Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa
File:                     3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa (raw, json)
Hash identifier:          hIMnQPggRl/A4s6mlKVqz6cYpD+s0WdNhVv+CTnK11g=
Subject key identifier:   C9:C8:96:FC:49:3C:0C:58:C6:14:D3:C1:C4:20:20:E8:56:1B:8F:73
Certificate issuer:       /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
Certificate serial:       24EB46FCABFA30BB760A5A3BCADD2903179E70B7
Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa
Signing time:             Fri 14 Jun 2024 16:00:00 +0000
ROA not before:           Fri 14 Jun 2024 15:55:00 +0000
ROA not after:            Fri 13 Jun 2025 16:00:00 +0000
asID:                     149697
IP address blocks:        103.186.92.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl
                          rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:eb:46:fc:ab:fa:30:bb:76:0a:5a:3b:ca:dd:29:03:17:9e:70:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
        Validity
            Not Before: Jun 14 15:55:00 2024 GMT
            Not After : Jun 13 16:00:00 2025 GMT
        Subject: CN=C9C896FC493C0C58C614D3C1C42020E8561B8F73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:9e:8f:6e:cb:a9:5c:f5:d3:c0:f5:52:f9:
                    58:68:b1:14:c0:db:5e:74:40:df:1d:20:c1:8d:4f:
                    20:bb:e9:f4:67:5b:12:18:74:e7:bd:5f:94:c0:7c:
                    6f:28:f3:da:b5:bc:84:29:3a:81:18:a8:82:75:09:
                    a9:0d:b5:3f:dd:f6:2c:53:ca:47:46:e6:64:e1:d1:
                    fb:0b:d8:0d:64:83:f3:e1:99:97:bb:50:21:01:29:
                    12:a5:23:5e:2d:3e:b9:6d:da:a0:4f:95:1e:0e:fc:
                    a1:bf:5b:ba:32:0e:93:35:26:ec:9b:a6:22:71:fe:
                    57:f0:88:dd:a6:17:32:ad:84:96:e0:a9:c1:53:9a:
                    e0:59:89:f7:79:f4:75:cf:1c:1d:5e:c3:cc:cc:aa:
                    99:75:f7:e0:57:f8:58:c5:a0:4b:d3:94:05:23:6e:
                    2a:b4:1d:4c:84:e5:2d:b2:b6:b0:41:fe:34:3e:09:
                    af:9a:7d:89:c9:71:82:0b:2b:12:09:29:74:b2:d4:
                    f8:4d:4c:59:c0:c4:7c:4f:6d:0e:59:c9:a9:4b:e8:
                    7f:88:c1:ac:41:b6:86:e4:16:0d:9d:99:0a:ee:da:
                    c3:ec:9c:c6:fb:80:29:05:aa:72:5c:77:8b:ba:80:
                    88:de:c5:02:80:84:1c:49:df:7d:77:e3:d9:50:01:
                    af:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:C8:96:FC:49:3C:0C:58:C6:14:D3:C1:C4:20:20:E8:56:1B:8F:73
            X509v3 Authority Key Identifier:
                keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39322e302f32332d3234203d3e20313439363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         16:52:9c:66:bb:16:40:5c:c4:ca:d7:cb:32:e9:fa:f7:b4:de:
         16:a2:cd:f0:88:92:df:9a:79:b8:79:d3:d5:70:2a:05:e0:99:
         28:4f:cc:c8:4b:dd:76:09:d1:11:b0:46:e6:ba:19:4c:9a:97:
         08:54:51:be:66:d5:4d:6e:7c:b2:b1:73:0e:ae:db:2b:9f:aa:
         bd:3b:2f:c9:7f:36:ad:48:c2:59:2f:f9:b0:ab:a5:89:48:4a:
         1f:35:d9:d1:de:79:c8:65:3f:69:eb:56:6c:25:e9:d6:1c:44:
         64:58:7e:b8:a9:e7:96:c9:73:da:ec:d4:e8:ef:af:56:77:b8:
         82:a3:8e:bc:d7:d6:a9:5e:53:11:cd:07:da:2f:a8:b1:6b:e1:
         f0:ef:cc:08:18:ed:ad:36:f3:03:0e:d7:c9:ab:65:bd:00:26:
         bc:42:fe:f6:3e:1e:59:70:d9:ac:82:1a:d4:92:67:4b:38:b5:
         18:f8:48:0e:06:3b:f4:72:54:2c:33:62:7a:6c:79:03:35:e1:
         b5:49:62:9c:87:9c:81:90:57:ff:94:48:21:99:9f:d6:1a:99:
         58:c8:c4:84:16:ce:2f:a8:07:4c:e5:2a:ec:aa:dd:cd:4e:57:
         15:ee:af:74:e2:1b:9a:24:c1:ca:ea:2a:f6:53:ba:e5:46:ba:
         6a:a3:66:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org