Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa
File:                     3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (raw, json)
Hash identifier:          ABeIW/RnclM54yqYnSoHY71c2QImQGA3EZXQf2h/ofE=
Subject key identifier:   B7:50:45:9D:86:CC:29:19:DF:F4:04:26:E3:D9:5C:FA:39:FE:B2:F3
Certificate issuer:       /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249
Certificate serial:       6E53CC4F06959A0A149323A07B9A7DF4EC55902D
Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa
Signing time:             Sat 13 Jul 2024 11:02:12 +0000
ROA not before:           Sat 13 Jul 2024 10:57:12 +0000
ROA not after:            Sat 12 Jul 2025 11:02:12 +0000
asID:                     140388
IP address blocks:        103.150.44.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl
                          rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:53:cc:4f:06:95:9a:0a:14:93:23:a0:7b:9a:7d:f4:ec:55:90:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249
        Validity
            Not Before: Jul 13 10:57:12 2024 GMT
            Not After : Jul 12 11:02:12 2025 GMT
        Subject: CN=B750459D86CC2919DFF40426E3D95CFA39FEB2F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:19:a9:0a:d4:e5:83:ac:46:df:3f:9e:19:c0:
                    42:ea:d6:ca:ad:44:87:31:a8:0d:af:f8:53:2e:83:
                    e0:4e:44:6f:a6:82:b2:58:91:fd:34:00:ca:fa:79:
                    9e:18:da:8c:b0:c5:e4:67:3f:d6:cf:15:02:26:2f:
                    05:6e:a5:af:21:57:77:5b:2a:0c:d7:d8:ed:f5:7c:
                    c4:56:0a:3c:18:dc:db:1c:2a:4a:0b:39:19:9a:9c:
                    8c:8b:a3:a3:44:86:c6:80:a7:9e:40:6a:bb:41:0e:
                    f9:42:bb:03:14:05:c3:51:10:a4:de:10:9a:6f:7f:
                    de:3d:21:6a:0c:bd:67:58:5f:d5:26:12:19:81:55:
                    a5:5f:b8:19:de:ce:ab:5d:6a:be:db:ae:4a:50:aa:
                    da:99:db:96:24:e3:2b:e5:62:94:b3:49:40:38:fa:
                    7e:70:2c:fb:e8:48:37:31:d7:08:e8:a2:24:27:35:
                    46:ac:b5:8d:df:14:90:93:34:b7:54:40:1c:ce:e3:
                    19:d4:36:47:25:2c:01:86:75:61:36:0c:34:df:74:
                    15:ce:7d:00:c3:21:f8:f8:15:30:ad:0d:f0:46:e9:
                    ea:b2:68:a2:af:3c:3e:92:cd:97:9c:79:87:76:03:
                    48:13:e7:17:06:c6:c1:f0:25:f6:28:e6:d7:fc:27:
                    9d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:50:45:9D:86:CC:29:19:DF:F4:04:26:E3:D9:5C:FA:39:FE:B2:F3
            X509v3 Authority Key Identifier:
                keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.44.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8e:f6:78:2f:53:dd:d5:83:f2:e9:a1:9b:de:1e:99:07:bd:36:
         df:96:a2:bc:1c:2f:4e:32:bf:47:a8:20:ac:50:b6:18:6c:bb:
         0b:89:b1:e3:50:42:d4:b4:85:03:9f:f0:fa:ae:88:76:ac:c5:
         10:1e:2e:90:ed:a9:7f:c1:9e:a2:41:d7:fd:f3:f1:97:c2:ee:
         48:be:d8:03:3f:1c:11:6a:ea:13:7f:a3:04:48:df:6e:cf:0e:
         31:c3:71:86:f3:00:f8:3c:eb:ff:17:72:43:df:13:01:3a:68:
         fb:17:43:f0:80:65:02:a6:b6:ad:07:b8:a4:11:d5:2f:7e:59:
         46:bc:f9:0d:e9:09:7b:73:31:c6:50:b5:1c:cc:f7:bb:00:34:
         c3:b3:57:95:d1:08:29:a0:82:bd:43:4a:2b:c9:a1:d0:69:94:
         9e:00:ce:83:cd:80:65:68:8a:40:36:64:24:e3:59:b2:77:ee:
         31:ba:e8:b1:ad:ec:83:3e:09:a4:5c:ff:6d:29:b6:77:ad:95:
         8d:15:85:2c:58:64:fe:f8:a4:e0:56:9a:3e:db:00:55:72:78:
         b7:27:17:15:01:1d:98:1b:14:60:b9:65:e8:99:53:bb:13:d6:
         22:84:c1:86:c9:61:1c:8e:47:c7:69:00:4e:f7:4c:dd:d7:80:
         69:c4:20:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 18:41:50 2024 by rpki-client on console-fra.rpki-client.org