Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
File:                     3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa (raw, json)
Hash identifier:          lKc98uyaChQPn1CaGH2R2he43NF0eULLFB1Ix5Ch2+Y=
Subject key identifier:   23:F3:E4:18:11:67:93:7B:84:D0:16:F7:69:B3:8B:2D:E0:9B:A1:1F
Certificate issuer:       /CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
Certificate serial:       659D4023D918CB9FAEC84904709F2D78A38993E4
Authority key identifier: 10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa
Signing time:             Mon 01 Jul 2024 01:02:34 +0000
ROA not before:           Mon 01 Jul 2024 00:57:34 +0000
ROA not after:            Mon 30 Jun 2025 01:02:34 +0000
asID:                     131749
IP address blocks:        103.31.132.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl
                          rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:9d:40:23:d9:18:cb:9f:ae:c8:49:04:70:9f:2d:78:a3:89:93:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10FE35B040E8A3D05E5BE9BEE4F0A636952246FF
        Validity
            Not Before: Jul  1 00:57:34 2024 GMT
            Not After : Jun 30 01:02:34 2025 GMT
        Subject: CN=23F3E4181167937B84D016F769B38B2DE09BA11F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ed:47:b5:58:cc:53:ea:cc:d6:94:6d:7c:cc:
                    80:41:a4:91:56:56:67:71:74:33:b4:06:12:6e:ee:
                    6b:54:a4:70:ce:52:7b:14:c5:3b:24:cd:dc:46:29:
                    b2:bb:25:e5:3c:af:24:d3:17:cb:6d:e3:99:d7:91:
                    ad:e6:d2:73:a9:ab:86:c1:d4:27:16:b8:80:71:0c:
                    d4:dd:90:2b:30:5d:bf:88:58:57:db:f9:de:28:f6:
                    4b:ce:64:b2:9f:80:a7:aa:3e:e9:51:7d:8f:42:ec:
                    7f:a3:2f:e1:56:e1:66:f6:c4:4a:dc:c9:ae:6b:9a:
                    8b:bb:a2:7f:ba:a1:bf:df:24:16:29:d0:9e:0c:2f:
                    44:5b:0f:53:4a:ec:88:c1:48:cc:18:b7:3f:4d:28:
                    30:00:50:d7:f1:c0:ef:a7:b3:a3:be:15:22:dd:b6:
                    73:bb:22:a5:eb:78:21:98:5d:c7:81:34:05:78:f1:
                    31:6b:d5:58:62:63:e5:38:d8:66:ba:3a:42:72:d5:
                    da:09:25:e6:8d:61:52:41:50:75:27:8f:9a:c7:5e:
                    cd:ee:cc:fe:48:80:0b:4d:47:02:5e:59:09:36:2c:
                    8c:e0:9e:c5:d0:2f:e6:6b:ab:9b:f2:fb:c3:67:7a:
                    3b:91:f7:0a:5a:64:9d:74:95:15:de:46:81:d2:6b:
                    1d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F3:E4:18:11:67:93:7B:84:D0:16:F7:69:B3:8B:2D:E0:9B:A1:1F
            X509v3 Authority Key Identifier:
                keyid:10:FE:35:B0:40:E8:A3:D0:5E:5B:E9:BE:E4:F0:A6:36:95:22:46:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10FE35B040E8A3D05E5BE9BEE4F0A636952246FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/300f4f37-c7fb-47d0-8a85-ecfd12b915f5/0/3130332e33312e3133322e302f32332d3233203d3e20313331373439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:d0:ed:e8:1d:12:fa:8b:ee:a9:f9:96:bc:62:99:64:44:0c:
         9b:20:19:5e:1b:56:9a:52:4d:27:40:0f:43:7a:9b:c6:cc:10:
         7d:c8:2f:76:9d:4a:e0:8f:34:93:94:87:c6:ea:98:11:08:1a:
         b0:87:76:29:34:15:ca:51:f5:b1:17:53:66:04:79:6d:5a:f8:
         29:8b:e1:dc:0b:dc:f0:7d:f6:67:da:0b:f2:1b:05:1b:9e:c0:
         32:bc:fd:e3:f4:41:57:49:a9:b6:66:2f:50:46:7a:f3:50:2d:
         fd:74:9e:38:7a:55:6e:51:17:fa:f2:18:86:7b:33:5d:23:9b:
         a6:2d:57:f1:6a:37:e2:9a:a9:65:1a:fe:45:8e:57:31:04:30:
         53:0b:5f:5f:19:89:39:77:eb:50:1b:ca:ad:2b:ba:89:46:22:
         87:0e:b4:54:ab:8a:38:ae:81:ba:ed:5a:1b:f3:44:75:c9:c7:
         99:1c:84:6f:a2:da:16:0c:97:cd:ca:3a:d5:1c:59:67:b2:6d:
         6b:f9:ca:3e:65:e9:cd:36:bd:80:37:37:c6:1d:3b:6d:15:51:
         5f:ea:c3:ea:f5:fb:6e:90:9f:bb:9a:ea:e0:bf:7d:eb:13:41:
         c0:0e:47:12:ec:4d:d6:47:96:fd:a2:e9:20:85:df:2d:dd:d2:
         9e:f2:4b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:23 2024 by rpki-client on console-ams.rpki-client.org