Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa
File:                     3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa (raw, json)
Hash identifier:          vtfeHjfL8yqlk/jNx/lCthha4B7+6EOQKJNCnc7VxN4=
Subject key identifier:   CC:6D:C1:BB:12:4A:B1:1E:42:E1:F6:31:84:7F:DB:C2:B1:87:92:9E
Certificate issuer:       /CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
Certificate serial:       75C71C1B3DB5493206F02766411501009B2E7C29
Authority key identifier: F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa
Signing time:             Mon 01 Jul 2024 01:03:10 +0000
ROA not before:           Mon 01 Jul 2024 00:58:10 +0000
ROA not after:            Mon 30 Jun 2025 01:03:10 +0000
asID:                     136079
IP address blocks:        103.86.101.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl
                          rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 05:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:c7:1c:1b:3d:b5:49:32:06:f0:27:66:41:15:01:00:9b:2e:7c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837
        Validity
            Not Before: Jul  1 00:58:10 2024 GMT
            Not After : Jun 30 01:03:10 2025 GMT
        Subject: CN=CC6DC1BB124AB11E42E1F631847FDBC2B187929E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b0:45:28:50:82:b9:8d:9c:f9:ea:ec:54:58:
                    db:db:d3:08:0d:4d:76:27:d1:14:83:ba:77:75:0c:
                    50:25:ea:96:8e:8b:80:db:9f:f4:d5:d6:7d:92:27:
                    7c:40:9e:e8:75:cf:75:cf:98:d2:48:9f:3e:78:35:
                    90:59:a5:53:b0:14:f8:a1:d5:1b:f3:44:1f:70:48:
                    94:76:53:3b:7b:bd:17:f3:3e:a0:08:a0:7b:c1:6a:
                    10:26:76:99:0c:a2:2f:34:7b:b2:e3:99:71:69:fb:
                    a1:72:78:87:91:39:69:f8:75:d1:0b:8e:78:23:a5:
                    10:a8:1d:f8:54:98:bf:24:b1:9a:42:25:d6:b5:51:
                    5c:17:7a:ed:28:2b:46:8a:5c:64:50:77:f7:e6:23:
                    73:3c:a5:d2:1d:8f:5f:ee:a6:f0:23:e9:39:79:e3:
                    72:e1:bd:cf:37:a4:71:04:e3:22:76:34:f1:9c:1b:
                    dd:4c:24:d4:61:e7:d5:64:e5:0f:13:17:6c:48:da:
                    fc:c4:c3:3c:38:40:73:00:41:38:00:50:6d:03:fd:
                    a5:f2:9a:6d:bc:d7:9d:85:33:0e:52:0d:26:1e:e2:
                    46:58:ab:3f:1a:fa:d8:ba:5d:b3:ef:65:46:73:b2:
                    21:ba:ba:de:01:5a:c2:56:fa:c0:14:90:7c:54:0b:
                    03:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6D:C1:BB:12:4A:B1:1E:42:E1:F6:31:84:7F:DB:C2:B1:87:92:9E
            X509v3 Authority Key Identifier:
                keyid:F3:AB:A8:F3:C2:DD:89:25:DD:47:BF:7E:A2:13:73:02:A7:2B:58:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F3ABA8F3C2DD8925DD47BF7EA2137302A72B5837.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e693b89-4597-40b5-92b0-b299fa769afa/0/3130332e38362e3130312e302f32342d3234203d3e20313336303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.101.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:75:62:b5:ae:38:3a:a2:2c:6b:f2:d7:09:69:45:d9:84:cc:
         c7:d0:da:91:65:da:52:a6:2c:a0:ae:9b:bc:62:fc:b8:1a:8b:
         fc:77:c7:a3:b1:f0:6a:97:b2:46:7a:be:31:07:88:2b:c8:ed:
         ef:19:41:57:14:83:61:b0:14:6e:79:e7:78:18:47:3a:ec:f1:
         d4:26:af:5f:df:7c:05:6c:1a:ce:fb:84:7b:ba:5a:6f:1a:2a:
         70:8f:18:72:df:c9:c0:0c:5a:65:d5:37:d3:0e:f4:3d:ad:dc:
         43:bb:f0:cb:57:35:b8:13:b8:6e:d0:47:f8:7d:e1:76:39:e5:
         5d:cb:ff:09:c2:d2:bf:2b:3a:3a:3c:30:f9:2f:e9:70:76:c9:
         e4:57:b4:c3:08:98:06:27:55:f0:bb:89:2e:a6:aa:ea:eb:60:
         fc:bf:39:44:73:5c:1f:5d:d9:1a:08:58:0a:a0:bc:e8:6a:a8:
         b2:d2:f6:9b:ca:84:b4:19:58:07:bd:de:ce:f7:eb:54:80:2a:
         38:3a:67:c5:7e:b8:14:49:60:79:dd:92:ed:ce:bf:c8:63:83:
         ea:73:59:00:c5:81:d4:d7:9f:f7:3b:b2:73:ab:48:f9:d3:49:
         b5:d5:d3:2f:43:71:99:96:64:6f:da:ac:0c:38:75:ea:f1:64:
         d3:85:d1:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 08:13:04 2024 by rpki-client on console-fra.rpki-client.org