Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
File:                     3130332e3131372e33312e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          r4qCVyd3k26szOGZkVLoPrnQYgvd4y2QFV5EAdd6F0w=
Subject key identifier:   54:BC:BD:68:7C:A5:02:CB:A0:81:26:49:34:17:20:DD:BE:18:12:7C
Certificate issuer:       /CN=3E69DE558C030D2041570E32C387F764C38BBBA9
Certificate serial:       7A4B24AFA9548A03F794C618FBAC74DC4893CCE4
Authority key identifier: 3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa
Signing time:             Tue 25 Jun 2024 06:00:01 +0000
ROA not before:           Tue 25 Jun 2024 05:55:01 +0000
ROA not after:            Tue 24 Jun 2025 06:00:01 +0000
asID:                     9341
IP address blocks:        103.117.31.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl
                          rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4b:24:af:a9:54:8a:03:f7:94:c6:18:fb:ac:74:dc:48:93:cc:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3E69DE558C030D2041570E32C387F764C38BBBA9
        Validity
            Not Before: Jun 25 05:55:01 2024 GMT
            Not After : Jun 24 06:00:01 2025 GMT
        Subject: CN=54BCBD687CA502CBA0812649341720DDBE18127C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:fc:17:d2:b3:33:02:ec:be:8b:6e:d3:93:8a:
                    f1:3a:06:59:a0:6c:cc:d4:23:9c:cd:6c:d3:ef:33:
                    bc:9e:cb:f1:93:4c:6b:15:8c:41:e7:f1:ec:2a:0e:
                    3a:b4:87:f2:87:50:23:7f:c3:5f:40:a6:23:3b:a1:
                    05:04:69:85:ea:3e:49:d0:00:44:72:fa:68:9a:12:
                    1f:48:3a:bb:df:4e:61:5f:99:9e:7e:51:0e:31:c4:
                    de:47:3c:d8:59:7d:52:af:b0:cf:6b:5d:cb:32:a6:
                    44:48:41:06:27:f7:f8:4e:67:2d:d0:8c:10:47:d8:
                    6b:9b:b5:a7:93:48:1a:9d:c7:fc:0c:7c:1c:f3:0a:
                    f8:95:c2:d3:9e:ea:4c:6e:1e:a1:8e:f1:78:83:9a:
                    9f:47:47:22:d2:96:0a:7d:91:3d:32:d1:fc:d2:1e:
                    1f:da:6f:67:b1:e6:c0:38:6a:d2:d8:63:ea:26:67:
                    45:be:a3:d9:31:c1:10:71:a6:4e:b5:80:05:1d:ac:
                    51:70:fb:d4:f1:7c:55:17:42:55:a6:dd:13:55:42:
                    80:c2:66:82:2d:01:dd:62:39:c7:7d:dc:5e:d1:89:
                    ad:8e:fe:fb:9a:c2:26:0a:8b:d3:67:80:72:07:55:
                    3a:3e:41:29:34:dd:37:cf:71:8a:b6:ad:a6:45:73:
                    2c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:BD:68:7C:A5:02:CB:A0:81:26:49:34:17:20:DD:BE:18:12:7C
            X509v3 Authority Key Identifier:
                keyid:3E:69:DE:55:8C:03:0D:20:41:57:0E:32:C3:87:F7:64:C3:8B:BB:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3E69DE558C030D2041570E32C387F764C38BBBA9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3E69DE558C030D2041570E32C387F764C38BBBA9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9b3bb34-15e2-4487-b527-6e751286ce7d/0/3130332e3131372e33312e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.117.31.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:71:1a:ba:2e:e1:bc:a4:75:63:b3:4e:a1:f7:f8:39:6b:b5:
         da:96:53:0e:c9:1e:a7:3f:fb:62:fc:f0:c6:a4:a3:5f:a0:f7:
         42:9f:35:84:b1:bc:d8:e0:6a:22:08:7f:10:86:fb:b7:77:a5:
         12:61:a3:ae:1a:76:58:56:c1:f2:18:85:f1:b6:0b:ee:24:ac:
         74:95:62:0a:d8:fc:64:46:1d:6e:6c:04:5c:00:a7:91:68:59:
         7e:80:d3:1c:b4:56:c4:02:66:c0:70:17:c1:f5:64:6e:a1:af:
         5b:61:86:6d:d4:fb:86:06:86:59:11:e6:4b:a2:a1:4c:31:5a:
         cb:17:2f:6f:d7:22:07:6b:d4:30:51:21:f3:5e:4f:d1:ad:a1:
         0f:ea:33:7f:84:d7:3e:36:84:bb:18:79:37:ee:f8:82:6e:fc:
         ca:d9:89:d6:a2:f7:d4:7b:ee:30:0b:2e:dc:82:e3:2e:a8:53:
         25:e5:0f:af:06:b7:46:48:cb:f7:80:fb:72:10:30:66:5b:68:
         bc:b2:00:fb:f4:90:09:08:98:b3:a5:e0:c6:7d:49:cc:32:20:
         ce:4c:3d:0d:03:5f:1a:44:fd:b5:ac:56:62:38:a9:f6:e4:26:
         70:23:8c:fc:c2:33:c7:af:da:d5:d3:b3:f8:ea:2a:2c:18:e5:
         2f:d9:40:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:39 2024 by rpki-client on console-ams.rpki-client.org