Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
File:                     3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (raw, json)
Hash identifier:          g6SAQJJHWXzFVQgYOk15xgdtJmREERi+slGLqoyw75U=
Subject key identifier:   70:31:E9:00:36:A4:BF:07:C3:4D:0D:A4:F9:9C:72:BE:1C:E9:F5:5F
Certificate issuer:       /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
Certificate serial:       5BEF1CC19BBC987AA377F8EA3F447A1786550127
Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa
Signing time:             Mon 13 May 2024 07:03:19 +0000
ROA not before:           Mon 13 May 2024 06:58:19 +0000
ROA not after:            Mon 12 May 2025 07:03:19 +0000
asID:                     149716
IP address blocks:        103.186.211.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl
                          rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 29 Sep 2024 23:28:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:ef:1c:c1:9b:bc:98:7a:a3:77:f8:ea:3f:44:7a:17:86:55:01:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B
        Validity
            Not Before: May 13 06:58:19 2024 GMT
            Not After : May 12 07:03:19 2025 GMT
        Subject: CN=7031E90036A4BF07C34D0DA4F99C72BE1CE9F55F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:7c:2b:ff:b2:6c:14:05:a4:06:8d:39:15:
                    fc:1b:d4:b4:45:2f:ce:ae:01:65:a9:f2:a2:b8:be:
                    3c:5c:dd:46:0a:fb:17:e7:49:a7:89:60:29:08:3c:
                    a5:29:f3:08:92:93:de:b9:b0:e6:2e:79:ef:77:b7:
                    b5:9e:00:fc:47:c3:08:89:53:3e:f9:b8:9e:11:d6:
                    c3:91:50:67:cb:7c:b4:89:7c:93:ed:19:cb:dc:03:
                    91:76:6d:01:d8:8e:76:4b:19:b9:ed:01:77:18:95:
                    2f:2a:85:b6:3e:55:9e:ff:df:ea:df:a3:b0:62:1d:
                    36:16:93:92:3e:b9:47:8b:e8:5d:54:1b:39:e2:21:
                    31:a7:49:31:d2:cb:bb:12:62:c2:dd:5f:2d:d7:89:
                    b6:cd:39:18:aa:14:19:2e:e6:88:d7:6b:ff:0a:07:
                    1e:fd:c4:5f:0a:2a:c7:50:c3:67:40:55:f3:ed:cd:
                    0e:54:4e:2e:11:c7:dc:61:c3:eb:b6:c3:05:6c:0c:
                    bd:f2:62:a0:93:a7:2f:99:a5:44:f5:94:f8:1f:e2:
                    5c:66:5e:ec:66:02:35:4a:f2:d5:51:65:49:d0:d4:
                    98:ae:ef:d6:19:58:37:12:d5:2e:49:02:bf:72:5a:
                    e3:10:23:cf:30:13:6e:a1:89:ec:15:3d:e9:47:40:
                    a5:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:E9:00:36:A4:BF:07:C3:4D:0D:A4:F9:9C:72:BE:1C:E9:F5:5F
            X509v3 Authority Key Identifier:
                keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:5b:9b:1f:42:b9:67:7b:88:53:a8:ad:8b:92:9c:00:74:84:
         c9:22:19:d5:85:ad:96:b7:5c:27:61:e7:e3:bc:7a:39:c8:85:
         e6:2c:64:f2:a3:75:a5:c9:19:72:95:4f:69:31:0b:62:15:18:
         77:e0:a3:5d:65:16:33:83:5f:4c:c2:41:cb:89:ef:c2:57:83:
         44:44:26:9a:9e:a5:a2:e3:c3:19:da:50:9d:fb:ab:2f:b2:64:
         69:c4:cb:d5:a1:da:f8:ec:a1:7d:79:69:ae:55:ef:10:76:75:
         39:72:24:81:29:14:65:0b:58:09:78:86:00:9e:d7:15:a6:f2:
         6f:bc:79:7e:72:8f:2d:0c:1b:9d:68:bc:ae:4e:0a:13:c6:86:
         1f:be:14:78:fc:5c:46:f4:a1:e7:54:26:bd:10:e9:5e:c5:e6:
         d1:35:91:58:c5:29:c8:0c:43:41:db:f6:c5:32:09:e0:52:22:
         4b:6e:73:c1:fb:d5:af:2e:ef:43:3c:29:99:86:ee:1f:5c:5c:
         3c:1f:2a:52:9f:57:3c:da:d4:57:aa:b6:fa:38:51:90:21:a0:
         b6:68:ba:9c:bb:d6:c2:10:62:32:92:75:5d:66:45:6e:df:90:
         e1:82:4a:fc:59:e9:e9:9b:9a:d9:c7:a4:31:cb:9c:c2:59:c1:
         27:35:eb:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 26 21:29:54 2024 by rpki-client on console-fra.rpki-client.org