Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa
File:                     3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa (raw, json)
Hash identifier:          mYSkVHWKx3nbIXjN2oAPrUbGmOKA+CS0hkgq0FKlCBY=
Subject key identifier:   4D:DB:35:BC:7C:51:91:53:AC:DE:C2:47:20:51:6D:1D:8E:7C:D8:3F
Certificate issuer:       /CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
Certificate serial:       18F7BDA9241B21466FC0445EF10A60EAB155B031
Authority key identifier: 38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa
Signing time:             Fri 28 Jun 2024 05:00:01 +0000
ROA not before:           Fri 28 Jun 2024 04:55:01 +0000
ROA not after:            Fri 27 Jun 2025 05:00:01 +0000
asID:                     151518
IP address blocks:        103.236.140.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl
                          rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 03:46:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:f7:bd:a9:24:1b:21:46:6f:c0:44:5e:f1:0a:60:ea:b1:55:b0:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38E19BA955DC939F0FD5EB77C83043AEABB72335
        Validity
            Not Before: Jun 28 04:55:01 2024 GMT
            Not After : Jun 27 05:00:01 2025 GMT
        Subject: CN=4DDB35BC7C519153ACDEC24720516D1D8E7CD83F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2b:7c:ff:26:4b:e4:61:5b:86:69:50:13:0c:
                    c5:e8:1b:91:95:97:db:8d:76:ed:19:61:d8:0c:a3:
                    3c:06:ec:db:68:7e:d3:ed:ef:26:d4:dd:81:f2:3d:
                    7d:8a:a6:03:5b:20:17:03:e5:36:d7:e4:87:23:b2:
                    91:48:b9:9d:58:69:65:04:77:f6:a5:bc:1d:67:76:
                    b3:a6:34:39:41:ad:97:66:94:14:2e:05:4c:99:d0:
                    fa:77:fe:49:79:ac:ae:07:ff:cf:1a:2d:a3:9b:05:
                    0c:01:09:0e:3b:4b:99:68:3a:0a:d8:58:7c:3f:45:
                    75:40:dd:81:22:3c:f2:e0:4d:59:60:21:3a:e6:1d:
                    f8:5d:ce:7d:6e:df:58:fb:54:b7:68:3e:ff:2d:84:
                    a7:f7:4c:3b:f9:ff:f9:22:fa:e7:36:a4:ad:52:da:
                    f1:69:4b:b0:e9:09:d0:71:e9:48:df:38:f2:bd:e0:
                    f2:f2:12:b5:d4:a7:a7:9c:8d:89:32:49:6c:49:cd:
                    85:d7:0f:b4:8b:02:8f:5c:90:0d:c1:7c:fb:a9:ea:
                    42:32:9b:ea:65:c0:a5:89:12:1f:a2:35:e8:74:52:
                    a7:15:44:ab:46:14:26:51:af:ed:1a:dc:c5:0b:df:
                    2a:63:13:2f:3f:a8:78:14:97:ae:c3:b4:8a:56:03:
                    7b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:DB:35:BC:7C:51:91:53:AC:DE:C2:47:20:51:6D:1D:8E:7C:D8:3F
            X509v3 Authority Key Identifier:
                keyid:38:E1:9B:A9:55:DC:93:9F:0F:D5:EB:77:C8:30:43:AE:AB:B7:23:35

