Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
File:                     3130332e34392e33312e302f32342d3234203d3e203633383632.roa (raw, json)
Hash identifier:          BHGtgKoYn3ODJkpc4a+/3Knedwskq25W4+tYx/+4rG8=
Subject key identifier:   12:D8:0D:FF:AF:80:D5:7F:E3:89:35:1A:2A:C3:FC:FA:85:8E:C3:9A
Certificate issuer:       /CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
Certificate serial:       709AB3C638479D4446CEDBAA41BFDEC4E0A00F4F
Authority key identifier: 76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa
Signing time:             Mon 01 Jul 2024 01:06:09 +0000
ROA not before:           Mon 01 Jul 2024 01:01:09 +0000
ROA not after:            Mon 30 Jun 2025 01:06:09 +0000
asID:                     63862
IP address blocks:        103.49.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl
                          rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:9a:b3:c6:38:47:9d:44:46:ce:db:aa:41:bf:de:c4:e0:a0:0f:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=764B23EB6C63FFCAA305F37DBE9B904AE01D60C9
        Validity
            Not Before: Jul  1 01:01:09 2024 GMT
            Not After : Jun 30 01:06:09 2025 GMT
        Subject: CN=12D80DFFAF80D57FE389351A2AC3FCFA858EC39A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:33:92:93:ae:78:9a:d8:e8:1d:bf:81:df:5a:
                    66:5a:2e:7e:fb:31:6f:01:14:92:0b:35:8a:cb:97:
                    96:3c:df:55:8b:83:55:bd:d2:50:8c:7b:bc:28:76:
                    96:07:48:b3:3f:bb:59:4c:de:5b:7c:cb:bd:72:70:
                    c9:79:5f:27:5e:bb:03:e6:b7:b0:b6:16:54:82:d1:
                    ed:20:51:cf:54:f3:3d:af:14:f3:fb:f1:ee:ea:59:
                    37:e9:b6:25:15:1b:ee:44:20:49:a4:a3:87:7c:97:
                    72:6d:90:4b:2b:04:91:29:07:20:07:39:61:2d:40:
                    ec:e8:d7:0c:b3:ff:77:74:86:66:94:ed:91:ec:83:
                    c4:f9:e0:89:1d:d7:aa:d4:dc:d3:59:2a:6f:63:eb:
                    0f:a0:ca:6e:3c:94:bf:ef:c6:98:61:0d:a3:86:ab:
                    d9:cd:f5:5b:1c:03:c0:0e:d8:c7:94:1a:8b:8b:ae:
                    4f:c9:0a:b4:1b:ca:13:85:c1:c2:e3:a4:b0:b7:30:
                    bb:d4:0e:fd:ad:cd:a4:bc:f6:82:78:8e:cd:89:c5:
                    f7:c6:e6:d9:59:aa:ba:30:89:7b:49:4f:b1:63:a2:
                    96:b6:fd:f1:f5:b6:a2:90:6a:82:fb:b3:f6:8b:bb:
                    f5:f7:45:83:72:09:02:41:91:ec:1b:8b:12:a4:27:
                    cd:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:D8:0D:FF:AF:80:D5:7F:E3:89:35:1A:2A:C3:FC:FA:85:8E:C3:9A
            X509v3 Authority Key Identifier:
                keyid:76:4B:23:EB:6C:63:FF:CA:A3:05:F3:7D:BE:9B:90:4A:E0:1D:60:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/764B23EB6C63FFCAA305F37DBE9B904AE01D60C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/87e830c8-d559-456a-8835-4f6eb5527aa2/0/3130332e34392e33312e302f32342d3234203d3e203633383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:51:4f:6f:dc:df:e0:58:40:9c:42:1d:fd:29:b6:4b:4b:f4:
         69:13:f1:37:56:32:1e:0f:72:8e:1a:c0:e6:2e:76:a2:86:b2:
         f3:69:18:5a:5f:2d:15:48:d6:55:4f:9c:ed:7a:8a:71:29:6f:
         8b:5f:61:21:d0:8c:ba:da:85:14:db:52:5f:a4:cc:67:b9:c4:
         b8:f6:ed:19:5a:58:33:1f:a6:68:5c:6d:e6:d6:b8:ab:ce:b2:
         84:9d:bd:09:7e:8a:b6:db:ad:ac:69:6b:1a:53:88:c0:30:73:
         d3:b8:e7:60:4e:cd:aa:54:58:e5:a5:62:5c:50:16:1d:18:20:
         61:04:5b:77:35:43:f9:5f:f3:ff:07:4a:a7:b6:3a:2d:36:a9:
         12:38:2a:0e:fe:4a:6e:6b:86:f0:e5:fa:64:a2:b8:aa:fd:13:
         c8:57:ee:88:f2:a6:31:10:8b:3c:27:c5:16:16:6f:aa:67:c1:
         c2:da:c2:93:9f:ae:cf:6f:df:2d:8f:55:57:94:c7:cd:c2:91:
         a0:ff:bf:f3:60:80:c4:b5:94:14:4c:ba:ac:b8:c8:f8:5f:1c:
         3a:9d:fd:f4:63:ef:12:fe:75:86:a1:f5:44:fb:01:f0:5e:92:
         6a:05:b9:34:ee:9b:4e:78:92:d7:a9:c7:a0:93:22:ae:38:ce:
         66:83:46:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:24 2024 by rpki-client on console-ams.rpki-client.org