Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
File:                     3130332e34342e33362e302f32322d3232203d3e20313333373938.roa (raw, json)
Hash identifier:          PFXCS8rL+1zYTYERR01jD5Xuf6IpBc+ddZMkj/TSGrI=
Subject key identifier:   56:C5:60:4D:9D:ED:EE:FE:A0:62:B7:D8:DB:72:2D:18:7E:C5:94:5B
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       057B325E3B5DFB0157F048812F18DA32203BD301
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa
Signing time:             Tue 06 Feb 2024 03:43:17 +0000
ROA not before:           Tue 06 Feb 2024 03:38:17 +0000
ROA not after:            Tue 04 Feb 2025 03:43:17 +0000
asID:                     133798
IP address blocks:        103.44.36.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:7b:32:5e:3b:5d:fb:01:57:f0:48:81:2f:18:da:32:20:3b:d3:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Feb  6 03:38:17 2024 GMT
            Not After : Feb  4 03:43:17 2025 GMT
        Subject: CN=56C5604D9DEDEEFEA062B7D8DB722D187EC5945B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:23:5f:c5:d6:86:99:92:43:c3:d4:e3:9b:31:
                    9f:cf:1f:fa:86:42:36:db:c1:ac:9f:d9:f1:a5:c2:
                    c9:be:25:81:de:d4:31:bf:94:fd:ad:9b:c6:d5:99:
                    c1:10:65:7e:62:ff:e5:98:01:2c:51:b0:a6:1c:b7:
                    eb:7e:64:89:a2:25:d4:7f:1f:aa:3c:d3:a7:e5:ae:
                    a7:16:76:c7:f1:68:84:38:55:cd:56:30:07:e0:9a:
                    a9:b5:3e:33:62:10:fb:cb:d4:20:3d:0d:38:96:cb:
                    57:77:56:74:b0:63:38:44:14:a8:ff:f6:88:af:bd:
                    5c:04:9f:ec:0e:cc:ad:56:55:3a:f5:bf:de:cb:bc:
                    d3:3c:bc:ed:dd:36:d0:c4:78:7d:e8:19:33:16:fe:
                    85:f7:45:49:fd:96:9b:aa:4a:c5:f7:f7:99:3f:89:
                    89:6c:fd:21:09:91:c4:9e:ad:71:7c:2c:c9:54:f6:
                    39:b8:3b:08:5e:51:07:19:c0:25:a3:8f:c4:8a:5e:
                    e1:7a:1a:fd:ec:f9:77:57:a7:af:3b:af:2d:33:b1:
                    70:27:17:dc:5b:8d:06:13:67:21:b0:a4:16:70:43:
                    d9:ea:dc:55:d1:c1:46:6b:ba:61:d9:d0:de:82:94:
                    1d:c5:23:9c:75:b4:84:30:d3:20:08:b8:21:be:b3:
                    25:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:60:4D:9D:ED:EE:FE:A0:62:B7:D8:DB:72:2D:18:7E:C5:94:5B
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32322d3232203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:fa:94:99:38:f4:e6:53:b6:21:9a:fe:17:5e:d7:06:af:5d:
         33:82:c7:56:53:0e:0e:0d:d5:69:90:79:71:a6:e7:9f:77:36:
         f2:f5:ed:87:eb:57:ae:b5:b9:ff:8a:f5:f2:2f:e2:61:71:82:
         fd:83:ef:42:ce:a9:2e:e8:9c:7e:19:d3:9a:b0:8e:96:35:fe:
         a7:37:13:ef:22:b1:d8:ed:f3:e5:a1:0c:b0:db:b0:28:f0:ca:
         9c:93:f7:1f:e2:0a:1f:35:d7:6e:34:b4:39:ed:17:62:ed:3b:
         8a:a1:dd:6d:9a:56:0f:9d:63:b6:eb:7a:be:7d:dc:0b:99:3c:
         ed:97:96:66:ce:b5:58:46:2c:a4:f7:ec:da:f2:53:ed:54:5f:
         26:e6:4e:87:eb:07:87:b7:8d:bf:86:a1:cb:8a:f2:48:0c:3f:
         46:11:76:90:ae:c6:0b:7e:57:95:f2:3b:50:03:2f:79:01:42:
         e1:eb:9d:06:c8:5a:fe:a6:e5:76:4e:9c:49:ca:9c:44:46:76:
         e0:7b:63:18:d6:5f:40:c8:3c:41:10:64:b6:cb:df:5a:f0:71:
         13:02:fa:d3:20:2e:3f:3f:6b:e8:94:5e:4c:b2:21:89:c6:fc:
         42:f5:a4:ba:7c:69:51:c6:74:11:d1:bb:fa:65:23:c4:f6:46:
         8e:3b:38:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org