Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
File:                     3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa (raw, json)
Hash identifier:          r8ZqBwcrGdH8TEuK29OivEcKhqjzvIMTsJVTlTtuCYA=
Subject key identifier:   08:CC:1C:B4:B4:30:89:3F:C4:62:6D:FF:C7:B3:37:73:FD:58:01:7E
Certificate issuer:       /CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
Certificate serial:       4D30CB20187B3A510CEED993433F16F1051CD153
Authority key identifier: 93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa
Signing time:             Mon 01 Jul 2024 01:03:15 +0000
ROA not before:           Mon 01 Jul 2024 00:58:15 +0000
ROA not after:            Mon 30 Jun 2025 01:03:15 +0000
asID:                     38515
IP address blocks:        103.107.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl
                          rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:30:cb:20:18:7b:3a:51:0c:ee:d9:93:43:3f:16:f1:05:1c:d1:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3
        Validity
            Not Before: Jul  1 00:58:15 2024 GMT
            Not After : Jun 30 01:03:15 2025 GMT
        Subject: CN=08CC1CB4B430893FC4626DFFC7B33773FD58017E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:6b:3b:f8:a5:11:69:e0:4f:d8:f8:66:38:62:
                    6e:82:14:ee:14:57:60:91:04:be:cb:29:44:1e:b6:
                    29:1f:a0:91:5f:70:8c:97:0c:25:29:f2:80:03:ff:
                    d4:2f:52:44:71:74:cd:85:68:b8:e2:fe:b0:62:21:
                    5c:74:64:56:36:02:bc:6c:2d:0c:60:3e:74:be:f1:
                    f4:e4:b0:48:54:5b:3e:ae:0c:bf:56:81:e3:ae:8a:
                    46:45:e1:df:a8:9f:eb:f9:7a:a0:1b:cd:cd:c4:eb:
                    f6:66:4a:de:8a:45:26:eb:8b:90:d0:e0:c1:c1:11:
                    2f:10:f6:25:78:74:a2:27:da:6b:2f:d4:25:3f:f8:
                    4d:d3:7b:32:c7:82:81:28:21:04:c4:eb:d5:b5:af:
                    10:fe:d2:69:1b:aa:bf:d1:b7:16:ca:65:19:ce:5f:
                    6e:b0:c7:ca:75:e6:a2:09:d6:a4:e7:59:64:f0:d0:
                    4f:18:1c:51:75:34:26:7f:89:cf:60:09:5c:d2:83:
                    1f:6e:16:4c:56:72:0b:ce:bf:8a:78:9c:d2:c0:29:
                    8c:51:73:ae:0e:41:f5:1e:b5:c8:2b:62:6e:4a:46:
                    fa:60:4d:bb:e3:db:4d:87:b2:df:e9:99:1d:74:43:
                    6d:51:6c:b9:a0:27:0e:7a:c5:a0:a2:5b:91:cd:f7:
                    39:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:CC:1C:B4:B4:30:89:3F:C4:62:6D:FF:C7:B3:37:73:FD:58:01:7E
            X509v3 Authority Key Identifier:
                keyid:93:5D:B2:D4:48:8F:AE:2C:11:E1:BF:3B:DF:20:D8:2A:2D:DF:D8:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/935DB2D4488FAE2C11E1BF3BDF20D82A2DDFD8F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4c64a9-3537-4bc7-8613-8e981629e4ca/0/3130332e3130372e3235312e302f32342d3234203d3e203338353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.107.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:dc:f3:b2:03:24:e9:db:da:b0:e6:38:68:99:ae:81:71:08:
         7f:71:8c:01:e6:4d:4b:e7:e1:59:cf:05:7f:05:8d:98:1b:c9:
         11:97:e4:6b:fa:c4:e7:2f:e4:9f:17:9d:f7:4e:5a:d4:b3:dc:
         ca:16:da:81:88:b3:b9:51:99:0b:f8:3f:06:60:a7:a7:37:b8:
         af:5a:c6:4f:84:4e:9e:58:c7:41:38:2c:37:df:e9:bf:5c:bf:
         40:5c:c7:d2:9f:dc:0f:a1:a8:23:64:2f:d5:86:ef:80:71:c5:
         fb:85:c3:d4:ef:20:7e:8b:e1:95:9f:75:02:f7:dd:f2:bf:71:
         fe:ce:78:e0:cc:09:65:32:0e:3b:9c:98:a0:b6:bd:38:e4:aa:
         c8:5c:bd:d9:54:ca:b4:0b:c4:07:f3:e0:de:49:86:06:d4:45:
         02:74:03:bb:e3:af:26:3c:d6:62:7f:1f:c8:a0:cd:6d:ac:da:
         a4:3a:67:54:fa:77:5c:2b:84:e2:88:02:be:0f:85:de:92:3d:
         73:8e:09:33:dd:37:70:79:46:19:01:10:74:01:8a:d7:bc:61:
         0b:09:c2:09:b7:b2:10:0a:52:71:86:99:93:03:48:9e:dc:06:
         b0:97:fe:18:d9:57:e1:18:1f:8f:da:c5:56:2f:2f:5f:64:d0:
         e1:86:25:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:05:57 2024 by rpki-client on console-fra.rpki-client.org