Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa
File:                     3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa (raw, json)
Hash identifier:          nB+Bfi526s7F0pX/cJ3vKUq8RaU1aMQ8MOXDrQGipJ8=
Subject key identifier:   3D:4E:61:4D:C3:A3:1B:70:DE:F3:5D:57:7F:E6:C5:26:45:D1:E5:5C
Certificate issuer:       /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial:       4668BEC55EE2DF58329E3CA7F13E38BE1A44B8AE
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa
Signing time:             Mon 15 Jul 2024 02:35:58 +0000
ROA not before:           Mon 15 Jul 2024 02:30:58 +0000
ROA not after:            Mon 14 Jul 2025 02:35:58 +0000
asID:                     48465
IP address blocks:        103.186.200.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
                          rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 10:58:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:68:be:c5:5e:e2:df:58:32:9e:3c:a7:f1:3e:38:be:1a:44:b8:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
        Validity
            Not Before: Jul 15 02:30:58 2024 GMT
            Not After : Jul 14 02:35:58 2025 GMT
        Subject: CN=3D4E614DC3A31B70DEF35D577FE6C52645D1E55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c1:27:a3:02:d8:60:54:8e:3f:da:3b:3b:b4:
                    a2:99:7a:41:bc:dd:dd:02:0b:b1:4b:43:56:10:2a:
                    dd:25:ae:f7:f0:60:42:71:de:9f:a4:cf:99:fc:1f:
                    a7:28:c8:a1:8e:70:db:55:47:c9:ab:52:dd:92:9f:
                    e4:0e:21:e9:98:a8:5b:40:aa:00:96:c4:df:41:f5:
                    00:88:56:5a:01:6e:54:83:67:52:63:50:8a:25:f3:
                    d8:91:f9:17:5f:36:cb:93:7f:bf:9b:1b:10:4e:f8:
                    4f:eb:23:e7:5f:ab:b9:d9:9a:80:33:0a:3d:75:11:
                    7b:f1:60:c6:10:08:b7:5c:df:c2:e1:2d:aa:71:3a:
                    af:67:de:d5:82:7a:9d:7b:27:b4:f5:39:a9:26:37:
                    d3:42:3c:48:bc:d9:56:b1:71:e4:2d:3e:9d:82:94:
                    85:88:b7:8a:8a:fb:ad:a3:3c:e9:5b:4f:08:a2:3e:
                    31:a3:98:42:5c:b3:1a:aa:db:6c:35:5d:34:ca:dd:
                    ef:e0:b2:ff:ab:ed:1b:45:39:a7:62:e3:4b:16:21:
                    c7:af:87:b7:dc:f7:e8:ad:a9:34:a9:d7:3f:48:1b:
                    40:3e:d4:26:25:7a:3a:ea:64:76:98:9a:ef:2d:54:
                    d8:e1:cb:60:f2:f4:ef:06:0a:e1:b2:de:6a:0a:e0:
                    f5:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:4E:61:4D:C3:A3:1B:70:DE:F3:5D:57:7F:E6:C5:26:45:D1:E5:5C
            X509v3 Authority Key Identifier:
                keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32342d3234203d3e203438343635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:1f:6c:a3:6e:67:37:3f:0b:72:62:ff:4d:7a:3f:c5:29:2e:
         36:54:23:3e:28:85:6f:9c:40:3f:3a:8c:d9:19:b2:92:2d:7b:
         a0:37:37:29:be:ad:48:bd:1d:21:cd:8f:ce:01:81:61:0e:bc:
         6c:c6:15:06:9b:51:a3:19:1a:02:1c:4f:ec:fe:18:be:7d:1a:
         85:7b:e2:7e:4b:7c:fe:9d:ba:11:fe:3e:8b:bc:20:fb:d3:33:
         e7:92:cd:c2:6a:0d:6c:a6:94:6e:b7:92:79:22:59:c4:fb:37:
         13:24:56:bf:b4:d0:16:9c:34:38:03:4e:58:29:f2:1b:19:12:
         4a:ab:1f:ab:92:1f:43:45:22:ce:76:df:91:a5:fe:d2:ad:59:
         86:d6:a4:56:54:9b:c1:a2:99:7b:78:d2:76:67:9c:40:f8:9f:
         70:1e:94:1a:a2:c4:2e:15:58:30:32:9a:99:0a:ec:6e:80:54:
         3a:2c:2f:88:c7:d7:96:62:97:a0:a2:12:0b:53:2f:fa:c3:53:
         3e:40:c7:10:61:65:33:12:27:5c:52:0a:36:ab:a9:7d:2e:b9:
         d5:71:4d:14:ac:ee:77:ca:f5:0a:eb:8c:79:ac:d2:ec:45:f1:
         ed:73:e2:52:31:10:a5:bb:80:99:d3:8b:c3:32:c8:22:e9:1d:
         75:84:74:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 08:52:57 2024 by rpki-client on console-ams.rpki-client.org