Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa
File:                     3130332e3234372e34332e302f32342d3234203d3e203535363835.roa (raw, json)
Hash identifier:          8F7fiU7vGe9Vc51zIc4bJZmRh9Cp4cIynPTyrqXxjiA=
Subject key identifier:   B0:8F:E1:D6:AF:47:DD:1F:7B:80:BA:32:EF:C1:47:36:F8:71:F5:6C
Certificate issuer:       /CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
Certificate serial:       433CE14E520B62A03E35C5ED2C17F614EA53AA3F
Authority key identifier: 38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa
Signing time:             Wed 01 May 2024 04:00:04 +0000
ROA not before:           Wed 01 May 2024 03:55:04 +0000
ROA not after:            Wed 30 Apr 2025 04:00:04 +0000
asID:                     55685
IP address blocks:        103.247.43.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl
                          rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:3c:e1:4e:52:0b:62:a0:3e:35:c5:ed:2c:17:f6:14:ea:53:aa:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38FCEA2A1C8443E590CF5220E7BDA05D722C294D
        Validity
            Not Before: May  1 03:55:04 2024 GMT
            Not After : Apr 30 04:00:04 2025 GMT
        Subject: CN=B08FE1D6AF47DD1F7B80BA32EFC14736F871F56C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e1:93:79:e1:31:98:5b:8c:0b:89:f4:66:c5:
                    08:8c:7e:cc:6e:24:22:93:5d:a2:e4:df:b0:d2:68:
                    e1:7b:ae:b9:fa:59:1a:fc:74:8c:ad:fc:5a:c0:b9:
                    0c:21:49:92:81:1e:e9:fa:c1:24:23:2b:e3:0c:b6:
                    59:ef:f9:a3:5c:8d:5b:8d:95:4b:10:02:cc:86:be:
                    62:4d:4b:92:7e:53:3d:98:87:19:87:d2:af:3b:8f:
                    8a:4f:ee:ab:4f:ba:11:86:0d:62:d9:69:ff:c5:ab:
                    c1:d6:3d:25:e8:2b:e8:91:b0:38:ca:db:4a:43:19:
                    a3:b0:7d:0a:b2:f2:41:37:44:90:1c:ef:65:09:77:
                    c6:44:2f:e4:49:c5:f4:f7:cd:c9:03:91:99:9e:7f:
                    ed:d9:e4:02:03:47:7b:55:2a:59:6c:e8:be:2d:0d:
                    01:86:ba:35:5f:de:a0:86:6f:f1:21:84:0d:cf:9e:
                    64:07:4c:b2:62:eb:8a:ab:fb:53:9b:fc:a5:1d:80:
                    be:72:da:68:0a:67:40:4f:ca:b1:5f:57:f6:ff:0a:
                    f5:b2:92:3f:58:99:e0:c5:2d:90:07:65:eb:61:6c:
                    c9:94:1f:4f:28:1e:98:66:f1:21:23:87:51:ef:5e:
                    02:6a:eb:c3:a9:5a:4f:bc:e9:9e:c5:74:17:dc:91:
                    27:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8F:E1:D6:AF:47:DD:1F:7B:80:BA:32:EF:C1:47:36:F8:71:F5:6C
            X509v3 Authority Key Identifier:
                keyid:38:FC:EA:2A:1C:84:43:E5:90:CF:52:20:E7:BD:A0:5D:72:2C:29:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38FCEA2A1C8443E590CF5220E7BDA05D722C294D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/928089a7-0a68-4d67-adab-76d7d9271fde/0/3130332e3234372e34332e302f32342d3234203d3e203535363835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.43.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:10:c1:39:ea:e9:0f:21:41:09:aa:29:dc:19:f3:c7:56:
         6b:5e:a8:e7:09:99:52:59:93:0d:7f:ff:f8:f7:24:8a:cd:d2:
         28:fa:f1:bc:9d:12:6d:34:09:52:77:bc:f0:7b:62:27:de:df:
         06:01:28:bb:3d:2b:b8:cd:a6:e1:f0:32:dd:0f:97:fc:e8:44:
         d2:4e:73:e5:26:31:67:31:20:ef:50:85:e0:e3:7a:80:97:2b:
         f1:7d:23:ae:57:87:ea:ff:b2:68:9a:1a:cf:56:77:b1:a9:17:
         fe:00:c3:78:fe:16:ab:48:26:22:e7:d7:72:0c:48:37:b5:c6:
         2c:70:cd:9b:f6:e3:c3:ad:dc:08:d6:e8:dd:f3:1f:70:45:71:
         e2:f2:5a:be:50:5f:28:9b:67:45:41:d5:c2:e8:9f:6c:66:7e:
         35:11:76:6d:ee:e0:4a:3e:cc:e9:f3:82:46:ce:f4:48:98:2d:
         51:c8:6f:89:c8:68:b7:cd:0c:99:07:22:ba:04:e0:ee:33:c4:
         bb:5d:5f:13:21:f4:02:0d:71:21:43:28:68:d6:49:53:72:89:
         06:be:94:48:11:d1:dd:22:03:28:5d:d8:87:19:e6:b0:cf:a1:
         21:5c:c9:44:30:58:38:82:eb:18:69:d7:15:74:41:9c:c2:ce:
         5e:44:9c:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org