Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
File:                     3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa (raw, json)
Hash identifier:          7n9fLO69HtVTeGebJ4IwbAt3Dih0rBk5I+DqyVH3Pvc=
Subject key identifier:   71:88:96:63:B9:58:19:B9:B2:71:AC:17:48:32:1F:BE:BE:BF:62:D3
Certificate issuer:       /CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
Certificate serial:       5C2ABB1A7FBBCF381EE9DCD604C95AE4CAE96615
Authority key identifier: 44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa
Signing time:             Thu 13 Jun 2024 17:00:00 +0000
ROA not before:           Thu 13 Jun 2024 16:55:00 +0000
ROA not after:            Thu 12 Jun 2025 17:00:00 +0000
asID:                     150284
IP address blocks:        103.43.164.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl
                          rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:2a:bb:1a:7f:bb:cf:38:1e:e9:dc:d6:04:c9:5a:e4:ca:e9:66:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44221B3D145FCC17734F7C523353CB67A0B8D3B3
        Validity
            Not Before: Jun 13 16:55:00 2024 GMT
            Not After : Jun 12 17:00:00 2025 GMT
        Subject: CN=71889663B95819B9B271AC1748321FBEBEBF62D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:23:03:a2:7a:f7:b5:78:96:fe:60:2c:fa:3e:
                    1d:7b:5c:c3:99:92:4d:5a:8f:b3:e4:ac:00:4f:f9:
                    ab:a9:d1:40:c7:6e:f4:ea:4f:ae:6f:ed:1d:90:4c:
                    e7:12:0a:a1:df:52:ed:a2:d2:93:74:c7:c3:d3:b5:
                    8f:c3:d5:40:50:ae:8b:7b:d7:3a:cb:e4:9b:a3:68:
                    d5:56:e7:33:e2:a7:90:30:a5:95:06:59:e9:7e:3f:
                    79:41:ea:72:a2:ba:7c:5d:6a:58:cf:91:62:3d:44:
                    a4:20:e7:ef:f1:c6:53:21:79:c5:18:4c:15:cf:4d:
                    36:74:2d:bf:35:15:8f:c0:a2:d8:68:27:88:e9:c4:
                    8f:2d:15:f3:9e:19:22:32:71:8f:35:9b:18:68:ea:
                    0a:ae:e8:69:da:8e:6f:f9:c7:8c:81:d5:3b:85:7b:
                    5b:4f:fc:79:ac:a2:fd:8b:75:5a:9c:d9:2a:32:83:
                    fe:ff:93:58:90:cf:87:4c:71:57:bb:24:c4:5e:3b:
                    e9:68:df:eb:88:0b:d5:30:12:5e:fc:e9:d2:fe:bb:
                    09:1c:1e:71:6d:36:a8:49:51:e7:99:2b:99:e8:6a:
                    d2:a4:ab:53:d0:ac:96:ac:5a:33:c4:2a:a9:6b:93:
                    78:c5:13:a6:f1:f1:7b:ae:ec:ac:75:88:93:c2:2b:
                    81:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:88:96:63:B9:58:19:B9:B2:71:AC:17:48:32:1F:BE:BE:BF:62:D3
            X509v3 Authority Key Identifier:
                keyid:44:22:1B:3D:14:5F:CC:17:73:4F:7C:52:33:53:CB:67:A0:B8:D3:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/44221B3D145FCC17734F7C523353CB67A0B8D3B3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/44221B3D145FCC17734F7C523353CB67A0B8D3B3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/362bacc9-d25d-4610-aee4-655a14ea2fd6/0/3130332e34332e3136342e302f32342d3234203d3e20313530323834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.164.0/24

    Signature Algorithm: sha256WithRSAEncryption
         73:d7:e8:c1:98:0e:66:f7:23:56:4b:84:81:95:cd:e5:59:07:
         36:55:2d:fb:57:bd:d9:fb:cd:0f:07:70:4b:ee:8c:26:85:90:
         23:b2:88:86:e4:1c:5d:ff:2d:b0:3c:b9:15:e7:45:61:a9:2f:
         bf:a4:3b:eb:4c:89:a5:e7:9f:37:83:94:bc:41:24:f2:ed:ae:
         73:02:af:14:59:bd:d1:75:18:af:33:50:ff:c1:3d:ec:2e:b7:
         d1:82:5d:83:30:03:0d:a0:42:13:8d:8d:28:a4:c8:e0:4a:31:
         d2:05:21:67:e6:07:14:a4:59:ca:1a:5f:64:82:0e:8b:26:61:
         fd:09:63:f3:c2:0d:64:3a:3a:50:9c:e6:fc:8b:98:76:9a:5a:
         b5:82:bb:87:a7:b7:00:79:0b:cd:14:75:05:11:86:97:d6:9d:
         1e:74:e9:28:e7:b0:d9:99:60:a3:d2:87:25:fb:16:95:c7:49:
         99:ee:4a:e6:c1:ac:5e:22:19:1c:d9:88:48:95:58:86:dd:7c:
         a3:48:8e:04:e9:1a:7c:ac:e8:5f:59:e1:e2:8b:55:c5:70:95:
         bb:cf:cd:1b:6e:ad:ed:5d:a4:ad:6e:d1:a7:31:9f:1e:02:33:
         5b:20:3b:07:ef:03:cd:c6:32:b1:e5:86:f6:63:e9:14:a2:4c:
         72:10:be:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 03:16:15 2024 by rpki-client on console-ams.rpki-client.org