Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
File:                     3130332e33312e34322e302f32332d3233203d3e2039333431.roa (raw, json)
Hash identifier:          SJ9dydME7WiWKQRUPN+w6UcszpGSCKAfFRFAIjcMUtU=
Subject key identifier:   2B:0D:A8:3E:FF:AE:2B:AB:FB:3B:E4:89:17:D0:C1:B9:92:F3:37:A8
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       35BF9D5756F764A0ADE8B547EFFAA0B73025E7E3
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa
Signing time:             Fri 03 Nov 2023 07:02:43 +0000
ROA not before:           Fri 03 Nov 2023 06:57:43 +0000
ROA not after:            Fri 01 Nov 2024 07:02:43 +0000
asID:                     9341
IP address blocks:        103.31.42.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:bf:9d:57:56:f7:64:a0:ad:e8:b5:47:ef:fa:a0:b7:30:25:e7:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Nov  3 06:57:43 2023 GMT
            Not After : Nov  1 07:02:43 2024 GMT
        Subject: CN=2B0DA83EFFAE2BABFB3BE48917D0C1B992F337A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:ba:a6:28:b2:a6:9f:fa:53:9b:b0:11:a4:
                    18:c9:b0:4c:a1:bb:01:2f:af:ed:36:1d:bb:e5:40:
                    6a:df:5d:cc:75:c8:52:1b:2e:c1:c7:aa:a1:8f:f9:
                    b9:b1:f3:b4:b5:d1:6f:c5:7b:5b:22:ab:41:46:9d:
                    5a:56:44:c6:bf:06:2b:84:56:87:4f:b6:90:4f:e4:
                    92:bf:5d:18:ee:90:55:a3:ec:4a:d3:d7:ba:9e:10:
                    d9:4c:43:73:5f:d4:f0:f5:77:3d:13:16:8b:d1:72:
                    10:83:c6:74:7e:39:0c:2c:dc:62:ab:f5:c5:11:19:
                    97:fe:98:b8:b5:dd:40:c4:4b:53:f5:ac:0f:da:fc:
                    ac:b3:5f:f1:fb:9e:05:f9:bf:9f:b6:15:cc:43:c0:
                    03:bd:e5:da:04:5a:df:64:65:41:ba:9a:8c:93:bf:
                    d8:03:66:a8:cf:aa:96:d0:e8:7a:3a:79:8a:d6:f7:
                    2b:93:2a:9f:b7:8a:6d:4b:30:cb:91:db:8a:b1:cf:
                    b3:34:8d:e9:de:26:a0:19:55:07:16:01:18:0e:48:
                    e3:bc:60:28:40:14:ba:bb:60:5d:52:4e:37:38:47:
                    4e:ee:65:b5:a1:10:f9:d5:49:ff:a4:95:73:82:6f:
                    9d:ae:21:23:8c:f2:29:8b:ab:0a:5e:7b:19:eb:b2:
                    00:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0D:A8:3E:FF:AE:2B:AB:FB:3B:E4:89:17:D0:C1:B9:92:F3:37:A8
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32332d3233203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         d3:62:74:cb:24:5e:71:6d:96:1c:2f:0a:55:20:b9:0b:4f:83:
         6f:04:90:e3:03:54:e3:87:3b:3f:5e:e9:0a:84:d1:1c:cb:fc:
