Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32342d3234203d3e20313333373938.roa
File:                     3130332e34342e33362e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          3PZ6pRisZaU22vgYfmEVHCpGAOvxOd5CcJ/C56qR0E8=
Subject key identifier:   67:F3:5D:44:56:EC:D6:1F:B9:78:70:40:B5:72:BC:52:35:51:B2:BE
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       0CF5245772F6A383C420D1739062B3E98D0D84FA
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32342d3234203d3e20313333373938.roa
Signing time:             Tue 06 Feb 2024 03:47:59 +0000
ROA not before:           Tue 06 Feb 2024 03:42:59 +0000
ROA not after:            Tue 04 Feb 2025 03:47:59 +0000
asID:                     133798
IP address blocks:        103.44.36.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f5:24:57:72:f6:a3:83:c4:20:d1:73:90:62:b3:e9:8d:0d:84:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Feb  6 03:42:59 2024 GMT
            Not After : Feb  4 03:47:59 2025 GMT
        Subject: CN=67F35D4456ECD61FB9787040B572BC523551B2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:37:cd:63:09:91:63:34:3e:9a:16:a6:74:7c:
                    9a:89:f3:95:0d:62:da:a1:8e:63:30:0f:d0:43:07:
                    cd:b0:ea:e4:6f:c3:4a:58:ff:87:a0:38:8c:e8:a1:
                    2b:bd:85:04:4a:f1:22:3b:fa:fa:e7:b7:c6:9e:7d:
                    05:05:51:93:b6:cb:60:ed:7f:19:1b:c9:e8:f6:e7:
                    55:da:3e:eb:f5:de:69:03:b8:c9:3d:65:b9:09:f4:
                    f5:73:71:6b:69:32:68:1f:d3:5c:db:15:a1:2f:99:
                    af:b5:6e:91:a9:54:33:87:df:12:de:d8:84:05:92:
                    f2:c7:09:df:4d:9c:91:b2:6b:83:dc:01:97:58:2b:
                    ed:5c:90:05:b1:bb:ec:68:00:b2:b7:a8:19:7c:6e:
                    c8:ae:7f:e5:1d:8e:3b:5a:10:5e:72:a7:7b:37:1d:
                    95:de:bc:bf:ac:ef:bd:c7:86:04:f8:a4:c3:0f:48:
                    1f:7f:e0:11:79:80:cd:76:0b:d5:d2:96:52:45:85:
                    ab:e9:84:3d:31:8b:14:b7:42:54:0f:69:c9:c8:f9:
                    6c:11:2c:74:37:9d:b2:8c:ca:50:f8:ab:75:cf:f5:
                    8b:4a:18:f9:0c:71:de:f2:01:5f:ca:ee:2c:d2:f7:
                    11:21:b9:ec:a9:96:78:1b:83:00:8e:8d:6d:e2:c1:
                    34:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:5D:44:56:EC:D6:1F:B9:78:70:40:B5:72:BC:52:35:51:B2:BE
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33362e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.36.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:bb:7a:3f:ca:31:77:df:0c:62:5b:14:64:a7:c7:28:57:44:
         e1:4c:c4:37:bb:6b:ce:ff:40:d6:d9:c3:e5:e0:cc:5b:17:c2:
         7b:af:aa:03:89:61:46:4c:d6:17:2a:63:25:96:54:b7:08:eb:
         ea:1b:5a:1d:81:00:b9:25:f6:8a:67:0c:5f:77:64:6c:3e:ed:
         b0:23:fc:e4:84:52:ca:78:8a:3c:76:f4:47:39:a8:e6:22:a5:
         87:b6:50:8a:8f:47:c2:d1:00:4d:d7:b3:cc:4e:c5:da:f5:59:
         69:08:cb:2e:c8:6c:41:39:a4:b2:eb:89:a8:a6:51:66:55:90:
         88:fa:05:bb:3d:45:a8:71:da:ee:a7:e4:b0:b3:e7:b6:9e:09:
         33:fd:0b:43:06:4a:20:bf:87:56:c3:1f:97:ec:a0:2d:84:7e:
         78:98:da:e9:24:1b:ad:2d:95:2e:e6:02:55:e2:96:e0:08:c6:
         7d:47:5e:a1:6f:9b:c3:c7:54:0d:97:43:72:1b:68:a5:47:66:
         0e:d9:5a:4c:0c:be:1f:65:b9:da:35:ec:6b:cc:18:c6:a9:35:
         29:99:ee:12:88:7a:9c:51:5d:70:cc:d4:ca:98:5c:ac:df:9a:
         81:d5:19:1e:8f:77:84:d4:50:be:dd:6d:f2:c6:53:09:9b:57:
         7a:ee:1a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:07:51 2024 by rpki-client on console-ams.rpki-client.org