:7b:c9:67:a1:d5:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul 31 00:09:31 2023 GMT
            Not After : Jul 29 00:14:31 2024 GMT
        Subject: CN=DA4DF8F303909F7302646B5C73DB54237D027756
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6a:12:76:d1:2c:ef:c4:59:8f:80:df:c0:06:
                    05:59:8c:fe:5b:86:38:6a:4b:63:52:a8:e9:f7:a4:
                    a6:8c:48:7e:c7:0c:64:7c:25:5a:b1:a7:98:1e:e6:
                    c4:ac:0c:96:7b:70:bb:4c:32:6d:86:0e:ea:56:80:
                    26:46:e3:40:62:42:a9:4a:c1:50:9d:2d:49:62:75:
                    e6:88:ae:b6:a9:e2:41:ac:0f:93:07:0a:6d:97:11:
                    fb:fa:54:17:1e:2d:6f:a9:9a:21:6b:e6:1c:65:60:
                    fd:37:ba:fb:f0:43:1f:b5:8b:63:ce:7d:12:88:31:
                    3f:57:43:4a:b0:67:34:7d:76:78:52:51:30:37:34:
                    df:c3:5d:04:f4:b4:5a:1c:f7:8b:f6:38:4d:e2:96:
                    ff:20:61:62:72:da:d3:8a:fc:ac:6b:07:7b:7f:0c:
                    79:8e:d5:b8:da:dd:46:e5:9d:d9:8d:ca:92:8a:09:
                    c2:23:fc:d4:6d:37:a0:1d:57:6b:ba:fc:9a:c2:10:
                    f3:aa:cd:36:ef:85:17:e8:ee:57:19:70:c9:a8:df:
                    14:5b:e8:84:92:78:1d:1c:ea:19:d9:2a:8b:e8:e3:
                    66:84:83:c3:bf:e3:86:1c:71:df:01:1d:52:32:1c:
                    38:29:6e:a4:e0:0b:df:9d:c8:3d:25:da:2c:d3:2c:
                    13:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:4D:F8:F3:03:90:9F:73:02:64:6B:5C:73:DB:54:23:7D:02:77:56
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:71:b8:1b:5b:74:12:5f:2a:62:1f:f7:8f:4c:a3:32:4a:2b:
         09:ae:c1:08:37:84:ef:da:cc:ad:1b:48:3c:af:72:34:48:99:
         8e:1d:ae:0f:9d:73:df:d9:29:97:28:ea:18:c9:18:6c:d1:2f:
         4b:0d:91:1d:fc:8e:62:19:39:14:ea:14:f5:d6:39:1b:dc:be:
         1f:8d:b5:74:68:b9:04:11:05:58:f7:7a:09:22:d7:60:3e:ee:
         b9:80:3a:35:d9:4f:df:e2:5a:a7:9a:fc:5a:7e:4e:a6:fa:ab:
         0f:ae:c8:a7:fa:c5:09:36:0f:7c:f6:71:ba:6e:25:b4:e3:73:
         39:53:05:b3:3a:13:ef:28:05:ef:f2:4e:27:a9:b5:20:6f:a5:
         6a:59:17:00:ee:90:3d:5c:8e:5f:28:81:ea:be:dd:96:0b:f4:
         70:94:bc:5d:b0:c9:a2:a0:84:b8:a5:a4:d5:28:6d:e5:72:72:
         e2:4f:91:3a:14:b2:86:7f:b9:e4:bd:a6:7d:27:b8:2f:4a:8e:
         dc:c5:77:14:59:47:f7:b6:ec:43:a7:a2:ea:78:bd:c3:78:af:
         35:c7:7b:7c:e5:0a:92:14:ab:0d:00:58:b2:9b:ce:a3:c9:4d:
         08:93:f9:85:e1:6e:89:f8:6f:97:74:c1:7c:7e:4a:f1:3c:ff:
         47:dc:f2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 10:26:11 2024 by rpki-client on console-ams.rpki-client.org