Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32372e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          YNTn9eQAdzuyNaRGguUGpAKSfcX1ncWv0cZdKHOq1T4=
Subject key identifier:   BB:C5:66:59:D1:5D:21:C4:B8:B7:27:56:34:3C:E7:DC:63:87:E2:D5
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       636AE86964A9DDA520A194EDEB0E0B69B764E13C
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 31 Jul 2023 00:03:11 +0000
ROA not before:           Sun 30 Jul 2023 23:58:11 +0000
ROA not after:            Mon 29 Jul 2024 00:03:11 +0000
asID:                     63869
IP address blocks:        103.50.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Apr 2024 21:43:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:6a:e8:69:64:a9:dd:a5:20:a1:94:ed:eb:0e:0b:69:b7:64:e1:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul 30 23:58:11 2023 GMT
            Not After : Jul 29 00:03:11 2024 GMT
        Subject: CN=BBC56659D15D21C4B8B72756343CE7DC6387E2D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a8:a7:a6:39:a8:49:d3:05:82:1c:f3:0d:a0:
                    ed:22:8e:ab:51:10:fa:03:52:85:1e:d4:94:23:56:
                    4c:c0:b1:fa:a7:f6:bd:a6:34:4c:91:97:20:a0:6b:
                    ed:8a:8a:ca:e4:97:0b:45:60:28:f5:c7:f7:0f:79:
                    6a:4c:35:71:3f:ae:be:3e:5a:1a:5e:37:49:9b:21:
                    c0:ec:67:25:2b:6f:c8:df:56:a7:05:a5:d4:5f:2d:
                    99:6e:fd:fb:db:6d:e0:7d:e4:4e:88:59:72:ce:72:
                    8e:50:f6:dd:9c:8c:40:b1:b7:3e:da:ac:b5:09:40:
                    ac:e6:0d:2a:6c:23:77:4d:ec:70:1b:f5:78:b6:cf:
                    19:12:d4:5a:02:52:d3:8c:41:49:25:45:f2:22:e5:
                    fc:9f:41:bb:84:5e:66:03:62:42:1f:d0:5d:57:5a:
                    8e:7c:dd:05:62:50:04:c3:7e:2f:89:bf:19:ee:e0:
                    d7:5d:ea:1a:a4:ee:71:0f:a6:20:8c:12:2d:04:80:
                    40:3b:84:e6:b9:1c:e4:73:c3:1c:ad:8b:f7:a0:aa:
                    53:b4:a7:f7:0d:1c:96:c9:ca:ee:c7:ac:48:b3:30:
                    4e:28:8e:2d:8b:8d:d2:2c:db:dc:7f:45:68:9c:1b:
                    12:1e:b5:73:3c:ea:e5:97:64:0a:b8:16:80:93:e3:
                    aa:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C5:66:59:D1:5D:21:C4:B8:B7:27:56:34:3C:E7:DC:63:87:E2:D5
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:3a:fe:09:52:c9:cc:59:e1:ef:4b:e0:f8:be:a4:90:aa:13:
         2c:6b:e7:1f:25:0d:a4:1c:be:73:a0:ce:1c:17:62:dd:21:8c:
         a7:26:41:ba:b7:7d:ac:e8:bb:50:fb:8b:b9:63:60:47:8e:c4:
         21:f6:a4:1c:1a:02:2c:8d:78:d0:63:36:48:2d:26:ed:f1:5f:
         0c:ab:65:6f:40:bc:ed:9f:93:4c:fe:4f:01:15:b5:ba:37:c2:
         b6:d9:fe:a5:f6:72:27:fc:24:86:e5:01:6b:73:55:dc:df:36:
         a0:2d:72:df:dc:d8:c2:ed:5a:5a:53:8c:b1:3b:0c:3e:14:02:
         d6:82:37:a9:92:62:92:d2:0e:13:9e:8c:14:da:25:b3:92:bb:
         73:be:0a:38:b6:75:dd:a9:5b:f4:99:c0:c6:f0:fc:bc:b3:f7:
         c1:07:9e:4f:ec:65:86:76:c3:a0:6a:5e:cc:bc:ac:30:d8:0c:
         0d:86:01:15:1f:2a:78:8d:3a:de:c6:66:91:34:e5:bf:84:e0:
         2b:5c:47:ec:ae:24:78:22:fa:90:b9:64:ec:14:80:62:33:a0:
         27:b8:6a:5e:37:b1:cb:38:0d:f5:40:cc:f8:c9:d9:bb:0a:3b:
         f3:4b:65:2b:f5:2b:30:31:ba:c7:bc:ba:f1:b5:7e:48:6c:41:
         a4:8a:28:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 01:25:00 2024 by rpki-client on console-ams.rpki-client.org