Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32332d3234203d3e203538333831.roa (raw, json)
Hash identifier:          n6DP+hj0ytP63iMEg7QfxbSfnpN9qL6B51j5r569ips=
Subject key identifier:   E6:A6:01:5B:0F:22:47:66:26:0D:43:09:FA:74:3E:9F:30:7A:77:1E
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       550C9A7E2E82E604E34D368CCE34010D66DDFD78
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa
Signing time:             Mon 30 Dec 2024 03:00:05 +0000
ROA not before:           Mon 30 Dec 2024 02:55:05 +0000
ROA not after:            Mon 29 Dec 2025 03:00:05 +0000
asID:                     58381
IP address blocks:        103.5.50.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 04:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:0c:9a:7e:2e:82:e6:04:e3:4d:36:8c:ce:34:01:0d:66:dd:fd:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Dec 30 02:55:05 2024 GMT
            Not After : Dec 29 03:00:05 2025 GMT
        Subject: CN=E6A6015B0F224766260D4309FA743E9F307A771E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:8a:f6:7f:81:a0:1f:9f:0e:96:f8:de:0a:8a:
                    81:b5:c5:24:b6:e8:ab:07:69:3c:cf:5a:13:7c:88:
                    e1:5f:cb:2a:64:84:50:d0:b2:62:d9:2f:ca:cb:f5:
                    59:fe:10:8b:c0:40:b7:5e:85:e3:96:67:d7:3f:f7:
                    18:79:44:14:4e:1e:12:09:1b:d9:77:34:3d:e4:c4:
                    ca:35:fc:1c:72:ef:00:3b:ff:af:11:a9:c7:29:07:
                    b0:aa:6c:01:f7:fe:cf:70:cf:8d:0c:34:96:a6:c9:
                    80:5b:e6:dd:4f:58:7f:85:ec:8b:04:dc:83:63:11:
                    74:78:10:d0:36:23:1a:67:bc:c4:e9:a9:b0:04:62:
                    d6:7a:6f:9d:5d:73:a3:ac:6a:7d:f6:8b:b6:ed:cc:
                    39:5a:3f:3a:d9:94:5b:07:c7:1a:fb:be:26:dd:a4:
                    36:c3:3c:da:63:01:68:98:7a:d9:47:ad:28:bb:42:
                    98:96:76:c6:98:67:2d:bf:d2:22:8e:ce:04:bd:12:
                    09:f1:8a:2b:ab:15:a9:2a:91:d1:e7:de:ce:86:49:
                    c9:bd:25:76:42:c9:71:c3:24:17:c4:90:71:45:23:
                    fe:f2:b9:db:2f:fc:88:b0:8b:69:ad:cb:d9:bf:7a:
                    f8:44:3f:10:ba:fa:a9:23:45:1f:75:29:e3:f8:37:
                    28:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:01:5B:0F:22:47:66:26:0D:43:09:FA:74:3E:9F:30:7A:77:1E
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32332d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:a7:54:4c:0a:b6:de:60:a3:ff:93:1a:3f:51:18:b2:d2:
         17:15:ee:d0:57:ed:05:3c:2a:b6:b0:07:55:09:f5:65:ae:68:
         05:49:10:63:c3:96:88:cf:a0:6b:d1:c1:c4:b8:eb:2c:a9:36:
         3d:a5:fd:1c:23:2a:64:36:9a:89:37:75:df:16:28:8a:da:2f:
         ec:47:47:7c:92:47:e4:3b:56:26:60:69:53:fb:ae:87:0e:96:
         19:9f:c3:bf:a7:9e:94:a6:f8:99:bc:63:e1:f3:6e:5f:ce:fd:
         86:17:93:de:b9:79:82:8b:63:89:cb:48:eb:48:f1:15:9e:f8:
         5d:85:52:7f:98:8a:1e:a3:2a:11:14:2c:12:77:4c:36:e5:ec:
         d4:41:84:10:4a:a9:9a:21:c0:9c:5e:5e:a9:db:8a:32:71:df:
         89:46:39:dc:db:fa:5f:fb:7f:e9:f7:b8:22:7a:4e:0c:33:e9:
         6f:60:ef:4b:87:6e:81:a7:d3:a9:b7:a5:07:3b:c3:66:a9:33:
         87:b9:a3:9e:3b:dd:b0:16:23:5f:1f:eb:d1:c8:39:4a:10:6d:
         c1:d3:c1:48:b6:fc:44:70:82:6b:f9:63:cb:72:4c:fb:f0:82:
         9c:39:5c:c9:84:6d:f9:55:57:fe:3b:2e:c1:52:4d:d8:0d:8f:
         ca:29:b7:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:59:14 2025 by rpki-client