Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa
File:                     3130332e38332e3134312e302f32342d3234203d3e203338313635.roa (raw, json)
Hash identifier:          CMMIKKC6z8wbRJiIvXWRJkj//192CqgwYr5Du0PKfp0=
Subject key identifier:   50:47:1C:3F:9C:4B:C9:1C:1A:DD:F8:54:28:B4:29:71:95:BC:2C:13
Certificate issuer:       /CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
Certificate serial:       3D1E3BD16A18DBAAB237ABD701C5166E4EB44023
Authority key identifier: F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa
Signing time:             Mon 01 Jul 2024 00:02:16 +0000
ROA not before:           Sun 30 Jun 2024 23:57:16 +0000
ROA not after:            Mon 30 Jun 2025 00:02:16 +0000
asID:                     38165
IP address blocks:        103.83.141.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl
                          rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:1e:3b:d1:6a:18:db:aa:b2:37:ab:d7:01:c5:16:6e:4e:b4:40:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F2C22414BF08FC08B0AEBF44FAF85A85979D1053
        Validity
            Not Before: Jun 30 23:57:16 2024 GMT
            Not After : Jun 30 00:02:16 2025 GMT
        Subject: CN=50471C3F9C4BC91C1ADDF85428B4297195BC2C13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:7d:52:a8:38:25:bd:83:6e:c4:96:1a:02:32:
                    6c:ee:f8:81:e2:b2:33:53:14:31:92:a5:5e:89:5e:
                    b9:bc:75:ee:f4:b8:5f:7b:a3:75:fe:fa:58:62:9d:
                    a8:59:c8:c8:65:50:b2:89:5b:d3:22:58:f4:ff:7e:
                    c7:21:9e:2c:14:bc:75:5c:18:93:bd:bb:87:f1:22:
                    25:58:8f:d5:98:32:f1:29:45:2c:ff:63:75:c7:3a:
                    55:e2:e7:ec:ef:8a:44:13:3f:b6:ad:1b:07:4d:6b:
                    f1:37:d2:60:ff:a0:a6:8b:22:05:10:3a:ec:38:bc:
                    5d:6d:9b:8c:3c:84:f0:46:51:5f:a5:0f:d1:66:8a:
                    8e:5f:05:61:dc:4e:49:52:e9:92:02:34:12:a2:56:
                    08:ff:01:f9:5f:80:97:54:26:c0:a6:8c:cc:94:ad:
                    60:53:41:2a:0f:25:9a:92:bf:c4:b9:ec:10:56:a7:
                    32:23:4b:59:f7:2a:3d:08:d0:22:b6:66:55:78:37:
                    1b:47:c4:4e:0d:91:03:02:d5:e5:70:4c:80:d3:70:
                    16:49:a6:6c:36:15:66:1c:61:65:85:e1:2a:f6:16:
                    19:3b:3f:7e:33:9f:cf:e4:1f:8d:dd:a5:2a:2a:2e:
                    ed:51:e9:14:a8:63:fe:e8:8e:6d:ce:57:90:a4:96:
                    70:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:47:1C:3F:9C:4B:C9:1C:1A:DD:F8:54:28:B4:29:71:95:BC:2C:13
            X509v3 Authority Key Identifier:
                keyid:F2:C2:24:14:BF:08:FC:08:B0:AE:BF:44:FA:F8:5A:85:97:9D:10:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F2C22414BF08FC08B0AEBF44FAF85A85979D1053.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7448c11-f8d3-457d-8e22-84887ab22a30/0/3130332e38332e3134312e302f32342d3234203d3e203338313635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.141.0/24

    Signature Algorithm: sha256WithRSAEncryption
         19:0e:d3:a8:71:ce:de:4a:61:46:90:8e:40:f5:44:6a:8c:1e:
         dd:09:3d:7e:1e:43:ee:82:bd:60:d5:fc:ee:64:67:a6:60:0c:
         c8:21:b8:47:04:67:66:ec:2f:28:34:d5:8e:1b:21:57:38:63:
         4e:5a:eb:82:9d:27:dd:95:27:38:c3:53:be:87:ad:60:b3:b9:
         61:84:95:4e:5d:4d:ee:9b:2c:bf:b2:d4:73:a4:a9:59:88:3c:
         bc:ba:c5:6a:38:32:53:f8:1f:5e:46:18:7d:2a:fd:21:f7:17:
         f2:f0:0f:c1:de:d5:33:48:0e:4b:56:da:42:06:5f:b2:be:25:
         5d:46:f8:dc:af:1e:5d:65:8d:2d:5e:b4:5f:0e:57:34:0d:b1:
         e6:94:bf:00:ed:71:15:1b:22:2f:53:73:da:d8:e9:0e:72:e6:
         98:b5:da:af:43:e4:73:79:af:1a:3f:77:5f:74:79:b1:ba:3d:
         d9:e4:9c:4b:b1:16:85:60:a8:ec:e5:b0:a3:9c:88:e6:e1:e9:
         90:b0:7c:b1:33:02:e1:0b:46:05:f1:08:00:4c:f5:7f:cc:70:
         ee:78:09:c0:ee:96:43:87:2b:cd:30:1d:7c:66:ea:be:ba:da:
         b6:fe:ad:a2:e9:48:77:61:6b:1d:44:4e:49:38:0e:0b:d6:04:
         a7:83:02:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 11:03:06 2024 by rpki-client on console-fra.rpki-client.org