Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa
File:                     3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa (raw, json)
Hash identifier:          2tQETffQCWYJSuk6R3wm2Idnm8CYOzoBAWSJyUiZsx0=
Subject key identifier:   CC:47:C7:99:17:82:03:F7:77:E8:B4:46:50:54:F1:52:24:22:89:CB
Certificate issuer:       /CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
Certificate serial:       79F2D1E457A7FFFE71034280232EDC3F8C449D61
Authority key identifier: AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa
Signing time:             Mon 28 Aug 2023 08:00:00 +0000
ROA not before:           Mon 28 Aug 2023 07:55:00 +0000
ROA not after:            Mon 26 Aug 2024 08:00:00 +0000
asID:                     131754
IP address blocks:        103.31.207.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl
                          rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:f2:d1:e4:57:a7:ff:fe:71:03:42:80:23:2e:dc:3f:8c:44:9d:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906
        Validity
            Not Before: Aug 28 07:55:00 2023 GMT
            Not After : Aug 26 08:00:00 2024 GMT
        Subject: CN=CC47C799178203F777E8B4465054F152242289CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:16:64:6e:9a:ea:73:98:a6:aa:85:28:b6:32:
                    40:7e:f3:ea:21:e0:6b:6d:df:6a:bd:f0:13:82:79:
                    7f:5d:48:d9:10:f2:64:c4:73:b4:3b:a2:69:e9:6a:
                    eb:4c:0c:e9:c3:81:8c:25:19:b3:7c:07:b2:50:a1:
                    f1:c7:0d:b2:d3:40:59:e5:3c:92:9d:3f:d9:c6:42:
                    2b:ef:76:fb:36:eb:42:63:4e:f0:f9:fb:71:c5:ac:
                    00:54:0b:8d:d7:a2:95:9c:d3:1b:1a:73:25:f0:b0:
                    81:ca:20:c8:ff:2f:1b:b1:51:dd:dc:a9:8e:85:54:
                    6f:86:50:3a:20:2b:a0:5c:bf:b1:07:8f:62:c5:a1:
                    d0:6a:b2:a2:7d:4a:62:7d:1e:d0:24:6b:80:44:04:
                    41:fc:c0:af:f6:a2:1a:c0:c0:c2:4d:35:ac:cb:9a:
                    57:82:9c:e3:a1:72:45:16:4f:8c:9f:2a:7d:e5:df:
                    31:f7:d1:af:11:87:7b:7e:62:0e:99:65:fa:8a:30:
                    24:c3:f5:ac:82:56:2f:06:83:41:ad:5b:26:ed:56:
                    d0:be:f7:15:d6:e3:41:dc:8a:b4:1a:b7:dc:4a:4a:
                    47:53:8c:a1:3d:a3:ed:56:de:3e:ee:25:14:e9:e9:
                    7c:81:aa:01:3a:62:8b:92:bc:74:df:7d:1f:ac:e5:
                    aa:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:47:C7:99:17:82:03:F7:77:E8:B4:46:50:54:F1:52:24:22:89:CB
            X509v3 Authority Key Identifier:
                keyid:AD:1C:BB:E3:A1:AB:E1:CA:26:44:C3:E2:DF:83:1E:F9:9B:61:A9:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD1CBBE3A1ABE1CA2644C3E2DF831EF99B61A906.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b32e945c-ed3d-489a-83ed-5017273d5aa5/0/3130332e33312e3230372e302f32342d3234203d3e20313331373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:ae:fb:da:ec:6e:8e:3e:5e:9f:f1:5b:16:ea:cf:50:8f:62:
         51:e9:4d:1e:02:34:23:11:61:23:15:ca:a8:15:df:98:6e:55:
         5e:cb:ff:dc:a1:82:e2:b2:3d:6e:d1:20:68:44:ca:24:41:33:
         a1:d5:f5:10:ae:5b:82:c2:32:64:cb:38:2e:04:f8:86:1f:27:
         65:c0:bd:3e:4a:35:c2:89:c3:2a:96:67:40:d9:56:70:fd:dc:
         44:3b:6f:dd:25:3e:f9:a5:f4:db:05:f0:f5:ee:9c:c1:ab:79:
         f5:57:e2:71:bb:e7:bd:18:bb:24:58:50:2d:54:e7:77:da:ba:
         75:40:8b:0e:19:55:d5:92:c7:5f:b5:56:7d:56:b6:e7:cc:54:
         8b:63:1d:69:e2:e9:63:37:f4:f1:61:6d:00:d1:de:90:0e:e4:
         d2:81:2a:21:ec:01:11:f9:4b:6f:c6:2b:bb:a8:f0:c7:37:e4:
         db:cd:08:ca:15:bd:9d:e1:a5:a2:f6:ad:37:aa:e0:81:dd:48:
         9d:92:5e:39:f3:eb:9a:fc:ab:f6:b0:2e:c2:f2:f4:4e:83:94:
         bc:c3:24:01:a4:b0:80:0d:ee:27:83:98:ab:68:af:21:50:1c:
         79:7c:4d:ac:71:e7:36:18:ab:89:c4:bf:3a:1b:dd:a0:7a:ca:
         99:2d:88:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 19:53:45 2024 by rpki-client on console-fra.rpki-client.org