Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa
File:                     3130332e34332e302e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          7Iil5FzOI8Pq2P0qrgcOG02P6mNoGC/58jDMoSjbyXc=
Subject key identifier:   1E:04:3A:09:A8:D4:1A:B6:99:FE:D7:42:C0:F1:FA:76:43:1F:94:81
Certificate issuer:       /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Certificate serial:       77AB7D0903D40C903E1513FD693A5E29F7A478F0
Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa
Signing time:             Fri 17 May 2024 09:16:41 +0000
ROA not before:           Fri 17 May 2024 09:11:41 +0000
ROA not after:            Fri 16 May 2025 09:16:41 +0000
asID:                     59133
IP address blocks:        103.43.0.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl
                          rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:7d:09:03:d4:0c:90:3e:15:13:fd:69:3a:5e:29:f7:a4:78:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
        Validity
            Not Before: May 17 09:11:41 2024 GMT
            Not After : May 16 09:16:41 2025 GMT
        Subject: CN=1E043A09A8D41AB699FED742C0F1FA76431F9481
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:b3:c0:c5:fd:e3:18:4e:bd:ac:c4:79:bc:6c:
                    c6:d7:b7:47:13:61:1d:84:ed:02:a2:06:4a:0e:14:
                    2b:0d:55:c4:76:e4:8a:6a:5a:b9:54:c5:9e:6a:e8:
                    1c:97:ef:25:ed:aa:cb:6f:da:c4:30:9f:6a:43:2f:
                    5f:72:87:51:fe:e0:68:28:f3:eb:a8:5b:47:b5:4e:
                    d2:59:51:2e:e5:63:8f:69:f1:34:7e:e0:51:d2:51:
                    56:ac:32:eb:93:20:34:cc:12:e4:18:9a:d5:2f:f8:
                    83:9a:c7:de:d3:37:07:ee:32:88:1b:64:ac:47:cc:
                    38:52:de:f3:c8:6f:d8:89:7e:79:8d:ec:b6:62:09:
                    33:fe:55:b9:8a:bf:db:bb:68:df:56:d2:79:9e:bc:
                    17:54:06:e0:e7:79:bd:9a:91:a5:8f:20:95:c7:09:
                    41:0b:5c:df:a5:de:c7:c5:ce:49:8b:af:e0:36:ba:
                    4d:79:49:bb:51:9e:39:ff:60:46:89:d0:27:f7:63:
                    f8:5f:6a:89:00:ac:5f:4d:60:f1:c3:84:38:e8:fa:
                    83:5b:29:c2:72:b2:e3:4c:bb:fd:ab:bc:7f:11:7b:
                    7c:64:42:84:ba:80:98:43:8d:b0:48:cb:1a:91:a8:
                    00:36:7e:8f:5f:bf:51:fe:21:be:20:8e:60:31:08:
                    cd:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:04:3A:09:A8:D4:1A:B6:99:FE:D7:42:C0:F1:FA:76:43:1F:94:81
            X509v3 Authority Key Identifier:
                keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e302e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         50:66:18:84:9b:ef:ab:94:0b:a4:0a:cd:10:4b:c2:64:13:c2:
         55:6a:69:e8:27:4c:3b:ba:c9:58:83:ce:d3:5d:6c:07:73:b6:
         1a:03:14:31:15:3a:18:34:9c:b8:59:e1:56:ac:1c:c3:df:99:
         4c:92:9c:5e:12:30:11:52:c1:6c:c1:84:41:a5:58:1f:38:6e:
         75:08:0a:e1:53:cc:dc:fb:ce:1a:d7:90:4c:89:57:e6:0b:ce:
         42:0b:99:d6:4f:72:fe:b3:bb:d8:6a:74:4c:35:25:0a:ba:d1:
         76:66:1d:12:0c:3b:ed:24:4c:04:c3:9b:f1:1e:87:3e:58:c8:
         cc:48:40:1e:67:d1:12:c0:07:7b:e3:97:3a:92:04:e9:f4:44:
         03:52:f4:79:df:03:e0:9e:5b:6e:fa:16:b7:5b:51:b8:36:1f:
         23:9e:66:35:72:1b:2d:67:fd:89:bd:f4:c9:ea:cb:0e:2b:1f:
         1e:12:8a:b6:54:4f:1b:13:3f:93:7c:cf:12:c6:2e:4b:fa:1b:
         1f:9f:07:0d:10:4f:08:66:94:24:0e:2e:9f:8f:23:85:a6:2e:
         71:e1:7a:c0:89:1f:49:fd:91:3b:b4:55:d6:2f:cd:bd:ce:bd:
         32:c9:ce:e2:59:4d:9c:d0:c3:9d:7c:73:52:0f:9f:fa:5c:1c:
         9e:08:38:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 06:43:22 2024 by rpki-client on console-fra.rpki-client.org