Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          tNRXvlR9tQDHJf9uUD55PRb9kSiw1WS5dmRcz1BKkGY=
Subject key identifier:   6A:A2:5C:68:69:C6:E8:56:48:65:FF:22:0E:B4:DD:D3:64:35:13:41
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       0ADEE4C2B8B51404176E88E4044257D0B8100B25
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa
Signing time:             Mon 31 Jul 2023 00:02:20 +0000
ROA not before:           Sun 30 Jul 2023 23:57:20 +0000
ROA not after:            Mon 29 Jul 2024 00:02:20 +0000
asID:                     132642
IP address blocks:        103.19.181.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Apr 2024 12:06:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:de:e4:c2:b8:b5:14:04:17:6e:88:e4:04:42:57:d0:b8:10:0b:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul 30 23:57:20 2023 GMT
            Not After : Jul 29 00:02:20 2024 GMT
        Subject: CN=6AA25C6869C6E8564865FF220EB4DDD364351341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:89:67:20:ee:51:fb:a0:16:e8:89:4f:32:
                    5e:8e:ab:c1:3b:d8:73:49:50:f1:e7:bf:b6:a4:ff:
                    c2:8e:26:fa:ba:21:57:b9:e5:2e:a5:91:eb:0b:43:
                    0c:3a:13:e2:48:70:c8:ed:76:71:21:07:20:06:3d:
                    b0:5d:df:72:70:bd:fe:47:aa:91:10:52:0c:b5:ae:
                    e0:67:96:c3:35:64:43:b2:4d:3f:5c:73:a5:a9:79:
                    5d:de:92:c3:a8:44:38:ef:90:e7:68:d6:56:6b:fb:
                    26:1f:67:78:42:dd:b0:6f:b0:5a:3f:f7:74:13:35:
                    1a:a3:b3:85:2c:db:ec:2f:a0:25:8e:df:d6:df:5e:
                    fc:1f:8f:09:88:08:de:69:b5:65:ce:71:e9:d4:8f:
                    d9:68:fd:00:01:63:f7:5a:9a:c1:86:35:31:50:3f:
                    04:20:f2:04:ee:9a:f2:e0:34:13:81:8d:c7:3e:7b:
                    11:ed:23:08:b8:a7:5d:1a:24:db:ec:88:2f:51:2e:
                    18:d4:8e:ce:a7:9d:b4:eb:a9:64:15:93:fe:94:6d:
                    fb:1f:db:8e:47:68:48:66:2e:5f:86:07:a7:b6:1e:
                    b8:cf:c1:64:d0:22:b6:c1:48:a0:56:85:94:f0:9a:
                    d1:04:19:91:9f:43:ac:43:b3:4c:e9:3e:83:40:92:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:A2:5C:68:69:C6:E8:56:48:65:FF:22:0E:B4:DD:D3:64:35:13:41
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138312e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:29:14:71:4e:48:5f:22:1e:13:de:0b:23:b2:eb:de:66:c5:
         1e:40:a3:fd:e2:d5:90:da:13:f7:ac:93:89:61:be:de:cf:03:
         9b:6a:10:47:1c:78:91:f6:59:f6:fd:2d:56:ee:08:9b:f3:89:
         8f:f2:14:b5:cb:ae:a6:98:94:55:a4:9a:12:1e:9d:3e:e8:51:
         b4:4c:a1:34:f5:1f:f5:5a:3d:f2:b8:cb:ce:eb:45:ee:3d:01:
         5e:1e:ab:e4:61:a6:7d:01:df:76:57:ab:bd:86:01:40:64:2e:
         27:07:0e:54:9c:b7:01:1e:70:11:86:c7:82:d0:7f:0c:cd:9a:
         cd:65:3c:74:d5:74:5a:ad:06:06:aa:1e:de:1f:0b:cf:f8:b9:
         02:42:87:a3:8a:8c:8f:87:ef:af:ff:b1:69:ae:66:ec:55:39:
         6d:72:4c:82:32:9b:e1:14:fa:fa:c4:8e:a4:0e:63:69:b4:5c:
         3b:33:bd:f6:ff:26:7e:86:f6:da:84:77:92:62:70:80:56:09:
         1b:b8:4f:48:8b:f9:a8:8c:45:64:b9:82:78:69:21:c6:b5:6e:
         cb:a2:19:00:40:2d:b2:12:79:62:44:c6:69:04:50:43:eb:eb:
         cf:88:ba:47:b5:82:a7:79:e3:c5:9e:d4:2e:a2:b2:76:da:80:
         64:31:3a:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 10:35:07 2024 by rpki-client on console-ams.rpki-client.org