Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3233203d3e20313331373630.roa
File:                     3130332e33302e3137302e302f32332d3233203d3e20313331373630.roa (raw, json)
Hash identifier:          my0VoBhALRFKMGgc+SvHIKeaxpPNQ2btk7kGwOcMLkw=
Subject key identifier:   B7:68:DC:FD:84:77:AB:5A:50:9E:79:81:20:8F:1B:08:13:F0:62:19
Certificate issuer:       /CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
Certificate serial:       07F8C1A63A8AFBFEF54255B5710537BB884DCC89
Authority key identifier: 50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3233203d3e20313331373630.roa
Signing time:             Tue 07 May 2024 05:02:09 +0000
ROA not before:           Tue 07 May 2024 04:57:09 +0000
ROA not after:            Tue 06 May 2025 05:02:09 +0000
asID:                     131760
IP address blocks:        103.30.170.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl
                          rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:f8:c1:a6:3a:8a:fb:fe:f5:42:55:b5:71:05:37:bb:88:4d:cc:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50A92E9C9F0D45C92BFA5E864B246CBA81038F87
        Validity
            Not Before: May  7 04:57:09 2024 GMT
            Not After : May  6 05:02:09 2025 GMT
        Subject: CN=B768DCFD8477AB5A509E7981208F1B0813F06219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:10:a7:01:20:61:32:a7:fc:84:d8:6f:59:d3:
                    59:86:49:54:ce:84:57:8e:8d:0d:c6:18:ce:96:b0:
                    ac:07:a8:9b:ea:b6:f2:e8:c9:64:3e:43:46:48:71:
                    c5:8d:01:5c:00:93:87:a6:0d:a2:ca:45:e9:a1:6e:
                    84:1e:7b:31:1a:8b:8c:40:30:49:14:6d:9c:81:60:
                    c3:ae:66:0b:5b:84:c8:fc:be:7a:95:20:45:6a:ba:
                    34:be:70:7d:89:bd:cf:ec:b3:94:52:ce:3a:83:db:
                    ce:70:ab:e2:59:28:2d:91:9f:66:90:32:a5:33:b2:
                    c8:51:79:6a:a8:6d:a3:b9:ce:3b:76:9c:83:2d:b1:
                    86:ae:47:a0:22:44:dc:77:e5:83:09:d5:91:b6:e6:
                    83:a7:e9:c1:87:15:ff:29:34:66:90:83:86:fd:f9:
                    fe:4f:9a:02:d1:4a:ab:1c:7e:8c:1e:b2:03:79:40:
                    ff:f9:0d:3c:6b:af:74:b4:db:2c:e4:60:24:84:cf:
                    4c:e6:91:eb:d2:09:ca:1c:4e:56:0d:b9:14:28:f6:
                    89:4d:93:b7:93:72:c9:62:d3:ec:5e:56:d8:a1:ea:
                    00:13:0c:96:7b:5e:e6:20:1e:11:de:fa:e8:a7:76:
                    b3:c9:02:58:48:35:20:46:74:8b:13:31:dc:c5:c0:
                    7b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:68:DC:FD:84:77:AB:5A:50:9E:79:81:20:8F:1B:08:13:F0:62:19
            X509v3 Authority Key Identifier:
                keyid:50:A9:2E:9C:9F:0D:45:C9:2B:FA:5E:86:4B:24:6C:BA:81:03:8F:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/50A92E9C9F0D45C92BFA5E864B246CBA81038F87.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1962aa8a-06e4-4634-b500-a527ce8e0489/0/3130332e33302e3137302e302f32332d3233203d3e20313331373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.30.170.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6d:a7:1d:2a:b3:44:e7:9b:77:45:eb:55:2b:a3:e3:41:37:28:
         99:eb:9d:79:dd:3b:84:1f:0c:0c:66:bd:70:72:ad:49:3e:60:
         9d:39:72:66:5e:92:49:87:97:00:2e:13:0c:cd:ce:bc:9f:a2:
         07:13:84:8a:e6:f2:59:ee:8c:84:bf:99:a6:a3:23:ad:1b:c2:
         1a:06:ad:a7:f5:72:7c:67:85:6b:a3:ad:dd:55:22:f4:67:4f:
         f7:65:e4:b5:cd:15:d9:29:c2:ba:70:d2:96:e7:ff:b6:d9:8b:
         78:22:2d:17:30:c7:d6:75:5f:87:3d:8e:b7:68:c0:96:ba:d5:
         c1:d8:49:71:42:80:9e:bf:f3:cb:0a:c7:d3:63:15:f9:09:5a:
         f3:2d:6c:2e:14:6d:c1:5d:e8:5b:43:5a:59:87:8f:49:a4:19:
         e5:e1:79:83:b3:b9:9a:2a:bf:3a:cd:ef:4a:3d:63:e2:a9:80:
         9d:fa:56:07:3a:30:c1:1e:d8:34:8b:d3:4f:97:68:f8:d9:f2:
         09:e0:a3:f7:9b:c0:28:01:cb:c4:fd:4c:32:5b:d6:81:e1:35:
         12:7c:d7:49:f7:ec:80:0d:33:53:d6:15:7e:ab:24:9d:78:ed:
         07:e7:3f:05:61:de:33:51:c3:a4:12:c1:24:61:b4:6a:99:1c:
         5b:59:16:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:34:31 2024 by rpki-client on console-ams.rpki-client.org