Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
File:                     3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa (raw, json)
Hash identifier:          MwccS/MrnPIJG22pmaz2ISiy75OQDJtZmuHVjIzPIt8=
Subject key identifier:   CA:F6:65:22:CE:23:13:5B:9E:E0:95:5A:8B:AA:83:BA:61:DD:93:BE
Certificate issuer:       /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial:       38EC8FF07BE0A040F2A2F946611EC5FA92B5B8E0
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa
Signing time:             Thu 04 Apr 2024 05:00:01 +0000
ROA not before:           Thu 04 Apr 2024 04:55:01 +0000
ROA not after:            Thu 03 Apr 2025 05:00:01 +0000
asID:                     149706
IP address blocks:        103.186.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
                          rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ec:8f:f0:7b:e0:a0:40:f2:a2:f9:46:61:1e:c5:fa:92:b5:b8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
        Validity
            Not Before: Apr  4 04:55:01 2024 GMT
            Not After : Apr  3 05:00:01 2025 GMT
        Subject: CN=CAF66522CE23135B9EE0955A8BAA83BA61DD93BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ba:15:ca:7f:94:ed:b4:14:c3:5b:95:1b:84:
                    c4:6c:34:34:a1:a4:f9:ce:45:ec:13:68:d6:b5:bd:
                    37:9c:3c:d0:5b:af:fa:69:ca:fc:8d:be:1c:70:65:
                    4c:cd:f8:42:60:c7:e5:34:b3:04:73:bd:f2:30:f8:
                    d7:8d:24:e3:41:76:d6:54:aa:77:df:68:da:f8:9f:
                    3e:22:f9:52:83:e5:b9:5a:51:0e:4e:e9:4d:e9:ee:
                    a3:5c:30:ca:95:22:91:f1:5c:5c:3d:53:0e:f9:fb:
                    a6:d9:7e:4f:ed:72:1e:9f:46:1f:95:e3:51:88:e2:
                    2b:49:8f:02:43:c8:b5:fb:e0:8a:4a:8a:90:4c:71:
                    61:7c:e7:5b:e3:ba:6d:d2:a2:a9:f6:4f:2e:fb:f5:
                    c7:04:4e:1f:f5:4d:e0:c5:21:30:d1:3c:4a:f0:b1:
                    58:94:37:28:d1:f6:08:a5:b3:9c:de:49:e1:c2:d2:
                    2e:df:0f:79:a1:ce:58:66:9f:40:0d:c9:56:e1:52:
                    e4:4c:bb:ad:23:fe:f6:0e:7c:59:3a:55:b3:a9:ef:
                    0c:b0:a4:61:c7:c6:9a:f6:ca:81:ed:89:17:80:1b:
                    56:bd:ce:63:88:68:03:97:74:73:2f:23:b1:ef:b1:
                    9a:79:02:51:a3:8b:15:a3:95:40:56:13:84:8f:02:
                    10:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:F6:65:22:CE:23:13:5B:9E:E0:95:5A:8B:AA:83:BA:61:DD:93:BE
            X509v3 Authority Key Identifier:
                keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32332d3233203d3e20313439373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:3f:e4:5d:ef:e3:bf:8c:9a:b6:c4:aa:de:ca:41:9e:af:e5:
         fa:10:8a:e7:be:f0:44:60:00:00:e4:56:bd:63:d2:1c:6f:5b:
         03:7e:37:05:98:39:d9:2d:5a:84:2b:8c:d4:05:54:bb:8a:fa:
         4c:b2:16:c6:00:67:3b:55:cc:2d:82:6d:c5:6d:81:ed:c8:a0:
         15:cd:cd:bb:58:40:2e:b2:88:6c:4b:06:25:e8:64:39:ce:23:
         c2:f4:7e:04:f9:eb:58:ce:ae:c5:68:33:46:25:e9:77:62:ff:
         a0:0a:fa:cf:ef:4d:93:6e:39:b1:33:c5:66:22:02:e2:63:79:
         7f:78:16:5e:e9:b0:45:32:ec:a5:78:dc:96:5b:c2:46:3e:29:
         fe:4b:4c:c4:b7:86:a2:79:9b:2e:07:7f:d4:ac:75:d5:3c:87:
         89:5f:05:54:2c:66:45:00:6f:81:e4:13:7e:1a:39:7a:3b:f7:
         91:90:f3:92:77:6c:07:7a:41:2d:58:82:4f:7d:a2:29:ff:55:
         fb:47:7d:9d:55:b9:4a:d6:21:d7:d7:60:6a:01:90:48:a5:2d:
         ff:26:67:d5:2e:d6:fd:98:b5:ee:4f:eb:80:79:50:f2:fc:35:
         d1:85:76:49:5b:8c:8b:f3:72:cb:91:09:f8:05:a3:09:93:a1:
         62:61:06:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:51:02 2024 by rpki-client on console-fra.rpki-client.org