Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32342e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          p4tDzD2T0yoz7/ONQuESSESQbl8p8sBEBC8Br2QZ4DU=
Subject key identifier:   F8:56:BB:5A:EB:35:6A:AB:28:A8:F1:15:29:81:00:F3:89:87:10:5F
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       49CC19C8E8DDE53C0B750DC3F52FE2344E9D83C4
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 31 Jul 2023 00:03:11 +0000
ROA not before:           Sun 30 Jul 2023 23:58:11 +0000
ROA not after:            Mon 29 Jul 2024 00:03:11 +0000
asID:                     63869
IP address blocks:        103.50.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 30 Mar 2024 20:02:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:cc:19:c8:e8:dd:e5:3c:0b:75:0d:c3:f5:2f:e2:34:4e:9d:83:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul 30 23:58:11 2023 GMT
            Not After : Jul 29 00:03:11 2024 GMT
        Subject: CN=F856BB5AEB356AAB28A8F115298100F38987105F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:67:b3:d8:4f:20:94:01:f1:30:87:b1:bd:4d:
                    f2:7b:0c:68:c2:e8:33:f7:b6:72:67:dd:41:da:dd:
                    72:fb:f9:58:fb:e5:bc:f2:d9:b8:3a:13:e9:92:74:
                    c4:9d:a4:99:d8:3b:d0:1c:d9:78:83:ba:8b:5c:99:
                    4a:a1:f4:e0:fb:58:c0:7b:57:4f:50:17:cb:ff:1f:
                    0a:8f:15:01:cc:83:3a:f5:f4:8d:02:11:6a:1d:18:
                    d4:41:d6:d3:0b:d1:3d:a7:59:17:ac:3d:f0:0d:98:
                    07:f1:22:33:0e:b7:21:a0:6f:dd:39:19:e2:00:82:
                    ed:5d:40:65:02:47:34:f8:b6:f9:14:0d:82:f3:43:
                    02:c3:a3:be:91:7a:08:0b:f4:cf:40:f3:28:7f:62:
                    50:55:07:dd:94:6a:69:f2:f4:7a:34:18:8c:50:b0:
                    58:69:f9:6c:11:07:42:53:f4:e8:85:2f:5b:9f:44:
                    5e:df:05:0c:44:53:23:da:f0:ef:4b:cf:23:b8:b7:
                    51:b1:4f:39:8e:4d:da:7e:58:ec:83:a9:87:43:75:
                    67:9b:df:bb:e6:03:18:e3:1e:8f:f4:6e:b5:c9:63:
                    a2:6c:85:d3:e4:f6:c0:8e:3e:15:2c:37:3d:65:a8:
                    16:0c:f7:37:a7:6e:47:22:0e:31:c5:0c:e3:4b:fb:
                    41:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:56:BB:5A:EB:35:6A:AB:28:A8:F1:15:29:81:00:F3:89:87:10:5F
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:cf:a7:d1:6a:80:68:25:e8:13:b5:b5:a3:12:4e:e2:8c:b6:
         7d:57:66:ee:67:12:c4:78:44:65:2c:bd:f3:ac:23:47:d5:6a:
         91:ab:f3:80:a4:57:fd:cb:58:5c:0c:86:e0:4e:c0:f2:ea:0a:
         0b:9b:ce:1a:e6:2f:91:b2:56:13:1f:10:5f:ca:b5:28:63:ac:
         3e:25:62:02:a7:a4:20:a3:28:c5:a2:5a:cf:88:c1:a6:b2:db:
         3e:b7:e2:2c:ad:49:b3:f0:d8:d8:00:0e:fd:11:28:89:7b:be:
         36:7f:24:2a:40:1e:0a:fc:bf:43:60:2f:c8:95:41:d6:11:96:
         e1:3f:8b:de:89:8e:44:e9:8a:7c:49:70:00:af:53:1a:b0:b8:
         da:45:9f:bf:c4:eb:8f:17:7d:dc:77:5b:9c:09:79:64:89:88:
         ec:3f:01:09:7e:b7:0c:a9:50:03:71:71:41:6d:a2:e5:7d:c3:
         1e:d6:c5:2a:e3:14:09:97:52:bf:78:63:22:dd:e9:4f:ce:8a:
         9e:a3:2b:fe:23:eb:6f:e0:e7:a3:9a:46:9b:e6:c7:4f:89:e4:
         70:95:a9:65:50:07:c1:21:4a:81:8a:c4:55:f1:e7:75:4e:c4:
         fa:dd:15:5f:f1:2f:e7:1a:00:d3:55:5f:1e:9a:7f:64:49:44:
         77:d6:15:aa
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUScwZyOjd5TwLdQ3D9S/iNE6dg8QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3
MUQyRDEyMTAeFw0yMzA3MzAyMzU4MTFaFw0yNDA3MjkwMDAzMTFaMDMxMTAvBgNV
BAMTKEY4NTZCQjVBRUIzNTZBQUIyOEE4RjExNTI5ODEwMEYzODk4NzEwNUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTZ7PYTyCUAfEwh7G9TfJ7DGjC
6DP3tnJn3UHa3XL7+Vj75bzy2bg6E+mSdMSdpJnYO9Ac2XiDuotcmUqh9OD7WMB7
V09QF8v/HwqPFQHMgzr19I0CEWodGNRB1tML0T2nWResPfANmAfxIjMOtyGgb905
GeIAgu1dQGUCRzT4tvkUDYLzQwLDo76ReggL9M9A8yh/YlBVB92Uamny9Ho0GIxQ
sFhp+WwRB0JT9OiFL1ufRF7fBQxEUyPa8O9LzyO4t1GxTzmOTdp+WOyDqYdDdWeb
37vmAxjjHo/0brXJY6JshdPk9sCOPhUsNz1lqBYM9zenbkciDjHFDONL+0FxAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQU+Fa7Wus1aqsoqPEVKYEA84mHEF8wHwYDVR0j
BBgwFoAUbBWXYHoMPqw+MM9I/zG6/XHS0SEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NzY2ODU0MS1kNmM2LTQwOWUtOGFkMS01ZTg5YTRiMjg1MGUvMC82QzE1OTc2MDdB
MEMzRUFDM0UzMENGNDhGRjMxQkFGRDcxRDJEMTIxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkMxNTk3NjA3QTBDM0VBQzNFMzBDRjQ4RkYzMUJBRkQ3MUQy
RDEyMS5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM3NjY4NTQxLWQ2YzYtNDA5ZS04
YWQxLTVlODlhNGIyODUwZS8wLzMxMzAzMzJlMzUzMDJlMzIzNDJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDM2MzMzODM2Mzkucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnMhgwDQYJKoZIhvcN
AQELBQADggEBAE/Pp9FqgGgl6BO1taMSTuKMtn1XZu5nEsR4RGUsvfOsI0fVapGr
84CkV/3LWFwMhuBOwPLqCgubzhrmL5GyVhMfEF/KtShjrD4lYgKnpCCjKMWiWs+I
waay2z634iytSbPw2NgADv0RKIl7vjZ/JCpAHgr8v0NgL8iVQdYRluE/i96JjkTp
inxJcACvUxqwuNpFn7/E648Xfdx3W5wJeWSJiOw/AQl+twypUANxcUFtouV9wx7W
xSrjFAmXUr94YyLd6U/Oip6jK/4j62/g56OaRpvmx0+J5HCVqWVQB8EhSoGKxFXx
53VOxPrdFV/xL+caANNVXx6af2RJRHfWFao=
-----END CERTIFICATE-----
Generated at Thu Mar 28 02:02:53 2024 by rpki-client on console-ams.rpki-client.org