Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          yzdlqTGERUX5Dfls6N+zQVAwUXNqvvAY4qny6jM4Q3A=
Subject key identifier:   BD:2B:FD:4D:CE:D3:EE:F1:02:E9:13:AD:E1:EA:5D:B6:02:20:36:A9
Certificate issuer:       /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial:       1A1C48FD7A5682992CFECAD922C7AB645239624F
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa
Signing time:             Wed 27 Dec 2023 11:29:37 +0000
ROA not before:           Wed 27 Dec 2023 11:24:37 +0000
ROA not after:            Wed 25 Dec 2024 11:29:37 +0000
asID:                     136064
IP address blocks:        103.83.116.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
                          rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:1c:48:fd:7a:56:82:99:2c:fe:ca:d9:22:c7:ab:64:52:39:62:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
        Validity
            Not Before: Dec 27 11:24:37 2023 GMT
            Not After : Dec 25 11:29:37 2024 GMT
        Subject: CN=BD2BFD4DCED3EEF102E913ADE1EA5DB6022036A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:5f:c2:0a:fd:3f:2a:32:c1:97:34:de:68:3c:
                    33:aa:42:bc:1a:6d:e0:1e:1d:ed:4b:7d:0e:57:cc:
                    68:8e:12:b3:1a:c3:b9:5f:a6:75:9a:9b:43:89:39:
                    35:bf:d6:da:68:15:df:68:a4:d7:47:d3:20:71:e7:
                    ff:48:2d:8d:da:a7:1b:7c:65:6f:48:f2:a9:b1:62:
                    cc:e2:e8:d9:58:ac:84:d1:21:40:6b:c4:96:d8:0a:
                    53:3a:ef:63:1a:29:89:a8:1a:2d:2e:c9:d0:8c:0b:
                    9e:ce:51:ac:7f:1f:3a:fe:c7:ca:9b:52:2a:fc:b0:
                    bd:c2:b5:2b:fb:5c:b5:42:91:49:d8:0d:59:08:ce:
                    59:69:0e:57:8e:ea:86:d9:ab:b1:f8:66:6b:17:2d:
                    b4:6d:5e:8f:af:1a:39:d1:74:18:ab:af:40:1e:81:
                    db:20:13:d0:e8:51:89:44:da:80:70:7a:8f:c6:61:
                    08:bf:54:f4:d7:19:27:b1:7d:2a:65:55:ce:30:a6:
                    72:cc:79:e3:51:21:f3:eb:5f:41:79:e6:ca:17:c1:
                    22:d9:76:66:92:61:33:42:0a:1f:95:14:9b:2e:2d:
                    44:c7:45:b6:16:23:a2:36:58:b5:71:cb:97:af:cd:
                    10:d0:86:7c:80:26:bb:b9:68:6d:43:a5:3f:a0:41:
                    91:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:2B:FD:4D:CE:D3:EE:F1:02:E9:13:AD:E1:EA:5D:B6:02:20:36:A9
            X509v3 Authority Key Identifier:
                keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131362e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:af:91:9b:5d:34:bf:f1:1e:36:a2:c4:81:27:38:b7:64:23:
         2b:28:1e:f8:c4:14:f7:fc:f4:bb:e3:58:d2:77:aa:01:0d:7e:
         5b:f9:21:a7:e8:69:f9:04:a0:8c:be:19:2f:75:c0:12:a7:76:
         05:73:58:3b:7a:46:2d:4f:06:3c:28:d9:f6:ff:e7:27:2d:20:
         fd:fb:1e:95:c5:b6:1b:51:6b:0c:63:1e:79:f6:95:fe:f7:fb:
         ac:8c:f9:06:e2:d7:94:2c:0a:41:ca:f9:00:5e:2b:3d:ad:db:
         73:15:fd:84:75:6c:f7:64:23:81:42:c5:59:71:80:1c:c4:76:
         96:7c:65:b3:85:f7:e0:85:4e:da:4c:5b:c5:74:f8:16:b6:28:
         fa:23:10:10:d5:62:ec:0a:4e:5c:63:c9:7f:3b:09:2b:0c:b0:
         39:f5:a6:21:0d:95:15:5c:cd:6b:7f:f4:4d:c5:1d:ad:28:4a:
         e3:47:61:ed:09:5c:42:e7:d0:79:93:c9:52:a3:31:ff:32:ab:
         d1:63:2f:2a:64:7a:6e:c4:2e:4b:f1:d0:13:4e:94:93:41:38:
         05:4b:8a:aa:86:21:f8:57:58:d3:47:38:e7:39:53:fb:4a:53:
         aa:5d:04:b6:40:83:ba:91:75:d9:41:1f:61:de:84:f3:d2:6c:
         c3:5b:5f:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org