Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
File:                     3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          LsAYTUQr5As8qfFqTa+1DZCPoeyEavqXAP87UR2mlIE=
Subject key identifier:   C8:34:15:B8:4C:18:D3:44:54:B0:BF:38:62:6B:D2:28:31:20:36:5A
Certificate issuer:       /CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
Certificate serial:       0E789BD61490C7CAE202E7239DCDF400B5DD60C6
Authority key identifier: BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa
Signing time:             Wed 03 Jul 2024 20:00:00 +0000
ROA not before:           Wed 03 Jul 2024 19:55:00 +0000
ROA not after:            Wed 02 Jul 2025 20:00:00 +0000
asID:                     59273
IP address blocks:        103.226.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl
                          rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:78:9b:d6:14:90:c7:ca:e2:02:e7:23:9d:cd:f4:00:b5:dd:60:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B
        Validity
            Not Before: Jul  3 19:55:00 2024 GMT
            Not After : Jul  2 20:00:00 2025 GMT
        Subject: CN=C83415B84C18D34454B0BF38626BD2283120365A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:bb:94:14:13:8a:be:15:98:a6:ed:81:0f:7c:
                    a9:c9:8b:a7:32:ed:97:fa:16:a9:52:be:f9:b4:76:
                    d1:86:a4:66:b2:be:94:0b:57:8a:ed:4d:0c:dc:e6:
                    51:03:0a:9a:81:91:e2:85:c4:7d:dc:4e:d2:a1:a6:
                    41:3c:ea:18:b6:9e:26:b4:05:84:0e:1c:b2:01:1b:
                    45:55:03:90:a8:2a:4f:89:90:1d:3b:a1:91:51:d2:
                    2e:82:0c:9a:b5:cd:6f:e5:98:84:cc:02:c3:b1:82:
                    c3:36:67:0c:9f:12:98:10:5c:15:38:44:04:95:50:
                    6b:8e:4b:f0:e4:3f:09:a5:39:42:d1:d7:29:ab:f7:
                    74:a1:67:e6:4c:2a:bb:4f:5c:41:eb:55:b6:a6:95:
                    70:66:5c:93:bd:76:44:4b:2e:61:c1:38:f6:2b:24:
                    14:3d:21:e8:1c:64:b9:31:b3:09:54:c5:71:a3:c9:
                    1c:c5:19:84:45:50:01:9e:6e:65:54:11:2a:17:bd:
                    7e:8c:41:9a:e8:a0:84:fd:39:53:4c:4d:ac:5c:87:
                    9a:f2:fa:47:93:74:7f:d4:f8:b7:4d:df:9a:20:05:
                    20:9c:72:a9:70:32:3c:ea:32:d6:9c:47:cc:1c:1b:
                    e6:60:98:ca:9c:83:0d:f3:1c:a4:c3:fe:bd:40:7a:
                    b7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:34:15:B8:4C:18:D3:44:54:B0:BF:38:62:6B:D2:28:31:20:36:5A
            X509v3 Authority Key Identifier:
                keyid:BE:2A:9E:DC:8C:55:6D:4D:D7:84:68:92:61:2E:0B:ED:3F:FF:B5:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE2A9EDC8C556D4DD7846892612E0BED3FFFB52B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/3130332e3232362e35302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.226.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ed:10:26:1a:6c:7e:79:1f:84:dd:1f:b2:46:07:f6:95:2a:
         fe:aa:61:a2:39:73:c1:04:38:c4:60:d6:eb:d3:d3:f2:dc:e2:
         b7:22:b6:a7:50:20:90:e0:db:9c:8b:e5:38:de:e4:aa:21:a1:
         74:c3:31:bb:a6:93:ed:0a:28:9f:e9:c9:d6:37:76:28:3c:49:
         44:5e:1c:e9:7f:bd:08:16:91:ef:25:46:7c:64:ed:4d:21:36:
         33:0b:81:68:95:e2:c9:2f:ea:25:a1:33:7e:52:17:cf:9c:ad:
         e0:db:74:b7:e1:34:59:13:d9:db:56:40:ac:1a:d6:0a:91:9b:
         16:78:ca:fa:66:43:3f:c7:78:a1:18:cd:d9:95:0b:30:7c:2a:
         e6:f6:09:8c:74:9a:89:da:6f:ad:25:0e:66:11:1c:20:44:f2:
         fe:19:0a:30:56:5f:97:ce:2a:16:aa:b5:37:f3:22:f8:2a:c2:
         7c:8f:08:7f:42:22:3e:de:18:56:df:8c:4b:25:c0:c6:fc:8b:
         81:8e:81:94:92:0d:02:44:3c:80:28:6e:99:b7:02:fb:dd:eb:
         22:1b:3f:1e:4e:69:1a:23:20:07:34:0b:67:66:2d:cc:99:fb:
         09:1e:71:27:f9:7b:da:d7:fe:b0:6c:62:01:5b:52:08:ae:f7:
         c7:c0:02:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:17:01 2024 by rpki-client on console-fra.rpki-client.org