Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa
File:                     3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa (raw, json)
Hash identifier:          y3f8XNxTIq8usm83HATij9hNa9pgF95A6Gx8kOSxgHg=
Subject key identifier:   51:65:C0:C0:FF:33:64:01:92:27:1C:8F:41:AB:0E:90:F8:47:A1:B7
Certificate issuer:       /CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815
Certificate serial:       6672206455AC2F56A107B7E1F0751B3845422340
Authority key identifier: 20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa
Signing time:             Fri 08 Sep 2023 04:01:48 +0000
ROA not before:           Fri 08 Sep 2023 03:56:48 +0000
ROA not after:            Fri 06 Sep 2024 04:01:48 +0000
asID:                     149713
IP address blocks:        103.186.193.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl
                          rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 01 Jul 2024 17:02:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:72:20:64:55:ac:2f:56:a1:07:b7:e1:f0:75:1b:38:45:42:23:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=208A5AF3739BFD7985D7793CC27C9B5FB5744815
        Validity
            Not Before: Sep  8 03:56:48 2023 GMT
            Not After : Sep  6 04:01:48 2024 GMT
        Subject: CN=5165C0C0FF33640192271C8F41AB0E90F847A1B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:59:c4:cc:fa:d6:7f:bc:55:a7:50:d4:66:7d:
                    d2:25:5a:a6:1b:7a:67:8d:3c:81:e2:e5:f0:35:a6:
                    09:55:d3:2e:7e:28:e4:51:54:c3:5a:45:90:96:36:
                    7f:3e:11:c9:c1:3f:ca:04:53:23:5a:53:01:72:a5:
                    6c:ee:87:a2:37:c1:e4:82:60:32:e1:9d:2c:1f:56:
                    da:9e:0e:3c:1b:1d:7b:c4:42:b8:93:a2:d1:cc:e9:
                    11:4c:af:9e:4b:4a:dd:ac:ee:c2:92:a8:68:fb:12:
                    26:3c:12:36:bb:ae:0c:f9:ee:5a:34:3e:63:c8:c4:
                    29:f1:81:27:96:d4:f8:0d:6d:b1:c7:58:87:41:32:
                    f1:f9:2a:c6:9e:9a:20:ea:7b:da:9e:4f:57:39:a3:
                    11:c8:2e:fa:6c:bb:3e:4f:39:48:57:94:58:a4:36:
                    a5:75:db:85:bc:e4:30:9d:45:bb:0d:bd:02:3a:bc:
                    23:75:7b:24:37:e0:f4:69:73:75:3e:b4:06:23:08:
                    99:0c:cf:a4:8d:bb:98:71:b9:49:27:fa:26:8f:ba:
                    76:13:21:a6:bd:5b:76:59:c3:b1:95:01:ce:33:d5:
                    e7:dd:6d:73:4b:f0:9f:e8:89:1a:1b:9b:4f:ad:80:
                    e1:8a:4c:66:96:44:d0:40:d6:6c:49:d1:cb:dc:fc:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:65:C0:C0:FF:33:64:01:92:27:1C:8F:41:AB:0E:90:F8:47:A1:B7
            X509v3 Authority Key Identifier:
                keyid:20:8A:5A:F3:73:9B:FD:79:85:D7:79:3C:C2:7C:9B:5F:B5:74:48:15

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/208A5AF3739BFD7985D7793CC27C9B5FB5744815.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/208A5AF3739BFD7985D7793CC27C9B5FB5744815.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41d51d41-b6cc-420a-b5a8-67c8bd6b02af/0/3130332e3138362e3139332e302f32342d3234203d3e20313439373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:c0:2a:61:fa:90:19:ca:19:d6:34:ed:4a:b3:9f:d5:47:c0:
         fa:5f:88:da:ed:f0:04:73:4e:56:a4:6f:6d:0e:98:0a:e6:e6:
         16:93:8a:ba:97:dc:cc:ae:1d:1f:2e:27:98:a3:88:02:ef:a5:
         5a:76:c9:1c:78:f5:2a:8f:0e:c2:84:29:94:15:38:9c:55:1e:
         22:8d:c7:6a:69:08:cb:07:89:43:57:20:58:20:b2:6f:28:eb:
         22:d9:47:c7:d9:b0:52:a0:82:31:b2:85:3f:61:40:cf:50:a9:
         2c:ef:e2:c1:cb:9e:04:0e:35:16:99:45:b7:f4:37:fc:9e:c8:
         56:f5:ae:c4:35:a6:c1:af:2b:7e:cc:19:13:12:77:ce:cb:a7:
         5f:58:f3:a8:8c:30:a2:fc:3a:a7:06:b7:e3:7c:ec:72:f7:a8:
         f5:28:d3:fa:6d:bb:84:19:c0:1a:69:f2:83:60:c1:2c:6e:15:
         4d:1c:94:d9:eb:98:0a:73:e7:67:44:48:d9:6d:cd:6e:98:77:
         06:a7:a8:16:51:8c:bb:39:f2:a6:54:fb:e6:ed:ea:60:e0:33:
         53:08:28:26:28:82:a8:0c:e9:e8:71:14:9c:30:ab:38:bd:bd:
         67:8f:56:f6:9e:fc:be:26:49:42:1a:c6:70:f3:83:60:e3:4b:
         b9:41:59:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 17:07:37 2024 by rpki-client on console-ams.rpki-client.org