Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa
File:                     3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa (raw, json)
Hash identifier:          RkLJSBl2xxoX3gFhr6pnnyo+80iQRs1EgS6mrcMqGCg=
Subject key identifier:   8D:14:15:1A:1A:26:C1:FC:85:41:0F:0E:95:DD:8A:E2:4A:74:C9:10
Certificate issuer:       /CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
Certificate serial:       5208C9EB61FD5E2E50128997855EEC45FDF2BB31
Authority key identifier: 8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa
Signing time:             Sat 18 May 2024 17:00:00 +0000
ROA not before:           Sat 18 May 2024 16:55:00 +0000
ROA not after:            Sat 17 May 2025 17:00:00 +0000
asID:                     149707
IP address blocks:        103.186.90.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl
                          rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:08:c9:eb:61:fd:5e:2e:50:12:89:97:85:5e:ec:45:fd:f2:bb:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DBECF314BD3C829923A3A97BFC62113A61F8EE1
        Validity
            Not Before: May 18 16:55:00 2024 GMT
            Not After : May 17 17:00:00 2025 GMT
        Subject: CN=8D14151A1A26C1FC85410F0E95DD8AE24A74C910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:5f:75:0e:ee:40:fe:85:c7:c2:6e:13:2b:
                    9c:7b:44:0b:ff:4a:ad:e9:e3:9f:29:d3:3a:f6:f8:
                    78:f1:db:e1:9e:55:64:6d:0d:33:f5:39:02:1d:a2:
                    46:75:e3:18:e1:08:7c:99:22:8b:bc:00:32:56:a9:
                    8d:52:64:b9:2f:3d:66:48:83:23:23:80:15:28:71:
                    e0:1b:92:e8:74:62:84:8c:3b:6f:60:17:b9:3a:67:
                    ad:46:c3:85:91:80:92:61:6c:05:9a:c2:74:0b:97:
                    3c:4d:ca:d2:25:a3:91:3a:39:2d:87:71:c8:a7:2c:
                    a3:b1:f7:86:05:2f:53:34:1a:ee:d7:72:7b:2a:a3:
                    b2:20:dc:43:d8:42:fa:e8:b7:f3:a2:f1:10:ec:a5:
                    9b:97:c0:b5:05:ea:09:ea:83:cb:fc:3f:cf:78:b0:
                    94:c5:9d:f2:4e:79:da:14:b9:ea:38:3d:b3:bc:f2:
                    86:8c:25:c9:0c:b0:16:3c:4d:33:c9:47:2a:b9:f2:
                    65:bd:ce:2b:a8:4c:ef:44:f5:b1:58:df:1d:5d:40:
                    74:81:0b:fe:43:41:47:b4:3b:ca:00:2e:6f:19:3d:
                    49:0a:2f:f5:66:50:b2:d5:bf:00:3a:5f:8c:ad:f5:
                    19:28:96:fa:a8:45:4f:8d:ce:7d:64:be:20:95:c6:
                    66:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:14:15:1A:1A:26:C1:FC:85:41:0F:0E:95:DD:8A:E2:4A:74:C9:10
            X509v3 Authority Key Identifier:
                keyid:8D:BE:CF:31:4B:D3:C8:29:92:3A:3A:97:BF:C6:21:13:A6:1F:8E:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8DBECF314BD3C829923A3A97BFC62113A61F8EE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b94c1e95-a738-4e47-8e5c-7af681b36b00/0/3130332e3138362e39302e302f32332d3233203d3e20313439373037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.90.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1a:bd:b4:87:e3:bf:2e:79:a9:5e:f0:4d:f2:04:65:00:60:23:
         db:dc:57:36:83:e6:2c:e4:9b:48:c7:b9:bf:20:db:8f:70:5a:
         0e:e6:05:3a:42:a1:ab:68:f6:41:1c:b9:f6:17:74:48:9e:af:
         31:f6:77:2c:19:be:5c:f1:4b:dc:f8:11:66:f9:62:20:3e:98:
         7f:50:17:c3:6e:8d:ff:15:6a:e0:33:04:c5:db:37:c1:4e:4b:
         20:2f:70:f4:44:31:22:fc:47:19:4c:75:8a:e3:76:9e:cb:d3:
         05:df:62:28:b4:47:36:02:47:54:cd:7d:6c:2b:6b:0c:44:64:
         05:82:44:73:a2:48:62:d3:7c:83:0c:e0:86:59:56:b4:62:b8:
         85:77:34:f8:18:54:75:24:2f:39:41:8d:3c:33:73:c6:86:6b:
         c2:81:22:74:fa:11:ad:30:3f:3b:08:26:5f:88:c9:69:28:0b:
         ec:bb:8f:2f:a5:b6:d3:45:24:8d:2c:b0:ea:4d:68:18:45:d8:
         a8:a1:95:e3:2a:5d:47:cb:1d:79:cc:50:a2:61:b2:2e:90:03:
         0d:53:6c:9d:9b:14:b6:c8:63:9e:c3:55:7c:7f:64:ca:9c:85:
         60:73:02:b9:5a:b6:86:e9:ce:7d:77:af:23:e3:f2:98:ca:aa:
         6f:86:18:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:51 2024 by rpki-client on console-ams.rpki-client.org