Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa
File:                     3130332e33312e34322e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          d3jrIAgjTU8AWFenHZLRZTE0i/uOMQh3uHQ+PG7QQYY=
Subject key identifier:   BA:2C:BB:3B:EF:C8:16:1F:AA:E3:E5:B1:B8:4B:08:87:80:BE:55:27
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       2153140AE703BB12DF42C03B8F4DACB6121C4017
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 03 Nov 2023 07:02:43 +0000
ROA not before:           Fri 03 Nov 2023 06:57:43 +0000
ROA not after:            Fri 01 Nov 2024 07:02:43 +0000
asID:                     9341
IP address blocks:        103.31.42.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:53:14:0a:e7:03:bb:12:df:42:c0:3b:8f:4d:ac:b6:12:1c:40:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Nov  3 06:57:43 2023 GMT
            Not After : Nov  1 07:02:43 2024 GMT
        Subject: CN=BA2CBB3BEFC8161FAAE3E5B1B84B088780BE5527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ea:04:72:89:5f:00:3a:4e:9e:40:4e:ab:aa:
                    01:c0:35:c1:6d:20:57:ae:98:b5:a9:20:fb:10:a1:
                    d5:50:42:ba:21:ed:31:f1:16:c4:34:9e:0d:62:a5:
                    61:76:82:eb:c7:67:f2:70:11:8b:81:28:60:c3:33:
                    57:6a:3f:25:40:1a:bf:6c:f5:64:93:d5:4d:58:63:
                    a3:04:4d:06:39:64:a9:28:4c:c7:a7:32:3e:a5:c6:
                    a7:42:64:62:97:29:17:ee:b2:b5:2b:9e:7c:5a:de:
                    8d:be:7c:e2:e8:6a:79:fb:9a:3e:44:b8:64:03:d7:
                    ef:5d:a1:f1:4c:8f:6f:8e:53:80:32:ca:e8:1f:d6:
                    69:dc:c7:bb:47:05:12:ef:d1:60:1c:5a:ef:d4:ec:
                    6d:bb:f9:5c:1f:40:b1:2e:1c:3c:85:79:dd:06:39:
                    13:7e:9c:bd:e2:2b:83:3a:cb:69:7c:fd:4d:f7:99:
                    93:5a:7c:b8:92:01:ef:50:d1:0b:bc:ae:5c:fb:7c:
                    f7:45:fb:70:91:42:f5:3d:e5:a2:21:88:bf:c8:d4:
                    e3:22:33:ac:72:3c:e6:fe:23:64:fb:9f:b3:4a:89:
                    f3:1e:98:81:93:1f:24:f8:77:4e:7e:90:44:17:d5:
                    cd:e6:52:81:cf:f2:5d:35:ab:32:ae:0d:d7:e0:db:
                    c9:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:2C:BB:3B:EF:C8:16:1F:AA:E3:E5:B1:B8:4B:08:87:80:BE:55:27
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34322e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.42.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cb:fc:d4:da:af:94:e6:96:39:cd:68:d9:58:56:a4:c2:4b:cd:
         f7:2b:c9:d4:41:a9:70:10:93:d2:e8:20:9c:8a:a5:f8:ee:5a:
         03:d2:f7:bd:9e:ed:db:e4:8b:67:52:d6:85:97:ce:21:b9:73:
         58:b2:f5:7e:14:ca:b8:57:a8:c9:9d:de:cd:1f:66:0f:8a:3e:
         9a:c4:98:53:a0:2f:dd:24:b5:e3:39:ed:42:1d:fe:db:ab:61:
         8d:c8:d2:b3:4e:94:48:09:a5:53:79:ca:12:f3:4b:44:46:d4:
         3c:fe:d1:79:4c:a0:0f:e0:97:28:73:68:bb:e9:b1:3f:79:3c:
         2a:c7:34:df:18:e5:4e:06:9a:fa:b2:0f:02:32:4d:65:7a:fa:
         81:20:7b:4a:94:ce:53:8b:9b:13:37:f2:00:e8:de:f9:66:f9:
         9e:2b:65:d3:ec:36:d8:39:72:34:fb:d3:c4:b7:e8:93:1c:fe:
         e7:2e:b9:ad:44:66:ed:73:c3:70:0b:3c:91:c3:ef:aa:8a:19:
         87:8f:cc:89:3b:09:51:7b:eb:9f:2c:10:87:4e:4d:2c:07:6f:
         3f:73:b6:ce:2f:4a:55:5b:16:b1:79:3e:35:9d:f5:3b:5e:f1:
         a7:60:32:2d:83:9d:ac:f0:65:d9:79:ec:d0:02:c3:45:ef:e2:
         80:b5:5d:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 18:06:23 2024 by rpki-client on console-ams.rpki-client.org