Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa
File:                     3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa (raw, json)
Hash identifier:          Z06476NaHt115mn6/pag0qCNS8otsV8hkdLcQH3kosY=
Subject key identifier:   68:EB:04:DE:71:03:34:31:34:E6:2C:B7:63:C0:12:A2:19:9D:F4:0E
Certificate issuer:       /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
Certificate serial:       4E0795422C304D32616240A2F132A39A86490929
Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa
Signing time:             Mon 03 Jun 2024 05:00:02 +0000
ROA not before:           Mon 03 Jun 2024 04:55:02 +0000
ROA not after:            Mon 02 Jun 2025 05:00:02 +0000
asID:                     150218
IP address blocks:        103.218.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl
                          rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:07:95:42:2c:30:4d:32:61:62:40:a2:f1:32:a3:9a:86:49:09:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
        Validity
            Not Before: Jun  3 04:55:02 2024 GMT
            Not After : Jun  2 05:00:02 2025 GMT
        Subject: CN=68EB04DE7103343134E62CB763C012A2199DF40E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ef:ce:65:06:6c:6d:db:fe:7c:68:77:7d:65:
                    6a:0c:64:96:b3:09:f2:61:a3:ca:fb:5a:e6:db:25:
                    75:c4:a5:b4:23:61:c8:a7:36:55:1c:84:9a:09:76:
                    89:01:d4:51:ef:c3:36:41:7e:eb:0f:14:00:12:a3:
                    bf:7d:60:59:a1:e0:61:f5:41:ab:0a:de:49:5d:db:
                    6f:db:e7:f9:a9:5e:16:0e:2f:1b:cb:a3:29:69:7e:
                    44:4d:3d:a2:19:3e:27:a8:71:fa:73:6f:84:07:de:
                    24:3f:35:7d:4a:9a:a9:88:14:18:2c:07:75:1d:9e:
                    0f:dc:f9:55:7b:14:31:b2:ff:1f:be:06:d0:d9:9b:
                    c5:d1:87:bf:39:93:d5:99:ea:b8:34:74:bc:77:4c:
                    bc:ea:94:af:15:4d:b5:67:a6:0d:2e:6a:3e:3d:dd:
                    fa:3d:92:19:e8:75:9e:8e:36:9c:f2:e2:41:0b:ef:
                    a9:d5:b5:d2:74:17:66:3b:8b:c6:6c:88:96:e3:e6:
                    b5:8e:29:4f:eb:55:eb:35:7b:ec:ff:09:51:1c:c9:
                    f7:14:1d:9d:30:24:fa:d1:9e:7f:e0:74:24:a7:ed:
                    63:d6:84:1a:0b:70:b1:60:ac:05:2b:89:b6:a1:7b:
                    86:c0:b0:02:99:8d:2a:ec:3a:31:3a:a9:ec:fe:bd:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:EB:04:DE:71:03:34:31:34:E6:2C:B7:63:C0:12:A2:19:9D:F4:0E
            X509v3 Authority Key Identifier:
                keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e3231382e3130342e302f32342d3234203d3e20313530323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.218.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:a4:d1:7c:ef:86:27:48:a2:7e:19:09:1a:b2:73:f8:34:e5:
         81:99:92:30:f4:7a:8a:79:0b:96:ab:91:3e:b6:dd:1f:46:f4:
         ae:7c:2a:e1:47:09:3b:a7:5d:64:41:8f:56:cb:d3:f7:e2:97:
         bd:ed:cf:b5:dd:48:40:1a:8d:04:68:7a:df:73:5e:f7:c0:93:
         85:27:fc:92:ca:60:c0:de:1a:18:0e:5e:ba:ec:21:f3:c9:44:
         b0:ab:64:25:8f:90:5a:5a:24:06:f4:3a:99:e0:28:18:98:71:
         b1:20:f4:ac:a0:3c:8b:bc:72:98:c8:3e:1f:fa:02:c2:d6:4e:
         8f:99:e4:0a:8f:54:c0:1f:49:8a:30:3b:a1:4a:a5:8a:b8:c0:
         ac:1e:a8:6d:17:e3:ff:7c:b7:c6:98:af:8a:9c:74:0d:99:09:
         2b:19:5f:5a:d8:c8:8d:5e:72:ad:30:66:1a:75:4a:5b:48:64:
         88:7f:31:d1:46:22:a2:34:a1:98:ef:64:75:d1:fb:97:cc:2d:
         4b:51:ff:f3:25:6f:a9:ed:ee:9d:1e:f8:cb:7a:f6:ba:96:3b:
         c0:f8:72:ab:6d:16:7d:ef:62:45:77:42:ac:db:30:78:7f:22:
         04:0b:e6:05:89:04:0f:d9:66:40:65:3b:46:02:c6:ac:db:33:
         15:18:16:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org