Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
File:                     3130332e3130342e31322e302f32322d3232203d3e203535363939.roa (raw, json)
Hash identifier:          9L7drWCxXjf2XFzUDsBgqgwCcU21UrEjp4FJoNKvLso=
Subject key identifier:   4F:C8:4E:F9:6E:C3:49:EB:A3:F8:AE:99:60:AE:D3:5C:7D:A3:91:4D
Certificate issuer:       /CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
Certificate serial:       3ACB87EFA082813C657665E0F241CE1A31E9A264
Authority key identifier: 31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa
Signing time:             Sat 16 Sep 2023 06:00:00 +0000
ROA not before:           Sat 16 Sep 2023 05:55:00 +0000
ROA not after:            Sat 14 Sep 2024 06:00:00 +0000
asID:                     55699
IP address blocks:        103.104.12.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl
                          rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 May 2024 22:57:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:87:ef:a0:82:81:3c:65:76:65:e0:f2:41:ce:1a:31:e9:a2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31BD46BE7D53E57838D5FD894590B8AFF16D366C
        Validity
            Not Before: Sep 16 05:55:00 2023 GMT
            Not After : Sep 14 06:00:00 2024 GMT
        Subject: CN=4FC84EF96EC349EBA3F8AE9960AED35C7DA3914D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:29:a4:86:9a:0e:7e:35:bf:fe:5d:03:62:
                    ea:0c:85:a3:73:a4:6b:de:49:f7:4e:69:6f:5f:95:
                    46:da:a9:f9:d6:c8:4c:20:37:c6:f5:d1:25:52:52:
                    85:16:e3:cc:13:87:66:e4:1b:6c:bf:a7:96:48:fc:
                    01:91:9c:de:2b:fc:a5:4a:70:9d:66:4b:f1:bd:b4:
                    2c:e1:d0:ec:f1:dd:ab:5b:f1:6c:70:8c:e2:35:13:
                    79:9a:ce:17:9d:03:76:b3:7a:07:8e:14:10:2c:3e:
                    86:4e:88:cf:dc:d9:ac:e8:a5:07:1a:46:8d:b3:f5:
                    75:1d:11:2f:b2:66:ca:bd:61:44:1a:a9:d0:09:a7:
                    a0:d8:c4:75:9d:36:ca:24:62:e1:95:53:b7:e2:18:
                    ff:59:1a:32:c5:3b:46:87:f5:cc:ed:4b:62:a1:3e:
                    1c:23:40:49:f4:6d:f4:fe:ec:c9:73:72:57:60:d7:
                    4d:89:d6:36:8a:ff:02:05:9f:7a:55:4f:fb:fd:dd:
                    20:eb:cf:3b:68:09:53:6a:db:f2:bb:de:f2:3f:c7:
                    14:8c:c5:53:1c:0f:09:ec:a7:3b:4c:95:52:59:f2:
                    d6:8a:fb:72:ef:3c:ca:29:95:14:73:3c:0e:b9:56:
                    27:05:60:ea:ea:39:d7:d5:72:25:9f:12:cf:6f:65:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:C8:4E:F9:6E:C3:49:EB:A3:F8:AE:99:60:AE:D3:5C:7D:A3:91:4D
            X509v3 Authority Key Identifier:
                keyid:31:BD:46:BE:7D:53:E5:78:38:D5:FD:89:45:90:B8:AF:F1:6D:36:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/31BD46BE7D53E57838D5FD894590B8AFF16D366C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31BD46BE7D53E57838D5FD894590B8AFF16D366C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/66ad09f3-0023-4445-8416-5cbde13fdd40/0/3130332e3130342e31322e302f32322d3232203d3e203535363939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.104.12.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:27:31:ce:b1:65:9e:1d:70:54:c0:a0:a0:ec:ca:78:aa:
         24:da:84:39:d4:ed:0f:0b:7c:53:12:61:04:4f:5c:6a:a0:87:
         4f:26:76:88:8f:21:fc:01:30:86:72:51:b1:b1:7e:e3:57:cf:
         c2:d7:03:53:7a:31:94:70:22:81:2e:ef:82:55:8f:64:58:d8:
         2e:ae:b8:74:3d:09:f8:f3:8b:6d:50:76:21:d2:82:6b:3a:f8:
         76:1d:c0:a2:62:6b:21:6a:a0:35:09:12:f0:84:1c:a7:7d:2f:
         aa:64:df:0e:30:0d:16:e7:53:50:f2:43:e0:e0:4b:e9:b1:d8:
         71:d4:ef:a9:6b:ee:42:5a:58:ce:85:56:71:01:9f:ba:1f:ce:
         f9:33:0c:39:d6:06:d9:d6:f5:b8:bd:e3:aa:e7:b3:09:b4:a0:
         46:a1:fa:55:3c:20:64:3b:1b:85:95:c2:20:b7:c1:a7:e2:b4:
         98:c3:26:5d:45:f9:e3:be:bb:80:2f:82:53:8e:52:90:62:4b:
         8a:0e:a1:3b:cf:89:19:a2:27:38:6c:ce:30:00:36:22:74:34:
         5c:84:56:73:6c:06:52:00:de:da:c6:d9:1a:53:1c:93:1c:bd:
         b9:ca:9e:51:fc:00:9a:e3:79:38:4e:91:65:e6:26:59:7b:5e:
         e4:eb:6b:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 30 00:21:06 2024 by rpki-client on console-fra.rpki-client.org