Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
File:                     3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier:          ItQln5TNr77cpCKNka4JczJ1ZdQmdTc4Ya4R27T4EMU=
Subject key identifier:   54:63:FD:67:2A:CA:13:4E:F3:3B:27:21:6C:8B:DA:89:17:82:B0:DF
Certificate issuer:       /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial:       02E0B036C2347E42996965F6EA32EF3548B61021
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa
Signing time:             Thu 11 Apr 2024 11:02:03 +0000
ROA not before:           Thu 11 Apr 2024 10:57:03 +0000
ROA not after:            Thu 10 Apr 2025 11:02:03 +0000
asID:                     149706
IP address blocks:        103.186.202.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
                          rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:e0:b0:36:c2:34:7e:42:99:69:65:f6:ea:32:ef:35:48:b6:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
        Validity
            Not Before: Apr 11 10:57:03 2024 GMT
            Not After : Apr 10 11:02:03 2025 GMT
        Subject: CN=5463FD672ACA134EF33B27216C8BDA891782B0DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:d9:cf:5b:68:79:17:2f:c0:10:bc:41:3b:
                    35:de:e1:2a:66:5d:60:98:93:34:68:28:24:79:77:
                    64:24:f1:27:1e:b4:c1:34:6c:02:b3:06:26:6a:b9:
                    7b:fc:2c:34:cc:35:80:3f:8a:27:70:b2:3f:e2:78:
                    3a:c2:45:4c:47:11:21:50:44:a8:4f:09:c3:eb:2a:
                    35:15:07:12:b3:b7:60:1a:df:d9:8f:3b:69:11:48:
                    5f:43:1e:b7:9f:fc:b0:0e:ce:6e:7b:87:39:47:2e:
                    9a:16:c2:54:2c:2b:77:bc:b7:70:1f:4e:68:26:3f:
                    15:f9:f3:45:38:1c:a1:6a:70:4e:47:69:b8:44:00:
                    74:66:ec:ba:d6:1f:41:31:b2:d6:de:6c:03:86:35:
                    ab:12:e8:11:5a:b4:1f:27:e6:6f:77:69:49:5a:35:
                    f7:99:63:9d:c0:68:24:eb:0d:41:59:7f:4c:34:77:
                    ec:d3:83:64:9f:32:75:12:e9:28:41:49:94:9e:db:
                    78:9b:74:67:67:81:e7:32:31:39:94:0a:b3:f4:e5:
                    71:5b:a3:8a:52:e2:c7:bd:2c:84:9f:40:62:f8:1e:
                    f8:ba:59:3f:be:3a:e2:de:e9:e9:d0:18:e5:39:bb:
                    99:bc:1c:f4:6d:2f:3c:96:d4:86:86:06:28:ac:58:
                    52:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:63:FD:67:2A:CA:13:4E:F3:3B:27:21:6C:8B:DA:89:17:82:B0:DF
            X509v3 Authority Key Identifier:
                keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230322e302f32342d3234203d3e20313439373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:2a:dc:b4:38:b7:17:e7:d7:9e:ef:78:6b:53:d1:61:96:b7:
         1f:09:48:75:75:9f:76:63:7f:4d:2c:3e:5a:e2:56:11:09:d9:
         59:8a:6e:1d:f7:c3:6c:e1:98:e2:f4:28:3e:cf:5f:df:b4:60:
         8a:fd:05:b7:a5:74:cd:ec:7c:2f:1c:96:b0:27:3e:e1:7d:cb:
         4c:de:3c:a7:dc:46:3a:51:48:65:86:81:dc:35:82:21:f1:08:
         9c:16:f4:4c:25:85:51:4c:51:4d:60:dd:b8:c4:03:ec:f2:6f:
         2b:3c:e5:6d:49:28:fd:de:21:56:d0:89:8b:20:74:3d:17:95:
         16:00:b6:6a:47:48:2c:4f:c6:8c:dc:ec:57:bc:d6:f5:10:c5:
         45:f8:34:35:f4:0e:c2:4a:e1:3c:bc:90:aa:23:b4:c6:5c:c2:
         97:5f:e3:27:c3:13:d2:37:d7:a8:8a:0d:d0:ff:08:81:86:9e:
         6f:57:27:81:68:2d:57:ad:09:1c:2c:9b:6b:fc:20:14:da:f4:
         c8:70:0e:76:6f:bc:04:3a:43:27:a8:e0:91:59:b8:c0:2c:bf:
         36:e5:7d:1e:41:43:d3:56:86:c2:85:2c:95:3a:31:15:ce:69:
         d9:f0:02:64:b0:47:aa:bb:8a:f6:40:85:18:8e:f3:42:a3:98:
         be:91:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org