Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa
File:                     3130332e33312e34342e302f32332d3234203d3e203233363739.roa (raw, json)
Hash identifier:          9pKarznHrKZfymtpIPMql4rw8lBC/FC/Bx+I+ZpeXW4=
Subject key identifier:   99:A2:4C:C8:3B:0C:97:29:95:29:0B:93:C7:AA:99:3F:7F:B0:AD:85
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       54FA198FFADB44FD77854D9F2CB1379D38971B40
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa
Signing time:             Fri 09 Aug 2024 06:00:48 +0000
ROA not before:           Fri 09 Aug 2024 05:55:48 +0000
ROA not after:            Fri 08 Aug 2025 06:00:48 +0000
asID:                     23679
IP address blocks:        103.31.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:fa:19:8f:fa:db:44:fd:77:85:4d:9f:2c:b1:37:9d:38:97:1b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug  9 05:55:48 2024 GMT
            Not After : Aug  8 06:00:48 2025 GMT
        Subject: CN=99A24CC83B0C972995290B93C7AA993F7FB0AD85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:49:00:d6:c8:72:37:fd:c9:5a:ea:8d:83:22:
                    2d:bd:8c:28:9e:2e:45:4f:63:d2:88:64:2a:ae:27:
                    9d:13:23:42:a2:13:9e:6e:d1:a7:66:8a:50:a9:b6:
                    ff:77:8c:ed:a0:78:ba:83:34:75:dd:a9:55:e2:70:
                    5e:d7:9d:13:fc:6a:3b:96:05:45:77:79:49:8d:d4:
                    75:ac:27:c5:e1:1a:ef:85:38:ce:0a:30:35:e0:93:
                    bc:6b:55:cc:f3:83:78:57:49:18:3d:7a:8f:b7:d4:
                    0f:a6:21:85:17:24:c6:54:17:0e:75:96:8d:62:56:
                    5a:9f:e4:f2:2b:8d:ea:a8:03:e3:22:4e:94:5c:1e:
                    a7:ed:d8:94:53:e2:44:ef:96:dc:f8:33:3b:88:c8:
                    16:33:5f:6b:70:01:c5:10:6a:04:65:e4:bc:1f:86:
                    64:ec:fb:c2:81:30:1d:75:94:2e:62:ce:73:fa:3a:
                    c1:62:21:47:cf:72:7b:f9:b9:80:2b:df:53:59:ff:
                    66:28:b6:28:43:b0:c4:37:c2:34:05:50:f6:74:67:
                    9a:bc:e9:12:21:e8:3d:58:d5:56:ad:2d:41:e0:70:
                    66:82:da:14:91:8a:4a:fa:b1:16:5b:48:29:ae:e1:
                    f3:3d:8e:5d:d5:30:fa:b5:4c:11:3c:3c:ed:07:83:
                    72:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A2:4C:C8:3B:0C:97:29:95:29:0B:93:C7:AA:99:3F:7F:B0:AD:85
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34342e302f32332d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:b1:a1:ef:2f:dc:48:81:17:a5:ec:7b:d8:ae:94:a3:40:6c:
         cd:f6:c0:1a:64:64:71:44:0a:b8:70:04:4b:0d:0a:0b:a8:e0:
         98:71:cc:da:f1:73:c4:b1:e0:01:87:63:e6:c9:f0:87:d7:63:
         d8:8c:27:4d:66:bb:0a:61:f6:b6:d9:16:a6:dd:17:90:48:71:
         a9:d9:89:b9:85:d3:b2:44:93:20:e5:60:db:bd:fc:6f:94:5f:
         70:a9:7b:12:5d:9d:63:ff:f0:bf:ce:28:31:79:bc:51:9c:73:
         e3:52:b0:4b:4a:38:5d:63:00:e4:1f:d6:db:4b:e2:b2:b7:05:
         68:e2:d8:d9:5e:a5:40:84:2f:bd:8e:e4:97:3f:0c:17:5e:43:
         c3:83:c8:c5:98:d8:ab:32:42:91:46:b7:05:9b:8c:e5:84:4e:
         9e:49:78:33:37:3d:2c:7c:55:1d:24:bd:1f:de:59:94:62:50:
         64:ef:ec:3f:3f:2e:b8:cc:30:28:a5:af:5c:c6:0a:d2:7d:77:
         b6:ce:86:39:fc:6e:9f:a7:8d:f1:82:ce:e9:04:7c:51:30:c3:
         64:43:fc:51:83:f6:7a:8b:8e:b2:e6:ac:57:75:9c:35:e8:a9:
         71:6c:85:0a:4b:42:ea:04:3c:06:20:32:45:97:2a:86:f6:8e:
         44:01:c4:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org