Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
File:                     3130332e34332e312e302f32342d3234203d3e203539313333.roa (raw, json)
Hash identifier:          fAVVxSm1nFToQNyaLISt2LBq4Gsk+4pHivG2KqSxFZg=
Subject key identifier:   0E:6C:12:61:CF:21:79:7D:09:AD:D5:F8:D0:08:73:4F:FE:07:60:18
Certificate issuer:       /CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
Certificate serial:       55FA935D36BB3AE253B2BBEBF1F1C8470EF20437
Authority key identifier: 34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa
Signing time:             Fri 17 May 2024 09:17:17 +0000
ROA not before:           Fri 17 May 2024 09:12:17 +0000
ROA not after:            Fri 16 May 2025 09:17:17 +0000
asID:                     59133
IP address blocks:        103.43.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl
                          rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 30 Sep 2024 06:11:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:fa:93:5d:36:bb:3a:e2:53:b2:bb:eb:f1:f1:c8:47:0e:f2:04:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869
        Validity
            Not Before: May 17 09:12:17 2024 GMT
            Not After : May 16 09:17:17 2025 GMT
        Subject: CN=0E6C1261CF21797D09ADD5F8D008734FFE076018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:43:e6:14:e7:9d:78:15:46:86:c0:8e:c7:94:
                    76:97:eb:9d:14:78:1f:02:6a:bf:4f:e1:8a:66:07:
                    cc:f1:19:1c:8d:6c:7e:08:f6:27:da:be:67:74:5f:
                    71:f5:9f:9f:73:73:b7:1e:7c:8c:e4:c3:90:17:00:
                    5c:88:bc:75:83:38:65:fa:f1:47:22:a3:52:9f:89:
                    52:8c:df:fb:81:13:b8:29:0d:20:cb:6a:7f:15:93:
                    1c:63:03:68:5b:65:fa:5b:c4:40:85:c4:7e:50:22:
                    de:8c:f3:d3:cf:2c:3f:a8:e0:1c:f6:e8:25:4c:32:
                    e6:84:9f:25:4a:64:da:20:aa:00:4d:38:9d:4e:a3:
                    d9:d9:4f:84:f7:b1:3d:10:09:3c:52:10:d6:ad:a1:
                    00:6a:ea:88:45:5d:1a:c2:94:8c:95:6e:c6:64:d0:
                    4a:50:81:49:c7:29:4a:78:6c:85:6e:b2:7d:f6:71:
                    12:c6:11:f8:c6:9f:04:a8:3f:fb:0c:cb:ff:7a:ce:
                    65:4f:6e:02:93:eb:b2:33:9d:7a:6b:4c:d2:2d:62:
                    5b:12:a3:d9:f2:61:bd:72:37:f2:c7:52:d4:14:2e:
                    dc:7a:0f:f5:0d:c6:d5:00:03:00:b9:d6:ce:26:bc:
                    55:da:c7:02:e2:0b:cb:b2:3c:ae:37:eb:0b:61:80:
                    3c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:6C:12:61:CF:21:79:7D:09:AD:D5:F8:D0:08:73:4F:FE:07:60:18
            X509v3 Authority Key Identifier:
                keyid:34:C4:7E:CC:8E:DF:AA:05:EF:FF:41:FB:FF:0F:6A:46:6F:A3:18:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34C47ECC8EDFAA05EFFF41FBFF0F6A466FA31869.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/400ec43b-433d-407d-bdee-eea6216a6ff4/0/3130332e34332e312e302f32342d3234203d3e203539313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.43.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:46:2a:cd:ef:56:de:f5:60:cb:98:71:0e:6b:77:4d:0c:f4:
         31:5d:65:00:c9:86:a7:4b:4a:94:2b:a5:5e:a9:f4:15:f1:0c:
         d3:35:31:8f:da:04:14:66:fc:a9:77:7d:25:0a:50:30:e7:87:
         7c:3e:61:08:5d:e6:e3:a8:8c:89:ad:79:1d:77:cc:a9:b3:f1:
         38:5e:cb:f3:57:2d:59:b0:79:a5:79:55:45:11:93:8a:0d:7b:
         06:18:f3:3b:39:fc:0a:bb:f0:7e:3a:81:d6:7e:17:9f:66:e8:
         88:53:8a:08:28:a4:fa:c8:40:d6:19:e4:fd:67:8e:a3:7a:f2:
         03:92:9e:74:91:3e:65:57:06:a1:36:8c:8e:42:df:2b:25:89:
         84:00:81:f8:d2:d7:01:7c:33:f1:d3:a1:5b:d0:a9:77:53:7f:
         b6:c8:f8:1c:56:2f:99:50:35:c1:09:0b:87:01:da:63:3c:ba:
         c4:4d:3a:8d:e8:7d:31:17:37:99:1c:9c:21:1b:29:2b:c9:c6:
         af:83:26:d6:54:be:7a:d0:7d:a3:ec:99:7c:d3:d6:99:29:0e:
         c9:b2:29:04:72:22:74:0b:57:73:f9:0c:8e:20:ce:4a:83:6d:
         f8:ab:c9:74:05:46:77:cc:27:d7:7c:df:27:ee:ab:79:a4:75:
         ce:43:87:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 14:21:41 2024 by rpki-client on console-fra.rpki-client.org