Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa
File:                     3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa (raw, json)
Hash identifier:          sBxp22xbnH1VYVm5wOCNdv6slgo86f4H6v+gnNzHdGA=
Subject key identifier:   40:40:0D:46:AB:EF:0D:E3:C7:53:5F:2A:61:5D:8F:B8:88:8C:A9:FD
Certificate issuer:       /CN=49E12E5CDD57B2E343A560CA6816C93C81748A71
Certificate serial:       775F7927BD001FF2440CE8472E5254D7519236F4
Authority key identifier: 49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa
Signing time:             Thu 16 Nov 2023 10:01:00 +0000
ROA not before:           Thu 16 Nov 2023 09:56:00 +0000
ROA not after:            Thu 14 Nov 2024 10:01:00 +0000
asID:                     38758
IP address blocks:        103.131.219.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl
                          rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 03 Jun 2024 17:22:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:5f:79:27:bd:00:1f:f2:44:0c:e8:47:2e:52:54:d7:51:92:36:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49E12E5CDD57B2E343A560CA6816C93C81748A71
        Validity
            Not Before: Nov 16 09:56:00 2023 GMT
            Not After : Nov 14 10:01:00 2024 GMT
        Subject: CN=40400D46ABEF0DE3C7535F2A615D8FB8888CA9FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:59:8b:ee:06:97:22:49:ba:0d:ec:4a:fa:93:
                    33:d3:fc:5e:7b:37:83:79:a6:25:e2:dc:4e:93:8d:
                    0e:b7:9b:eb:8a:82:c4:b3:e8:52:b5:01:30:99:00:
                    68:79:08:88:40:4e:f8:c0:32:97:87:7c:69:3f:24:
                    35:07:fd:19:2b:a3:61:69:69:41:ea:6a:8b:f9:14:
                    f3:14:63:20:85:86:60:0c:c6:45:96:36:2b:93:23:
                    77:a9:43:06:cb:b4:ad:5c:71:82:b8:6c:49:fa:f7:
                    07:f2:1e:7a:28:e1:10:a2:eb:44:6b:f1:01:77:1e:
                    67:25:3b:d9:db:78:52:c8:ac:0c:54:20:f2:ff:32:
                    11:ca:4d:a2:f5:2c:0c:16:e4:4e:9c:26:49:70:7f:
                    1c:ed:92:83:7e:10:fe:e9:68:b4:8f:23:09:ea:86:
                    45:98:2c:45:2b:2a:a4:e1:c8:d6:79:f6:48:65:02:
                    4f:b7:e4:c3:dd:1c:e9:b0:0d:8a:09:cf:86:86:67:
                    6f:65:fb:95:e6:55:54:b1:8e:df:f0:d1:54:e6:f7:
                    d4:0b:c8:44:f5:73:d2:71:af:bd:24:0d:8e:7e:5f:
                    00:09:d7:39:5d:dd:85:70:24:cf:d3:c2:d4:d0:2b:
                    5e:1c:b2:33:86:b8:08:9f:a0:93:70:65:d1:50:2d:
                    86:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:40:0D:46:AB:EF:0D:E3:C7:53:5F:2A:61:5D:8F:B8:88:8C:A9:FD
            X509v3 Authority Key Identifier:
                keyid:49:E1:2E:5C:DD:57:B2:E3:43:A5:60:CA:68:16:C9:3C:81:74:8A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/49E12E5CDD57B2E343A560CA6816C93C81748A71.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/49E12E5CDD57B2E343A560CA6816C93C81748A71.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d553edab-4a3d-44e4-8d96-625a1c20378d/0/3130332e3133312e3231392e302f32342d3234203d3e203338373538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:be:9c:b7:5e:25:f2:d2:78:bf:23:a2:09:29:6f:69:72:0d:
         bb:fb:23:47:79:a5:36:15:b5:83:cb:37:43:4a:c8:0d:79:8a:
         2f:d4:39:df:f9:01:01:8e:e2:72:30:0f:d5:9a:ac:ad:c0:62:
         6b:e4:6d:3c:8e:66:93:c6:c7:72:90:12:45:b7:47:6d:cd:12:
         af:b5:96:45:01:04:e5:fb:41:48:ec:2a:d4:f7:02:c0:42:29:
         ba:03:bd:82:14:f6:c0:ca:72:e4:84:9a:c3:86:2a:58:82:de:
         10:02:30:7b:81:b9:78:a6:97:85:d3:ad:81:ad:2c:84:e4:33:
         b4:1e:80:76:09:18:a2:13:6b:71:e8:38:91:9f:06:f9:50:4c:
         f8:e9:cd:1c:56:de:27:d3:d6:c6:fe:39:97:a3:a2:94:d4:5f:
         66:2c:6b:9f:94:b4:ba:dc:3c:97:14:ee:5d:27:9e:f2:dc:f5:
         98:50:77:4b:33:67:28:6d:4e:3b:94:67:81:35:06:70:cb:32:
         92:88:b3:d9:57:b7:48:21:a9:e3:2f:97:35:a3:8f:a1:0b:c8:
         d1:10:29:31:74:ae:ab:fa:ec:df:89:f1:33:b0:a5:c6:49:65:
         0f:96:13:1f:7d:30:4a:e0:f6:20:e8:bc:2d:b5:e0:91:98:a0:
         c4:9b:b0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 17:43:04 2024 by rpki-client on console-fra.rpki-client.org