Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa
File:                     3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa (raw, json)
Hash identifier:          46mr85Rahc1cIB66kaX1uIqSbsPKnWLUb/qQhq4YJH4=
Subject key identifier:   E7:EC:8C:55:44:AD:3E:B3:00:04:53:29:6D:BD:4D:45:87:70:EB:BE
Certificate issuer:       /CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
Certificate serial:       4D3D201BB8A8EEE51D6D17046D35644237496F85
Authority key identifier: F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa
Signing time:             Thu 07 Dec 2023 12:00:01 +0000
ROA not before:           Thu 07 Dec 2023 11:55:01 +0000
ROA not after:            Thu 05 Dec 2024 12:00:01 +0000
asID:                     58819
IP address blocks:        103.240.109.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl
                          rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 05:15:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3d:20:1b:b8:a8:ee:e5:1d:6d:17:04:6d:35:64:42:37:49:6f:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8DF40E4C95F9EBF81453870736995E91BBB92F7
        Validity
            Not Before: Dec  7 11:55:01 2023 GMT
            Not After : Dec  5 12:00:01 2024 GMT
        Subject: CN=E7EC8C5544AD3EB3000453296DBD4D458770EBBE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:d4:11:0d:23:48:44:8a:5f:e4:ac:ff:ce:
                    09:6b:37:4f:13:8c:84:9d:76:8b:4d:91:dc:69:a7:
                    33:9b:77:58:08:13:54:52:6e:ad:e0:03:28:0d:05:
                    9e:31:59:39:33:47:65:72:c2:1d:6c:3a:ac:9a:b9:
                    fd:1a:28:2d:b7:7f:72:85:2d:98:89:41:87:da:98:
                    de:80:a5:61:bc:80:e9:19:c2:93:4b:4f:32:a6:a4:
                    5b:f7:80:1b:68:02:57:74:c5:d3:00:22:17:1b:aa:
                    51:1d:a6:f6:6c:a2:a5:ee:61:94:1e:d9:72:42:b0:
                    4c:09:30:71:7c:6f:df:f0:5c:13:40:9a:ac:e2:ae:
                    07:df:d1:29:60:8c:da:78:b7:10:a7:45:fc:f4:e6:
                    e7:e9:6f:29:a2:c4:79:3b:bd:bd:f7:bf:00:de:3d:
                    f1:35:bc:9a:ec:88:4e:57:c2:2a:42:ee:65:1a:64:
                    92:f2:de:00:f5:bf:f0:b9:de:61:c6:fa:ba:3b:48:
                    cd:81:e1:5a:b8:5a:15:0c:d6:51:23:0d:1f:f3:79:
                    ef:80:a7:4c:d1:36:30:cc:64:91:dd:1e:67:51:c1:
                    c9:76:dc:9a:9e:d1:44:01:61:eb:b9:cc:39:64:c9:
                    05:66:75:c7:fd:f6:52:3f:55:c4:75:ae:17:7a:01:
                    15:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:EC:8C:55:44:AD:3E:B3:00:04:53:29:6D:BD:4D:45:87:70:EB:BE
            X509v3 Authority Key Identifier:
                keyid:F8:DF:40:E4:C9:5F:9E:BF:81:45:38:70:73:69:95:E9:1B:BB:92:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/F8DF40E4C95F9EBF81453870736995E91BBB92F7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F8DF40E4C95F9EBF81453870736995E91BBB92F7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d03af01-f239-4a1f-81cd-4106bebb2a22/0/3130332e3234302e3130392e302f32342d3234203d3e203538383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.240.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:85:6b:13:87:f8:e4:13:14:0d:e2:70:f1:17:31:70:64:14:
         c3:5e:a6:1e:dd:d9:35:56:b9:11:2a:ac:2f:f7:7f:39:ac:7f:
         e4:ef:3c:25:8f:ec:21:90:df:c6:ed:54:87:97:9d:70:a4:49:
         08:30:e6:1f:b4:3d:43:0d:24:e0:b0:be:cd:cd:29:44:30:da:
         99:fc:a4:4e:43:0e:ce:cd:b2:fa:5a:4d:e5:c6:d7:9a:dc:b2:
         d5:0f:2b:f3:75:94:63:aa:58:10:a0:dd:a9:99:d8:10:0a:0a:
         11:2e:af:ea:a2:93:ea:76:7c:3d:a2:28:92:aa:a5:66:75:1c:
         e9:34:82:f5:dc:e8:08:f2:c6:dd:ab:3d:59:d9:37:12:e2:ff:
         6d:25:94:96:e1:8f:23:de:1e:e7:6d:b7:ed:5a:37:de:df:cb:
         35:20:39:5a:91:62:78:42:81:e2:7a:00:d3:d0:ec:bc:b1:12:
         e6:9c:d3:07:cc:f5:33:0a:6b:cd:a0:0f:e0:fa:3b:a6:53:ba:
         9b:30:2b:8f:7b:ec:5b:c9:45:bf:c1:d3:bb:2d:93:f8:5b:79:
         30:fa:0b:83:a2:56:b6:22:9f:43:8b:66:02:b1:7f:04:67:20:
         88:bd:2a:91:46:cc:86:7e:f9:57:51:ca:64:4e:48:b1:5f:31:
         6b:55:ee:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 04:58:28 2024 by rpki-client on console-fra.rpki-client.org