Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32342e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          pjDRNdkxVNQAonOH/ajeQNBbErsBzCB65TjYTm/AV04=
Subject key identifier:   C4:3C:49:7A:1B:2D:20:D7:45:C5:F3:5A:73:C7:FA:5A:62:72:74:C7
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       095EEFD699CEF6765DC717C311725B42FC74CD4E
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 02 Jun 2025 01:02:49 +0000
ROA not before:           Mon 02 Jun 2025 00:57:49 +0000
ROA not after:            Mon 01 Jun 2026 01:02:49 +0000
asID:                     63869
IP address blocks:        103.50.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 17:03:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:ef:d6:99:ce:f6:76:5d:c7:17:c3:11:72:5b:42:fc:74:cd:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jun  2 00:57:49 2025 GMT
            Not After : Jun  1 01:02:49 2026 GMT
        Subject: CN=C43C497A1B2D20D745C5F35A73C7FA5A627274C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:bc:51:b6:df:d8:0f:0b:5a:46:db:f2:1d:80:
                    e9:ab:6a:0c:68:10:11:f6:69:18:ea:96:9c:e2:70:
                    3f:65:d4:43:5e:df:c3:9c:bd:2e:cc:75:80:1c:eb:
                    c8:07:fb:02:9a:2c:47:81:06:37:14:a5:3a:be:a0:
                    6f:ff:3c:cd:fc:26:2f:75:de:63:3d:d1:e9:99:0e:
                    ae:25:a1:d9:a6:c9:69:56:88:50:50:13:b6:6e:b5:
                    5e:5f:e6:15:70:41:a7:97:31:d8:be:0c:e2:50:3f:
                    b4:b5:75:de:03:90:21:ae:85:0f:d1:0a:22:eb:84:
                    34:b0:d4:5e:03:63:e6:45:34:60:61:94:b2:78:86:
                    49:b5:a8:b9:b8:17:38:e0:a5:ca:6e:4b:44:3e:41:
                    3c:22:13:c7:10:46:7f:5a:03:16:42:7f:7f:a2:b8:
                    97:38:97:33:f8:af:cb:0d:44:13:3e:71:89:67:3b:
                    fb:9c:e1:6b:1f:f7:f6:39:62:48:71:63:c2:5f:23:
                    08:18:81:97:15:63:da:e4:d4:c9:a4:b7:80:28:a1:
                    60:c3:c2:a2:7c:14:cb:3f:9b:46:a6:5a:ee:39:34:
                    7b:18:d4:27:aa:75:4d:b6:b2:dd:6a:03:be:4c:d3:
                    68:32:06:1d:dc:bb:9e:d6:4c:89:ff:0c:8a:c1:f0:
                    2a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:3C:49:7A:1B:2D:20:D7:45:C5:F3:5A:73:C7:FA:5A:62:72:74:C7
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:2a:ac:a5:57:3d:07:c4:26:7e:e5:1b:a8:57:2c:7d:8b:8c:
         db:43:7e:61:5b:b5:fb:bb:05:b9:9c:c0:cd:bf:03:54:5d:f7:
         7e:19:43:30:62:df:b6:b8:87:4b:7e:fd:68:7d:53:0a:2c:29:
         55:b1:de:32:9b:3f:f0:85:3c:fc:f0:56:61:8e:e3:ef:38:1b:
         be:27:06:8a:6d:7c:ab:a0:be:c5:04:39:75:94:77:88:b4:7b:
         97:95:aa:78:10:89:85:3c:6b:21:73:c9:27:67:c4:5d:db:43:
         81:13:79:ee:00:29:d9:53:ca:20:a7:c3:55:4a:1f:f1:37:16:
         4f:ae:f2:b0:6d:70:3b:de:e1:3a:66:6b:a2:f8:4c:61:e2:cd:
         80:8f:b8:a5:36:76:e1:f8:74:0e:25:79:20:75:f3:bd:72:c8:
         81:a8:61:c6:ba:b2:22:90:56:9f:35:2f:f6:5c:81:db:bf:b0:
         76:58:45:7c:cc:7d:63:27:66:3b:1f:da:75:e9:4a:55:5f:82:
         4c:0d:9d:38:d1:6e:9b:fe:9e:a0:0a:55:a5:8b:f0:82:7a:62:
         8c:b5:a2:b9:e3:3b:58:60:bd:b7:4c:13:12:19:1b:d7:6e:74:
         6a:bc:1d:8a:e0:37:b0:38:0c:66:63:07:90:ba:4c:b9:2e:6b:
         8a:68:1d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 06:01:43 2025 by rpki-client