Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32362e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          3QM5Ix3e9tj5OY5stD7sNCXK5GMRSydvXTBA4V6sWjA=
Subject key identifier:   84:16:13:8A:63:E1:88:00:F3:2C:7E:D6:45:0C:04:C4:08:CF:28:E7
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       4D8DB86B277AEA67506C5904AE1F9BB08ED60348
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 01 Jul 2024 01:02:42 +0000
ROA not before:           Mon 01 Jul 2024 00:57:42 +0000
ROA not after:            Mon 30 Jun 2025 01:02:42 +0000
asID:                     63869
IP address blocks:        103.50.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:8d:b8:6b:27:7a:ea:67:50:6c:59:04:ae:1f:9b:b0:8e:d6:03:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul  1 00:57:42 2024 GMT
            Not After : Jun 30 01:02:42 2025 GMT
        Subject: CN=8416138A63E18800F32C7ED6450C04C408CF28E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:06:32:08:38:6d:55:3a:95:8f:e7:8b:8d:aa:
                    78:b2:59:cb:2f:c3:a2:33:47:a2:3d:56:a0:b9:23:
                    24:6a:62:34:ff:3b:c9:e2:34:ce:72:fe:6e:35:8b:
                    5d:f5:da:b8:89:61:b4:ef:54:c8:48:2f:6d:b6:31:
                    49:13:ff:52:ee:b9:bf:ca:26:fb:4e:75:6d:5f:f0:
                    59:7e:51:08:86:59:35:ab:2b:74:42:dc:19:49:73:
                    9a:9d:e1:1c:77:56:4a:6d:d2:14:e0:94:0f:ef:e5:
                    c8:30:eb:17:64:f3:f4:48:79:b4:b5:17:28:69:6d:
                    ec:39:e5:62:13:28:4c:1a:08:93:2e:19:85:4a:d7:
                    6e:1e:c3:eb:26:31:a6:e5:01:be:24:ba:af:8c:10:
                    68:89:41:64:bc:5d:b5:93:76:04:fb:e1:75:db:f0:
                    5b:22:9a:c7:f0:18:64:57:2e:f7:79:09:0a:0b:09:
                    6b:fd:a9:05:bd:f8:76:e0:dd:90:c4:7a:be:36:52:
                    93:4f:60:c6:d3:56:5d:26:33:d3:a9:74:21:06:fb:
                    82:ce:18:18:2a:03:3a:4c:59:68:a0:cc:98:5f:90:
                    5a:43:19:79:8d:74:aa:14:38:2e:8a:dc:81:04:7d:
                    46:eb:14:ef:2e:6f:6b:6d:de:da:54:0e:1e:7f:71:
                    8d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:16:13:8A:63:E1:88:00:F3:2C:7E:D6:45:0C:04:C4:08:CF:28:E7
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32362e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:3c:e4:11:73:5d:e7:d2:de:f5:ab:3b:2d:83:c8:f7:12:8a:
         cd:09:7b:1e:80:bb:bd:40:a5:f5:15:d7:42:28:71:9b:98:f9:
         e8:e2:84:c0:70:3a:ee:f6:f0:74:9e:be:f1:8c:87:80:99:27:
         7d:5a:40:c5:03:9c:c7:b5:60:2e:c9:cf:81:8d:b4:1c:71:b4:
         06:35:67:04:71:bc:5c:9a:6b:4f:f7:d6:de:e6:fb:f2:91:26:
         fb:73:d6:96:e4:bc:ff:bc:21:09:5f:a8:be:14:c2:f5:e0:32:
         f5:a8:1b:c4:eb:7c:46:ae:d5:90:27:6c:43:70:7e:c1:78:04:
         71:7a:e2:56:30:42:61:f1:30:ec:b1:5f:a8:b5:19:50:7b:8f:
         5b:27:5e:45:0c:d8:85:8d:14:28:db:d3:16:f1:cd:8b:ad:1b:
         06:b4:ff:e7:15:cd:83:ef:d4:ea:5a:2e:0b:5d:3d:49:84:48:
         88:7e:69:dc:bd:25:78:95:e4:02:84:00:9e:85:b6:08:cb:4f:
         52:16:73:03:7e:5c:56:02:d4:bb:21:35:98:82:5f:fd:c4:09:
         1b:48:d0:5c:d9:cb:19:a3:ad:24:23:58:ed:6a:19:a5:49:04:
         11:52:7d:8a:12:b7:fe:9c:89:36:0f:6c:59:d3:a7:2d:9b:8a:
         eb:a1:4d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org