Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
File:                     3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa (raw, json)
Hash identifier:          twPNobyYSNQMFZDe1As8vUaoEUycbvyjmJMFp77KHQc=
Subject key identifier:   08:B0:E0:59:14:74:A3:08:87:FA:06:5E:D6:46:08:68:9B:5A:58:02
Certificate issuer:       /CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
Certificate serial:       5AB5B60396C559611A1002BBC9FC8A2C3C3CD0C3
Authority key identifier: B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa
Signing time:             Sun 27 Apr 2025 03:00:01 +0000
ROA not before:           Sun 27 Apr 2025 02:55:01 +0000
ROA not after:            Sun 26 Apr 2026 03:00:01 +0000
asID:                     149721
IP address blocks:        103.186.200.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl
                          rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 11 May 2025 23:47:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:b5:b6:03:96:c5:59:61:1a:10:02:bb:c9:fc:8a:2c:3c:3c:d0:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B21EB18A21CA5136A04F43EC18E1AA867B348052
        Validity
            Not Before: Apr 27 02:55:01 2025 GMT
            Not After : Apr 26 03:00:01 2026 GMT
        Subject: CN=08B0E0591474A30887FA065ED64608689B5A5802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:c5:d3:90:03:01:1a:9a:cc:f0:6c:52:1a:
                    8f:11:bb:f7:cc:12:d2:14:4f:83:06:f0:be:01:9c:
                    f0:07:e8:66:e2:1e:93:1f:0f:fc:3f:52:c4:6d:19:
                    d0:fa:3c:cb:59:7b:5b:18:cd:b6:4b:a8:17:a9:8b:
                    cc:5b:b0:89:ae:9d:16:8b:80:bb:d4:b2:b5:ad:00:
                    3d:4a:f4:d8:dc:10:c7:40:9d:be:61:86:d8:df:7a:
                    9b:cf:c4:30:2e:a1:14:e4:85:7d:16:e2:56:ca:a1:
                    99:79:0f:90:30:62:63:53:96:29:cb:ee:5d:8f:ad:
                    38:e1:bc:f8:cf:da:ea:68:3e:f8:f7:14:96:f6:e9:
                    ee:21:df:f1:f3:0b:21:bb:1d:fc:d4:04:e3:dc:af:
                    a6:3a:33:bc:13:ce:a5:72:04:71:0e:74:77:8e:09:
                    c6:c3:b6:d5:ba:e3:64:8f:be:35:d0:09:31:e4:c9:
                    c6:b8:18:70:95:d1:bc:09:fb:7a:7f:1c:d3:4b:38:
                    43:2b:05:82:72:02:b6:a5:66:01:20:8e:80:a4:52:
                    68:6b:2a:42:61:b8:3f:93:cf:3f:49:be:d7:1d:fc:
                    bb:b8:1c:2a:e6:0a:3c:23:ee:d6:c4:fd:f0:7f:95:
                    38:5e:86:67:53:b0:67:e6:b6:3e:27:5f:4f:59:19:
                    b7:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:E0:59:14:74:A3:08:87:FA:06:5E:D6:46:08:68:9B:5A:58:02
            X509v3 Authority Key Identifier:
                keyid:B2:1E:B1:8A:21:CA:51:36:A0:4F:43:EC:18:E1:AA:86:7B:34:80:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/B21EB18A21CA5136A04F43EC18E1AA867B348052.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B21EB18A21CA5136A04F43EC18E1AA867B348052.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c9577c3c-66cd-40a4-afc5-6c6f8b664a51/0/3130332e3138362e3230302e302f32332d3233203d3e20313439373231.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.186.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         96:b6:b5:80:b7:9a:49:6e:c8:1c:9d:23:d8:e9:26:3e:2b:54:
         f9:07:6d:73:a4:e0:7a:af:8d:f5:27:d6:58:cd:64:c8:33:1e:
         ec:6c:6a:8f:50:a9:e0:bb:04:a7:4e:b4:4f:05:fa:0b:6e:7c:
         b9:5a:70:66:81:12:e7:53:7f:66:56:4d:13:ab:98:f2:be:87:
         d2:98:ad:b3:5d:f9:bc:25:ab:5f:59:02:d0:c6:25:19:c8:e8:
         35:87:a5:09:27:76:9d:92:bc:df:80:6d:1f:a4:6e:1c:ae:6d:
         2c:22:46:d5:b2:95:53:29:cd:d8:70:04:c6:b5:e1:93:18:ac:
         74:ec:3f:2e:f6:00:70:1c:7b:b1:c5:df:62:86:5e:cb:b7:7b:
         e3:d9:ff:69:2e:7c:70:a3:d1:07:7a:3f:64:94:8a:0a:db:17:
         03:4b:bc:ef:65:af:e1:4e:b7:9a:9a:18:d9:82:0b:23:71:77:
         8e:99:17:03:f2:b1:be:d4:c1:59:19:1c:bc:e1:7d:ec:53:6c:
         93:60:c0:78:0a:26:11:a4:20:cf:fb:94:e6:10:db:6b:25:47:
         7c:1e:bc:99:5f:cb:1d:01:d2:85:a0:e6:7d:bc:c1:42:e3:8d:
         9c:4f:1c:78:b9:04:bb:53:fe:2d:b6:5a:64:33:1a:0b:26:5b:
         ab:28:f5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 05:38:37 2025 by rpki-client