Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
File:                     3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa (raw, json)
Hash identifier:          ZAYr5wm6M1zzmW0l6EsgawSZJfTDiZWgdh/sXE3rAP8=
Subject key identifier:   7F:AE:CB:4F:E0:00:0D:EE:1A:38:2C:0A:09:DD:94:17:0C:19:5A:9B
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       3AA55388DBDDBC23519D4C5535758FF024E05B3F
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa
Signing time:             Thu 13 Jun 2024 17:00:00 +0000
ROA not before:           Thu 13 Jun 2024 16:55:00 +0000
ROA not after:            Thu 12 Jun 2025 17:00:00 +0000
asID:                     150284
IP address blocks:        103.43.164.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:a5:53:88:db:dd:bc:23:51:9d:4c:55:35:75:8f:f0:24:e0:5b:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Jun 13 16:55:00 2024 GMT
            Not After : Jun 12 17:00:00 2025 GMT
        Subject: CN=7FAECB4FE0000DEE1A382C0A09DD94170C195A9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:3f:c5:f0:b7:60:b3:38:da:5e:9a:49:8f:
                    38:72:00:ca:e8:45:df:fc:c1:db:af:41:30:13:d8:
                    e2:14:41:e7:06:df:3d:51:c0:88:66:94:93:9f:d4:
                    ad:d2:62:0c:1e:76:ae:4b:65:2e:de:a9:62:52:e8:
                    c7:ed:4a:73:13:81:27:cf:b4:87:d6:51:d5:3f:5b:
                    e5:20:e1:08:d1:ad:fa:62:7f:0e:9d:c6:b0:bb:41:
                    15:ff:55:a2:9e:14:0f:04:a7:95:35:68:3c:5b:68:
                    4e:b0:11:9f:d2:69:1e:f1:ec:d4:7a:0a:ce:ba:56:
                    7b:6a:0a:b3:4e:97:71:70:c5:6c:8f:53:c7:3e:c0:
                    42:ff:d8:17:43:12:15:51:49:ef:14:f8:bf:7f:98:
                    28:2b:bd:31:84:c5:2e:7f:e3:d9:e3:7e:af:1c:cd:
                    03:c4:56:ec:e5:4b:45:67:96:e4:de:dd:c6:31:5f:
                    64:90:5f:f1:8d:d7:9b:18:27:01:b9:9a:b9:2d:a5:
                    bb:a0:a4:58:63:2f:48:60:a9:76:8b:68:b2:ca:50:
                    f7:2c:94:72:2f:21:24:c8:a6:e9:10:87:08:85:39:
                    ba:15:32:df:c7:13:45:be:95:5d:fd:93:ae:3d:3f:
                    77:50:44:3f:9c:f8:81:50:5a:36:70:c6:c5:1d:e9:
                    f0:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:AE:CB:4F:E0:00:0D:EE:1A:38:2C:0A:09:DD:94:17:0C:19:5A:9B
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32332d3233203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.164.0/23

    Signature Algorithm: sha256WithRSAEncryption
         98:da:75:b0:1b:88:0c:19:c2:a6:c7:02:ca:36:68:c0:8f:9b:
         5b:93:54:a0:30:41:03:04:de:91:13:b6:be:e6:a9:1f:81:70:
         c2:7a:d6:80:3b:dc:84:78:27:ed:4a:1c:1d:d0:29:1f:d7:61:
         91:9c:f8:33:4e:c5:86:e5:26:bd:83:d1:5a:5b:cb:b8:45:45:
         c0:0a:59:18:fc:23:51:3d:73:29:57:4b:33:d2:54:e7:62:6e:
         95:a8:79:21:c3:32:78:c9:dc:d0:89:cc:39:ad:8c:95:88:15:
         ac:54:f9:ec:f5:57:20:9a:1a:a6:ae:4d:a7:3c:8b:db:9a:7f:
         10:c6:52:d2:f4:05:e5:1d:97:21:24:da:3c:ad:1e:3b:54:1c:
         bf:ad:8f:dc:2e:2b:11:8c:28:8c:57:11:68:56:d1:49:4b:ed:
         d3:91:4a:04:7a:0a:0a:a1:7e:02:17:6a:37:0d:b0:84:13:64:
         fa:7c:68:66:7c:67:a1:85:d8:6e:dc:f8:43:4c:a7:f3:60:a0:
         db:05:82:be:98:e7:5b:2e:83:25:83:f3:c6:61:6e:39:71:74:
         de:d1:48:01:a3:f2:ad:59:00:c5:51:f3:6c:fb:58:96:a3:b4:
         1e:07:2e:8f:b5:ea:6e:1a:10:ea:7d:33:3e:30:f6:9a:9c:93:
         98:f3:67:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 04:28:51 2024 by rpki-client on console-fra.rpki-client.org