Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          BpLGzUp7Xs7lG8N9IL3uXt34bHOuJAyWCtEer8epdos=
Subject key identifier:   3B:D9:7D:D7:F6:B7:FD:B4:49:77:1F:D8:72:8C:63:A2:9A:66:C4:F6
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       1D40394A10320798671BD2F7D9960312AF5CABD5
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        103.107.250.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:40:39:4a:10:32:07:98:67:1b:d2:f7:d9:96:03:12:af:5c:ab:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=3BD97DD7F6B7FDB449771FD8728C63A29A66C4F6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:34:38:11:f9:0d:7e:45:00:ae:3d:9e:e9:26:
                    b2:75:5c:56:a2:86:dc:f3:09:e8:d8:e4:30:5d:de:
                    58:c7:0d:50:43:a3:f3:30:0a:5b:c1:bf:cb:b2:d1:
                    3e:b9:16:14:75:e0:64:59:e3:25:6b:7c:d8:f6:63:
                    42:39:31:7b:4f:7e:36:fb:21:9e:05:e8:05:e0:89:
                    45:5e:9b:f2:5f:cb:4d:ba:04:8a:3f:0e:0f:16:49:
                    9c:9c:be:25:30:3d:e0:3f:3e:6d:ec:b9:dc:c9:1e:
                    51:6d:44:5f:c1:bf:78:8e:8f:03:0a:e0:38:06:7e:
                    35:2a:b7:6f:3f:b9:4d:a5:b3:a2:a7:88:af:92:61:
                    73:79:7c:78:04:08:2d:90:79:ec:db:59:72:b4:ad:
                    4d:c1:27:9d:21:8e:96:ba:b5:22:d1:60:b4:a9:a5:
                    6c:35:5f:92:b5:71:c4:d8:dc:ea:72:16:b1:21:d3:
                    1c:2d:52:19:89:38:1a:8a:8c:6d:55:b8:61:21:5b:
                    ae:a1:ef:46:01:ad:8b:cb:5d:59:16:00:8f:c8:e0:
                    14:4c:cd:47:cb:31:de:bc:46:4f:32:c9:15:19:9a:
                    c4:b7:15:64:9e:ff:ca:0a:fc:c3:87:8a:6e:8e:d3:
                    d3:44:15:9e:17:c2:bd:fd:19:b5:45:65:7e:f4:7d:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:D9:7D:D7:F6:B7:FD:B4:49:77:1F:D8:72:8C:63:A2:9A:66:C4:F6
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235302e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:8f:bc:c5:ac:d8:c0:a9:d0:26:c4:c1:bd:f5:27:b2:26:e4:
         7b:34:82:1d:6c:2c:62:2d:8b:41:01:6d:4c:fd:9e:18:6c:f0:
         93:de:02:74:67:20:72:ae:83:99:f3:26:8f:a6:80:be:69:56:
         03:ce:b6:97:1d:01:43:80:32:f2:13:33:3d:71:d2:a8:20:9b:
         ee:5b:62:39:b4:52:83:10:2a:58:db:0f:d8:54:ab:c9:e9:54:
         e9:06:85:d0:7d:7e:93:3e:84:29:f9:e9:c7:9c:d0:52:6a:9b:
         cf:08:68:aa:28:17:87:c5:52:af:89:53:2f:38:1a:f1:cf:ab:
         c5:b1:bf:65:63:f9:3e:b4:3f:62:b4:b6:33:0a:7d:76:f0:42:
         2b:af:ba:9f:a3:bb:ee:6f:dc:27:f6:43:9f:82:b6:26:50:86:
         3a:59:35:92:22:a7:0f:fe:1e:25:4d:4c:ed:ee:81:10:2e:fe:
         56:6b:b2:09:0e:d1:c0:d0:c3:89:e6:c9:d5:b5:3e:0c:9f:d9:
         a5:4f:ee:f0:fa:95:6d:d3:92:e6:92:dd:25:0a:b6:6d:29:77:
         f2:13:0d:72:66:3c:60:56:dc:f7:4e:a6:c9:f2:62:ca:a6:36:
         de:a8:8d:c9:69:85:a5:11:ac:cd:f1:b4:24:b6:d6:27:80:5e:
         ab:fd:44:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org