Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa
File:                     3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (raw, json)
Hash identifier:          oLlilqzt6vQeDsNXQd7i6jG8F6R4Z1xuBAe0c7a+BVs=
Subject key identifier:   BF:2E:43:41:2E:F2:7D:3E:00:96:8F:B6:23:13:6A:BF:5F:1C:18:4B
Certificate issuer:       /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial:       4081E9F32411397A9A50377016C2276EC86BB75F
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa
Signing time:             Thu 12 Oct 2023 15:50:09 +0000
ROA not before:           Thu 12 Oct 2023 15:45:09 +0000
ROA not after:            Thu 10 Oct 2024 15:50:09 +0000
asID:                     150484
IP address blocks:        103.55.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
                          rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 08:47:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:81:e9:f3:24:11:39:7a:9a:50:37:70:16:c2:27:6e:c8:6b:b7:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
        Validity
            Not Before: Oct 12 15:45:09 2023 GMT
            Not After : Oct 10 15:50:09 2024 GMT
        Subject: CN=BF2E43412EF27D3E00968FB623136ABF5F1C184B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:35:ea:db:9b:07:e0:2a:84:b3:95:f4:3a:ea:
                    d0:00:a6:92:c7:8f:bd:9c:d9:2b:56:f1:e1:8b:5b:
                    5f:0f:e1:81:7f:75:88:98:58:e2:e0:28:bc:de:f1:
                    c3:a3:2d:ce:31:1b:bb:3e:73:4b:5f:84:28:93:2a:
                    2f:cc:76:90:cb:2a:d8:d9:50:41:98:59:c3:fd:2f:
                    e8:ae:6f:6d:11:38:a1:66:c7:3a:8e:50:8e:0f:98:
                    6f:6d:45:32:c9:8a:b1:30:eb:48:cc:52:95:43:e8:
                    a3:5f:6b:41:f5:43:73:6a:fd:ab:40:e5:33:0c:89:
                    bb:bd:38:38:93:48:3a:f9:dc:ad:55:32:50:f2:a4:
                    da:94:82:06:61:ab:fb:3c:81:ce:dd:33:8e:dc:2f:
                    8e:20:ad:3d:b4:70:0e:b4:19:ca:de:97:eb:51:70:
                    e9:ef:38:41:2e:71:99:09:cd:13:b7:05:ba:2c:31:
                    d0:0b:c6:30:25:42:04:77:11:3a:e9:92:53:83:2e:
                    e6:45:35:2a:b0:23:3c:ff:9b:e6:4e:0e:b7:30:f5:
                    c0:7e:19:ff:bd:67:24:d7:ff:af:91:d1:11:f4:fb:
                    4e:1a:d9:c7:28:d3:cd:98:9a:3d:41:10:10:a6:f4:
                    a6:a2:4f:16:0a:ce:45:73:1e:dc:a0:98:30:21:55:
                    2a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:2E:43:41:2E:F2:7D:3E:00:96:8F:B6:23:13:6A:BF:5F:1C:18:4B
            X509v3 Authority Key Identifier:
                keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         d5:67:b0:2e:44:95:88:dc:00:ba:55:f7:85:d1:c4:44:c2:10:
         78:f1:0b:5c:3f:bc:62:15:36:82:fc:0f:d9:eb:5d:9a:a5:a4:
         35:61:8a:4a:e0:28:ca:d4:6b:6e:e3:01:de:2d:fc:47:5a:38:
         2d:13:8c:cd:fe:18:4c:4b:f6:4a:cc:cc:2a:6c:a2:22:eb:47:
         ab:31:93:77:d2:bd:d8:0d:9a:a6:28:2f:ce:74:a3:d7:7c:1d:
         1c:41:cb:be:6c:96:fa:20:cd:2e:44:e7:dc:fe:98:72:0a:d3:
         94:99:f0:6d:c7:16:b8:c3:cb:a3:fe:6b:dd:b0:64:10:d3:9d:
         29:51:0f:69:1e:07:bb:de:ba:c2:ee:bc:9d:0b:58:ed:aa:e0:
         b8:28:82:95:a2:ef:06:6a:58:99:a4:fd:9b:f0:b5:d3:d4:93:
         e5:11:ee:05:01:28:fc:3c:83:f3:d6:ba:f7:ce:8d:b6:3e:60:
         fe:60:fb:88:38:84:e3:b7:da:aa:4f:0f:0c:de:a2:01:0d:a5:
         35:f8:20:41:77:08:b7:46:b1:c6:1d:80:12:8a:b8:f4:4c:8b:
         ef:75:77:86:96:4a:1a:21:1a:59:8a:4e:9a:98:0e:cd:28:1f:
         84:7a:70:0a:56:db:57:b4:74:8b:30:d5:16:23:75:e7:45:23:
         24:e5:0e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 2 07:53:01 2024 by rpki-client on console-fra.rpki-client.org