Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
File:                     3130332e352e35302e302f32342d3234203d3e203538333831.roa (raw, json)
Hash identifier:          it/SzipXfJLThyc3J7HfzvzUSlGSxUAWhA/O+pawjWg=
Subject key identifier:   21:D5:73:49:1D:B1:D2:DC:02:F3:8E:71:2D:40:91:48:DD:A2:B6:77
Certificate issuer:       /CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
Certificate serial:       66FC1069B57E39364F04E8264704265650C7E918
Authority key identifier: E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa
Signing time:             Wed 02 Apr 2025 16:00:06 +0000
ROA not before:           Wed 02 Apr 2025 15:55:06 +0000
ROA not after:            Wed 01 Apr 2026 16:00:06 +0000
asID:                     58381
IP address blocks:        103.5.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl
                          rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 08 Apr 2025 04:17:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:fc:10:69:b5:7e:39:36:4f:04:e8:26:47:04:26:56:50:c7:e9:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5A907C4EC6DA6D9342613280CCAF26E98DBEB98
        Validity
            Not Before: Apr  2 15:55:06 2025 GMT
            Not After : Apr  1 16:00:06 2026 GMT
        Subject: CN=21D573491DB1D2DC02F38E712D409148DDA2B677
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:bb:58:b1:bb:59:8a:4a:c3:50:a2:93:ce:2f:
                    c4:6b:4f:fd:7e:4b:14:b0:e4:09:c4:5a:65:5b:5a:
                    6d:22:88:cf:08:c5:c9:cb:76:47:d7:76:b5:a1:40:
                    b9:ae:76:89:53:ac:bd:76:65:9c:f5:ec:da:2a:82:
                    eb:22:7d:a7:ee:04:a8:8a:ff:bd:ca:e4:c7:db:db:
                    3e:1e:16:c5:d2:6b:9a:cc:fc:15:73:15:56:be:f7:
                    02:93:3f:56:ac:54:96:69:6c:be:f3:ae:d5:5e:34:
                    df:86:7c:00:98:ca:ad:cf:d6:e6:49:9c:a9:d1:89:
                    af:a1:5c:21:6f:2e:1d:ea:96:77:62:e2:30:64:b0:
                    21:71:c2:ac:64:fb:25:53:31:7f:29:ee:71:92:f4:
                    16:f5:df:5a:fa:a1:53:e7:d7:40:8e:ed:fa:b5:72:
                    31:ef:2f:bb:76:e9:de:7e:5f:f8:dd:a0:3c:f4:d8:
                    9e:9b:d6:71:ca:db:f9:e6:d5:0e:d9:44:3d:0d:5c:
                    06:88:00:74:c8:6d:f4:b7:cb:9f:59:0b:0b:30:c5:
                    5f:00:81:c1:f8:41:49:24:53:4a:a4:a2:45:af:7b:
                    3b:63:e9:a6:65:88:91:20:44:94:bc:e7:5a:58:c1:
                    77:1b:78:9a:56:5e:00:98:65:38:58:5e:a5:e7:97:
                    da:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D5:73:49:1D:B1:D2:DC:02:F3:8E:71:2D:40:91:48:DD:A2:B6:77
            X509v3 Authority Key Identifier:
                keyid:E5:A9:07:C4:EC:6D:A6:D9:34:26:13:28:0C:CA:F2:6E:98:DB:EB:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E5A907C4EC6DA6D9342613280CCAF26E98DBEB98.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/338d2755-380d-477e-bf25-0af29026bd70/0/3130332e352e35302e302f32342d3234203d3e203538333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.5.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:66:49:b7:8a:dc:23:08:8e:28:1d:34:24:e8:76:95:f6:11:
         e0:aa:8c:3c:49:ae:7f:f5:99:91:41:e1:0f:88:7d:56:11:d5:
         10:d7:74:e5:57:79:d6:c4:8a:35:01:b0:f5:53:f2:cd:41:63:
         0f:a6:26:e1:4c:0d:e7:cd:2a:fd:59:b3:7d:3e:b5:20:b4:99:
         21:c2:bd:3a:96:1d:bd:97:b1:1d:da:5d:e5:a7:c9:f9:ce:1d:
         24:ba:e0:4c:ad:37:51:35:e3:46:2b:b4:b5:3f:bb:41:8e:e2:
         2d:5d:10:64:c6:fc:bd:d3:65:72:cf:86:bb:da:c7:a8:a4:09:
         fa:88:86:89:4a:07:3d:88:fb:a8:03:3f:76:97:75:5b:e0:8e:
         32:db:b4:f3:1e:f2:09:83:65:61:d0:b5:db:08:fb:52:f6:7d:
         01:f3:23:6e:bd:59:b8:31:47:e7:9e:e7:df:d6:7a:99:24:a8:
         eb:4d:c8:52:e7:18:5d:ad:da:9c:11:ca:15:58:34:58:74:04:
         b3:eb:fe:b5:ae:e2:a3:e9:81:7c:a3:eb:1c:dd:3c:a3:bd:78:
         c8:3a:45:cb:3d:68:4e:41:c6:39:3c:11:da:aa:05:41:61:73:
         f9:46:b5:2b:6b:d0:56:d5:21:14:55:db:f7:ff:b1:82:af:ae:
         c3:a2:e4:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:54:02 2025 by rpki-client