Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
File:                     3130332e34392e35302e302f32342d3234203d3e20313530343830.roa (raw, json)
Hash identifier:          y7PMYAIFmxnzMdE0N9b5mJiefI/ryB5sD6DxyVuFDiY=
Subject key identifier:   F5:49:4F:B9:39:C4:B5:43:81:9D:F0:0F:D4:7D:AA:86:00:9F:1E:25
Certificate issuer:       /CN=722D23AD0F959CE5CBFF927C152517F07060D195
Certificate serial:       5E146D1940B6784CDF69F052485D05BFD72C55D4
Authority key identifier: 72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa
Signing time:             Fri 29 Mar 2024 07:00:00 +0000
ROA not before:           Fri 29 Mar 2024 06:55:00 +0000
ROA not after:            Fri 28 Mar 2025 07:00:00 +0000
asID:                     150480
IP address blocks:        103.49.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl
                          rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 12:14:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:14:6d:19:40:b6:78:4c:df:69:f0:52:48:5d:05:bf:d7:2c:55:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=722D23AD0F959CE5CBFF927C152517F07060D195
        Validity
            Not Before: Mar 29 06:55:00 2024 GMT
            Not After : Mar 28 07:00:00 2025 GMT
        Subject: CN=F5494FB939C4B543819DF00FD47DAA86009F1E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:54:dd:79:0f:79:9a:0f:76:5a:93:16:00:fb:
                    bf:4a:e9:47:a7:15:90:67:08:c2:bd:6d:81:ad:6f:
                    68:b5:36:b3:17:b1:80:e5:d5:07:dc:95:21:5a:4d:
                    fb:12:95:65:26:41:26:f1:32:16:80:bf:d1:99:4c:
                    72:53:f1:b8:7f:a1:9a:eb:18:dc:2e:17:b1:c7:0d:
                    76:33:09:ed:c5:2b:d9:b1:87:5c:1e:08:b7:16:fa:
                    25:1b:1c:54:42:bc:2a:43:34:82:25:cc:dd:a0:a7:
                    2d:c0:45:0d:c3:95:83:86:7b:43:b0:cb:7e:7a:a2:
                    93:26:23:c3:ca:76:cc:94:c0:db:02:ba:99:a5:3b:
                    f3:f6:ed:86:78:bd:de:9e:71:15:33:5a:94:b1:0e:
                    a1:ed:e0:0c:d0:dd:e2:b7:26:39:8d:5b:40:25:c0:
                    1c:15:90:12:45:c5:2b:39:df:e8:86:74:9f:e3:a1:
                    4e:ce:5b:52:1e:d5:38:4f:c4:b7:75:a7:18:57:d1:
                    5a:28:27:54:4d:52:dc:a1:44:d1:eb:ca:cd:77:08:
                    b8:4e:e3:bb:0a:cf:62:7d:76:3e:9b:ae:0c:f4:8d:
                    95:2d:12:a5:b6:3e:9d:1b:8e:17:d6:4c:de:79:17:
                    7a:d9:18:35:7a:f5:28:8a:36:67:ad:9e:5b:dd:ef:
                    2c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:49:4F:B9:39:C4:B5:43:81:9D:F0:0F:D4:7D:AA:86:00:9F:1E:25
            X509v3 Authority Key Identifier:
                keyid:72:2D:23:AD:0F:95:9C:E5:CB:FF:92:7C:15:25:17:F0:70:60:D1:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/722D23AD0F959CE5CBFF927C152517F07060D195.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722D23AD0F959CE5CBFF927C152517F07060D195.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ce8da9c-bdbd-4908-ba92-d90fea9c8f05/0/3130332e34392e35302e302f32342d3234203d3e20313530343830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.49.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:fb:8d:60:d1:70:8c:29:bc:3a:69:ba:5a:86:4c:a6:5b:f9:
         c8:2b:58:9f:0b:6f:35:b1:ec:15:b8:37:87:69:36:dd:f3:38:
         04:b0:8c:be:b5:ff:bd:3a:40:b7:86:be:97:49:32:82:0a:93:
         4b:19:a7:1e:c7:74:f3:d3:34:86:c8:4e:ae:62:aa:85:03:0c:
         ab:b6:19:10:39:3f:27:22:34:b5:8f:ff:2e:06:e0:5c:84:b1:
         c7:93:5b:53:1e:ea:91:ce:27:62:31:09:aa:a7:49:3a:87:b8:
         74:ba:dd:53:e7:bd:fd:f4:eb:5b:0c:53:b5:70:85:ef:4e:e2:
         19:a4:9f:47:ea:59:4b:3a:a1:a9:aa:68:dc:76:a5:f8:88:0f:
         18:a0:b8:ea:d2:b9:59:1d:90:7f:dd:46:e0:be:c2:a8:0c:56:
         fb:92:44:7f:f2:96:70:8e:12:a8:f5:cb:4b:90:de:7f:ed:f6:
         dd:7a:95:3d:1f:d8:97:93:cf:04:86:fd:54:5f:94:56:c0:41:
         ec:df:4a:04:2a:d8:48:0c:5e:0a:6f:0f:72:5a:3e:a8:94:d2:
         06:d8:e1:07:aa:6f:d8:39:bc:2a:03:f6:1c:98:57:4d:0d:00:
         6c:19:cd:e8:c8:5d:ad:e5:63:34:35:63:97:20:c2:98:d8:0a:
         af:50:61:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:43 2024 by rpki-client on console-fra.rpki-client.org