Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa
File:                     3130332e34342e33382e302f32342d3234203d3e20313333373938.roa (raw, json)
Hash identifier:          k4BfMkrkR1Xe/B3g7lq1YTofjpm7e/XEsup9Nlx3MOQ=
Subject key identifier:   94:47:23:AE:69:D9:5E:CA:22:92:88:EC:2F:1D:5B:E3:90:C7:ED:FE
Certificate issuer:       /CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
Certificate serial:       60EF00D4DC924DF5982B1F74DEB09FFFE1A680B9
Authority key identifier: 34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa
Signing time:             Tue 13 Feb 2024 08:08:58 +0000
ROA not before:           Tue 13 Feb 2024 08:03:58 +0000
ROA not after:            Tue 11 Feb 2025 08:08:58 +0000
asID:                     133798
IP address blocks:        103.44.38.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl
                          rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ef:00:d4:dc:92:4d:f5:98:2b:1f:74:de:b0:9f:ff:e1:a6:80:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=347A275985EAE5BC9BA6C5CB929C06FA84C16B39
        Validity
            Not Before: Feb 13 08:03:58 2024 GMT
            Not After : Feb 11 08:08:58 2025 GMT
        Subject: CN=944723AE69D95ECA229288EC2F1D5BE390C7EDFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:5d:3e:03:72:aa:8d:81:03:09:d2:6e:48:
                    59:de:b7:20:c1:32:1e:40:b6:82:9d:cd:0f:cf:75:
                    85:5d:d2:69:8d:c3:ff:82:fe:b5:9c:8f:66:e1:f0:
                    9a:aa:23:f3:26:24:df:36:ec:e0:f3:61:8f:27:32:
                    05:f5:cf:92:bd:77:46:28:d0:db:f6:47:33:10:a4:
                    8b:91:bb:9d:7a:10:bc:83:0e:40:f2:7b:4e:ec:fd:
                    50:49:b9:8f:8c:cb:52:eb:15:76:e7:79:ad:6f:dc:
                    87:f9:78:55:6d:f0:cb:37:10:40:b1:59:c1:ef:b2:
                    22:7e:89:86:28:73:2f:47:52:77:56:7e:be:46:4b:
                    56:84:d5:95:30:91:37:66:0a:0c:c8:b8:5e:64:19:
                    40:f1:a1:09:bf:93:b7:48:3f:b0:ba:09:f8:22:cb:
                    da:e0:48:b7:ca:b5:56:fb:b6:72:d3:1d:40:19:cb:
                    62:d7:51:39:26:1d:a7:10:1f:76:83:e3:34:91:bb:
                    b3:3e:00:90:5e:29:b1:77:d0:99:5a:4f:04:09:a4:
                    e2:1f:ff:98:a1:73:a9:b6:ea:d2:04:90:c3:1b:b2:
                    90:d0:b5:23:6f:c7:47:6b:3a:0a:83:54:3a:83:1e:
                    61:b4:9a:63:e5:9a:e6:5d:2f:6c:e1:94:7a:1a:c0:
                    2a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:47:23:AE:69:D9:5E:CA:22:92:88:EC:2F:1D:5B:E3:90:C7:ED:FE
            X509v3 Authority Key Identifier:
                keyid:34:7A:27:59:85:EA:E5:BC:9B:A6:C5:CB:92:9C:06:FA:84:C1:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/347A275985EAE5BC9BA6C5CB929C06FA84C16B39.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c303e6bb-7349-47aa-a4cd-51d8a0e222f6/0/3130332e34342e33382e302f32342d3234203d3e20313333373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.44.38.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:11:9e:58:d3:cb:42:b9:46:34:ce:de:d5:2e:7a:88:79:46:
         9e:5f:64:d4:82:fe:27:57:83:66:87:5b:93:33:45:d4:94:0a:
         bf:2c:5b:7a:3e:04:5b:0e:8f:fd:65:e0:86:a5:e2:82:99:6f:
         89:db:dd:ae:31:91:89:c9:6b:9c:f4:7c:10:a0:09:c8:63:3e:
         9d:f6:35:84:7c:a0:c7:e1:37:91:a9:9a:52:c3:18:39:43:fa:
         fc:80:25:71:e2:d5:35:44:6e:f4:50:e8:61:b3:2e:25:fb:58:
         71:2c:90:82:20:8c:72:6d:d0:2c:be:01:09:26:e4:e5:a5:3c:
         df:0c:ad:94:cf:73:71:5e:dc:86:72:fd:d5:5b:c7:79:cf:d5:
         b7:dc:71:0a:23:7a:d9:d1:19:c7:08:2f:11:28:6a:e3:39:83:
         5b:00:76:33:07:92:55:79:db:0a:66:91:fc:e3:ec:9e:81:72:
         16:11:85:d7:0d:ff:cb:72:29:71:64:0f:fb:f8:ca:f4:42:f3:
         62:c3:ff:a2:2e:7d:d3:fe:27:c6:60:f2:50:8d:ba:09:cc:c4:
         ca:6f:c0:31:f9:72:fb:80:5b:95:79:91:d2:af:24:5c:88:2e:
         36:fb:28:2b:a8:be:68:05:9f:b7:a2:00:1c:32:71:16:7b:7b:
         f5:76:35:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org