Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa
File:                     3130332e35352e33312e302f32342d3234203d3e20313530343834.roa (raw, json)
Hash identifier:          hJMRzuFAspptn4AlzH4LAwOhzmHjNIsN+aWqgtRAR7g=
Subject key identifier:   13:20:C3:40:F4:B5:E0:F8:7D:90:CE:BA:71:BD:55:5E:B2:D7:89:85
Certificate issuer:       /CN=C33BE6D76C1444B4695CC56D706802967A2A404E
Certificate serial:       3A6A1E7C723BA2EB5C208190E12D93E035D218CB
Authority key identifier: C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa
Signing time:             Thu 12 Sep 2024 16:00:00 +0000
ROA not before:           Thu 12 Sep 2024 15:55:00 +0000
ROA not after:            Thu 11 Sep 2025 16:00:00 +0000
asID:                     150484
IP address blocks:        103.55.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl
                          rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:6a:1e:7c:72:3b:a2:eb:5c:20:81:90:e1:2d:93:e0:35:d2:18:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C33BE6D76C1444B4695CC56D706802967A2A404E
        Validity
            Not Before: Sep 12 15:55:00 2024 GMT
            Not After : Sep 11 16:00:00 2025 GMT
        Subject: CN=1320C340F4B5E0F87D90CEBA71BD555EB2D78985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:27:38:c2:a8:24:56:13:d0:db:d6:38:6c:01:
                    87:dc:66:eb:b0:82:92:a7:fc:3b:4e:d5:bb:2d:d3:
                    fc:98:3c:a8:ba:d8:b0:cc:3a:90:e2:39:4e:25:d1:
                    6f:89:15:1d:8f:e3:59:cf:7b:22:6b:46:7a:57:00:
                    90:7e:f9:06:8e:1f:d1:32:a1:d3:ea:fe:f3:98:d4:
                    72:16:c5:e7:2d:4f:ac:86:61:a3:6e:fa:4e:63:cd:
                    d1:17:d2:e8:bb:25:1f:2b:4c:dd:14:f2:ea:34:69:
                    26:c0:6a:50:5c:43:8a:b6:3e:c3:cc:c5:f1:6e:9a:
                    de:7a:b4:4a:08:42:5f:e9:3f:df:57:e2:77:d5:a7:
                    46:2c:1e:b7:6d:3d:38:e6:07:44:14:a3:ba:56:71:
                    c8:3b:ba:0e:e7:6c:ef:22:3e:00:9e:f4:da:4f:0a:
                    43:9b:13:92:ff:b5:7a:16:d7:16:61:e1:5d:e5:c1:
                    d0:48:20:fe:b1:c8:c4:5a:05:13:d1:21:57:e3:78:
                    ca:1b:5e:ec:e7:01:76:15:52:68:06:ca:1e:48:59:
                    28:f2:1e:6b:22:0b:c3:df:b7:60:c2:82:d3:19:4e:
                    29:77:b5:63:c9:ef:22:ea:5a:44:2c:ef:3d:b3:a5:
                    ae:e5:9b:b2:e5:15:d5:a0:7e:a3:3d:1a:43:3b:d0:
                    07:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:20:C3:40:F4:B5:E0:F8:7D:90:CE:BA:71:BD:55:5E:B2:D7:89:85
            X509v3 Authority Key Identifier:
                keyid:C3:3B:E6:D7:6C:14:44:B4:69:5C:C5:6D:70:68:02:96:7A:2A:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/C33BE6D76C1444B4695CC56D706802967A2A404E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C33BE6D76C1444B4695CC56D706802967A2A404E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d703b80-2e78-4d11-ab74-08017e422d6e/0/3130332e35352e33312e302f32342d3234203d3e20313530343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:80:5d:be:c1:d8:08:3e:ea:4d:03:ad:96:c9:e4:4f:32:ff:
         00:03:33:bc:70:2c:b3:52:e8:3d:28:e7:ba:13:11:aa:75:ae:
         42:ea:e4:ca:f7:dc:bf:b7:2c:cc:d3:49:9b:47:55:ce:f4:3a:
         4b:09:01:af:87:d1:d0:b4:89:8a:56:df:78:f5:f9:43:9d:9e:
         cd:cb:f3:09:89:5c:7c:c0:32:0f:80:82:22:9d:4d:c7:04:a2:
         52:7e:83:f5:a6:a1:29:46:b4:64:98:bf:cd:43:02:75:4b:c5:
         67:d5:cf:13:55:01:95:d4:c2:e3:ad:e2:bc:f6:73:eb:6b:4d:
         21:56:30:8e:e0:30:0e:3d:77:97:9a:c6:49:af:5e:98:39:ca:
         b4:de:98:6f:04:39:de:c6:9f:77:95:91:9e:7d:0d:b9:2b:0f:
         68:1d:9e:be:84:30:87:59:90:a4:5c:f2:64:a2:d6:8a:c8:90:
         ee:6b:e5:23:74:5c:61:b2:f0:34:17:e6:e5:7f:fa:53:8f:d0:
         99:aa:7b:97:1d:bf:af:4b:3a:28:65:b5:43:4c:ad:28:e1:4a:
         92:55:bb:43:58:0e:2f:ee:77:5f:3c:c4:f6:40:e5:eb:7c:36:
         9b:aa:48:3f:e0:eb:a1:6e:71:b9:6e:6c:c4:14:60:0a:30:68:
         e0:63:9e:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 23:32:59 2024 by rpki-client on console-ams.rpki-client.org