Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
File:                     3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (raw, json)
Hash identifier:          d/nV5TiTQGjwLBAvmxVUInwpVwxnF9xZjnsBQckQckM=
Subject key identifier:   46:9A:3A:6F:8B:AD:82:22:B7:CB:9E:70:8A:B5:9A:51:22:67:55:7D
Certificate issuer:       /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial:       6FCA15CACB7067925B6C05234B02885376426C98
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
Signing time:             Sun 26 May 2024 03:00:01 +0000
ROA not before:           Sun 26 May 2024 02:55:01 +0000
ROA not after:            Sun 25 May 2025 03:00:01 +0000
asID:                     149721
IP address blocks:        103.186.200.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
                          rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:ca:15:ca:cb:70:67:92:5b:6c:05:23:4b:02:88:53:76:42:6c:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
        Validity
            Not Before: May 26 02:55:01 2024 GMT
            Not After : May 25 03:00:01 2025 GMT
        Subject: CN=469A3A6F8BAD8222B7CB9E708AB59A512267557D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b5:b2:cb:56:b9:be:28:aa:ce:1e:43:4a:f5:
                    1a:ec:ee:0d:28:73:ff:b8:96:6f:3d:27:84:97:14:
                    ee:f9:28:26:4d:b7:9e:05:42:bf:2e:18:28:be:b9:
                    00:0f:14:eb:cc:29:63:72:47:71:7e:5f:c0:a6:97:
                    f8:fb:0d:24:f7:59:82:20:9d:fa:ac:1f:0c:cf:f0:
                    db:dd:ea:6b:a7:ec:16:6e:42:90:a6:43:39:96:36:
                    f6:a0:ec:a4:b0:4c:b5:f3:de:25:27:2a:8d:f0:a6:
                    b8:d5:52:41:6e:20:8f:59:90:3f:cd:c3:85:8c:84:
                    28:2d:6b:b9:a9:18:70:b2:03:45:cf:98:6c:43:80:
                    65:5b:5b:a7:df:70:23:a1:44:57:eb:05:33:c5:d6:
                    cd:bb:a3:99:33:54:54:2b:10:e2:5d:4f:25:ae:70:
                    84:74:b8:4d:51:96:eb:39:1c:c0:ac:5b:20:e9:c8:
                    67:41:39:30:9c:4e:f3:55:3d:9e:1c:b1:76:37:64:
                    54:5b:62:47:8e:d2:61:8a:17:73:04:f5:57:89:31:
                    3f:d6:bf:a9:27:68:53:63:d0:66:a0:c1:35:dc:41:
                    ea:d9:47:75:6e:6f:74:78:6e:f1:88:8f:ff:76:a4:
                    1f:e2:91:8c:36:eb:1d:61:e7:80:16:57:ce:10:3f:
                    bd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:9A:3A:6F:8B:AD:82:22:B7:CB:9E:70:8A:B5:9A:51:22:67:55:7D
            X509v3 Authority Key Identifier:
                keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:ee:4e:73:4d:79:55:07:6a:c6:ee:74:cd:dd:ce:7b:61:26:
         10:b2:ff:b2:4c:9a:17:ed:8f:84:34:02:b0:a2:19:d1:5f:cb:
         32:fd:2d:fa:18:6b:bf:bf:21:ff:78:6d:90:44:0e:bd:c9:7c:
         9c:84:7b:62:75:ac:99:c5:0b:e5:e8:86:f0:45:af:90:32:f5:
         93:0e:3e:d6:a1:1d:99:84:81:d2:33:18:e2:f4:33:c8:c5:02:
         15:83:96:b2:35:f2:9d:fd:16:da:57:63:97:bb:62:fc:4c:d7:
         34:d9:20:9d:32:c0:ec:f8:85:5c:c6:7e:d1:43:c4:bf:17:af:
         09:19:62:a2:93:c5:02:53:33:12:18:b0:97:ad:03:b7:f3:54:
         6f:ec:d2:79:a3:69:d4:f3:76:36:fe:45:bd:51:51:da:38:c4:
         74:09:08:3b:3a:dd:5d:73:4d:8f:f0:c4:f5:36:90:c0:f4:6f:
         2c:56:13:38:df:b4:a8:e4:27:db:11:10:56:b2:3e:14:0d:66:
         5e:49:ee:71:a2:69:da:c4:53:fc:07:fe:1c:25:e8:48:db:c9:
         33:c6:5b:4f:6d:09:b2:3d:01:6b:2e:d2:31:46:8c:ef:37:cf:
         04:da:ab:01:9e:a2:4a:04:46:72:2b:8b:01:c7:c8:fa:b9:d7:
         89:7e:b7:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 17:17:42 2024 by rpki-client on console-fra.rpki-client.org