Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa
File:                     3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          eU7I4ymKpW+jwkR3HPQwmMezqt+megmBIZ8FaA+gFVU=
Subject key identifier:   0A:6F:44:AF:CD:E5:CE:D3:0D:AA:A1:DF:EF:FF:C9:1A:22:96:48:1F
Certificate issuer:       /CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
Certificate serial:       7BDC22D21DE800DEDBC4BFAA29A1F85A9DBD2753
Authority key identifier: 8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:44:02 +0000
ROA not before:           Mon 15 Jul 2024 02:39:02 +0000
ROA not after:            Mon 14 Jul 2025 02:44:02 +0000
asID:                     48465
IP address blocks:        103.186.194.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl
                          rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:dc:22:d2:1d:e8:00:de:db:c4:bf:aa:29:a1:f8:5a:9d:bd:27:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CFB227DA1EF51DB23364BBA034D0F68A09A5F59
        Validity
            Not Before: Jul 15 02:39:02 2024 GMT
            Not After : Jul 14 02:44:02 2025 GMT
        Subject: CN=0A6F44AFCDE5CED30DAAA1DFEFFFC91A2296481F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c4:d3:9c:a5:d3:66:cc:72:13:04:f8:35:53:
                    21:ef:0c:a5:58:10:d4:46:89:4b:37:da:40:64:7b:
                    77:58:cf:26:c3:f0:db:dd:b7:eb:c3:0c:b1:6e:cf:
                    cd:ba:54:48:ce:0a:8d:51:b1:ef:5b:07:0b:30:31:
                    27:e2:87:aa:75:90:39:c7:ef:af:ff:cd:b1:7c:b8:
                    13:eb:54:86:1a:02:b4:da:ed:a4:92:1a:1b:e0:ab:
                    75:1d:21:02:12:77:4b:2e:42:13:ea:c2:77:ad:50:
                    36:e2:89:11:43:1c:4d:ff:99:00:c1:01:6a:20:38:
                    9a:12:c5:6c:85:87:8d:85:de:51:9a:66:d5:7c:bf:
                    f2:79:57:eb:04:2f:2d:17:ca:ab:1f:53:f4:7f:14:
                    a6:2a:fb:bd:bd:63:63:3c:9c:0d:dc:09:b7:74:09:
                    57:10:af:cd:2d:62:12:c4:88:1a:73:e8:b1:d3:a4:
                    9d:10:3f:98:8b:ea:23:43:98:28:6e:b3:46:2e:5f:
                    2e:a9:09:f7:ca:e1:d0:0d:37:93:76:49:45:4c:a6:
                    49:37:79:26:ae:9c:0d:b5:7c:b5:c4:46:25:8a:dd:
                    6a:95:df:e7:24:b7:2f:a9:87:4f:62:07:86:23:24:
                    2b:cf:11:b0:fb:d4:e2:02:a5:36:ab:8d:d0:60:59:
                    0a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6F:44:AF:CD:E5:CE:D3:0D:AA:A1:DF:EF:FF:C9:1A:22:96:48:1F
            X509v3 Authority Key Identifier:
                keyid:8C:FB:22:7D:A1:EF:51:DB:23:36:4B:BA:03:4D:0F:68:A0:9A:5F:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8CFB227DA1EF51DB23364BBA034D0F68A09A5F59.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5252ead3-dc8f-4d86-afcf-a140e5b87532/0/3130332e3138362e3139342e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:89:49:65:fa:c2:a7:06:18:99:a6:c0:f8:3c:27:05:d9:71:
         56:37:27:8f:9e:62:88:21:40:4e:13:25:61:9e:a2:90:44:f2:
         52:28:1e:fa:bf:0c:44:f7:c2:99:49:64:09:9a:33:7f:19:1a:
         09:d8:44:87:d6:5e:14:df:79:77:51:1b:ca:84:ab:28:fa:b7:
         20:1a:e0:39:29:86:a7:80:34:55:c4:58:fb:77:72:82:a1:cb:
         ed:5b:95:90:90:24:7d:71:23:1f:06:3e:ff:86:fa:0d:be:78:
         57:45:f8:b3:73:e6:f7:cd:64:4e:f8:a8:03:10:31:04:39:7d:
         8c:67:c3:f3:60:64:18:5b:a9:51:c9:ae:b9:51:8e:89:c7:a0:
         74:94:b0:cf:ea:45:cf:9e:c3:ec:d8:2a:18:a0:1e:2e:88:fa:
         49:dc:f4:7c:b6:19:d0:cd:b8:55:d3:be:72:f0:7c:fe:15:09:
         ff:2a:77:2b:17:e5:f2:6f:c1:d5:66:c4:de:23:f7:98:91:3c:
         e2:cd:c3:74:15:0f:f7:2a:30:9e:20:2c:35:bb:93:09:e2:fd:
         b1:76:a0:d2:97:18:ea:3e:2f:41:d3:dd:d6:bf:ad:7e:1a:2b:
         f9:bc:11:50:17:09:73:11:00:3e:c7:9c:c4:11:56:19:19:4c:
         b3:4e:a0:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 17:25:48 2024 by rpki-client on console-fra.rpki-client.org