Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34312e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          q1fdKnTRqStAT3YE15vq79E+QpTxFHgvWmiz6yZ6fcY=
Subject key identifier:   C3:0A:03:44:14:41:19:31:BE:2F:34:B8:68:A1:5C:D0:3A:98:6F:1B
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       3BE37F2E7CF3211F2C599527AF570B12C0EED0CF
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 01 May 2024 04:00:04 +0000
ROA not before:           Wed 01 May 2024 03:55:04 +0000
ROA not after:            Wed 30 Apr 2025 04:00:04 +0000
asID:                     55685
IP address blocks:        103.247.41.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 06 May 2024 03:25:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e3:7f:2e:7c:f3:21:1f:2c:59:95:27:af:57:0b:12:c0:ee:d0:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: May  1 03:55:04 2024 GMT
            Not After : Apr 30 04:00:04 2025 GMT
        Subject: CN=C30A034414411931BE2F34B868A15CD03A986F1B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c2:44:31:16:83:dc:df:52:b8:c5:3e:6d:60:
                    57:e8:b0:8f:27:da:22:06:28:29:07:16:58:df:f8:
                    5a:54:a0:62:24:8a:d3:ab:80:9d:6d:54:0b:b4:d3:
                    79:cc:88:0e:34:f2:68:14:d7:df:22:1e:8f:c0:a5:
                    1d:2a:c0:3b:c7:59:e9:40:17:76:a0:38:44:f9:c7:
                    da:31:31:f1:1f:8a:87:87:b5:d9:6c:f4:56:d5:69:
                    ac:83:3e:77:e6:8d:e1:79:a1:a5:1b:74:6e:92:c0:
                    06:ee:c4:89:3a:9d:50:dd:45:45:12:0f:8e:8f:d6:
                    cd:4a:ee:ff:ec:85:93:75:c1:b3:70:d6:8a:1f:db:
                    b2:96:9d:fe:60:a7:5d:fa:8e:86:aa:58:33:ec:db:
                    e7:8f:8c:8a:b7:31:91:80:6b:cb:2d:cd:ef:11:d2:
                    25:5c:45:3d:b4:27:1a:ca:46:5b:30:81:cd:b9:7c:
                    db:06:fb:b6:c2:cb:27:86:13:8a:24:41:d6:d5:b7:
                    56:ed:b8:0e:c4:d8:30:fd:e6:9c:5b:36:99:94:65:
                    a5:ec:15:da:ec:37:d4:e8:04:3b:66:f2:3c:43:fd:
                    d0:42:24:90:c6:61:18:b8:0f:a8:2f:58:ee:4c:29:
                    86:7c:b7:3c:8f:a0:8a:01:1b:7e:42:07:8f:6e:37:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:0A:03:44:14:41:19:31:BE:2F:34:B8:68:A1:5C:D0:3A:98:6F:1B
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34312e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:07:02:71:f8:c0:1b:3e:6e:c3:68:49:9d:55:13:6a:e6:bf:
         51:68:52:c5:fb:8f:7e:35:9e:79:d3:84:a1:26:38:7b:14:24:
         f5:97:6d:e7:54:91:e8:95:af:00:d4:43:6b:20:23:59:52:9e:
         52:7b:c0:17:e2:c3:0d:18:32:49:0b:33:a1:97:bb:f9:2e:27:
         e7:61:3f:b0:8b:8f:4f:42:1c:05:21:9c:ef:06:0d:1b:5e:2f:
         da:89:50:53:01:82:ef:8f:ca:22:db:1e:ac:34:c2:f1:ce:65:
         77:97:b8:4b:0a:c0:15:de:86:b2:cd:2e:23:b1:3f:30:61:e8:
         a3:8c:53:d4:06:af:35:e9:46:9b:56:f2:9e:57:aa:8b:e9:6a:
         66:24:0a:2e:44:40:8d:60:b0:2f:cb:58:15:dd:e4:94:3c:a3:
         33:65:52:98:75:57:e6:b3:0b:b0:f3:fd:27:be:e0:7c:61:83:
         80:cb:1f:5f:fd:43:0d:a0:f8:77:ec:02:7d:0e:ab:30:15:ad:
         66:c5:0f:22:20:9c:ac:87:bf:be:9b:46:17:fc:c5:73:57:12:
         59:43:57:4f:c2:e0:1d:12:bb:7a:87:46:d8:7c:4c:0d:08:6e:
         0a:57:b3:bd:64:1c:af:c3:91:ee:76:b6:07:c6:04:4f:7c:a3:
         00:71:4a:04
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUO+N/LnzzIR8sWZUnr1cLEsDu0M8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3
MjJDMjk0RDAeFw0yNDA1MDEwMzU1MDRaFw0yNTA0MzAwNDAwMDRaMDMxMTAvBgNV
BAMTKEMzMEEwMzQ0MTQ0MTE5MzFCRTJGMzRCODY4QTE1Q0QwM0E5ODZGMUIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGwkQxFoPc31K4xT5tYFfosI8n
2iIGKCkHFljf+FpUoGIkitOrgJ1tVAu003nMiA408mgU198iHo/ApR0qwDvHWelA
F3agOET5x9oxMfEfioeHtdls9FbVaayDPnfmjeF5oaUbdG6SwAbuxIk6nVDdRUUS
D46P1s1K7v/shZN1wbNw1oof27KWnf5gp136joaqWDPs2+ePjIq3MZGAa8stze8R
0iVcRT20JxrKRlswgc25fNsG+7bCyyeGE4okQdbVt1btuA7E2DD95pxbNpmUZaXs
FdrsN9ToBDtm8jxD/dBCJJDGYRi4D6gvWO5MKYZ8tzyPoIoBG35CB49uN6v9AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUwwoDRBRBGTG+LzS4aKFc0DqYbxswHwYDVR0j
BBgwFoAUOPzqKhyEQ+WQz1Ig572gXXIsKU0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MjgwODlhNy0wYTY4LTRkNjctYWRhYi03NmQ3ZDkyNzFmZGUvMC8zOEZDRUEyQTFD
ODQ0M0U1OTBDRjUyMjBFN0JEQTA1RDcyMkMyOTRELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhGQ0VBMkExQzg0NDNFNTkwQ0Y1MjIwRTdCREEwNUQ3MjJD
Mjk0RC5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkyODA4OWE3LTBhNjgtNGQ2Ny1h
ZGFiLTc2ZDdkOTI3MWZkZS8wLzMxMzAzMzJlMzIzNDM3MmUzNDMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzUzNTM2MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAGf3KTANBgkqhkiG
9w0BAQsFAAOCAQEASwcCcfjAGz5uw2hJnVUTaua/UWhSxfuPfjWeedOEoSY4exQk
9Zdt51SR6JWvANRDayAjWVKeUnvAF+LDDRgySQszoZe7+S4n52E/sIuPT0IcBSGc
7wYNG14v2olQUwGC74/KItserDTC8c5ld5e4SwrAFd6Gss0uI7E/MGHoo4xT1Aav
NelGm1bynleqi+lqZiQKLkRAjWCwL8tYFd3klDyjM2VSmHVX5rMLsPP9J77gfGGD
gMsfX/1DDaD4d+wCfQ6rMBWtZsUPIiCcrIe/vptGF/zFc1cSWUNXT8LgHRK7eodG
2HxMDQhuClezvWQcr8OR7na2B8YET3yjAHFKBA==
-----END CERTIFICATE-----
Generated at Fri May 3 17:52:32 2024 by rpki-client on console-fra.rpki-client.org