Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
File:                     3130332e31312e33312e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          AXjC5bMEVj4+EeqbIN18tnXWoIpRztBlOwEvCY/3Rz4=
Subject key identifier:   B7:2F:28:3C:CC:CE:BE:95:BF:A1:E3:13:EA:7E:63:15:D0:A3:78:E7
Certificate issuer:       /CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
Certificate serial:       1E61836A967DEED3469CF167223C43E44E865EBE
Authority key identifier: AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa
Signing time:             Mon 31 Jul 2023 00:03:57 +0000
ROA not before:           Sun 30 Jul 2023 23:58:57 +0000
ROA not after:            Mon 29 Jul 2024 00:03:57 +0000
asID:                     58552
IP address blocks:        103.11.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl
                          rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 05 May 2024 11:25:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:61:83:6a:96:7d:ee:d3:46:9c:f1:67:22:3c:43:e4:4e:86:5e:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6
        Validity
            Not Before: Jul 30 23:58:57 2023 GMT
            Not After : Jul 29 00:03:57 2024 GMT
        Subject: CN=B72F283CCCCEBE95BFA1E313EA7E6315D0A378E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:95:94:d7:0e:35:09:37:07:34:cc:e8:0d:
                    9c:ba:d6:cf:f5:48:53:52:92:f1:de:37:f8:30:d6:
                    d9:be:5c:7c:27:02:5f:e0:49:f1:24:9b:fb:57:f1:
                    3d:67:13:8f:ba:5d:a4:4d:44:41:d9:b9:51:05:ca:
                    c3:e3:af:99:91:67:68:17:43:46:97:5f:f6:07:4d:
                    f8:a5:f1:3e:97:94:5b:c8:77:5d:bf:c4:76:01:45:
                    dd:cb:1c:2c:10:0d:0b:55:f1:2e:d9:3b:0a:07:ea:
                    4b:db:3f:ed:77:4c:47:a5:c1:7c:b5:cf:9c:fa:03:
                    99:e4:19:f6:28:3f:2f:43:54:e6:a0:08:97:96:3f:
                    2b:7b:46:5a:ad:67:ae:c3:b8:cc:a6:35:72:b3:28:
                    b7:24:9b:fd:e6:f0:cb:1e:4a:7b:71:a9:1f:9f:93:
                    61:07:42:01:ab:ea:47:63:cc:48:5f:a4:a9:0a:ce:
                    f0:49:57:bf:bd:a5:2c:4c:96:3e:26:5c:27:36:65:
                    7c:cf:12:7c:ee:26:4a:1b:93:9a:bd:a2:58:9b:bb:
                    65:a9:ef:03:69:fc:3c:00:b2:63:6c:d0:5a:e7:4a:
                    df:d3:7e:80:27:a8:d2:9c:9f:5e:99:5f:f6:fe:56:
                    2c:5e:ac:93:72:5e:2a:f0:e7:56:21:47:2c:bc:19:
                    bb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:2F:28:3C:CC:CE:BE:95:BF:A1:E3:13:EA:7E:63:15:D0:A3:78:E7
            X509v3 Authority Key Identifier:
                keyid:AF:4B:58:D4:B1:65:30:B9:F6:91:9D:BF:4F:53:DC:3A:E4:D5:FD:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AF4B58D4B16530B9F6919DBF4F53DC3AE4D5FDE6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d227dbe-4a1c-40b0-94a6-793bdbda3777/0/3130332e31312e33312e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.11.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:4a:10:82:55:1a:1b:dd:2c:16:11:64:05:2b:3c:f9:4e:a4:
         37:0c:3b:f6:21:72:c6:a8:cb:1b:2b:9a:74:5f:30:e7:18:8e:
         ec:46:0e:dc:ca:52:77:06:6b:cd:62:46:f4:b4:ad:25:a8:0f:
         4f:aa:b2:86:ab:59:c8:dc:78:7b:bd:4c:2e:72:f4:a0:1a:cd:
         50:49:1b:ea:ce:96:4a:11:b9:48:b2:63:bd:b7:c6:3b:b5:02:
         23:9a:37:64:45:75:f5:96:27:b0:38:06:f6:3e:b0:e5:aa:2c:
         d2:23:69:92:e2:8b:d2:f3:8d:91:cb:12:ce:33:57:8e:57:be:
         3c:cf:a1:99:d2:e1:30:68:2b:0c:e4:d0:a0:ae:97:c6:d9:f2:
         0a:c7:75:c3:a0:18:94:f2:97:bf:a7:80:90:d5:0c:a5:10:4c:
         3b:99:04:5e:b9:cb:ad:a4:89:be:42:49:df:b6:58:e4:b8:71:
         0a:78:9f:22:09:bb:c5:50:a4:12:95:17:f1:b0:90:b5:1f:91:
         75:d1:96:9e:73:da:ca:4d:e2:43:f3:d0:20:e3:aa:f4:d8:06:
         2a:d4:40:66:bf:6c:b0:c1:a6:03:71:10:7c:a8:45:15:e0:7b:
         98:a4:82:5f:5d:6c:c9:c2:a3:d9:1f:c6:3d:e0:3a:35:e7:51:
         e4:50:a5:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 11:32:09 2024 by rpki-client on console-fra.rpki-client.org