Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
File:                     3130332e35302e32372e302f32342d3234203d3e203633383639.roa (raw, json)
Hash identifier:          QY5VNUdbjtsk3ISnlEX+JP066nbftYimXDP6/ZFfdUY=
Subject key identifier:   3C:A4:98:CE:FB:5C:B2:9A:66:CC:63:D6:50:37:61:18:3C:79:BC:34
Certificate issuer:       /CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
Certificate serial:       5CF23DB126EDBDC34138F7EE9780EDD3FD117D58
Authority key identifier: 6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa
Signing time:             Mon 01 Jul 2024 01:02:42 +0000
ROA not before:           Mon 01 Jul 2024 00:57:42 +0000
ROA not after:            Mon 30 Jun 2025 01:02:42 +0000
asID:                     63869
IP address blocks:        103.50.27.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl
                          rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 20:28:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f2:3d:b1:26:ed:bd:c3:41:38:f7:ee:97:80:ed:d3:fd:11:7d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121
        Validity
            Not Before: Jul  1 00:57:42 2024 GMT
            Not After : Jun 30 01:02:42 2025 GMT
        Subject: CN=3CA498CEFB5CB29A66CC63D6503761183C79BC34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:a8:95:83:e6:b2:ff:c3:12:29:21:f4:08:eb:
                    ea:44:de:b0:15:6b:45:56:23:38:a9:14:35:6d:8a:
                    31:d7:b4:3b:16:36:e9:d1:71:cf:30:98:34:3c:b8:
                    41:cc:80:92:08:4e:fe:a4:f2:61:30:cc:76:e9:8f:
                    02:85:50:20:6d:a3:6d:b6:f7:1b:1e:93:5a:67:38:
                    35:bf:f8:6a:b4:09:74:47:08:1f:2e:b3:35:f6:8d:
                    bb:35:ab:f4:a9:83:41:2a:d9:09:05:ba:6d:79:cc:
                    d4:e3:3d:0c:71:17:22:c7:ba:92:f7:7c:19:80:fd:
                    06:cf:c6:16:65:c1:b1:9c:3d:d3:8f:90:17:06:1c:
                    e8:71:e7:35:e6:30:54:91:91:94:c6:d5:e2:ae:98:
                    e3:c2:52:9e:a6:f6:35:2c:de:0f:c8:3b:98:10:49:
                    5a:93:ca:26:ba:f5:8c:eb:8c:0d:69:08:00:dd:5c:
                    f5:97:03:00:9c:fc:6c:ff:5f:2b:61:ee:47:91:fa:
                    99:89:4f:8e:69:fc:07:d0:be:01:6f:4e:f4:8a:cf:
                    a2:5f:4b:3e:9c:64:dd:78:ce:6f:9b:52:26:12:d0:
                    b3:a9:21:e2:3a:b8:59:8e:62:49:04:90:de:46:04:
                    4d:9d:68:cb:a0:c5:f0:d4:1b:a0:90:2c:b5:52:d1:
                    99:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A4:98:CE:FB:5C:B2:9A:66:CC:63:D6:50:37:61:18:3C:79:BC:34
            X509v3 Authority Key Identifier:
                keyid:6C:15:97:60:7A:0C:3E:AC:3E:30:CF:48:FF:31:BA:FD:71:D2:D1:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6C1597607A0C3EAC3E30CF48FF31BAFD71D2D121.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/37668541-d6c6-409e-8ad1-5e89a4b2850e/0/3130332e35302e32372e302f32342d3234203d3e203633383639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:12:e7:ea:b8:53:ed:e7:6a:ec:47:cc:92:9e:4d:44:0b:
         c3:04:15:1e:96:09:ef:1f:23:0e:50:89:15:d7:73:7d:60:ab:
         d5:24:42:6a:27:8c:d6:8b:be:98:1b:f4:3d:1d:7e:9c:90:d3:
         eb:df:4b:bf:92:91:fb:7e:56:eb:3e:fd:3a:69:91:0d:d8:c2:
         4e:c5:30:28:61:77:6c:9e:fc:cf:97:8a:53:92:53:2d:01:4a:
         35:d0:fb:67:e2:ff:04:3f:89:a4:22:f4:a1:46:b8:f4:e2:22:
         0e:e2:9b:f3:39:64:88:79:a7:d6:95:fc:5d:e2:80:26:73:bb:
         e2:ad:b0:b1:62:3f:80:e0:33:d4:38:4f:60:b2:ad:83:76:18:
         89:5c:0b:09:5e:ec:bb:73:2b:30:c0:50:56:56:c1:2e:5d:8c:
         79:2f:9c:a6:a2:f5:1b:b7:ec:14:6d:6a:fe:82:fc:99:00:98:
         db:59:15:3a:c3:6d:da:99:8e:42:d1:43:5f:c0:b8:f6:80:fc:
         cc:68:19:a6:d5:dd:4b:cc:b8:70:c5:65:3b:7c:73:34:fa:79:
         bf:e6:88:67:02:20:d2:47:a3:95:e8:bb:ec:fc:fe:16:5b:12:
         ac:03:ab:8b:03:d2:83:c4:07:7f:e8:a1:02:a1:9a:17:89:09:
         48:1c:15:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:43:32 2024 by rpki-client on console-ams.rpki-client.org