Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32332d3234203d3e203538333831.roa (raw, json)
Hash identifier:          jo/j+vvJnzXg0fK/MvrTnhv5lI0YEzuzodAk9RwF5Tg=
Subject key identifier:   FE:82:BF:DF:39:39:45:A2:21:1D:3E:47:AA:36:7C:53:E8:2A:53:03
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       29FED477F427CCFAF2D8E1B3AC5BBEB19CD86403
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
Signing time:             Mon 29 Jan 2024 02:53:40 +0000
ROA not before:           Mon 29 Jan 2024 02:48:40 +0000
ROA not after:            Mon 27 Jan 2025 02:53:40 +0000
asID:                     58381
IP address blocks:        103.5.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 18:33:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:fe:d4:77:f4:27:cc:fa:f2:d8:e1:b3:ac:5b:be:b1:9c:d8:64:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Jan 29 02:48:40 2024 GMT
            Not After : Jan 27 02:53:40 2025 GMT
        Subject: CN=FE82BFDF393945A2211D3E47AA367C53E82A5303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:d5:4d:7d:91:d5:ad:9c:e8:d7:bc:ec:00:87:
                    4e:82:85:41:17:68:cd:6e:f5:86:57:0b:cf:97:47:
                    75:a5:ce:44:87:a0:19:82:b8:0b:9d:a8:e8:0d:e6:
                    f5:c3:27:2c:51:da:56:28:be:a9:f0:b8:ba:4e:0b:
                    f7:cd:4c:3a:59:76:b0:c3:74:40:84:65:fe:8c:be:
                    3e:2c:66:a7:9b:ad:02:8e:e9:f6:76:c7:b2:8a:e7:
                    da:0e:35:c3:fe:83:55:aa:06:4f:e9:2a:77:5b:41:
                    47:35:9c:38:b5:be:f5:70:62:07:0f:30:d5:11:45:
                    4b:45:fc:20:18:4e:d5:6c:5f:e1:d4:d5:aa:c1:f4:
                    75:8f:67:13:ca:0b:f9:30:5a:d0:5c:3a:9c:58:d0:
                    fc:86:47:de:6c:28:27:9c:58:a7:05:8d:7b:ea:21:
                    1f:b5:58:4d:37:6d:0b:fe:d1:64:ee:53:13:6e:69:
                    93:2a:8a:12:d4:e6:62:1c:68:0a:bb:e0:1f:df:79:
                    1e:5f:35:76:71:1a:28:9d:15:b2:73:f0:ad:a1:dc:
                    21:44:3f:d7:76:fd:8c:62:5f:44:b2:59:b8:b1:c9:
                    e6:f7:86:e6:f4:46:9f:5c:c2:f1:5d:31:0e:c9:27:
                    e2:60:77:97:d5:26:8b:df:66:2f:77:e3:7f:4d:a4:
                    a8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:82:BF:DF:39:39:45:A2:21:1D:3E:47:AA:36:7C:53:E8:2A:53:03
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:76:62:51:10:1e:39:06:d8:c1:09:eb:f5:d1:d1:e7:53:1b:
         c3:3b:5c:31:bf:c0:b5:51:b1:73:40:6e:bb:06:5d:c0:5c:8d:
         a3:fd:65:e6:da:ba:ce:3e:87:70:a2:32:9a:21:86:d9:c9:34:
