Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          G46kGz/xA08Ms8YM6GBbSJC8zdV3+ogVXnQjnKCMDzw=
Subject key identifier:   E4:AF:03:13:0E:BC:AB:7F:05:37:52:8F:86:8A:3E:5C:78:1A:68:53
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       7A20EA4DF98FAA6D6B44684702465BD06F8BD168
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 01 May 2024 16:00:02 +0000
ROA not before:           Wed 01 May 2024 15:55:02 +0000
ROA not after:            Wed 30 Apr 2025 16:00:02 +0000
asID:                     58381
IP address blocks:        103.5.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 04 May 2024 18:28:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:20:ea:4d:f9:8f:aa:6d:6b:44:68:47:02:46:5b:d0:6f:8b:d1:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: May  1 15:55:02 2024 GMT
            Not After : Apr 30 16:00:02 2025 GMT
        Subject: CN=E4AF03130EBCAB7F0537528F868A3E5C781A6853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bb:92:7c:26:5c:70:27:d6:8d:7a:56:21:70:
                    db:5d:ee:de:7b:bf:8a:ad:2e:6c:43:85:82:d6:f0:
                    f9:d0:65:db:b4:ac:f9:1d:09:03:4c:99:6d:89:4b:
                    69:42:e5:09:e4:ad:b4:0b:8a:81:05:8d:8e:2f:5e:
                    39:32:6f:61:57:92:f0:1c:06:f5:e1:e6:46:3b:a6:
                    5b:27:9a:bb:6a:28:df:3b:54:a7:14:8b:01:bc:1d:
                    b8:25:39:78:bf:98:23:b8:f9:26:f1:99:e1:9d:a6:
                    35:84:ec:0e:32:1a:c4:92:d6:d8:1e:d5:15:c3:d9:
                    dd:6d:a4:d6:3f:89:71:39:4c:cd:7d:42:41:dc:d1:
                    0d:be:c2:a4:3e:73:9c:5e:d3:3e:f7:99:19:31:04:
                    bf:ad:c6:e0:bb:26:9d:a8:75:51:5d:eb:7c:8f:07:
                    f1:81:17:7a:96:e5:9f:c5:8a:04:ec:f1:72:0e:a6:
                    21:56:b6:b0:38:73:43:e6:03:7e:a0:7c:72:b2:f9:
                    30:19:42:3a:cb:71:b6:ac:49:ed:7b:b3:5b:eb:4a:
                    1a:69:c5:a2:63:4d:e7:d8:22:73:22:f5:36:01:91:
                    11:49:5f:f1:29:f6:da:0a:20:14:83:35:27:e8:79:
                    0f:e7:1e:d2:4b:6b:29:13:28:15:5e:ac:ff:ff:a3:
                    f3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:AF:03:13:0E:BC:AB:7F:05:37:52:8F:86:8A:3E:5C:78:1A:68:53
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:49:7e:b0:c4:d4:14:e5:63:14:c5:50:d2:ca:d1:2d:df:5d:
         da:7d:49:8e:b0:1e:bd:f7:d9:26:14:8e:b7:f7:c2:fe:4c:0e:
         b2:39:f2:9c:a4:9a:67:98:ee:80:66:b4:d0:5a:99:56:20:a2:
         c1:81:19:09:2f:d7:8e:41:e8:84:6c:a4:60:f4:d4:6c:f7:7a:
         7e:bf:b8:57:c6:7f:35:d3:95:58:2d:0b:32:ca:af:b5:69:77:
         fd:a3:1e:cd:43:43:01:cf:10:29:d3:1c:4d:d2:07:f4:07:fa:
         f7:49:5b:06:39:cf:eb:ec:84:44:df:d4:d0:64:81:86:11:3a:
         c9:5e:ee:63:8f:d0:6c:31:8d:af:e7:a6:7c:a5:f1:89:8f:ec:
         75:d7:67:33:92:b9:5e:2b:18:c9:ad:be:13:fd:bc:57:3e:29:
         ac:70:4b:7a:9e:1d:8c:67:4f:4b:81:94:e3:18:09:a0:13:09:
         e8:dc:67:6a:71:cb:fd:d7:51:4e:33:66:de:19:aa:d2:d6:0d:
         d7:e2:9f:04:3d:ce:48:f4:0b:3a:d2:98:4e:86:2c:f2:47:80:
         15:a4:c8:bf:ef:c5:69:65:13:0f:9c:56:29:75:9a:58:2b:88:
         b2:bd:ce:c3:2b:f7:68:92:01:1c:c0:72:4b:60:e1:7a:82:87:
         bf:f2:4b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 1 18:10:55 2024 by rpki-client on console-ams.rpki-client.org