Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32352e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          7Lr0MYTgaOLTpDIaen7u7TB21udzsMgpsSoH7AHdUyg=
Subject key identifier:   88:FC:E5:78:68:E2:ED:4F:6D:6D:92:38:DE:A9:5F:60:AE:AF:FD:03
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       693D738C0206F10D09D74D72CA8B15539563D1CB
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 01 Jul 2024 01:02:42 +0000
ROA not before:           Mon 01 Jul 2024 00:57:42 +0000
ROA not after:            Mon 30 Jun 2025 01:02:42 +0000
asID:                     63869
IP address blocks:        103.50.25.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3d:73:8c:02:06:f1:0d:09:d7:4d:72:ca:8b:15:53:95:63:d1:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul  1 00:57:42 2024 GMT
            Not After : Jun 30 01:02:42 2025 GMT
        Subject: CN=88FCE57868E2ED4F6D6D9238DEA95F60AEAFFD03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:31:e4:1b:c8:ea:58:ab:fe:2d:e8:b5:6d:
                    6a:f2:16:80:b4:2b:c1:a0:1a:ab:91:12:b1:c8:06:
                    be:87:29:d4:d9:00:93:2f:ac:83:a8:05:fc:ff:2c:
                    ae:3d:4f:4a:09:c4:4e:75:bf:2e:66:f3:dc:ef:96:
                    1e:21:a0:cd:01:53:d5:ec:ca:db:8b:54:ba:fc:19:
                    07:c1:96:d3:34:51:de:94:5c:c3:8b:01:b4:10:66:
                    b1:13:57:16:71:44:42:37:e3:a9:0a:e2:eb:7b:19:
                    75:f2:5f:cb:ba:c2:33:4e:0e:e9:93:9f:dc:b3:a3:
                    7b:1d:64:95:7f:91:14:23:4d:94:34:a0:50:60:86:
                    c5:5b:f8:8b:74:f2:9b:08:48:f8:7a:e8:62:fb:6b:
                    fa:c7:34:72:43:ed:cc:b6:16:db:a9:1a:d6:ae:03:
                    ae:cf:31:5b:ec:a0:c2:83:8b:62:49:bf:12:af:89:
                    48:e8:01:39:dd:48:0f:6f:c5:87:ea:5c:82:b3:4e:
                    83:ed:3a:74:b0:44:39:d3:d5:52:8b:17:58:77:4f:
                    50:5e:b1:c5:90:69:f1:56:98:6b:59:97:2f:c0:ea:
                    08:59:6e:9e:89:b7:7c:ff:57:77:94:84:86:62:42:
                    5d:70:be:5c:db:ea:16:25:b5:6a:10:63:1b:97:80:
                    3b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FC:E5:78:68:E2:ED:4F:6D:6D:92:38:DE:A9:5F:60:AE:AF:FD:03
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32352e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.25.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:59:23:0b:82:11:c6:0b:28:69:c7:4e:35:31:59:52:ed:73:
         b1:f3:a3:86:b9:f6:e2:c2:f8:ab:a2:79:ac:d0:c3:0c:c7:12:
         53:c4:dc:91:5f:35:ec:41:98:80:d1:6e:38:21:4d:e4:33:29:
         56:65:2c:07:7d:36:ca:29:3f:06:43:73:a5:ad:c9:35:e1:a9:
         94:e9:f2:7a:96:70:06:92:4a:36:67:8c:4a:35:25:b3:88:c9:
         97:70:15:09:04:79:30:ce:dd:04:71:c5:24:88:da:d3:ee:fe:
         12:9b:38:a3:d2:a7:c8:e1:49:09:9e:61:60:45:be:6e:ee:60:
         20:c9:74:07:62:83:b0:e7:66:a2:b8:97:7d:eb:c6:f9:ec:80:
         d0:55:fb:3a:be:c4:dc:39:08:c0:7e:b6:f0:40:09:9a:bc:52:
         07:ca:2c:de:d5:5f:ea:3b:f8:d8:86:04:26:db:fa:e8:b5:83:
         fa:0a:e2:d3:3a:14:ae:80:ca:03:6b:ec:85:36:73:56:1d:c9:
         53:7b:15:40:94:ef:39:fc:00:a6:e5:4f:ef:b6:42:b6:9a:23:
         c6:f1:5d:e0:9b:87:a3:32:96:80:74:e8:ec:32:5c:de:28:1e:
         41:02:d4:65:8a:13:25:f9:17:d6:b8:94:fd:f6:9d:b9:0d:5f:
         f7:33:bf:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:54 2024 by rpki-client on console-fra.rpki-client.org