Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa
File:                     3130332e32302e35302e302f32342d3234203d3e20313530323138.roa (raw, json)
Hash identifier:          tNa2iWz1Y62lu1NCdufrg6k1iWefHX4gFLjt/Rd+OAc=
Subject key identifier:   D8:B6:BC:68:3B:47:87:D1:CC:F8:56:25:2E:5B:F0:34:6D:07:25:3B
Certificate issuer:       /CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
Certificate serial:       3B7CD6CF7BB23AD2A7848A8B1376C76CDAA7993F
Authority key identifier: 03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa
Signing time:             Fri 24 May 2024 07:01:12 +0000
ROA not before:           Fri 24 May 2024 06:56:12 +0000
ROA not after:            Fri 23 May 2025 07:01:12 +0000
asID:                     150218
IP address blocks:        103.20.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl
                          rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:7c:d6:cf:7b:b2:3a:d2:a7:84:8a:8b:13:76:c7:6c:da:a7:99:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4
        Validity
            Not Before: May 24 06:56:12 2024 GMT
            Not After : May 23 07:01:12 2025 GMT
        Subject: CN=D8B6BC683B4787D1CCF856252E5BF0346D07253B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:79:88:6c:f7:63:57:0f:82:fa:cf:d0:20:ba:
                    16:0a:b7:2b:85:38:ce:3e:fd:2b:bb:49:2d:b1:c0:
                    e2:29:b1:0a:1c:55:e9:5f:69:5c:f8:f9:69:6c:e4:
                    c7:8b:c7:b3:22:94:b3:d0:19:25:3e:73:09:cf:1e:
                    8f:16:32:59:8f:f0:d1:1d:a6:59:89:70:33:6d:ec:
                    40:6b:23:d9:5c:4a:46:84:e5:54:c7:1e:75:43:0d:
                    19:11:2c:41:e5:04:2d:3c:26:32:30:f7:ae:38:4d:
                    95:bc:19:a8:d8:87:a7:fa:83:d9:ae:ec:81:5c:4a:
                    ee:2d:d2:2c:55:76:4e:8b:de:98:31:d6:75:e7:3a:
                    88:fc:fc:dc:40:3b:1e:bf:76:25:7f:2e:ce:c6:60:
                    51:7f:ec:f7:04:c3:cb:75:3b:6f:c2:fd:9e:3e:86:
                    30:1f:d1:ca:ed:cf:8d:cc:9a:db:71:56:ac:58:f1:
                    17:e5:c7:0c:90:e7:7b:63:81:a5:2f:54:e8:fb:c7:
                    68:e1:4f:27:51:41:82:2a:f9:fb:dd:bd:df:99:33:
                    b1:9a:f0:f7:84:a5:26:4a:be:78:c4:b9:2a:66:a9:
                    69:01:d9:d0:bd:35:31:2a:67:36:f7:ed:6c:40:ad:
                    51:46:8e:fa:18:86:1f:0e:b1:9f:e9:e3:a3:e0:44:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:B6:BC:68:3B:47:87:D1:CC:F8:56:25:2E:5B:F0:34:6D:07:25:3B
            X509v3 Authority Key Identifier:
                keyid:03:8F:C8:DB:9F:4F:38:1D:61:4C:3C:DA:94:4E:DB:CE:2C:EB:B6:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/038FC8DB9F4F381D614C3CDA944EDBCE2CEBB6F4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3340df13-c4e9-4218-b114-dead1648285c/0/3130332e32302e35302e302f32342d3234203d3e20313530323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.20.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3e:69:cb:6c:b5:29:80:8b:2a:3f:56:48:23:22:03:e9:9c:
         73:1f:6b:17:eb:23:fc:22:35:8f:9a:86:34:88:75:46:f2:5c:
         4b:a6:3d:2d:0c:95:42:db:d8:6a:b8:56:0b:40:d2:8d:b8:82:
         88:88:18:fe:29:7f:52:7d:1e:60:29:6e:b5:2e:27:f5:9d:36:
         5e:b4:6b:95:e0:62:66:c8:0e:ef:18:52:6c:36:a2:5a:a2:90:
         99:9d:9b:20:86:95:f9:64:d7:b7:5f:8f:6e:3a:cf:71:f7:57:
         9a:6c:c9:32:1f:7e:67:37:9b:dd:da:07:d4:93:02:bd:47:aa:
         f1:99:4f:c0:80:f9:8d:89:dc:15:84:b5:0a:76:85:18:b5:23:
         c9:3b:5a:99:67:48:1b:38:f2:df:f8:f7:8d:79:e1:d8:07:07:
         fa:cb:a0:57:7c:19:65:c3:85:61:7a:38:8e:0b:2a:53:a6:b9:
         27:17:5f:97:c6:16:a8:9c:7d:89:6f:ae:8d:c1:46:ae:67:9c:
         d5:55:aa:0b:02:b9:18:82:4d:06:4a:5b:26:e8:9f:45:3a:4a:
         98:97:8f:be:5d:17:3f:3b:73:66:56:76:db:0c:5a:d3:3a:0c:
         ff:e6:d9:2b:ca:39:47:a2:a3:9a:55:47:6a:65:2f:c8:0b:0f:
         5f:46:e1:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org