Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa
File:                     3130332e3139302e312e302f32342d3234203d3e20313439383930.roa (raw, json)
Hash identifier:          pmq7DLjh6be5fXi1p+gF/43ZLVD065kAbAJSDEPJSCw=
Subject key identifier:   BA:B2:AE:C6:BC:17:9C:F0:F2:AD:E8:88:B0:6C:73:DD:17:C3:D3:97
Certificate issuer:       /CN=38A92419EE1289455FCB1B71F9420F05CA334C15
Certificate serial:       70105E07263F0C19552BF01A72C7ACD64A69501B
Authority key identifier: 38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa
Signing time:             Fri 10 May 2024 08:00:00 +0000
ROA not before:           Fri 10 May 2024 07:55:00 +0000
ROA not after:            Fri 09 May 2025 08:00:00 +0000
asID:                     149890
IP address blocks:        103.190.1.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl
                          rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 21:30:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:10:5e:07:26:3f:0c:19:55:2b:f0:1a:72:c7:ac:d6:4a:69:50:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38A92419EE1289455FCB1B71F9420F05CA334C15
        Validity
            Not Before: May 10 07:55:00 2024 GMT
            Not After : May  9 08:00:00 2025 GMT
        Subject: CN=BAB2AEC6BC179CF0F2ADE888B06C73DD17C3D397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:58:e9:f6:c5:6d:86:07:d9:7d:6a:b4:13:c2:
                    05:bf:68:df:ab:68:9a:ba:39:71:07:bc:7f:27:41:
                    ff:4c:dc:0e:f5:2d:38:49:e6:a6:ae:cf:48:5e:99:
                    c7:ca:95:f4:34:1e:f3:bf:1e:66:1b:e7:9b:13:af:
                    ba:f4:2b:27:3f:30:12:a9:61:84:4d:d9:7e:f3:84:
                    0b:f5:e1:55:6f:98:73:17:a2:dd:37:d2:31:8f:ba:
                    25:0d:eb:83:26:51:08:fc:42:6c:44:f4:0d:5e:20:
                    92:9d:45:72:30:0e:82:dc:ef:b6:8f:5d:a3:24:d3:
                    54:01:3c:6a:26:1d:6d:46:47:6f:51:7c:d2:1f:58:
                    ed:9d:fc:19:1b:68:2c:d7:c4:22:88:aa:16:ef:ea:
                    ab:cb:79:2c:84:99:7e:75:92:3d:67:04:19:d1:3e:
                    80:db:f0:7b:9e:43:68:39:21:a2:42:df:57:91:83:
                    d3:06:2e:bf:71:d1:57:7b:4a:c3:28:57:2e:4d:4b:
                    0b:bc:a5:48:8c:5c:1e:fd:54:3c:81:f2:ee:e0:64:
                    12:63:78:a2:24:f7:f5:3d:ca:fb:d2:ea:51:b2:1c:
                    83:10:a1:30:3a:1a:e0:52:a4:3f:b8:80:62:8d:d2:
                    03:09:7e:52:4e:71:b6:42:a8:fb:ab:2b:11:b1:00:
                    9f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:B2:AE:C6:BC:17:9C:F0:F2:AD:E8:88:B0:6C:73:DD:17:C3:D3:97
            X509v3 Authority Key Identifier:
                keyid:38:A9:24:19:EE:12:89:45:5F:CB:1B:71:F9:42:0F:05:CA:33:4C:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/38A92419EE1289455FCB1B71F9420F05CA334C15.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/38A92419EE1289455FCB1B71F9420F05CA334C15.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6dad8cb-a537-4c50-af6a-aaba5f1e7644/0/3130332e3139302e312e302f32342d3234203d3e20313439383930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.1.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:8f:51:97:af:cc:66:cc:85:10:28:42:54:9d:93:d7:ae:79:
         f2:d1:87:2b:d6:4d:5a:aa:44:f4:f3:fc:a4:8b:56:cf:45:91:
         04:c5:18:69:1b:7f:53:7f:38:c4:f5:29:a4:6c:33:ba:98:d3:
         f5:f9:8a:e7:30:fd:c4:5f:4e:ea:63:fe:f5:f3:52:bc:84:76:
         af:31:44:09:9a:c8:74:7b:82:6b:d3:0e:21:b8:c1:47:f3:b0:
         64:d7:a1:33:aa:73:45:96:5a:a9:31:52:da:bb:d5:cb:00:f5:
         70:09:38:26:05:8b:cb:41:5b:4c:40:a3:5d:4f:d2:50:41:e0:
         12:c4:5b:98:23:bc:db:6a:ba:cd:bd:7b:00:1f:d8:5b:6d:41:
         99:c1:41:1f:da:ee:7e:d0:79:f9:fe:16:55:d0:08:4e:27:0b:
         f7:1d:68:1c:ee:23:9b:d1:7c:75:71:e1:33:5b:d4:b8:83:ff:
         5b:44:fd:26:1b:42:ed:f1:d2:8a:4e:4c:18:58:36:e4:1b:72:
         d8:b3:34:c2:1d:dd:0e:0d:0f:7f:59:f6:97:e2:3c:ff:9b:ca:
         95:b8:39:43:d3:20:86:56:1d:4d:9f:14:92:f2:5a:d8:a9:ba:
         94:12:55:ba:7c:1c:d0:5b:6f:a3:33:13:f1:8e:7c:62:55:d8:
         5d:f7:b0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:02:30 2024 by rpki-client on console-fra.rpki-client.org