Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32342e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          jbbKcT+NH1vrUGVF5FG0fF8tGj0qvis+CEXhy1ZbNcY=
Subject key identifier:   54:A3:87:55:EF:14:9D:39:6E:1F:4D:9C:FF:2C:C0:72:9D:DB:33:20
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       06645AE34930860924A3392C913BA8C661D927E7
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 01 Jul 2024 01:02:42 +0000
ROA not before:           Mon 01 Jul 2024 00:57:42 +0000
ROA not after:            Mon 30 Jun 2025 01:02:42 +0000
asID:                     63869
IP address blocks:        103.50.24.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:5a:e3:49:30:86:09:24:a3:39:2c:91:3b:a8:c6:61:d9:27:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul  1 00:57:42 2024 GMT
            Not After : Jun 30 01:02:42 2025 GMT
        Subject: CN=54A38755EF149D396E1F4D9CFF2CC0729DDB3320
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:38:c9:ff:f6:a3:cf:65:d3:7a:a6:97:75:c3:
                    37:db:df:1d:1c:05:64:5d:0b:9d:ac:91:06:b0:3a:
                    60:03:fe:5a:ae:33:03:b1:d1:9d:66:92:48:04:88:
                    19:7f:0d:14:da:bb:4c:45:aa:ff:60:7a:07:3c:e9:
                    86:7c:fa:7a:77:40:e4:ce:c4:39:b8:24:2a:fe:ca:
                    59:fc:12:3f:49:42:72:aa:41:58:84:f3:3a:c5:50:
                    50:a0:56:80:30:34:77:3d:e0:8d:b2:5b:4e:df:09:
                    6d:70:a2:7e:c7:89:ca:14:21:a1:bb:07:24:af:69:
                    f3:5d:cc:ce:5c:11:a5:c4:0d:6e:1c:06:da:e2:c5:
                    32:af:2f:78:15:ec:a5:81:3b:07:c6:c8:43:2f:2e:
                    9c:3b:25:a8:72:bc:13:97:c6:d0:48:32:99:41:c2:
                    78:14:1a:6a:9a:12:27:fa:d9:45:50:3a:03:4b:7c:
                    a7:d2:72:f9:62:80:7a:1d:d2:a4:cd:1c:b1:02:52:
                    96:ec:f6:72:7f:ca:1e:05:de:84:ba:db:77:05:b2:
                    4d:5f:20:d2:1d:3a:f0:5b:a6:2e:26:2d:06:5b:df:
                    1d:32:56:04:d6:46:8b:e2:55:6a:c3:d6:a8:63:4a:
                    f6:12:0d:d7:a9:42:31:f4:29:8e:88:31:84:65:d1:
                    a4:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:87:55:EF:14:9D:39:6E:1F:4D:9C:FF:2C:C0:72:9D:DB:33:20
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32342e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:bc:7c:ab:74:5b:48:67:28:a6:6c:24:20:9a:ce:0a:e0:01:
         e6:38:8e:7b:98:c5:a5:42:58:56:c4:81:4d:f8:da:cc:9a:6e:
         de:f5:16:55:aa:fc:33:57:e4:ff:1b:b0:e8:ef:ff:63:58:2e:
         a9:66:cd:a5:db:8f:c1:66:2d:a2:df:26:f5:8c:16:0c:dd:14:
         ba:c1:f1:71:4a:65:3f:dd:e9:23:94:08:a2:b3:1a:f8:48:5e:
         9f:cf:46:c9:4d:d0:4b:b7:b8:ca:bd:95:17:62:d6:e8:2e:ba:
         ef:4e:96:ba:fd:27:81:5e:49:b1:b6:53:24:c5:90:ba:75:d6:
         2a:d3:91:24:27:8f:94:70:50:1a:4b:ac:f5:79:36:c4:5c:9b:
         43:68:d6:fc:68:13:f0:09:47:55:a3:6b:bb:cf:44:20:46:a6:
         a7:00:1e:63:4e:7e:5f:54:eb:41:f1:f1:54:e2:24:9d:ca:a7:
         06:41:57:0d:f8:37:ba:85:55:fe:d8:8a:fd:9e:ba:50:77:9f:
         b9:c3:a7:88:73:e2:a0:0f:60:e7:7e:9c:b2:ef:85:1f:73:c1:
         a6:51:66:88:97:c0:c0:99:13:78:9a:9d:f3:33:08:4b:ee:89:
         87:8b:04:bb:b9:7d:38:56:de:7e:36:11:e3:8f:35:cb:fa:6d:
         62:6e:08:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org