Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313336313136.roa
File:                     3130332e39342e3233382e302f32342d3234203d3e20313336313136.roa (raw, json)
Hash identifier:          6FpF2Y7Kp0jJCDNTV9LwXrWfa+CRzTqJfpQ16oXDdk8=
Subject key identifier:   0F:DA:AB:E6:ED:25:81:96:E6:0C:83:64:BA:B3:4F:4D:92:86:C4:B3
Certificate issuer:       /CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
Certificate serial:       366F0E9AC3D9507E0439BB633E8D19F802F1CD03
Authority key identifier: 5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313336313136.roa
Signing time:             Mon 18 Mar 2024 02:03:19 +0000
ROA not before:           Mon 18 Mar 2024 01:58:19 +0000
ROA not after:            Mon 17 Mar 2025 02:03:19 +0000
asID:                     136116
IP address blocks:        103.94.238.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl
                          rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 24 Jun 2024 11:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:6f:0e:9a:c3:d9:50:7e:04:39:bb:63:3e:8d:19:f8:02:f1:cd:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CDA120200D28E4FC66FECD60F5AFCC57E79E642
        Validity
            Not Before: Mar 18 01:58:19 2024 GMT
            Not After : Mar 17 02:03:19 2025 GMT
        Subject: CN=0FDAABE6ED258196E60C8364BAB34F4D9286C4B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d3:8d:ef:8b:7e:b7:96:0f:18:2c:01:a7:fe:
                    3e:f1:41:52:52:d7:89:b5:f0:e9:02:48:61:9a:96:
                    51:9e:fb:3f:79:91:d8:13:85:48:72:0e:52:0a:b3:
                    84:be:41:b3:08:dd:e2:88:41:f2:09:52:51:82:2d:
                    dd:6c:f4:51:28:ca:75:44:ea:cc:ad:78:66:0c:ca:
                    11:19:c6:6c:33:02:aa:68:16:b4:2d:24:fb:17:d0:
                    af:6d:c4:d4:f8:93:4c:df:aa:3b:60:96:2b:c2:fa:
                    ea:0d:57:80:37:ba:36:03:2a:28:91:5c:7a:db:f2:
                    34:ea:72:97:63:1b:a0:fb:46:27:7f:6d:78:08:68:
                    6b:61:25:b8:f3:00:31:51:63:57:a0:5d:ed:8e:f7:
                    9b:a1:05:d6:ee:d4:6b:38:ee:8e:26:42:e6:13:bc:
                    e7:93:7e:91:0c:96:9d:d5:e9:1d:90:37:f2:ea:27:
                    61:e8:3a:23:a4:b8:16:45:bd:6e:81:66:55:4b:35:
                    27:52:9d:ab:6f:10:bf:1f:66:d0:e6:27:b9:1a:10:
                    e0:88:a1:db:34:f1:2a:89:5f:37:0e:bc:96:5c:68:
                    b3:e5:59:d8:81:02:9c:53:e4:a8:02:d8:0b:84:34:
                    e0:21:ec:53:d0:90:80:7e:3b:f3:ff:74:f8:4e:b4:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:DA:AB:E6:ED:25:81:96:E6:0C:83:64:BA:B3:4F:4D:92:86:C4:B3
            X509v3 Authority Key Identifier:
                keyid:5C:DA:12:02:00:D2:8E:4F:C6:6F:EC:D6:0F:5A:FC:C5:7E:79:E6:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5CDA120200D28E4FC66FECD60F5AFCC57E79E642.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/62af8352-cd65-4db7-b0cb-048b45e7a4bf/0/3130332e39342e3233382e302f32342d3234203d3e20313336313136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.94.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:dc:21:26:e3:a6:8b:97:45:80:47:b6:bc:53:28:63:cd:b1:
         fc:aa:a9:f9:b3:d6:48:c7:06:b4:84:7a:e9:54:83:10:70:c0:
         42:0b:46:e3:19:15:4f:de:4f:4e:e2:88:eb:58:f4:1c:ef:d6:
         32:f8:40:15:89:1d:0b:71:31:03:f2:2b:f5:b7:37:92:6b:bb:
         13:28:a4:c1:65:2b:6f:8b:73:5d:2d:38:77:d6:27:c9:dd:02:
         d0:b4:48:15:b2:ea:0b:02:bb:77:d3:5c:bc:a9:fd:f5:c5:96:
         14:e3:28:9d:71:b7:21:10:98:89:55:52:5d:eb:9d:07:e8:ca:
         88:b0:9a:79:8a:32:f7:a2:8a:9a:7a:b7:0a:f6:23:15:35:1f:
         6f:4a:0a:9d:99:80:23:28:5c:4f:a2:48:15:c3:bb:4d:07:14:
         bb:84:d2:bf:c2:64:02:90:7a:fe:0e:f9:96:cc:0b:99:97:b1:
         e5:8c:f7:d1:4c:74:d0:ff:a3:a8:59:6c:4c:a6:fa:22:e5:6f:
         7c:97:bb:24:3b:24:ae:d2:fc:61:b0:10:e4:28:97:14:10:2f:
         4c:de:db:01:73:6d:54:d3:09:a3:eb:97:22:7d:2a:a9:45:61:
         55:3d:bb:f4:e8:30:c0:99:6e:c6:ae:4b:e3:8f:21:f3:5f:75:
         ae:e6:22:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 13:58:50 2024 by rpki-client on console-fra.rpki-client.org