Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
File:                     3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa (raw, json)
Hash identifier:          fH9ekDtXHlvVQoJyiP7hBLDlPnte432kDbzqupkhg5s=
Subject key identifier:   E1:DB:11:AC:77:61:77:0B:96:D5:06:9D:2B:B1:49:7F:08:B9:8A:E8
Certificate issuer:       /CN=38F85F0AA81AE33827BDF573D6A712452180A036
Certificate serial:       5992DB11471EF372F706C3683D667C32CC8E41C9
Authority key identifier: 38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa
Signing time:             Wed 27 Dec 2023 11:30:04 +0000
ROA not before:           Wed 27 Dec 2023 11:25:04 +0000
ROA not after:            Wed 25 Dec 2024 11:30:04 +0000
asID:                     136064
IP address blocks:        103.83.118.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl
                          rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:92:db:11:47:1e:f3:72:f7:06:c3:68:3d:66:7c:32:cc:8e:41:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38F85F0AA81AE33827BDF573D6A712452180A036
        Validity
            Not Before: Dec 27 11:25:04 2023 GMT
            Not After : Dec 25 11:30:04 2024 GMT
        Subject: CN=E1DB11AC7761770B96D5069D2BB1497F08B98AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:8e:87:99:3d:f9:7f:37:ab:a5:05:5c:0b:19:
                    32:7c:d9:db:d4:d2:0b:3a:6a:86:e7:48:5f:46:71:
                    38:3b:63:19:38:84:64:24:db:45:35:d9:7e:76:14:
                    e6:bb:1d:e6:c4:23:69:37:ca:c5:f7:71:ba:19:ba:
                    ed:63:63:b7:40:e4:8c:1d:7b:64:ff:c0:88:6f:66:
                    00:11:af:c8:08:03:a8:16:15:62:2e:de:d9:5e:85:
                    a9:3b:f0:f3:bd:77:be:5d:ee:6d:4d:2e:38:b3:05:
                    c8:66:91:6d:1a:e0:a7:01:27:b5:47:0d:4b:d7:75:
                    75:e6:cf:c3:1f:e0:fa:93:43:cc:98:66:3d:87:e0:
                    b2:26:e1:64:08:c5:42:d5:52:b8:b9:1c:fb:4b:2e:
                    df:95:6e:e5:3d:70:5e:c8:6b:a1:2d:e3:7b:65:dc:
                    78:e0:10:0a:5f:e9:ab:05:6e:b9:26:d0:44:78:6e:
                    3d:92:93:95:eb:98:0c:fc:90:91:e6:18:4f:8c:09:
                    26:fb:96:d6:80:1c:10:44:61:e2:41:7e:57:26:7e:
                    cb:75:33:06:7c:24:3d:03:09:b7:e9:6b:b8:23:3a:
                    91:e4:b3:cc:92:76:7f:1a:81:a8:08:7d:5a:eb:b2:
                    99:66:27:34:45:08:7c:ab:56:33:0c:91:6d:a8:a8:
                    0f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:11:AC:77:61:77:0B:96:D5:06:9D:2B:B1:49:7F:08:B9:8A:E8
            X509v3 Authority Key Identifier:
                keyid:38:F8:5F:0A:A8:1A:E3:38:27:BD:F5:73:D6:A7:12:45:21:80:A0:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/38F85F0AA81AE33827BDF573D6A712452180A036.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38F85F0AA81AE33827BDF573D6A712452180A036.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4e98b3bd-284d-4a7d-9f27-cb587e9dd841/0/3130332e38332e3131382e302f32342d3234203d3e20313336303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.118.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:e5:cb:c2:8f:74:43:c2:e1:da:ce:7a:34:8e:42:80:27:98:
         16:50:e0:af:20:ea:c7:2c:3d:8a:56:e7:62:91:93:70:aa:ec:
         1a:72:cd:05:62:28:bd:8c:5f:17:b9:09:e9:e0:ab:d0:9b:4d:
         59:2c:d7:bb:9a:3c:30:d3:d2:00:09:89:4a:e4:f4:6b:21:4b:
         50:d5:58:d6:08:13:f0:55:3b:d3:0c:68:a9:91:05:89:db:3c:
         25:fa:5f:03:dd:88:03:c0:74:44:61:63:4d:87:7b:df:a7:1b:
         f9:0b:2d:a9:43:06:46:87:eb:b4:b9:e0:fc:ee:d6:4e:f5:d7:
         26:00:19:87:53:8f:c1:0a:f0:c0:fe:0c:09:eb:1e:ef:60:22:
         31:b0:e7:d5:4f:44:91:77:31:ce:c6:a3:45:1e:b7:81:50:d0:
         55:0e:c0:23:bc:9d:28:cf:93:cc:11:6f:68:d6:40:f3:4c:18:
         26:33:12:4d:32:ff:77:f4:06:2c:69:01:56:a9:33:13:a3:70:
         60:e8:f6:f9:b8:61:4d:83:e0:e6:36:3b:91:a5:3a:36:5a:35:
         23:b3:c3:cd:c8:65:b6:6a:70:0d:01:da:91:1e:47:ca:cb:9c:
         b3:2e:11:b3:96:c7:1d:5a:d1:aa:06:74:57:32:e0:b0:1a:1d:
         0c:78:de:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:56:25 2024 by rpki-client on console-fra.rpki-client.org