         a8:89:e6:71:78:45:bc:a1:64:31:7d:75:95:af:ef:7f:b0:a7:
         79:ea:9e:83:7e:54:12:db:85:6e:84:92:e2:c0:b9:f4:cb:e6:
         ab:d2:03:1e:45:ea:ba:1f:86:d3:4f:f0:06:8f:5b:a5:63:3d:
         28:b8:d1:70:db:e5:ba:1e:07:a1:8e:ba:b9:17:8f:87:78:16:
         7b:bb:5a:ec:0a:f6:93:69:5a:6d:c3:96:37:71:a1:92:0f:aa:
         d7:27:df:9a:9d:10:fc:35:29:5b:cf:bc:1d:0c:f9:b0:d4:bf:
         e0:be:33:42:5e:fd:d7:95:df:46:d6:e0:b3:40:54:eb:14:05:
         92:e9:3c:71:2c:8d:31:af:a6:6e:e3:85:5d:12:e5:a2:1e:a6:
         6e:5d:52:0e:5a:b3:a9:1b:1d:3c:b5:23:13:22:d8:57:52:97:
         0c:01:32:55:76:66:38:c3:8f:25:01:95:b0:6c:37:b6:65:42:
         b6:55:79:61:51:af:6e:98:df:60:68:3a:17:a4:2f:46:d9:e9:
         c4:19:ea:6f:c8:cd:57:16:35:ca:70:16:7f:fa:77:c0:95:18:
         2d:c2:25:9c
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUNb+dV1b3ZKCt6LVH7/qgtzAl5+MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3
OEYyNkYzMDAeFw0yMzExMDMwNjU3NDNaFw0yNDExMDEwNzAyNDNaMDMxMTAvBgNV
BAMTKDJCMERBODNFRkZBRTJCQUJGQjNCRTQ4OTE3RDBDMUI5OTJGMzM3QTgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtabqmKLKmn/pTm7ARpBjJsEyh
uwEvr+02HbvlQGrfXcx1yFIbLsHHqqGP+bmx87S10W/Fe1siq0FGnVpWRMa/BiuE
VodPtpBP5JK/XRjukFWj7ErT17qeENlMQ3Nf1PD1dz0TFovRchCDxnR+OQws3GKr
9cURGZf+mLi13UDES1P1rA/a/KyzX/H7ngX5v5+2FcxDwAO95doEWt9kZUG6moyT
v9gDZqjPqpbQ6Ho6eYrW9yuTKp+3im1LMMuR24qxz7M0jeneJqAZVQcWARgOSOO8
YChAFLq7YF1STjc4R07uZbWhEPnVSf+klXOCb52uISOM8imLqwpeexnrsgD1AgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUKw2oPv+uK6v7O+SJF9DBuZLzN6gwHwYDVR0j
BBgwFoAUl32J439vbDgVsrxzHmlKuHjybzAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
ZTRhY2UxMS05MTM5LTQ0ODUtYWJhOS0wNGJlZGRjNWJjMjYvMC85NzdEODlFMzdG
NkY2QzM4MTVCMkJDNzMxRTY5NEFCODc4RjI2RjMwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTc3RDg5RTM3RjZGNkMzODE1QjJCQzczMUU2OTRBQjg3OEYy
NkYzMC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZmU0YWNlMTEtOTEzOS00NDg1LWFi
YTktMDRiZWRkYzViYzI2LzAvMzEzMDMzMmUzMzMxMmUzNDMyMmUzMDJmMzIzMzJk
MzIzMzIwM2QzZTIwMzkzMzM0MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnHyowDQYJKoZIhvcNAQEL
BQADggEBANNidMskXnFtlhwvClUguQtPg28EkOMDVOOHOz9e6QqE0RzL/KiJ5nF4
RbyhZDF9dZWv73+wp3nqnoN+VBLbhW6EkuLAufTL5qvSAx5F6rofhtNP8AaPW6Vj
PSi40XDb5boeB6GOurkXj4d4Fnu7WuwK9pNpWm3DljdxoZIPqtcn35qdEPw1KVvP
vB0M+bDUv+C+M0Je/deV30bW4LNAVOsUBZLpPHEsjTGvpm7jhV0S5aIepm5dUg5a
s6kbHTy1IxMi2FdSlwwBMlV2ZjjDjyUBlbBsN7ZlQrZVeWFRr26Y32BoOhekL0bZ
6cQZ6m/IzVcWNcpwFn/6d8CVGC3CJZw=
-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:23 2024 by rpki-client on console-ams.rpki-client.org