Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa
File:                     3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa (raw, json)
Hash identifier:          C3DTA02NAOi81x2/UVLcvV+KBRAFJNIg1PEgrKq8Lg0=
Subject key identifier:   71:3E:ED:09:08:02:D6:FD:BB:EF:81:DE:BE:87:3F:24:2E:51:5E:2A
Certificate issuer:       /CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
Certificate serial:       60FFE45F020E402645E433830AD4B56D603213A2
Authority key identifier: 73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa
Signing time:             Fri 21 Jun 2024 02:02:11 +0000
ROA not before:           Fri 21 Jun 2024 01:57:11 +0000
ROA not after:            Fri 20 Jun 2025 02:02:11 +0000
asID:                     151506
IP address blocks:        103.234.18.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl
                          rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 13:04:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ff:e4:5f:02:0e:40:26:45:e4:33:83:0a:d4:b5:6d:60:32:13:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7365D5B1AE30C5B6450AFDDE98BA231F962A6C26
        Validity
            Not Before: Jun 21 01:57:11 2024 GMT
            Not After : Jun 20 02:02:11 2025 GMT
        Subject: CN=713EED090802D6FDBBEF81DEBE873F242E515E2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e4:19:8d:53:bc:09:67:7d:0a:ad:26:4e:01:
                    1d:3d:b9:18:56:7b:42:7e:84:27:6d:44:f9:22:4d:
                    44:d8:67:99:8a:7f:26:0b:5b:88:b5:c9:2a:de:4e:
                    61:a5:74:11:89:6a:7b:99:4d:92:0f:85:2b:60:b2:
                    88:c1:d2:b7:84:75:5e:b4:e9:99:9e:9f:1f:c6:6f:
                    fa:82:b8:e6:01:56:90:8c:61:1d:8a:60:67:0a:ce:
                    7d:4b:b8:8e:f5:82:9c:1b:99:b8:67:ae:12:7a:56:
                    90:41:41:d2:0b:9d:0e:14:bb:21:8a:87:d4:a9:75:
                    66:8d:aa:18:0b:7c:62:39:c6:ec:65:0c:fe:30:1f:
                    c6:a5:da:7e:46:d7:ed:bd:ce:86:09:5a:71:d2:f3:
                    29:77:a2:b5:b8:f4:76:75:0e:9b:ab:f8:b2:60:09:
                    f6:41:da:a4:74:95:76:3c:c5:2a:ab:85:4a:11:9e:
                    e2:6e:63:7b:ad:60:bb:c1:6e:a2:2a:3e:27:e5:00:
                    3e:d7:7f:a4:49:31:f7:46:fe:b8:d2:33:cc:c9:49:
                    00:11:98:29:6a:16:9e:30:c7:43:9c:63:69:e3:95:
                    45:c7:ea:92:1f:cc:33:43:91:74:3b:2e:a6:e3:94:
                    d6:da:4d:f0:e3:b3:a8:75:00:84:e3:41:a5:80:29:
                    50:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:3E:ED:09:08:02:D6:FD:BB:EF:81:DE:BE:87:3F:24:2E:51:5E:2A
            X509v3 Authority Key Identifier:
                keyid:73:65:D5:B1:AE:30:C5:B6:45:0A:FD:DE:98:BA:23:1F:96:2A:6C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7365D5B1AE30C5B6450AFDDE98BA231F962A6C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/388329ca-e8f7-4d3d-ace4-807f8aa58ae0/0/3130332e3233342e31382e302f32342d3234203d3e20313531353036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.234.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2f:ed:a2:a7:d0:aa:ef:f6:58:79:b4:20:d6:f4:75:3f:7d:f2:
         68:64:3d:8c:44:f0:5d:6e:be:ec:45:af:57:bf:ce:a5:e6:2d:
         96:5b:a9:58:0d:97:7e:8c:7e:28:8a:95:5a:b3:12:76:62:23:
         6b:c9:30:0f:46:2f:27:bd:36:c8:89:a1:4f:1c:31:d5:ba:69:
         35:c4:da:ef:a9:94:c3:6f:e8:6e:c2:50:cd:54:8a:bf:b7:33:
         03:29:44:18:5c:16:a3:96:33:18:be:5c:bb:c7:fb:71:6f:2a:
         96:a5:49:fd:0f:da:58:8d:d0:27:7c:f6:28:7f:fb:61:3c:93:
         bf:f9:2f:8e:85:a0:17:64:0d:72:57:ef:07:d9:e3:68:7d:16:
         fc:c0:72:36:66:95:13:50:68:ae:e5:47:ff:e0:26:0e:03:be:
         fe:ef:56:c1:e7:6f:d7:aa:61:88:02:2a:a4:b4:38:6d:e1:31:
         7f:0f:75:14:cd:c5:25:d8:54:70:18:35:0b:e4:80:7d:ed:a8:
         3e:23:41:92:32:6f:4a:ed:b0:e3:1f:9f:8a:28:a0:da:cc:85:
         c5:da:d8:98:0a:5e:01:41:b2:54:33:e7:79:8e:91:fd:8b:1a:
         bc:66:21:96:04:cd:41:f3:56:9a:8a:19:a4:bf:e2:42:70:f4:
         1e:85:ce:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 09:29:42 2024 by rpki-client on console-fra.rpki-client.org