Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          gug1S91VTtjSaW3x38WHfAQBPCCiv+mmOIK3xbAKsyA=
Subject key identifier:   05:B4:67:D6:11:5E:2B:55:BA:23:9C:7B:CE:BA:C9:38:42:D9:93:8D
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       03E865EFE48062B34CA6E12C363CDCD9BE8A27CE
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 31 Jul 2023 00:04:27 +0000
ROA not before:           Sun 30 Jul 2023 23:59:27 +0000
ROA not after:            Mon 29 Jul 2024 00:04:27 +0000
asID:                     38515
IP address blocks:        103.107.249.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 27 Apr 2024 00:39:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:e8:65:ef:e4:80:62:b3:4c:a6:e1:2c:36:3c:dc:d9:be:8a:27:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul 30 23:59:27 2023 GMT
            Not After : Jul 29 00:04:27 2024 GMT
        Subject: CN=05B467D6115E2B55BA239C7BCEBAC93842D9938D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:cb:3e:ae:19:8b:b7:49:3a:65:f8:b4:3b:
                    61:82:10:a2:e2:f8:6e:bb:de:ee:80:5d:1e:7a:68:
                    c9:a6:f1:18:3e:65:f7:b7:5e:55:c5:5b:32:12:de:
                    cc:e6:7c:c7:97:be:c1:35:e8:bd:37:0e:2a:bd:28:
                    60:78:58:03:62:ef:25:28:22:fb:c0:0b:b7:0a:5a:
                    bd:8a:66:44:08:99:c9:c5:15:26:7e:ef:15:2e:ac:
                    7a:d7:4e:46:49:0e:1b:a7:91:44:ef:e5:76:73:1f:
                    76:db:4b:27:63:da:96:f1:f2:a7:d3:3e:46:d1:79:
                    71:67:c3:35:1f:66:05:a0:15:82:c9:8a:54:3e:49:
                    c5:cd:d1:15:e2:2e:32:4c:b6:c4:85:be:7f:8c:2e:
                    5e:77:e8:a5:00:a1:7c:6c:2c:cf:53:92:40:d0:47:
                    f0:bf:72:ab:d6:79:5b:6b:0c:7d:3e:d9:72:03:2c:
                    51:1d:15:54:cb:21:bd:8b:f2:c5:2e:b4:52:d7:48:
                    24:70:03:08:d7:e2:7d:d4:ed:24:88:fa:61:09:ba:
                    c9:80:5d:1a:71:b4:af:a9:95:3d:c4:8c:15:57:51:
                    e8:89:1e:fa:90:84:65:90:ec:b8:ee:dd:64:ab:5f:
                    95:7f:df:f5:d3:c2:59:05:2c:ec:a0:6e:b1:83:89:
                    f5:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B4:67:D6:11:5E:2B:55:BA:23:9C:7B:CE:BA:C9:38:42:D9:93:8D
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234392e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:d2:83:e0:64:42:a6:fa:7a:c5:10:d9:e1:e7:eb:9a:fe:9a:
         5f:1f:30:5a:e0:37:bc:26:64:68:02:c7:30:70:44:12:13:27:
         7a:fe:f5:f2:27:31:f7:73:46:10:c0:47:f8:6e:5a:d5:4b:fe:
         39:54:ba:14:07:39:cf:3b:68:0f:b5:28:02:7f:2f:85:7e:f2:
         a3:26:f0:c7:fe:44:e5:5c:56:a4:11:67:66:0e:84:ff:e4:51:
         09:d1:22:e0:7f:e7:ea:64:94:34:76:60:bd:56:04:65:18:6f:
         5e:d3:7f:f5:89:02:77:e9:6e:1e:8c:05:f4:16:52:fc:2a:ed:
         7e:67:e2:63:3a:50:60:de:dc:2c:4b:3a:64:45:fa:9d:c0:26:
         59:fb:7a:19:48:0f:30:8a:b3:d4:6f:05:d7:7d:d1:de:60:ba:
         98:3b:c8:1e:7f:11:f1:0f:eb:c8:15:4b:0a:44:d8:31:c5:7a:
         61:92:6b:b2:45:c5:3f:bc:9d:d2:04:3b:e7:c3:90:47:e7:6e:
         e5:b8:76:90:ee:d7:1e:45:45:c0:ba:cb:33:4a:0a:38:4d:dc:
         88:1f:29:02:3a:fa:cb:00:64:1f:4d:6d:ea:45:ee:eb:64:54:
         6d:d6:7c:0b:b1:28:f0:45:45:88:97:42:48:17:46:86:08:fe:
         2c:e2:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 23:53:11 2024 by rpki-client on console-fra.rpki-client.org