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/38E19BA955DC939F0FD5EB77C83043AEABB72335.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38E19BA955DC939F0FD5EB77C83043AEABB72335.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/205af822-bea9-48f3-aa12-b2737162fc42/0/3130332e3233362e3134302e302f32342d3234203d3e20313531353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.236.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:11:27:79:82:d9:5f:75:06:21:e3:0d:bd:73:9f:38:a0:9a:
         85:a0:92:79:ab:ff:5f:48:4f:e9:94:ac:fd:89:4f:8d:5c:08:
         d6:92:f4:87:c8:7a:8b:af:68:94:c4:29:c2:a8:d7:0e:51:27:
         99:c0:89:76:c5:ed:54:8a:a1:b9:3d:b5:c3:5b:c7:f9:54:4b:
         ad:c0:6c:ad:c1:68:c6:58:e3:16:15:ca:a8:11:a9:66:dc:3f:
         f2:3d:1c:93:d8:0d:b1:8d:27:72:81:d9:00:48:5c:bc:5d:7c:
         cb:0b:f6:24:df:ae:68:5e:28:9c:05:44:18:ea:5f:c6:ae:f7:
         c7:64:f3:5c:24:29:71:94:47:a1:ec:b2:c7:2e:37:6f:29:82:
         cd:26:9e:af:41:b8:17:4b:05:69:88:6d:26:ce:93:0f:d1:51:
         34:33:3b:8e:92:8d:78:50:74:3e:2f:53:b4:0a:81:93:2e:08:
         27:87:27:9a:fa:54:0a:35:4d:34:8b:8c:6f:03:0c:52:67:bb:
         73:b9:62:ae:08:70:84:9e:d7:5d:3e:58:3d:26:3a:59:1b:33:
         36:48:ea:69:33:da:64:ac:df:cc:d8:ca:82:3d:14:bf:d3:b6:
         d8:83:08:9f:c7:c4:a5:20:43:84:1f:5a:fe:ae:2e:fa:e7:07:
         a2:91:0c:59
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUGPe9qSQbIUZvwERe8Qpg6rFVsDEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVB
QkI3MjMzNTAeFw0yNDA2MjgwNDU1MDFaFw0yNTA2MjcwNTAwMDFaMDMxMTAvBgNV
BAMTKDREREIzNUJDN0M1MTkxNTNBQ0RFQzI0NzIwNTE2RDFEOEU3Q0Q4M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzK3z/JkvkYVuGaVATDMXoG5GV
l9uNdu0ZYdgMozwG7NtoftPt7ybU3YHyPX2KpgNbIBcD5TbX5IcjspFIuZ1YaWUE
d/alvB1ndrOmNDlBrZdmlBQuBUyZ0Pp3/kl5rK4H/88aLaObBQwBCQ47S5loOgrY
WHw/RXVA3YEiPPLgTVlgITrmHfhdzn1u31j7VLdoPv8thKf3TDv5//ki+uc2pK1S
2vFpS7DpCdBx6UjfOPK94PLyErXUp6ecjYkySWxJzYXXD7SLAo9ckA3BfPup6kIy
m+plwKWJEh+iNeh0UqcVRKtGFCZRr+0a3MUL3ypjEy8/qHgUl67DtIpWA3sjAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUTds1vHxRkVOs3sJHIFFtHY582D8wHwYDVR0j
BBgwFoAUOOGbqVXck58P1et3yDBDrqu3IzUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
MDVhZjgyMi1iZWE5LTQ4ZjMtYWExMi1iMjczNzE2MmZjNDIvMC8zOEUxOUJBOTU1
REM5MzlGMEZENUVCNzdDODMwNDNBRUFCQjcyMzM1LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzhFMTlCQTk1NURDOTM5RjBGRDVFQjc3QzgzMDQzQUVBQkI3
MjMzNS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzIwNWFmODIyLWJlYTktNDhmMy1h
YTEyLWIyNzM3MTYyZmM0Mi8wLzMxMzAzMzJlMzIzMzM2MmUzMTM0MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzNTMxMzgucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABn7IwwDQYJ
KoZIhvcNAQELBQADggEBAIoRJ3mC2V91BiHjDb1znzigmoWgknmr/19IT+mUrP2J
T41cCNaS9IfIeouvaJTEKcKo1w5RJ5nAiXbF7VSKobk9tcNbx/lUS63AbK3BaMZY
4xYVyqgRqWbcP/I9HJPYDbGNJ3KB2QBIXLxdfMsL9iTfrmheKJwFRBjqX8au98dk
81wkKXGUR6HssscuN28pgs0mnq9BuBdLBWmIbSbOkw/RUTQzO46SjXhQdD4vU7QK
gZMuCCeHJ5r6VAo1TTSLjG8DDFJnu3O5Yq4IcISe110+WD0mOlkbMzZI6mkz2mSs
38zYyoI9FL/TttiDCJ/HxKUgQ4QfWv6uLvrnB6KRDFk=
-----END CERTIFICATE-----
Generated at Fri Nov 22 03:50:41 2024 by rpki-client on console-fra.rpki-client.org