Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa
File:                     3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa (raw, json)
Hash identifier:          3BR+2r0/90FmZ7pFdR9xLYyxejfEcnOHDPsLPNVN5JY=
Subject key identifier:   D7:6A:84:50:EF:0A:02:D6:05:13:D5:CB:74:1F:A6:9F:36:5D:BD:F2
Certificate issuer:       /CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
Certificate serial:       511882DCB3EB42A4208B1EEBB8024995D557AD50
Authority key identifier: 81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa
Signing time:             Mon 01 Jul 2024 01:02:12 +0000
ROA not before:           Mon 01 Jul 2024 00:57:12 +0000
ROA not after:            Mon 30 Jun 2025 01:02:12 +0000
asID:                     132642
IP address blocks:        103.19.182.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl
                          rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:18:82:dc:b3:eb:42:a4:20:8b:1e:eb:b8:02:49:95:d5:57:ad:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=818823B50F8D63E9D953C4B752F04DB0437CA8E9
        Validity
            Not Before: Jul  1 00:57:12 2024 GMT
            Not After : Jun 30 01:02:12 2025 GMT
        Subject: CN=D76A8450EF0A02D60513D5CB741FA69F365DBDF2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:85:1d:4c:d9:48:06:11:0b:cd:f9:3c:23:57:
                    64:ce:f4:6f:9c:c7:47:0b:96:03:0e:ad:10:da:ee:
                    67:19:c0:be:4f:35:bd:c0:57:6a:e9:80:78:56:21:
                    7c:98:6b:8c:37:02:38:3e:73:4d:57:c2:47:b0:9c:
                    13:fc:e4:aa:14:9d:ab:b5:e6:c2:23:2c:72:6f:a5:
                    8c:2e:7e:cd:2c:78:f7:01:7b:5b:c0:e5:f7:b4:d3:
                    38:b7:12:42:54:19:07:71:3d:41:46:07:f3:c1:86:
                    ae:6a:ef:51:d9:e9:a2:88:ef:5d:d3:98:cf:0b:82:
                    b8:de:28:cf:c5:f4:2d:04:b6:3f:42:0a:1e:b9:44:
                    f4:23:7e:7f:0d:ea:7a:5c:cc:6c:eb:5e:7c:40:6f:
                    bd:01:2f:91:f4:3c:68:85:2d:c9:27:f5:af:b3:9d:
                    1f:74:a3:5f:10:02:dc:ce:81:0e:a9:ba:f6:c2:75:
                    49:c3:8b:c4:53:f8:31:42:3c:22:a5:74:46:02:65:
                    ff:8d:21:ac:96:cb:0c:83:0f:68:66:64:10:fc:68:
                    de:b6:dc:5a:5c:bf:0d:1b:a7:05:62:c2:cb:79:79:
                    a3:b3:fb:14:e3:ce:12:54:31:27:16:bd:22:ba:46:
                    02:63:86:54:9d:b3:9f:3b:aa:28:da:ad:45:07:aa:
                    b6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:6A:84:50:EF:0A:02:D6:05:13:D5:CB:74:1F:A6:9F:36:5D:BD:F2
            X509v3 Authority Key Identifier:
                keyid:81:88:23:B5:0F:8D:63:E9:D9:53:C4:B7:52:F0:4D:B0:43:7C:A8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/818823B50F8D63E9D953C4B752F04DB0437CA8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/818823B50F8D63E9D953C4B752F04DB0437CA8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/50c773c8-fb56-449f-8649-112d6e1686b3/0/3130332e31392e3138322e302f32342d3234203d3e20313332363432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.19.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:6c:c5:e2:ab:4d:a9:19:0c:36:ce:8c:56:08:60:17:40:26:
         13:38:98:b9:d8:5e:c4:7d:6a:21:36:c1:ad:14:cc:78:3b:4b:
         1e:38:70:17:d7:2b:4c:d7:bd:3e:a7:31:a9:1e:fe:78:34:0e:
         93:a8:25:21:46:fb:bf:fc:cf:bb:a2:da:9b:25:21:b4:45:17:
         13:e7:6f:16:4d:9e:e1:1e:25:7d:a8:20:29:73:d6:60:75:ae:
         5f:d5:c8:91:e0:7f:25:6c:cb:98:9b:eb:1e:70:2d:16:41:0a:
         b9:6d:b7:b3:b8:e1:24:a2:97:48:5b:e3:57:c2:d6:db:3e:7b:
         cd:44:0f:d7:a7:43:15:f3:d2:11:04:60:19:ce:61:61:2c:c2:
         66:76:66:cb:44:d5:28:e8:e7:31:47:14:89:84:6c:aa:cf:88:
         28:8b:96:1f:1d:8a:5f:24:93:88:35:59:aa:4d:49:e1:4d:1d:
         35:37:6e:27:fc:a6:bc:06:28:9c:11:fe:e0:cc:dc:c2:62:9b:
         ed:ae:9b:c1:6e:14:f8:cf:4f:29:1b:74:f1:99:40:b3:55:9c:
         83:a6:04:19:e9:97:4f:bc:41:25:cd:cc:97:49:a8:46:3f:76:
         54:0f:24:cc:08:48:77:9d:d6:0f:45:5d:3e:6a:3b:d2:d7:7a:
         52:56:d7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org