Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
File:                     3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa (raw, json)
Hash identifier:          mCA35em8QwjDYY6wvmOMHi2TcOQlYzFRj5E93q9j6sk=
Subject key identifier:   D3:24:03:11:FD:B7:97:9A:57:21:83:6D:F2:2D:78:34:AC:58:FD:6C
Certificate issuer:       /CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
Certificate serial:       4F0FA34AA9BFCDFC83A6424DD6097EE41373C7BB
Authority key identifier: B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa
Signing time:             Thu 11 Apr 2024 11:02:03 +0000
ROA not before:           Thu 11 Apr 2024 10:57:03 +0000
ROA not after:            Thu 10 Apr 2025 11:02:03 +0000
asID:                     149706
IP address blocks:        103.186.203.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl
                          rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 06:14:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:0f:a3:4a:a9:bf:cd:fc:83:a6:42:4d:d6:09:7e:e4:13:73:c7:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C
        Validity
            Not Before: Apr 11 10:57:03 2024 GMT
            Not After : Apr 10 11:02:03 2025 GMT
        Subject: CN=D3240311FDB7979A5721836DF22D7834AC58FD6C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4c:16:d9:a6:90:e1:cc:fa:f9:8d:43:8d:00:
                    b4:6f:f1:9c:75:29:cf:de:da:df:f1:c2:b2:96:90:
                    76:3f:21:75:de:6d:b4:14:94:a2:39:86:3b:41:be:
                    92:e3:f5:86:02:b6:5c:3c:fb:3b:9b:f0:93:54:58:
                    21:db:01:7e:a9:35:a4:31:59:2f:58:a8:e1:62:90:
                    79:67:8b:56:e8:ec:4e:ad:ac:f9:41:58:d6:6a:b9:
                    ef:c7:1d:56:1e:0b:33:12:61:fa:55:01:42:0c:13:
                    61:eb:80:f4:1f:14:fd:c1:ef:f9:73:81:5a:a5:f7:
                    37:3e:98:d9:e6:23:4a:fa:f2:ea:01:ae:a6:6d:5c:
                    30:7f:56:e6:2b:5e:56:09:f0:b4:67:44:71:0d:c1:
                    74:90:61:90:e8:33:2d:3d:82:26:8e:bd:97:af:a7:
                    2d:a9:c5:f1:9b:b6:25:6a:08:f8:bf:e0:c1:40:fc:
                    29:2e:64:40:de:99:65:bb:dc:e4:04:4a:9f:12:65:
                    ea:e1:c6:2a:30:63:0c:42:8f:bc:8d:cb:0b:72:00:
                    ad:d2:1e:5d:d7:5c:4b:80:a5:5a:77:0c:98:e7:3b:
                    a5:fd:d2:95:c3:eb:32:64:cc:d4:e7:6e:1c:3d:d7:
                    de:d7:76:15:4c:ca:bf:ab:12:d7:14:a5:c6:98:69:
                    d6:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:24:03:11:FD:B7:97:9A:57:21:83:6D:F2:2D:78:34:AC:58:FD:6C
            X509v3 Authority Key Identifier:
                keyid:B3:47:BB:A6:BD:11:BF:C5:E5:5F:7F:F3:34:C1:65:E9:FD:21:FA:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B347BBA6BD11BFC5E55F7FF334C165E9FD21FA5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9106827-866e-4ac3-8f79-a6e320b20de7/0/3130332e3138362e3230332e302f32342d3234203d3e20313439373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.203.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:9b:6b:c3:38:cb:38:11:3e:00:f9:69:14:41:07:4d:f8:b4:
         f1:66:8f:8b:48:23:53:57:df:b0:c8:f9:83:4f:00:06:e8:f0:
         73:de:4a:f6:b0:b1:3a:c7:c9:d8:8f:33:25:4f:3f:56:45:93:
         1e:98:3e:a5:27:17:d2:e8:d1:42:0b:d7:ef:bb:a4:ea:23:e5:
         2d:6b:f1:fa:0c:43:66:50:5b:f6:a2:c8:bb:5d:ba:6e:a7:17:
         83:90:6d:05:66:3c:b4:64:63:e2:3d:da:8c:43:db:0f:34:29:
         30:ed:e0:34:01:f0:6b:4a:08:88:43:1e:cd:89:a4:c5:e2:03:
         62:46:e6:fe:00:1f:b0:ce:a7:61:99:ca:be:18:2c:40:ae:39:
         50:60:71:0a:e0:76:f4:cc:8f:f8:c4:20:bb:fa:4d:24:43:69:
         a8:80:af:8b:48:cd:50:a2:1d:af:c8:49:39:85:95:77:71:c4:
         54:16:d5:29:9e:73:f3:92:1e:68:c8:d2:d3:45:39:e8:19:02:
         4d:e4:54:7c:82:0c:67:09:98:26:1d:26:5b:e8:93:1e:00:a9:
         0b:8d:53:d3:b5:a8:fe:db:c5:e5:5a:d0:f6:2b:fa:df:99:38:
         5e:c1:a2:13:2b:0a:e4:41:f7:52:87:7f:3d:b8:b1:49:cf:c5:
         31:c2:2c:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 03:59:56 2024 by rpki-client on console-ams.rpki-client.org