Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
File:                     3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (raw, json)
Hash identifier:          +d+a4LcNz5DaR0KSjaxaW7ITfbOW0ZExk6wH6uzqtS4=
Subject key identifier:   F5:B7:AF:D9:5D:5D:33:1C:63:F3:7D:9C:6E:DD:8C:2C:6D:1C:4D:5E
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       7292DA3DB81E1D05E1650D4CC63A1A81F02D06D8
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
Signing time:             Fri 28 Feb 2025 07:00:00 +0000
ROA not before:           Fri 28 Feb 2025 06:55:00 +0000
ROA not after:            Fri 27 Feb 2026 07:00:00 +0000
asID:                     150480
IP address blocks:        103.49.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 00:36:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:92:da:3d:b8:1e:1d:05:e1:65:0d:4c:c6:3a:1a:81:f0:2d:06:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Feb 28 06:55:00 2025 GMT
            Not After : Feb 27 07:00:00 2026 GMT
        Subject: CN=F5B7AFD95D5D331C63F37D9C6EDD8C2C6D1C4D5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:88:64:a5:ee:1b:e6:80:69:d4:2a:a9:c0:f1:
                    71:ab:b0:6e:69:25:c8:53:cb:3e:be:c8:05:e1:37:
                    58:81:ce:d1:35:be:17:44:cf:7f:61:26:7e:fb:33:
                    47:e6:32:b1:21:3d:cd:b3:36:63:c6:d2:ac:1c:da:
                    23:fb:7b:59:9b:d6:77:37:eb:34:4b:15:14:ff:bb:
                    15:5a:e9:9e:9a:ba:34:13:45:48:be:6f:ef:93:7a:
                    0a:58:e0:dc:bc:14:6c:45:60:72:44:2b:9e:51:3d:
                    92:1d:60:27:52:46:2d:ab:b9:64:03:38:f1:dd:45:
                    53:4f:e5:d1:27:82:c8:58:8b:f9:8a:bc:3a:c3:84:
                    46:4e:55:1e:16:23:52:3e:f7:b0:9d:76:08:d1:d4:
                    93:10:b2:80:71:8a:5d:fc:de:ea:d4:24:f0:6e:24:
                    3d:fd:40:ad:17:93:30:f0:56:75:2e:4e:c2:8d:e4:
                    e5:f5:c5:02:ab:87:bf:8d:86:ed:91:d5:cf:60:5a:
                    c7:9b:8a:c0:2c:ca:cd:2a:1d:f5:e6:00:cd:dd:37:
                    d4:cc:21:88:9b:55:99:30:bb:1f:6c:3b:2b:96:39:
                    dd:35:da:dc:91:70:1a:7d:a3:0f:8e:29:c3:7c:a0:
                    e9:bf:2b:6b:ac:27:fc:a0:38:04:3e:28:53:e6:f8:
                    06:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:B7:AF:D9:5D:5D:33:1C:63:F3:7D:9C:6E:DD:8C:2C:6D:1C:4D:5E
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:34:e4:32:81:bb:92:be:90:30:be:83:85:a3:a7:c3:97:c7:
         7f:13:55:88:f8:0c:c0:22:25:94:6a:e0:44:2b:74:6b:b1:4e:
         2f:d2:50:47:b8:0d:99:b0:b1:93:cb:51:ed:bc:fa:4d:c1:0c:
         ec:5e:c8:3e:d8:84:08:0d:73:d1:96:1b:0f:60:82:bc:e4:42:
         5d:ac:32:72:50:3d:6a:a7:a6:27:63:b9:58:4f:79:12:0e:da:
         63:7e:1c:26:84:4c:92:b0:14:f5:7a:3a:ad:3c:10:5f:1b:8a:
         70:db:d0:b6:0d:47:e8:7c:03:2e:04:78:eb:5e:b3:b4:69:18:
         02:24:2d:2b:d7:00:5d:b5:30:5f:cf:0f:8b:ee:ed:b0:6c:bf:
         03:4b:f6:dc:d3:07:78:05:a4:97:bd:91:fb:c1:34:da:bd:c3:
         c6:6b:9f:a6:79:c1:66:38:f8:dc:03:c1:ac:19:0e:b5:0e:1b:
         b3:4f:ff:34:2b:e7:b0:75:bb:d2:cf:34:64:30:71:36:b9:56:
         05:6b:2b:b6:70:fc:5f:a0:61:af:7a:3a:75:2a:04:6e:cb:ec:
         2b:5e:dd:b6:fc:9f:0f:a3:bf:26:6a:55:5c:f6:04:11:5b:55:
         1a:0a:9b:37:80:ca:3c:99:d6:a1:2b:d1:2b:01:93:21:43:8a:
         24:82:ba:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:44:34 2025 by rpki-client