Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          BjsgdP0bBBN6UnRaespbf8YwMMjiGp/LVHsWqYC0AnA=
Subject key identifier:   44:09:F9:5F:60:08:9D:CB:4C:56:3A:2C:DE:D7:D5:F8:A7:54:7E:97
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       6BE722D5B901AB8F070E8919AE1F8801C8E0EEE1
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        103.107.248.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e7:22:d5:b9:01:ab:8f:07:0e:89:19:ae:1f:88:01:c8:e0:ee:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=4409F95F60089DCB4C563A2CDED7D5F8A7547E97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:53:a6:89:fe:bf:ae:95:aa:39:c0:62:ab:
                    13:17:3f:22:9d:af:f9:8f:c4:4e:f6:6f:27:15:31:
                    df:24:39:17:c3:7d:e5:e7:79:c3:06:33:2e:16:eb:
                    06:00:77:5b:4e:5a:93:13:fe:83:5a:16:bb:b6:bd:
                    1a:1f:3a:52:65:6a:aa:13:74:ac:a5:9b:5b:cc:87:
                    13:10:da:95:ae:2f:e4:e2:97:13:3e:3d:a2:7e:32:
                    95:79:8b:81:7c:fa:c6:2b:55:28:f3:45:86:49:78:
                    9b:58:b1:07:c3:57:ad:47:0c:76:1a:ad:f9:b2:62:
                    00:11:4e:21:07:71:ff:96:0e:7c:a7:9e:18:63:7c:
                    d8:63:bf:fc:bd:31:db:b3:6d:d9:fb:6b:93:e0:f2:
                    51:96:9a:52:26:d5:bb:ec:94:82:c7:83:b7:8b:ef:
                    c5:07:55:38:9e:77:b0:51:21:d4:5e:bf:b7:a2:8b:
                    dc:cb:9a:46:e9:63:ba:3c:c4:55:8f:c4:28:95:f3:
                    0d:97:0f:7d:1c:30:1f:02:d0:f7:1a:c0:0e:75:77:
                    32:14:93:b3:77:99:06:c9:fe:a1:9b:84:ce:83:e6:
                    a2:3d:62:82:e1:3a:f0:8e:a5:32:b6:c5:43:93:33:
                    65:41:30:96:d2:68:ce:93:7c:43:28:9a:76:68:32:
                    b6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:09:F9:5F:60:08:9D:CB:4C:56:3A:2C:DE:D7:D5:F8:A7:54:7E:97
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3234382e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:41:5c:5b:31:19:54:72:ac:60:d6:2c:bb:19:cd:ce:2e:47:
         1b:e0:58:47:8d:d5:97:74:0a:2b:d7:a5:ef:61:63:48:11:21:
         a3:1d:7b:cc:4a:79:00:eb:b0:31:11:eb:dd:ae:5f:41:ca:68:
         32:62:4f:6e:65:3e:21:20:98:ca:8b:c9:a6:9e:f1:e2:29:d3:
         4b:41:e7:89:f5:a5:d8:90:f5:b1:5a:c0:c3:c9:7e:e4:ae:28:
         58:45:a9:62:7f:e2:7e:43:77:bc:3b:81:af:d3:cb:95:5d:53:
         6d:24:59:6e:8b:60:24:44:f6:99:16:1e:20:a9:d2:c8:70:7d:
         cf:46:8b:ad:0c:0b:c1:2d:80:9d:f7:21:84:35:ae:a1:a3:ed:
         21:18:94:bf:20:69:da:22:58:83:06:82:d4:5b:bc:d4:85:3f:
         d6:4b:10:6c:09:32:cd:00:29:0c:32:c7:22:23:dc:44:c2:10:
         ce:2d:67:43:36:5f:d3:3b:41:63:92:9a:3c:de:1a:0b:df:a9:
         9f:b3:13:98:db:ec:74:3e:17:4e:66:3d:f8:dd:ec:2d:4c:74:
         ad:66:41:7b:eb:bf:64:c0:7c:ff:f1:6f:cf:17:65:66:21:1c:
         23:f5:85:91:c6:4b:c8:2f:a9:06:82:5f:d4:f7:44:33:5e:f5:
         f0:9d:d9:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:32:00 2024 by rpki-client on console-ams.rpki-client.org