         c3:30:23:56:a1:75:ff:90:24:9f:b2:f5:89:a1:52:11:f9:25:
         39:1d:a6:96:2b:d0:96:e3:06:60:ed:97:15:6e:03:71:97:e2:
         8d:8a:30:51:12:2b:89:d1:06:76:40:ba:d7:0e:d5:f0:0d:b4:
         6a:ee:2c:fb:4a:fa:4c:1a:33:a7:a4:d2:27:af:5a:7d:99:18:
         fd:89:ae:56:ac:e7:7b:4b:47:71:3f:cf:1d:b1:59:dd:d2:45:
         dd:6a:9f:f0:56:a9:51:76:5d:f9:d2:91:d5:04:ff:f8:8d:0f:
         e2:50:36:17:bf:fa:af:f5:04:82:81:98:81:a7:be:dd:a7:05:
         92:aa:61:ad:74:73:e7:ac:65:88:16:1f:96:c2:35:c9:76:2c:
         dd:af:3b:e1:af:8a:1e:97:42:45:7a:e0:86:6b:21:e6:a5:b7:
         a9:47:b7:16:de:7c:0f:c9:60:d8:0e:dc:b4:10:56:4e:62:78:
         8e:ce:c0:3c:02:63:df:bd:01:7d:86:a7:4a:7e:0d:c1:11:0d:
         b3:29:6b:78
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUKf7Ud/QnzPry2OGzrFu+sZzYZAMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5
OERCRUI5ODAeFw0yNDAxMjkwMjQ4NDBaFw0yNTAxMjcwMjUzNDBaMDMxMTAvBgNV
BAMTKEZFODJCRkRGMzkzOTQ1QTIyMTFEM0U0N0FBMzY3QzUzRTgyQTUzMDMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZ1U19kdWtnOjXvOwAh06ChUEX
aM1u9YZXC8+XR3WlzkSHoBmCuAudqOgN5vXDJyxR2lYovqnwuLpOC/fNTDpZdrDD
dECEZf6Mvj4sZqebrQKO6fZ2x7KK59oONcP+g1WqBk/pKndbQUc1nDi1vvVwYgcP
MNURRUtF/CAYTtVsX+HU1arB9HWPZxPKC/kwWtBcOpxY0PyGR95sKCecWKcFjXvq
IR+1WE03bQv+0WTuUxNuaZMqihLU5mIcaAq74B/feR5fNXZxGiidFbJz8K2h3CFE
P9d2/YxiX0SyWbixyeb3hub0Rp9cwvFdMQ7JJ+Jgd5fVJovfZi93439NpKhDAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQU/oK/3zk5RaIhHT5HqjZ8U+gqUwMwHwYDVR0j
BBgwFoAU5akHxOxtptk0JhMoDMrybpjb65gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MzhkMjc1NS0zODBkLTQ3N2UtYmYyNS0wYWYyOTAyNmJkNzAvMC9FNUE5MDdDNEVD
NkRBNkQ5MzQyNjEzMjgwQ0NBRjI2RTk4REJFQjk4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRTVBOTA3QzRFQzZEQTZEOTM0MjYxMzI4MENDQUYyNkU5OERC
RUI5OC5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzM4ZDI3NTUtMzgwZC00NzdlLWJm
MjUtMGFmMjkwMjZiZDcwLzAvMzEzMDMzMmUzNTJlMzUzMDJlMzAyZjMyMzMyZDMy
MzQyMDNkM2UyMDM1MzgzMzM4MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnBTIwDQYJKoZIhvcNAQEL
BQADggEBAHx2YlEQHjkG2MEJ6/XR0edTG8M7XDG/wLVRsXNAbrsGXcBcjaP9Zeba
us4+h3CiMpohhtnJNMMwI1ahdf+QJJ+y9YmhUhH5JTkdppYr0JbjBmDtlxVuA3GX
4o2KMFESK4nRBnZAutcO1fANtGruLPtK+kwaM6ek0ievWn2ZGP2Jrlas53tLR3E/
zx2xWd3SRd1qn/BWqVF2XfnSkdUE//iND+JQNhe/+q/1BIKBmIGnvt2nBZKqYa10
c+esZYgWH5bCNcl2LN2vO+Gvih6XQkV64IZrIealt6lHtxbefA/JYNgO3LQQVk5i
eI7OwDwCY9+9AX2Gp0p+DcERDbMpa3g=
-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:53 2024 by rpki-client on console-ams.rpki-client.org