Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32362e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          ByaV9VslblCt/OoPXpP4Z4kWi78vu6ioWk6eujU3ZiY=
Subject key identifier:   22:0A:9A:F7:FB:80:E9:55:A5:C0:24:C8:F8:13:61:C7:FC:53:53:42
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       3FA0E2660C2E9A44562DF71551C7F1AE3C815B17
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 31 Jul 2023 00:03:11 +0000
ROA not before:           Sun 30 Jul 2023 23:58:11 +0000
ROA not after:            Mon 29 Jul 2024 00:03:11 +0000
asID:                     63869
IP address blocks:        103.50.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 18:56:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a0:e2:66:0c:2e:9a:44:56:2d:f7:15:51:c7:f1:ae:3c:81:5b:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul 30 23:58:11 2023 GMT
            Not After : Jul 29 00:03:11 2024 GMT
        Subject: CN=220A9AF7FB80E955A5C024C8F81361C7FC535342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1d:72:10:ba:d4:70:55:f2:61:ae:c8:43:07:
                    ef:aa:0f:71:88:78:be:c5:11:c9:a0:fe:da:fb:6b:
                    4b:f8:85:7c:da:0f:2e:30:0f:2c:d4:3e:ce:1f:89:
                    21:ac:0d:29:04:32:3f:85:cf:1a:c9:f1:11:6e:d3:
                    a1:81:9c:1c:4c:04:e4:b9:f5:29:08:b8:6c:fd:18:
                    f9:66:9c:b3:5e:37:4e:86:9e:fc:1f:93:03:83:60:
                    fb:29:68:eb:c7:03:1f:64:02:9e:a0:d9:87:a7:02:
                    f6:af:ba:b6:04:2e:67:8b:f5:6d:69:82:3e:2b:a2:
                    d8:e9:24:2d:1a:bc:61:87:92:98:c0:1d:46:ee:71:
                    2c:db:f8:7b:65:7f:e3:3d:5a:09:b5:72:ae:72:e1:
                    c7:dc:01:63:74:a9:9a:a8:7d:48:93:9d:6f:c2:b4:
                    fa:3f:9d:e4:23:3f:b3:88:b3:18:72:88:ac:cb:b2:
                    cf:a9:8c:ee:57:98:ba:1b:14:05:e8:52:95:72:f2:
                    b4:6c:6e:0b:7c:f2:5f:3a:c9:de:19:ad:f5:21:80:
                    7a:b1:6f:c9:00:69:89:89:2b:0a:17:5f:06:d8:19:
                    77:f7:05:59:3c:72:e7:af:25:21:2d:e2:8d:06:43:
                    89:92:3a:a6:63:d4:2b:e0:02:81:a1:0f:e1:a6:2e:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:9A:F7:FB:80:E9:55:A5:C0:24:C8:F8:13:61:C7:FC:53:53:42
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:a8:13:ac:84:e9:c8:4d:ca:cd:58:5b:91:d8:43:45:68:54:
         42:97:5c:67:3c:28:28:c8:53:36:1c:88:e2:ce:4d:de:1b:49:
         81:9a:cd:01:81:a9:9f:2d:ac:f5:17:af:73:9d:ec:4f:e6:ee:
         8d:76:2b:af:b6:77:de:dd:0e:71:36:0d:4b:3f:db:41:54:00:
         61:75:5c:3e:ee:b2:93:7b:1c:25:0d:32:17:9b:11:8e:97:a4:
         6e:d6:53:6e:e2:51:82:7d:f7:c6:43:5b:06:b7:82:d7:da:af:
         6a:aa:ad:60:ac:55:dc:b5:76:5b:04:de:25:a6:d9:34:87:81:
         2c:fe:3b:11:fb:19:6b:b1:35:ff:55:88:9e:8f:fe:cb:6f:52:
         bd:20:a7:39:38:e8:b4:e1:75:83:7a:fc:cd:d8:89:4f:b9:53:
         ab:7e:15:c8:1b:a4:6b:c8:54:d9:ae:17:69:61:ef:fd:60:c3:
         fa:36:9c:16:d5:6a:3b:06:c7:93:94:d1:36:60:67:1e:15:b8:
         2e:9f:a4:66:98:9d:34:bd:1d:8f:98:52:2b:30:4d:c1:e8:df:
         d1:fe:ac:05:7b:cc:7c:32:90:52:fd:b0:d1:cd:95:59:e4:27:
         ad:27:f2:db:a9:a5:2d:17:c2:c3:fe:39:89:27:fd:ea:e7:d3:
         ac:c0:ea:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 23 18:35:54 2024 by rpki-client on console-ams.rpki-client.org