Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa
File:                     3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (raw, json)
Hash identifier:          wrwXYHiVExbuxEse8hLvJxXI/WdhLaEx4yaUE17RFII=
Subject key identifier:   71:46:EF:8E:CC:BD:D0:FE:35:05:11:ED:85:F1:92:18:23:E7:36:5D
Certificate issuer:       /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
Certificate serial:       5740F5FB940BF92D9319D30F1489032241ADFDAE
Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa
Signing time:             Mon 20 May 2024 09:00:00 +0000
ROA not before:           Mon 20 May 2024 08:55:00 +0000
ROA not after:            Mon 19 May 2025 09:00:00 +0000
asID:                     149717
IP address blocks:        103.186.88.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl
                          rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:40:f5:fb:94:0b:f9:2d:93:19:d3:0f:14:89:03:22:41:ad:fd:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0
        Validity
            Not Before: May 20 08:55:00 2024 GMT
            Not After : May 19 09:00:00 2025 GMT
        Subject: CN=7146EF8ECCBDD0FE350511ED85F1921823E7365D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:77:24:13:e2:d0:72:e6:c5:49:5a:8c:1b:3b:
                    97:44:d0:ee:ef:40:e5:10:47:62:d2:70:ef:d2:e1:
                    f3:7d:25:fb:98:4b:b3:ef:e0:18:d3:87:a9:57:99:
                    72:2d:7e:7a:0c:37:0b:ab:33:cf:d2:d7:97:52:0c:
                    c8:fd:11:ec:51:6d:49:df:e5:ba:f5:ba:81:82:4b:
                    89:fa:7d:47:2e:9b:28:3f:73:f8:6c:f2:95:fe:a9:
                    df:83:f5:79:10:b2:b2:5d:47:1a:c0:b9:fd:f0:0a:
                    e1:a8:63:5a:ad:79:63:66:68:7d:75:fb:4c:c4:f3:
                    37:3b:9c:6d:1a:0f:df:b3:5c:2e:cc:5e:c8:dd:30:
                    55:ec:cc:65:c4:c5:9f:99:eb:e1:e0:f0:b9:7f:95:
                    b9:66:38:0c:76:a1:07:40:f7:8f:c8:99:dc:3c:01:
                    4c:70:7c:e9:32:a9:0d:37:e8:c2:e1:13:4a:fb:33:
                    9d:b8:b9:eb:cd:83:6b:9b:9b:71:ec:ca:7d:5d:b2:
                    4b:13:3b:0f:95:70:84:7d:13:bb:bd:f6:79:a1:56:
                    a9:23:f9:db:34:98:6c:d0:81:f2:e0:b1:23:49:e0:
                    de:b5:fa:cf:00:41:b7:63:6b:59:38:da:d2:7f:21:
                    fe:e5:a8:98:6c:aa:35:28:fb:d1:fa:0b:83:cc:8e:
                    be:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:46:EF:8E:CC:BD:D0:FE:35:05:11:ED:85:F1:92:18:23:E7:36:5D
            X509v3 Authority Key Identifier:
                keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:8b:08:7e:cb:ff:97:5c:42:d8:64:dd:ad:3f:ab:56:13:c1:
         da:34:5d:f4:45:f3:d0:11:e8:6a:6c:b4:98:02:48:47:ae:9e:
         9c:e7:58:3c:5b:d0:d2:3b:89:e2:e2:24:04:60:57:ae:bc:06:
         8c:a2:b0:14:ed:93:4b:50:e1:6e:0c:71:d7:89:e4:ee:95:b5:
         bc:d7:a9:82:bd:94:8b:db:1b:3a:58:a7:42:84:14:7a:f2:96:
         87:47:b4:c5:f4:64:30:d4:dc:1b:90:33:6e:a1:b9:00:13:6f:
         73:2c:bb:ec:b4:7d:62:b0:8b:4b:49:99:37:ec:ca:ea:82:4d:
         3f:94:3f:37:e6:f5:39:29:4f:34:b0:6a:f5:44:db:ae:44:0f:
         26:ae:3a:16:b3:26:26:7a:0d:da:87:cb:27:3b:81:6c:31:29:
         26:ea:b4:b7:3f:15:60:92:42:b0:a8:fd:5a:92:8c:80:00:23:
         a9:96:86:33:af:82:54:44:ef:67:80:bd:1e:1d:b5:78:5f:4d:
         01:62:db:ba:44:38:03:39:bd:72:97:31:7b:7d:bc:95:eb:1c:
         56:9a:2b:8d:fa:d4:a4:7a:b1:1c:ff:67:73:8f:83:62:ba:7b:
         1d:24:38:81:85:6c:6e:b4:e8:6f:54:c9:9c:e5:28:da:6c:d1:
         87:d1:86:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 19:46:18 2024 by rpki-client on console-fra.rpki-client.org