Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa
File:                     3130332e39312e32382e302f32322d3234203d3e203338343936.roa (raw, json)
Hash identifier:          ZrInKy3rN8CQHG74U5DNNhQz02tlUukWAziTX5F6+yM=
Subject key identifier:   36:7F:B5:E1:8D:14:3B:A4:CF:10:7D:7B:C0:FC:BC:AE:4B:10:06:A0
Certificate issuer:       /CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
Certificate serial:       7E33FCCB35A8F4B55B72C55490E7AAF182B7DC06
Authority key identifier: CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa
Signing time:             Thu 02 May 2024 06:00:01 +0000
ROA not before:           Thu 02 May 2024 05:55:01 +0000
ROA not after:            Thu 01 May 2025 06:00:01 +0000
asID:                     38496
IP address blocks:        103.91.28.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl
                          rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:33:fc:cb:35:a8:f4:b5:5b:72:c5:54:90:e7:aa:f1:82:b7:dc:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C
        Validity
            Not Before: May  2 05:55:01 2024 GMT
            Not After : May  1 06:00:01 2025 GMT
        Subject: CN=367FB5E18D143BA4CF107D7BC0FCBCAE4B1006A0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:d8:84:45:bc:c1:05:af:f6:70:4e:af:3e:1c:
                    69:eb:d6:af:41:1b:c3:75:ce:0f:51:0e:fd:c3:0d:
                    ea:1a:65:23:68:f1:5d:2d:19:67:6b:32:fa:87:51:
                    f7:ee:f9:17:ca:5e:fd:ce:26:2e:7c:01:43:68:f9:
                    50:8d:12:71:c7:09:f0:09:e4:71:d1:7b:51:d0:44:
                    7a:a5:9f:df:f4:74:c8:c6:ea:bf:38:c4:8d:71:2d:
                    c1:22:33:ac:f4:ae:03:0d:63:38:d6:05:58:d8:ed:
                    b4:c6:90:c0:b4:a1:9d:6b:cb:a5:19:4f:f2:39:97:
                    5d:c5:92:bd:45:d6:e7:99:24:45:6c:86:74:bf:21:
                    d7:54:a4:4f:f4:62:93:e9:dc:78:f9:dc:f7:a9:b7:
                    80:6f:ce:21:83:f8:14:53:81:63:f5:ce:7d:a8:26:
                    f7:65:01:c4:2e:20:37:da:86:0e:3c:16:f9:38:c2:
                    d7:60:95:9a:8e:ab:5e:c3:2f:6c:47:22:74:20:96:
                    e3:61:3f:5b:06:51:6a:39:21:10:e2:4b:6f:ab:3f:
                    41:4f:96:cd:95:0c:91:2f:77:7f:8d:fc:29:48:57:
                    35:9c:60:89:de:c8:12:9e:07:c1:e6:49:b4:43:0b:
                    ca:cd:17:a2:fd:2b:33:84:d8:8d:2a:94:93:5e:dc:
                    78:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7F:B5:E1:8D:14:3B:A4:CF:10:7D:7B:C0:FC:BC:AE:4B:10:06:A0
            X509v3 Authority Key Identifier:
                keyid:CA:70:4F:78:5E:A5:8B:3F:65:9E:6E:3C:8F:71:E2:D4:CF:D7:E2:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA704F785EA58B3F659E6E3C8F71E2D4CFD7E26C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4421985b-a0e6-4e05-bef6-fe6f5a6e2f43/0/3130332e39312e32382e302f32322d3234203d3e203338343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.28.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4a:dd:d5:5f:00:4c:f3:09:2f:fc:38:f4:a7:98:3f:d3:97:d6:
         36:09:56:21:9b:9c:29:54:d3:1e:fc:d7:8b:21:34:6d:9a:e6:
         ec:94:d5:b0:84:19:60:c4:a6:7e:7d:2f:55:d6:42:42:fd:52:
         ec:77:b1:f6:35:ad:ee:25:ad:9c:77:fb:cd:73:7b:b2:a4:77:
         90:ca:3e:cf:15:ef:23:c4:14:31:b6:2c:0f:65:1d:2e:1a:8c:
         bd:98:56:f3:33:1e:9f:9f:fe:3b:7d:27:ba:1c:a5:66:fd:0e:
         26:cf:4b:1d:96:10:0c:d9:12:c4:50:b9:be:aa:78:02:54:23:
         ff:92:1a:e4:53:af:62:23:e1:06:00:3c:cb:ed:00:15:e6:a0:
         a5:f8:19:cf:a9:6a:c6:88:2c:ac:21:06:cb:7b:d2:0e:96:b3:
         ba:f9:d5:0b:ec:30:e2:56:92:56:46:93:de:6c:62:2e:5a:24:
         dc:90:fd:c2:c0:ba:d9:62:a9:98:b0:c4:41:78:1a:a8:38:c0:
         57:96:b1:82:8c:ee:be:6c:85:98:37:36:da:b8:b6:fe:b2:fa:
         53:b8:29:0c:a2:bc:8f:3e:66:f6:af:bf:c6:45:1b:f5:99:3d:
         3b:3f:8b:8c:94:48:34:5d:45:26:66:ab:1e:78:28:81:bc:57:
         7c:1d:03:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:58 2024 by rpki-client on console-ams.rpki-client.org