Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
File:                     3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa (raw, json)
Hash identifier:          Tf9EHh1S0QH/h8TYIYbwTHKMqG9VeOy+uNfX112IMo8=
Subject key identifier:   8A:70:DD:31:9A:D2:66:50:F4:85:8E:FE:FF:B5:10:0B:7F:B8:03:3E
Certificate issuer:       /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial:       5D46FB92E249D9F014A68BD20AE3BC7A08455C4F
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa
Signing time:             Tue 12 Mar 2024 09:00:01 +0000
ROA not before:           Tue 12 Mar 2024 08:55:01 +0000
ROA not after:            Tue 11 Mar 2025 09:00:01 +0000
asID:                     149721
IP address blocks:        103.186.201.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
                          rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:46:fb:92:e2:49:d9:f0:14:a6:8b:d2:0a:e3:bc:7a:08:45:5c:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
        Validity
            Not Before: Mar 12 08:55:01 2024 GMT
            Not After : Mar 11 09:00:01 2025 GMT
        Subject: CN=8A70DD319AD26650F4858EFEFFB5100B7FB8033E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:9a:34:33:91:ae:d9:11:ac:42:75:fd:ff:a3:
                    f0:e1:d6:fa:1b:1c:4a:47:3c:f1:8c:25:a4:7f:f5:
                    f2:47:c5:f4:a4:e0:fa:66:e8:28:f8:a1:05:97:e7:
                    b2:ea:27:35:90:88:4f:00:ba:e8:c9:fd:5d:04:eb:
                    9b:7c:eb:a4:21:a1:c8:99:a5:10:eb:04:61:59:6f:
                    0b:2b:d5:f3:3a:86:1d:ea:50:93:e7:1d:bf:ba:bf:
                    f3:a3:82:37:00:bb:3b:a4:1c:f8:7b:60:68:ef:a1:
                    c8:a6:fb:87:1d:f7:a5:fc:0e:3a:c6:a9:58:94:53:
                    9e:0a:94:d3:e5:d2:30:c9:b2:32:29:1b:73:99:b7:
                    04:0c:da:08:74:aa:c0:07:46:bf:55:a7:fc:a7:73:
                    7a:5e:a1:d6:72:02:6e:f5:23:2d:a0:b5:2d:da:5b:
                    95:bc:54:0d:d6:1a:88:9d:30:1d:47:65:6b:66:f9:
                    3e:05:c8:6c:d9:2a:0f:fa:55:e8:73:65:c8:da:07:
                    4d:5a:54:2f:67:b3:7e:53:2b:c1:5d:a4:57:45:b3:
                    1f:cd:28:12:20:a9:2d:32:99:8c:22:31:6e:d8:4f:
                    95:e7:01:14:92:b8:23:73:02:fb:c0:8f:78:28:df:
                    ce:c2:9d:a6:34:f2:4d:af:88:0e:b6:e8:89:26:a4:
                    c3:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:70:DD:31:9A:D2:66:50:F4:85:8E:FE:FF:B5:10:0B:7F:B8:03:3E
            X509v3 Authority Key Identifier:
                keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230312e302f32342d3234203d3e20313439373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.201.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:3e:26:96:f6:7e:63:42:44:0f:52:53:61:ec:db:da:66:5f:
         67:0f:02:5d:d3:6c:d3:ba:6d:50:20:c5:52:4f:8a:0e:48:9f:
         4d:67:cf:9c:70:16:2b:c9:f1:79:8c:1e:f6:0c:50:a9:af:78:
         9f:0e:a6:67:01:94:4e:e6:c9:d3:0a:2f:2c:af:d8:8b:57:f3:
         38:4c:04:7e:4a:2f:f2:c7:a0:88:bc:77:53:2a:4d:15:00:7e:
         9b:d1:b5:99:4c:db:87:b7:6b:d5:66:34:c6:c2:f2:5c:c5:32:
         93:1e:82:c1:28:fb:68:4d:a6:59:c0:2c:1f:6f:79:db:54:4e:
         df:85:3d:36:d5:73:8a:07:bb:47:ff:8e:66:6a:85:d5:0d:be:
         ca:d7:48:ff:8a:a3:42:17:27:bb:08:b7:5d:3e:f4:40:80:64:
         50:6a:de:2c:32:3d:cb:3c:e3:a1:ad:8c:5d:fb:e5:93:e7:5b:
         31:0f:bc:ec:c3:36:3a:02:9c:37:bc:26:0f:06:52:cb:f7:2f:
         84:ea:24:4b:15:c6:2b:a7:b6:d2:f7:76:42:89:49:df:fa:79:
         98:1e:41:e4:15:5d:2e:8a:86:be:51:cb:4e:59:72:9c:9f:f1:
         04:ae:b1:43:28:96:74:ed:46:02:70:39:7c:b6:ad:a1:19:0a:
         0e:1f:1e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 18:20:19 2024 by rpki-client on console-ams.rpki-client.org