Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
File:                     3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa (raw, json)
Hash identifier:          CF2RYF2SSTK/XWnV9DBPk2tV44qn6hI0SUBwEwrVZFI=
Subject key identifier:   50:F1:1C:ED:E6:DA:25:2C:F6:D2:00:D5:31:A4:07:11:45:DF:19:E9
Certificate issuer:       /CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
Certificate serial:       4624A4DF9BEFD3486281233C2E0611343B0A7446
Authority key identifier: 05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa
Signing time:             Mon 31 Jul 2023 00:09:28 +0000
ROA not before:           Mon 31 Jul 2023 00:04:28 +0000
ROA not after:            Mon 29 Jul 2024 00:09:28 +0000
asID:                     135451
IP address blocks:        103.96.118.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl
                          rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:24:a4:df:9b:ef:d3:48:62:81:23:3c:2e:06:11:34:3b:0a:74:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05BC764F85F9F88CE41FD879C6125E65117E8E79
        Validity
            Not Before: Jul 31 00:04:28 2023 GMT
            Not After : Jul 29 00:09:28 2024 GMT
        Subject: CN=50F11CEDE6DA252CF6D200D531A4071145DF19E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:3b:66:5d:5c:61:6c:0d:7b:88:05:0f:89:1e:
                    fa:9b:f2:4e:4e:e2:5b:16:8d:f4:67:fe:56:17:7d:
                    9f:c7:b6:5c:8a:46:ac:e7:1a:1f:fb:87:11:12:2e:
                    f8:c2:86:a7:e3:2d:db:dd:3b:43:4d:79:93:0f:0f:
                    f9:d6:a0:55:3c:16:bf:46:6f:65:14:da:e3:b1:49:
                    f0:4d:ff:bd:73:fe:a0:72:72:74:d9:ec:78:78:25:
                    f2:fd:f4:83:fc:5a:43:2c:a5:0a:ca:dd:ec:ad:03:
                    87:dd:e1:01:40:53:72:e2:1c:0f:d0:47:25:87:93:
                    4c:16:b3:c9:7f:d2:d5:8f:8f:95:b1:2c:78:ea:50:
                    b1:c7:ea:8e:f0:12:97:71:c0:ee:7f:33:ef:4d:34:
                    6e:f5:a1:b6:cc:72:0d:b1:9a:d6:15:cd:39:4b:9b:
                    fc:33:62:ad:dd:ce:35:b8:05:c9:49:96:b9:80:b6:
                    76:2d:c4:1a:5c:71:26:47:80:e9:a4:30:7d:05:da:
                    9b:1b:db:33:19:f8:c3:03:14:ed:09:8d:91:c9:b3:
                    29:af:01:42:0a:94:18:ee:c0:a2:78:32:65:41:4f:
                    2f:5e:75:41:44:d3:44:38:06:40:a7:a8:aa:9d:e0:
                    ca:4e:7c:43:cd:db:49:09:ce:c4:6e:1c:7b:fa:3e:
                    a8:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F1:1C:ED:E6:DA:25:2C:F6:D2:00:D5:31:A4:07:11:45:DF:19:E9
            X509v3 Authority Key Identifier:
                keyid:05:BC:76:4F:85:F9:F8:8C:E4:1F:D8:79:C6:12:5E:65:11:7E:8E:79

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/05BC764F85F9F88CE41FD879C6125E65117E8E79.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/05BC764F85F9F88CE41FD879C6125E65117E8E79.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/11c1d56e-15c6-4b65-a9a8-f90ad6fba090/0/3130332e39362e3131382e302f32332d3234203d3e20313335343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.96.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b2:c9:96:84:d6:0e:24:eb:59:00:20:22:39:32:bb:29:3f:b3:
         b0:e7:e1:38:02:8a:e8:95:fc:3d:da:86:93:fe:6f:7a:02:c7:
         f9:e1:3a:2d:d9:1e:80:10:cb:5e:e7:3d:df:50:62:96:c7:cd:
         2b:2a:f7:16:9e:92:73:31:a6:91:03:38:1f:41:72:f2:5c:a6:
         20:26:33:93:dc:7f:15:15:85:a4:7d:d3:d7:75:5f:01:a0:d7:
         a7:5c:3d:8c:28:21:6f:bd:05:82:82:1e:20:ab:19:1e:88:27:
         5b:42:95:55:58:0f:75:d9:66:25:a4:6a:2b:fc:e8:f7:98:0d:
         07:37:8f:9f:b3:4f:52:e0:de:5b:be:66:b2:67:74:e4:c1:01:
         5c:89:43:9f:9c:1a:2f:75:28:68:a1:33:d5:b7:fd:96:71:67:
         d6:30:8d:17:25:55:86:fc:2a:0b:c6:60:06:7a:76:26:5f:1c:
         34:06:b9:d8:c5:f9:55:00:38:7b:42:dc:1a:4e:40:d6:ef:af:
         6a:2b:b2:16:23:66:d4:51:f7:7e:c0:e3:67:69:08:3c:a5:43:
         0d:9e:d3:dd:b6:3d:35:3a:27:c5:a2:4f:61:04:d5:8e:3f:91:
         2e:4a:09:46:cd:bd:80:e7:22:54:fd:26:77:81:28:a5:84:77:
         11:bb:05:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 09:06:28 2024 by rpki-client on console-fra.rpki-client.org