Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa
File:                     3130332e33312e3233342e302f32342d3234203d3e203535373031.roa (raw, json)
Hash identifier:          Dsc6hfJa6v/7EMITukHVmRhuf8iF0u6i14pkdfOKJhU=
Subject key identifier:   8F:98:16:C4:0C:6D:CD:AD:89:89:E1:42:F4:6B:D4:4B:F0:60:CB:DC
Certificate issuer:       /CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
Certificate serial:       63809E4BB0178A6C6028573900FD3E8AF4BEDE94
Authority key identifier: 8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa
Signing time:             Mon 01 Jul 2024 01:05:58 +0000
ROA not before:           Mon 01 Jul 2024 01:00:58 +0000
ROA not after:            Mon 30 Jun 2025 01:05:58 +0000
asID:                     55701
IP address blocks:        103.31.234.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl
                          rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:80:9e:4b:b0:17:8a:6c:60:28:57:39:00:fd:3e:8a:f4:be:de:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A
        Validity
            Not Before: Jul  1 01:00:58 2024 GMT
            Not After : Jun 30 01:05:58 2025 GMT
        Subject: CN=8F9816C40C6DCDAD8989E142F46BD44BF060CBDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c7:0c:a7:d4:40:5b:72:77:60:cc:f9:e9:82:
                    85:6a:dd:d8:01:e0:cc:c3:8e:1f:88:82:cd:ad:04:
                    40:13:fd:a1:d3:21:af:0b:73:da:f3:0e:87:c7:5b:
                    f1:d1:4f:7a:ef:b6:b7:9a:7e:76:31:c6:2a:bc:04:
                    b7:2a:60:11:19:a1:0a:85:6a:9d:dc:33:bc:fb:50:
                    43:c0:ff:4e:04:9d:86:95:74:39:c1:67:cc:cd:44:
                    ec:76:bc:e7:77:ce:6d:7a:c0:92:12:90:f0:6d:e5:
                    1c:9b:c8:87:61:f9:d6:6c:e3:73:0e:92:c5:77:9a:
                    81:87:f9:f3:22:05:35:29:2c:87:80:5c:2f:73:c0:
                    6c:5c:d6:e3:1a:49:b3:27:d7:ef:c0:fc:5f:e3:51:
                    c2:10:c4:27:9a:a3:f1:ce:65:49:4c:2f:8d:72:e2:
                    b7:e3:a1:99:b3:d3:a2:f4:49:7a:0a:c1:84:b3:10:
                    bb:d3:32:91:0b:ba:04:ec:cd:49:61:18:a7:97:c9:
                    68:fb:98:1b:7b:a0:3c:67:67:4c:ba:23:c1:87:4b:
                    b5:7f:07:50:c1:68:1f:e3:d6:b3:91:1a:3a:c2:48:
                    c5:22:0a:94:ad:41:85:8d:60:4e:f8:2d:e3:3e:c5:
                    05:24:cf:60:e3:46:c3:fc:2d:61:dd:2b:38:36:b8:
                    de:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:16:C4:0C:6D:CD:AD:89:89:E1:42:F4:6B:D4:4B:F0:60:CB:DC
            X509v3 Authority Key Identifier:
                keyid:8F:84:D6:FE:EA:F8:C5:D3:C5:D1:3F:10:1B:C7:0B:75:8B:F5:0F:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8F84D6FEEAF8C5D3C5D13F101BC70B758BF50F6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9f851-7e73-4384-950e-8be8e15fd3ee/0/3130332e33312e3233342e302f32342d3234203d3e203535373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.234.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:3a:ec:08:fd:9a:b8:48:25:62:98:72:a9:a9:54:e2:af:56:
         fa:63:bc:78:e4:dc:19:94:c7:14:2a:7c:78:5e:b4:e6:60:8b:
         97:d5:4f:38:43:fc:f6:f2:a7:c2:f2:e6:0f:9e:a0:18:9b:2e:
         6b:b5:8e:89:b3:72:b1:eb:9b:5e:53:20:a1:65:3e:d1:e9:a8:
         20:c4:0b:74:6f:86:97:90:28:22:83:e9:04:e0:0f:c0:80:b8:
         68:8a:46:d9:75:e8:be:06:70:41:74:ac:e8:b1:4a:91:21:56:
         0b:5b:55:c6:de:22:8e:a3:3b:30:81:41:fc:79:93:ae:29:47:
         9d:1a:39:4f:39:7c:d1:cb:2b:13:a1:30:02:fd:32:25:57:69:
         5d:ef:d9:3d:e5:b3:94:0a:d9:34:25:c5:a0:8b:e0:8a:af:2c:
         24:b7:53:be:57:f5:21:df:f5:c5:26:ab:96:c9:c6:49:ef:fd:
         8c:d5:a0:03:e4:a8:5d:a9:41:b9:2b:75:8f:a8:71:8f:6c:a4:
         1a:b2:dd:d7:5d:83:7d:ce:dc:71:8a:1f:d0:2f:26:c2:ad:a0:
         47:10:e0:af:13:ac:d1:f3:a4:3d:2f:b3:19:ad:69:4c:26:8f:
         02:6f:49:e9:ff:5d:9e:c7:36:c6:1d:24:6c:6e:4a:22:cc:45:
         7e:41:05:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org