Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
File:                     3130332e33312e34362e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier:          ikLcPSZkjmJ2m/kiqpS8m/9nt/Ah/0CfumBtNI8HB/Q=
Subject key identifier:   9E:D5:42:50:CB:99:DA:19:0D:6D:A8:98:2D:78:E6:F3:01:1D:F0:17
Certificate issuer:       /CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
Certificate serial:       1419FF3F8AC6243F089D6723EBE768EC1FA79A55
Authority key identifier: 55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa
Signing time:             Fri 23 Aug 2024 06:00:03 +0000
ROA not before:           Fri 23 Aug 2024 05:55:03 +0000
ROA not after:            Fri 22 Aug 2025 06:00:03 +0000
asID:                     23679
IP address blocks:        103.31.46.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl
                          rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:ff:3f:8a:c6:24:3f:08:9d:67:23:eb:e7:68:ec:1f:a7:9a:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552B31A26E92A9DD6A585B92375B7FCA4FA66984
        Validity
            Not Before: Aug 23 05:55:03 2024 GMT
            Not After : Aug 22 06:00:03 2025 GMT
        Subject: CN=9ED54250CB99DA190D6DA8982D78E6F3011DF017
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b4:9e:44:16:0e:08:89:10:6d:cd:90:ef:b3:
                    6b:47:67:08:fb:0e:c6:82:39:23:a1:66:09:54:2f:
                    fa:88:db:0f:16:fb:b5:d7:db:02:63:97:0b:d2:28:
                    c6:3d:74:0e:64:5e:76:0d:88:a8:cf:fe:54:8d:06:
                    59:b4:91:ca:eb:61:7b:ea:4a:23:ce:86:a2:5f:e8:
                    f6:12:b0:eb:46:f0:f3:7d:e8:7d:e6:23:50:00:09:
                    21:96:c0:75:66:96:67:c9:ef:c2:4f:49:69:e0:a8:
                    af:f6:92:73:41:07:30:d0:29:0b:60:e2:c5:27:b0:
                    02:07:38:b9:70:4c:f4:12:af:7a:06:a1:43:da:7d:
                    1e:90:46:f9:2b:47:3c:87:f5:2f:f1:20:6e:08:95:
                    5a:ec:17:47:5c:6e:65:a3:5c:6e:c3:e2:44:6e:72:
                    54:d4:86:a2:11:f0:71:56:38:3a:c9:d4:6f:11:f5:
                    4f:0d:e7:4d:d0:63:91:ed:80:d8:56:12:3d:94:09:
                    aa:9c:79:ac:38:64:cc:c2:13:8d:5f:b5:d0:d6:d6:
                    de:30:e8:0c:5b:a4:b9:1c:a5:be:4f:1e:7a:64:84:
                    0b:4e:04:91:0f:a1:05:f8:b3:09:88:74:12:ec:9c:
                    20:13:88:9f:26:45:55:45:8d:5a:7e:3f:a2:96:06:
                    79:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D5:42:50:CB:99:DA:19:0D:6D:A8:98:2D:78:E6:F3:01:1D:F0:17
            X509v3 Authority Key Identifier:
                keyid:55:2B:31:A2:6E:92:A9:DD:6A:58:5B:92:37:5B:7F:CA:4F:A6:69:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/552B31A26E92A9DD6A585B92375B7FCA4FA66984.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/552B31A26E92A9DD6A585B92375B7FCA4FA66984.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/201432cc-3bc9-4858-b506-218aab0b089c/0/3130332e33312e34362e302f32342d3234203d3e203233363739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9d:c4:a3:46:d8:8d:8b:d8:c5:1c:8f:b9:cc:dc:e2:11:8d:14:
         59:af:08:75:97:e2:f8:07:cf:c8:65:64:8a:f2:d0:58:4f:f8:
         99:c3:f7:ec:0a:31:b7:b0:7c:4e:64:e1:1f:71:16:76:f1:97:
         8b:8c:68:fa:5a:a3:7b:b9:02:ed:93:40:a7:f2:f9:f1:77:86:
         99:19:91:14:bf:4e:03:17:f9:d4:48:97:3e:9d:34:e3:4f:11:
         47:3d:8e:97:c9:0f:62:29:eb:d1:96:1a:51:ef:a4:b1:15:2e:
         da:ad:dd:be:f3:e5:d5:31:37:cf:9d:0a:ad:8b:21:53:29:81:
         72:73:14:f7:4b:d6:91:48:04:81:3d:68:ed:67:8a:18:e4:d8:
         c1:a3:cd:35:e7:c8:bb:26:e2:56:9c:a9:28:18:78:b9:81:9e:
         64:6a:bd:5c:65:38:91:a8:a9:7a:bd:4f:56:1b:5b:b9:92:64:
         74:dd:29:68:36:50:f6:0b:c5:5d:9a:1c:6c:9b:06:c6:ab:f4:
         0b:6f:de:5d:1e:24:f1:bb:46:64:44:12:a8:57:2b:a3:61:02:
         85:71:80:8c:bb:3d:cf:36:d0:9d:a7:3b:db:61:e8:1f:6b:44:
         68:80:2d:7d:0d:d7:69:65:d5:62:da:81:70:41:90:0e:57:74:
         be:c5:d1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 07:38:02 2024 by rpki-client on console-ams.rpki-client.org