Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
File:                     3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          QXvwGOBfYEQTcDFmrG/qGhY3VpPMLXASegbsfXk0/ZI=
Subject key identifier:   4D:8D:19:54:DF:BC:93:3C:F6:98:E3:94:8E:EA:F0:AB:BD:53:63:7E
Certificate issuer:       /CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
Certificate serial:       31E32B898186B98E4D1FAB5EE2C8440A01088A13
Authority key identifier: 8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa
Signing time:             Wed 19 Jun 2024 04:01:44 +0000
ROA not before:           Wed 19 Jun 2024 03:56:44 +0000
ROA not after:            Wed 18 Jun 2025 04:01:44 +0000
asID:                     131111
IP address blocks:        103.171.30.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl
                          rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:e3:2b:89:81:86:b9:8e:4d:1f:ab:5e:e2:c8:44:0a:01:08:8a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86
        Validity
            Not Before: Jun 19 03:56:44 2024 GMT
            Not After : Jun 18 04:01:44 2025 GMT
        Subject: CN=4D8D1954DFBC933CF698E3948EEAF0ABBD53637E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7a:3b:75:de:6f:e6:39:35:cf:87:46:e4:82:
                    87:4a:c5:ec:a0:16:bc:12:d0:e3:90:f0:ac:5e:8f:
                    4f:bf:6c:fc:0d:2f:8c:55:f5:48:c7:d4:17:c5:c6:
                    2f:7d:c6:d1:b0:d5:d7:47:c9:31:fb:29:76:97:b0:
                    a2:32:e6:93:98:d4:a8:ab:04:82:ce:9c:f5:4f:a4:
                    66:6a:f0:fc:79:f1:38:8a:26:96:73:6a:cc:23:a0:
                    92:84:d9:26:1f:90:4a:ea:b2:55:3f:f4:5c:ce:83:
                    35:4b:76:33:39:d3:06:72:e7:f9:9d:e3:a2:80:cd:
                    10:ff:9b:85:77:19:9e:ac:f6:b8:a1:96:e2:8f:12:
                    69:ff:b8:72:d4:ce:da:ff:3e:72:25:02:c5:aa:8c:
                    f7:83:4f:ff:58:85:90:03:b1:99:06:36:7a:87:46:
                    7d:18:1d:9a:d0:99:7a:86:bc:37:91:cf:a5:2e:03:
                    c8:d5:cc:4e:c5:5b:03:52:7b:5a:16:7f:38:23:24:
                    f0:b9:b6:ab:54:d7:2c:1d:a9:6c:0c:b9:48:1f:0b:
                    4e:25:6d:19:b2:b6:06:6d:54:e0:7d:b2:3c:3a:9e:
                    5f:6a:e9:8a:34:ea:b2:15:c7:4b:e9:9e:87:66:84:
                    7b:88:60:fc:e6:fb:c9:b2:d3:13:4f:5d:c1:a9:b6:
                    02:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:8D:19:54:DF:BC:93:3C:F6:98:E3:94:8E:EA:F0:AB:BD:53:63:7E
            X509v3 Authority Key Identifier:
                keyid:8A:4F:F8:36:58:8B:BD:C5:E5:CC:52:6B:BB:EB:66:D5:14:0D:1B:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A4FF836588BBDC5E5CC526BBBEB66D5140D1B86.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f9e7a28a-62f0-4d14-8702-403a5190eae1/0/3130332e3137312e33302e302f32332d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.171.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         18:6b:23:bb:fd:46:1a:2b:2b:9e:89:c8:0c:f1:99:dc:0b:ed:
         ec:fc:89:31:39:04:32:b1:3f:71:f8:d1:06:e9:30:88:77:68:
         e1:71:a8:61:44:04:f7:30:cf:f7:86:94:9f:55:18:40:e3:5c:
         4b:a5:d8:8a:4f:d2:30:73:b7:75:2d:0a:b5:fb:7e:d1:e5:ea:
         62:eb:82:f6:a9:e5:9d:04:c5:2a:a5:6f:12:c5:b2:ba:8e:7c:
         de:d4:7e:c2:f1:28:5a:bd:94:8e:a8:a3:aa:97:58:5d:7c:11:
         71:52:10:37:fc:15:1b:de:50:6a:92:56:56:3b:ba:d2:d9:83:
         ba:7b:89:e0:c5:eb:6d:85:65:52:6a:20:a3:60:cd:a4:9f:bf:
         f3:e2:e3:cd:34:e9:ac:bd:78:65:15:e2:2f:81:5a:8f:6f:b4:
         dc:4b:82:ee:b5:72:28:ce:a5:98:4f:60:6f:21:33:c1:38:5a:
         9e:b9:95:21:59:42:38:5e:29:8d:9d:36:84:dd:b5:26:10:cb:
         05:82:e9:66:55:f8:41:5e:e7:05:68:90:c6:4a:02:94:19:2c:
         09:a2:32:49:29:6c:6f:96:16:a4:dc:3b:a4:d9:f1:aa:41:f6:
         a7:86:c3:78:1b:95:49:a7:d2:66:01:43:39:fe:47:32:92:a6:
         f4:03:8a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:55 2024 by rpki-client on console-fra.rpki-client.org