Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
File:                     3130332e3138362e302e302f32332d3234203d3e20313336303532.roa (raw, json)
Hash identifier:          sjDAEjQJIRUKvRfiXodPGkckHaWj3KfQyawB+m7pGGM=
Subject key identifier:   E7:77:2C:87:60:90:13:30:2C:4F:48:90:79:3A:F0:22:2A:32:AC:82
Certificate issuer:       /CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
Certificate serial:       0CF3FD7DC43857FCC5762614438BD80614C33487
Authority key identifier: E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa
Signing time:             Mon 26 Feb 2024 09:02:06 +0000
ROA not before:           Mon 26 Feb 2024 08:57:06 +0000
ROA not after:            Mon 24 Feb 2025 09:02:06 +0000
asID:                     136052
IP address blocks:        103.186.0.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl
                          rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:fd:7d:c4:38:57:fc:c5:76:26:14:43:8b:d8:06:14:c3:34:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0967549EF32D89E9FF1638FCF18347A1ADA5D70
        Validity
            Not Before: Feb 26 08:57:06 2024 GMT
            Not After : Feb 24 09:02:06 2025 GMT
        Subject: CN=E7772C87609013302C4F4890793AF0222A32AC82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:ac:79:b9:7c:09:f8:a2:7e:43:57:cc:d2:93:
                    15:70:41:e8:9f:0d:12:45:9c:14:e0:36:dc:f6:71:
                    66:0c:ab:89:8c:69:1e:ef:23:8e:61:38:21:93:2d:
                    77:8a:9e:81:e0:01:ee:b3:60:d5:a4:9c:7a:cf:51:
                    3a:fb:9a:bd:38:b6:c7:c0:c6:3d:77:0c:51:7e:dc:
                    1f:7e:c6:ba:8c:82:94:94:03:b1:69:f5:22:6f:dd:
                    f7:eb:d3:49:6e:21:f0:9c:37:8c:8c:cc:37:cf:28:
                    de:18:a1:f4:ec:30:6d:7a:8a:f7:49:0b:f2:31:ad:
                    58:8a:c1:d2:2c:c7:20:48:0a:f7:6d:06:2e:d6:e5:
                    5e:fa:44:b2:53:d0:b5:87:79:92:03:99:9c:d5:2e:
                    f5:88:6d:5e:81:36:9a:a9:bc:a2:14:e6:8c:90:33:
                    9e:97:c4:56:fc:3a:1f:c7:61:e4:b8:a3:65:7d:b7:
                    0c:34:69:1d:7d:cb:0a:83:b2:f6:b7:2c:2c:84:66:
                    0f:60:26:2a:90:48:ba:0c:b4:a3:d5:08:e4:72:a9:
                    95:cb:71:95:25:a6:e2:59:06:be:b8:8e:3e:c2:29:
                    89:fb:8d:03:85:ab:d1:47:29:f2:bb:ac:19:45:37:
                    e8:7e:be:4d:9a:90:80:22:40:5d:b5:48:ba:a4:5f:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:77:2C:87:60:90:13:30:2C:4F:48:90:79:3A:F0:22:2A:32:AC:82
            X509v3 Authority Key Identifier:
                keyid:E0:96:75:49:EF:32:D8:9E:9F:F1:63:8F:CF:18:34:7A:1A:DA:5D:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E0967549EF32D89E9FF1638FCF18347A1ADA5D70.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837a6dd8-a843-4698-a5f3-3eec468d14a4/0/3130332e3138362e302e302f32332d3234203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:21:45:81:3d:08:98:97:e6:40:48:8a:ca:13:90:9d:77:24:
         73:22:8d:61:0e:a4:f0:c0:84:e4:49:6e:de:94:0a:cd:1c:80:
         12:4b:64:52:fd:58:d2:59:20:1c:37:23:bf:50:9a:e0:ea:e9:
         05:b2:64:63:ed:bb:e6:9b:31:43:23:b7:71:a8:3f:1f:5b:17:
         ed:05:db:36:05:44:7f:e4:1f:89:87:0d:4a:75:95:7c:46:d3:
         23:0a:ee:53:df:ff:7a:a3:e5:94:50:de:6c:9e:fe:36:29:7c:
         86:f5:eb:f1:df:da:73:ea:d9:38:07:3c:be:f3:b4:09:92:de:
         99:12:45:5c:ed:2a:84:12:a0:37:75:be:0f:7b:90:3a:e2:cc:
         a3:e8:64:64:6a:92:3e:ad:25:54:ec:70:d0:43:da:06:04:0e:
         e7:db:31:76:3c:de:6f:44:9e:c8:f0:9c:75:18:74:c6:5e:aa:
         e2:f2:07:76:c2:2f:a7:60:2a:f0:2b:38:80:bd:ce:13:b0:12:
         9e:5f:a9:54:73:ce:19:b4:6d:89:e2:d3:f7:30:8f:ea:50:7b:
         9a:eb:aa:37:89:34:0c:63:68:c7:33:e1:8e:d3:df:e1:d7:58:
         1d:4c:80:f4:78:96:3e:86:95:03:43:39:fb:16:88:8a:e2:3b:
         4d:9c:50:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 09:08:48 2024 by rpki-client on console-fra.rpki-client.org