Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa
File:                     3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa (raw, json)
Hash identifier:          mYfH315eP068ERJYYE5247VW3yxdOs2HUR3r6PYDS0s=
Subject key identifier:   16:77:0D:F9:0E:95:CC:1F:BF:04:4D:5C:E8:07:38:5B:47:C2:15:B4
Certificate issuer:       /CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
Certificate serial:       12A1EDE2584AEAEBE408C8FBA3542FBFC5AFB6A9
Authority key identifier: 86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa
Signing time:             Thu 04 Apr 2024 10:00:00 +0000
ROA not before:           Thu 04 Apr 2024 09:55:00 +0000
ROA not after:            Thu 03 Apr 2025 10:00:00 +0000
asID:                     149697
IP address blocks:        103.186.93.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl
                          rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 01:21:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:a1:ed:e2:58:4a:ea:eb:e4:08:c8:fb:a3:54:2f:bf:c5:af:b6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E
        Validity
            Not Before: Apr  4 09:55:00 2024 GMT
            Not After : Apr  3 10:00:00 2025 GMT
        Subject: CN=16770DF90E95CC1FBF044D5CE807385B47C215B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:82:ec:85:52:df:ee:c2:48:f9:0e:0c:7a:3a:
                    54:6b:ca:98:a0:6b:19:5d:5e:52:02:8a:10:b6:99:
                    49:b4:0a:40:c3:84:46:f9:1d:b7:10:9a:c5:54:d8:
                    ee:cf:64:dc:4a:4d:13:f0:77:a1:f0:58:d0:4b:2a:
                    03:18:cd:71:02:72:9e:cc:22:50:db:3d:29:b6:79:
                    7c:b4:0b:a4:35:c7:18:d8:77:e8:cf:e5:74:60:c0:
                    62:56:97:82:3c:49:1d:c0:fc:c4:ef:6a:b6:b0:34:
                    89:3b:b2:ef:3d:97:22:43:dc:d7:bf:ad:d9:20:d2:
                    55:ab:f5:58:94:1e:d1:fb:d5:74:b6:45:d8:ae:0f:
                    6e:61:5a:b2:61:0c:c4:2a:6d:d7:9b:43:66:64:f5:
                    a2:b5:1e:ef:cb:94:87:21:a6:13:71:8a:a7:07:3b:
                    d3:2f:d9:4b:6e:a7:aa:45:46:46:4e:81:4a:b6:ca:
                    20:23:7b:af:84:9a:4a:d8:13:d3:64:41:05:be:aa:
                    94:4a:c8:02:8c:d2:08:43:e0:99:41:64:79:c9:cf:
                    49:31:2f:ab:e3:ae:d4:7c:77:98:ee:1f:9e:3d:cb:
                    32:2d:9d:40:86:6a:79:d8:32:ad:86:8a:0b:2c:5e:
                    4e:c8:74:18:d9:6b:01:2f:e4:02:32:6b:c9:e6:66:
                    95:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:77:0D:F9:0E:95:CC:1F:BF:04:4D:5C:E8:07:38:5B:47:C2:15:B4
            X509v3 Authority Key Identifier:
                keyid:86:E6:79:5A:CA:B9:9C:F2:9C:E7:C7:E1:0D:7F:CC:E7:E2:FF:26:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/86E6795ACAB99CF29CE7C7E10D7FCCE7E2FF263E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94e1ac7c-904d-493f-ba5e-5e0837dcbd29/0/3130332e3138362e39332e302f32342d3234203d3e20313439363937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         da:65:b4:0c:81:09:ed:e4:e2:c5:09:61:28:85:14:b3:7e:cb:
         9e:21:15:13:67:8e:0c:10:36:74:f5:68:88:7d:30:6c:99:23:
         ee:e3:6d:9a:24:1d:39:e5:68:38:5a:c6:61:8a:90:ba:39:1f:
         d0:03:6f:1b:b1:f1:f8:2c:00:55:9d:b9:b1:ee:54:9b:e7:70:
         7f:da:f8:af:25:76:9d:bb:e3:fb:30:d6:a9:06:f7:f3:00:15:
         c8:dd:54:2d:cd:a5:a9:11:58:73:d7:71:e3:c9:eb:bd:d3:c0:
         c2:ea:e7:ba:c4:d9:f6:75:ec:7c:a0:87:1a:6f:ac:16:ec:09:
         65:2d:90:5c:ee:2d:aa:68:95:cc:c2:e7:e1:10:1e:6d:45:37:
         db:3d:8f:de:83:c8:8a:3f:1d:c0:bc:fc:c6:cd:02:cb:f3:f7:
         dd:38:2a:89:57:b7:10:0e:84:1d:e8:57:58:76:98:97:f9:f4:
         c8:3b:fb:c0:fc:a6:86:08:a5:ac:b8:ab:d7:bd:ec:1a:f6:0f:
         6c:65:52:b3:b4:b4:a6:60:a2:c9:33:60:49:5f:c8:48:4f:ea:
         22:59:bd:fa:01:11:a0:52:8b:b1:50:a8:3d:86:59:b2:f9:a1:
         ba:47:be:d3:f6:65:b0:68:f4:4c:8a:7b:62:37:15:92:db:fe:
         14:08:be:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 22:33:06 2024 by rpki-client on console-fra.rpki-client.org