Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          3flPgHpt8KdE9dx+bJWTjOwFtAuLocuHewAXWIYfTjY=
Subject key identifier:   5B:87:C0:B9:C0:89:17:02:67:C2:6C:25:8E:FF:24:45:81:4A:87:26
Certificate issuer:       /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial:       24BAE2AD5B10B759BADFF2949E5910CCDA3EDBC4
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa
Signing time:             Wed 27 Dec 2023 11:29:54 +0000
ROA not before:           Wed 27 Dec 2023 11:24:54 +0000
ROA not after:            Wed 25 Dec 2024 11:29:54 +0000
asID:                     136064
IP address blocks:        103.83.117.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
                          rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ba:e2:ad:5b:10:b7:59:ba:df:f2:94:9e:59:10:cc:da:3e:db:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
        Validity
            Not Before: Dec 27 11:24:54 2023 GMT
            Not After : Dec 25 11:29:54 2024 GMT
        Subject: CN=5B87C0B9C089170267C26C258EFF2445814A8726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:6a:6d:6a:dc:45:47:93:0e:83:a3:6a:1f:68:
                    48:78:ff:59:10:a9:21:04:e5:ee:1c:6b:cf:dd:eb:
                    b8:39:b7:fd:79:c5:86:f3:a4:33:a2:3c:c6:c1:2d:
                    03:8c:09:30:70:75:4d:ac:6e:f3:2b:f1:69:3e:ee:
                    37:b4:ac:1b:cb:22:c3:f9:11:47:e6:96:48:1f:d2:
                    93:08:07:29:76:53:d5:d7:13:30:7d:ec:f9:be:fe:
                    4b:14:dd:a0:99:0c:1f:6b:02:84:18:29:1a:07:ca:
                    58:65:0c:da:56:84:27:4a:a4:c0:80:c2:9a:34:e1:
                    be:3a:91:90:bb:c9:09:64:cc:fd:30:ba:f0:a5:b9:
                    7e:a2:24:a8:93:83:20:43:07:b6:38:06:bf:9f:96:
                    31:a5:76:90:55:91:27:66:15:ad:52:54:f0:34:1e:
                    79:26:d4:58:5e:4d:8b:18:2e:aa:0c:d3:95:1f:2e:
                    ba:62:bb:19:04:5c:e2:36:c2:db:d1:c1:ce:a6:05:
                    3c:40:eb:58:65:fc:00:5b:a7:08:5e:f8:13:76:f9:
                    ac:ec:91:14:42:b6:ce:8c:0e:a8:be:64:d4:70:9a:
                    a9:08:98:83:d7:6b:1d:57:dc:63:cc:97:10:db:ea:
                    02:e9:54:67:4d:d8:43:fa:d5:30:76:a6:42:43:59:
                    60:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:C0:B9:C0:89:17:02:67:C2:6C:25:8E:FF:24:45:81:4A:87:26
            X509v3 Authority Key Identifier:
                keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131372e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:50:0f:45:6a:bf:87:6b:39:96:fb:f5:ba:d4:62:2b:02:e2:
         e6:40:54:99:39:58:e9:92:3e:28:d9:ea:9f:f6:3f:f2:ee:c3:
         7c:4b:98:55:43:f7:dc:e2:09:15:0f:a7:47:06:20:7d:a5:58:
         90:ed:40:c5:70:e5:4e:ec:c9:40:e8:7e:4b:17:5c:25:b3:f3:
         52:50:cf:23:66:27:15:89:81:0a:7c:b1:22:c1:3c:ec:70:62:
         34:e3:75:b7:df:b0:f4:6b:77:1b:df:e1:fb:c8:c2:ed:a2:b2:
         66:40:59:6f:77:fd:0a:cb:5f:bb:fd:a9:83:1e:64:d8:d1:9e:
         d2:52:75:46:1a:7d:10:19:33:17:10:eb:a6:84:23:bb:eb:f6:
         ad:2d:7a:3f:dc:eb:5a:e4:a6:63:e7:21:21:96:ce:19:f0:14:
         04:3d:83:89:d4:f7:8e:ea:c1:28:9d:a5:00:22:80:01:4e:77:
         bd:1c:c4:98:82:e2:4d:33:61:ba:ba:28:0e:9d:14:84:ec:9b:
         31:2d:1d:85:54:a3:ba:25:ad:36:80:d3:e0:0d:fc:6d:97:1a:
         7c:ca:a4:2a:1f:04:96:94:6b:11:3d:5b:cc:95:24:f6:3b:1e:
         42:9a:d2:39:1d:e4:2c:76:e2:9b:e7:a9:3c:32:d8:c0:f8:49:
         0e:b4:97:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:00:08 2024 by rpki-client on console-ams.rpki-client.org