Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/3130332e37312e34342e302f32332d3233203d3e203436303232.roa
File:                     3130332e37312e34342e302f32332d3233203d3e203436303232.roa (raw, json)
Hash identifier:          G5B0HC2aXViSpQQEGJXxnI8AviYMAdHZFblKovaKrUk=
Subject key identifier:   1F:CB:38:70:85:1F:75:B0:1B:DC:C2:9C:92:CD:18:60:53:09:1C:17
Certificate issuer:       /CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
Certificate serial:       485830057C49DD4C3C62CDC8F52AE5199C96DD22
Authority key identifier: 4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/3130332e37312e34342e302f32332d3233203d3e203436303232.roa
Signing time:             Fri 03 Nov 2023 05:00:01 +0000
ROA not before:           Fri 03 Nov 2023 04:55:01 +0000
ROA not after:            Fri 01 Nov 2024 05:00:01 +0000
asID:                     46022
IP address blocks:        103.71.44.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl
                          rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 07:24:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:58:30:05:7c:49:dd:4c:3c:62:cd:c8:f5:2a:e5:19:9c:96:dd:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F
        Validity
            Not Before: Nov  3 04:55:01 2023 GMT
            Not After : Nov  1 05:00:01 2024 GMT
        Subject: CN=1FCB3870851F75B01BDCC29C92CD186053091C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:3a:4c:cd:e5:8c:50:0b:d0:f2:ee:96:b6:
                    67:49:b0:21:0a:b1:b4:96:61:ad:26:69:7b:df:f9:
                    5a:32:7c:5f:ba:a4:e4:24:ae:54:45:75:8d:cb:6c:
                    e1:30:ed:cb:9f:8b:aa:c0:52:50:3f:32:9f:c2:61:
                    8f:ad:70:07:8b:6d:29:84:b6:de:18:53:8b:e4:b0:
                    b1:1a:12:c0:0f:91:b1:e4:20:fb:29:2a:eb:a8:54:
                    53:65:9d:5a:44:0d:fd:81:d6:b1:38:f1:b2:03:cf:
                    bb:c1:1b:62:97:07:4d:2f:8c:bd:a1:65:f5:d7:d6:
                    3f:38:c2:92:91:31:81:80:f8:cc:21:3f:89:a5:e1:
                    cd:5d:4d:32:df:d9:4b:d3:1f:9d:73:52:a3:8d:d1:
                    37:56:21:7d:a9:d9:e0:65:99:0a:88:37:dd:9a:92:
                    d0:3c:fb:b2:9c:b8:b1:6f:6e:1f:d9:74:d7:15:73:
                    cd:d4:45:5e:35:29:9a:2e:e0:aa:16:4e:66:be:2f:
                    4c:63:0e:34:8a:d5:81:aa:3f:7f:ea:12:c5:dc:cc:
                    8e:43:b0:07:1d:28:fd:5a:4b:5d:a4:0e:2c:f6:cb:
                    0a:14:45:af:88:43:56:8a:c8:d1:f6:01:f7:7d:52:
                    f8:fc:66:12:be:a5:5b:f6:e0:f3:80:82:69:42:d6:
                    9c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CB:38:70:85:1F:75:B0:1B:DC:C2:9C:92:CD:18:60:53:09:1C:17
            X509v3 Authority Key Identifier:
                keyid:4C:34:08:B6:E0:82:54:22:DC:2D:07:1E:49:0B:D7:CB:1F:BD:2A:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4C3408B6E0825422DC2D071E490BD7CB1FBD2A3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/81c9ce5a-6690-4901-9e0a-c27b319316be/0/3130332e37312e34342e302f32332d3233203d3e203436303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.71.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:7f:87:18:f5:df:5f:9c:92:7f:a4:c1:5a:f6:77:4e:e7:0d:
         e2:80:e8:89:53:44:62:4b:e7:3c:cc:78:af:3e:94:ea:03:74:
         5b:8a:5d:17:dc:a2:c8:2e:56:90:e3:68:b5:5c:ed:21:9e:3e:
         5e:5d:a0:25:19:ba:b9:44:05:2a:73:63:c0:1d:7d:8c:30:27:
         c8:80:ec:d6:0b:43:52:df:f9:43:c2:9b:2a:dd:42:e8:dc:8e:
         50:a9:5a:1e:81:97:cb:70:a1:57:42:ed:0a:56:65:f5:c9:96:
         27:c3:c9:fb:27:e1:47:2c:cb:fe:eb:8b:31:99:f5:c5:0b:a4:
         28:1a:61:36:38:84:da:cf:31:76:cf:8f:96:5b:61:3c:80:51:
         86:45:62:c2:26:0e:be:7a:b3:85:b8:33:81:53:e0:81:dc:99:
         07:29:02:47:a9:ab:68:13:01:3f:2e:49:b8:d6:5a:26:6e:1f:
         b3:47:90:af:7b:fc:48:70:e9:ec:7c:0d:1c:75:f9:4f:1d:77:
         48:d2:34:ed:8c:0c:1c:68:a0:5c:e8:2f:37:95:b4:a1:35:89:
         69:cd:94:86:63:00:08:4c:43:18:5a:58:f1:1f:04:eb:67:23:
         ac:76:d4:ea:0b:05:71:fe:73:1e:73:fa:78:84:20:c0:b2:70:
         e5:3a:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:02:56 2024 by rpki-client on console-fra.rpki-client.org