Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
File:                     3130332e33312e34332e302f32342d3234203d3e2039333431.roa (raw, json)
Hash identifier:          hgAxEna78vXg6adP2CrpZ1/6RSVqTcqyphrDAx0UutI=
Subject key identifier:   B7:18:AD:E0:E1:B3:3B:42:FA:99:5A:88:2D:14:46:CA:84:1F:64:1C
Certificate issuer:       /CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
Certificate serial:       719566C343126AAE33B0939330A4E15C929D4F13
Authority key identifier: 97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa
Signing time:             Fri 03 Nov 2023 07:02:42 +0000
ROA not before:           Fri 03 Nov 2023 06:57:42 +0000
ROA not after:            Fri 01 Nov 2024 07:02:42 +0000
asID:                     9341
IP address blocks:        103.31.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl
                          rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 14:46:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:95:66:c3:43:12:6a:ae:33:b0:93:93:30:a4:e1:5c:92:9d:4f:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=977D89E37F6F6C3815B2BC731E694AB878F26F30
        Validity
            Not Before: Nov  3 06:57:42 2023 GMT
            Not After : Nov  1 07:02:42 2024 GMT
        Subject: CN=B718ADE0E1B33B42FA995A882D1446CA841F641C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:10:de:44:64:1d:55:4b:4a:e4:4c:e1:98:90:
                    de:22:59:a1:29:9d:64:7e:c7:1b:d0:90:f5:a6:c7:
                    7e:13:50:71:34:8f:db:1b:43:04:fb:ff:cc:a6:3e:
                    55:3f:5a:4e:b3:8a:0a:83:ef:4e:5e:58:d6:67:83:
                    7a:aa:1c:84:51:7d:db:e4:09:ee:9c:56:22:e6:ec:
                    3d:1e:bb:8b:96:6c:e9:12:91:32:10:c1:25:64:db:
                    78:dd:a8:db:5b:65:37:56:2c:ba:ae:08:50:5c:59:
                    4b:47:08:39:7b:d5:da:b4:d8:cf:02:04:b9:e4:9e:
                    a8:aa:a7:33:bf:14:2d:1c:81:81:6d:f6:0b:63:e6:
                    14:c6:03:8e:b7:52:54:5c:bf:c1:3b:db:49:5a:69:
                    24:27:70:e4:5d:b4:37:a4:49:4e:95:cc:51:06:be:
                    a1:32:ec:24:c0:c6:df:9d:c0:5c:51:37:a5:07:ef:
                    78:53:5a:42:c4:45:13:89:bf:20:dc:67:1f:95:1d:
                    65:08:1e:84:80:a8:13:89:49:b9:f1:c3:6b:c2:25:
                    d1:28:1c:d1:f6:a5:0c:ad:8d:df:cf:e6:c1:58:ae:
                    a1:55:18:e8:63:b4:33:e7:00:f0:32:4e:2b:6b:07:
                    e0:ac:7d:6c:b8:6a:7a:9f:5a:54:0b:8b:52:44:a8:
                    61:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:18:AD:E0:E1:B3:3B:42:FA:99:5A:88:2D:14:46:CA:84:1F:64:1C
            X509v3 Authority Key Identifier:
                keyid:97:7D:89:E3:7F:6F:6C:38:15:B2:BC:73:1E:69:4A:B8:78:F2:6F:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/977D89E37F6F6C3815B2BC731E694AB878F26F30.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/977D89E37F6F6C3815B2BC731E694AB878F26F30.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fe4ace11-9139-4485-aba9-04beddc5bc26/0/3130332e33312e34332e302f32342d3234203d3e2039333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.31.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:77:ad:fd:6b:15:5f:a4:9b:f0:c7:98:e4:03:b8:a7:3a:d2:
         b6:a1:ed:b6:4c:59:5e:ef:71:48:86:53:8d:98:37:fc:45:ba:
         79:29:5d:3e:1e:18:27:7d:a0:85:7e:fb:26:e2:80:79:27:68:
         4a:e7:35:71:d2:b6:55:f0:3a:3d:87:3e:51:83:4c:aa:d9:7e:
         70:f5:a6:79:13:75:24:c5:ed:2d:cd:33:76:76:14:9d:70:99:
         ad:d5:87:2d:12:87:99:39:2e:7f:26:6f:d1:73:0a:b5:9a:e6:
         ce:a8:c7:88:91:8b:31:07:ea:42:bf:de:fc:5d:8c:6a:f8:bb:
         32:ae:94:f8:fb:59:84:95:b9:bf:a3:20:9f:e8:b8:2e:a1:5b:
         79:56:1a:b4:23:c8:07:71:27:dc:90:a5:1e:d9:23:cd:e0:dc:
         52:b1:2c:8d:7e:dc:30:8c:67:aa:f3:a2:f2:ae:57:9b:ee:4e:
         be:4f:c2:7a:02:b5:68:2b:11:9b:ab:44:0d:e5:66:8f:3d:30:
         b9:68:11:f3:f6:cf:b9:08:aa:aa:5c:0c:14:da:79:9d:d1:7c:
         9f:d8:5c:80:68:af:eb:b0:b3:d6:36:c0:fb:a6:a8:a3:70:9d:
         e1:22:26:4b:98:61:8b:2c:af:4c:4f:3a:78:c0:b6:bb:17:a0:
         d9:f6:09:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 15:51:02 2024 by rpki-client on console-ams.rpki-client.org