Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa
File:                     3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa (raw, json)
Hash identifier:          eXehSsupVH97Nek5fBfulkodxltwz4TJUFB8h6OOEwQ=
Subject key identifier:   4A:4F:62:58:B7:F5:5A:5F:AD:80:39:76:0B:0A:4D:7B:57:3E:B3:03
Certificate issuer:       /CN=64285236074D6BC2BB384B2D544C7F545C16CF31
Certificate serial:       47F4E7650D821BC5B28123E8A5131600E5C3428E
Authority key identifier: 64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa
Signing time:             Thu 11 Apr 2024 09:02:29 +0000
ROA not before:           Thu 11 Apr 2024 08:57:29 +0000
ROA not after:            Thu 10 Apr 2025 09:02:29 +0000
asID:                     149672
IP address blocks:        103.184.50.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl
                          rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:f4:e7:65:0d:82:1b:c5:b2:81:23:e8:a5:13:16:00:e5:c3:42:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=64285236074D6BC2BB384B2D544C7F545C16CF31
        Validity
            Not Before: Apr 11 08:57:29 2024 GMT
            Not After : Apr 10 09:02:29 2025 GMT
        Subject: CN=4A4F6258B7F55A5FAD8039760B0A4D7B573EB303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:40:20:2c:c2:60:74:11:e8:3e:22:0a:db:5c:
                    9e:93:0a:d8:36:8a:b3:90:22:aa:df:4f:d2:f5:49:
                    74:ae:25:16:cb:85:5c:4f:15:b2:d3:55:ff:bc:98:
                    53:0c:6f:96:d4:da:6d:5d:dd:d7:96:fa:01:86:2c:
                    a5:22:6b:7e:80:9b:f4:88:6c:77:9d:9b:06:5b:b6:
                    62:ae:69:07:82:a1:6c:8a:b9:09:cc:d1:e1:75:26:
                    5b:8e:c8:be:88:88:f5:94:50:dd:9c:a5:66:06:79:
                    fd:bf:52:f8:5e:ed:0e:78:aa:d2:72:2e:a4:6d:3b:
                    f5:e0:88:ce:68:42:85:bf:7e:80:b6:66:57:ea:75:
                    dc:80:88:bb:2c:6c:1f:d6:69:c3:57:72:6f:b6:59:
                    08:3e:79:8a:9f:78:f5:9f:13:df:f0:a8:4e:fc:41:
                    3b:be:11:59:e9:28:56:c7:50:f3:8f:9d:2a:47:26:
                    1e:b2:1e:d8:bd:ad:29:af:05:83:42:4d:29:ab:a4:
                    1a:3f:a5:24:54:a4:d7:23:3a:4a:98:e1:f1:6b:3a:
                    a6:6a:eb:02:39:96:05:a4:61:dc:b4:05:93:59:d4:
                    51:92:c4:70:52:00:81:8b:6e:d8:f6:12:47:ee:80:
                    50:9f:fa:f1:c1:4e:d9:af:ca:80:68:aa:4c:e0:90:
                    51:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:4F:62:58:B7:F5:5A:5F:AD:80:39:76:0B:0A:4D:7B:57:3E:B3:03
            X509v3 Authority Key Identifier:
                keyid:64:28:52:36:07:4D:6B:C2:BB:38:4B:2D:54:4C:7F:54:5C:16:CF:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/64285236074D6BC2BB384B2D544C7F545C16CF31.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/64285236074D6BC2BB384B2D544C7F545C16CF31.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63c197f8-4e2e-46d9-be2b-e348a133dc57/0/3130332e3138342e35302e302f32332d3234203d3e20313439363732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.50.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b1:a2:b0:fe:47:65:04:38:dc:b8:d2:0f:6b:51:1a:8e:27:61:
         e1:9e:89:7e:0d:14:57:66:aa:7e:f7:f7:08:66:20:3c:fc:96:
         7d:6b:82:4e:b5:62:e1:d0:27:0b:b0:26:80:0d:4d:7e:ad:10:
         a7:4e:6a:19:8a:fe:58:b8:57:de:0c:e0:4d:d3:46:e1:5e:d8:
         4c:95:7d:2c:30:a8:9a:ce:c0:ef:1b:34:5c:83:0a:a7:3b:02:
         ed:c8:e7:30:80:87:07:09:6e:66:d8:32:59:f8:70:f2:3f:79:
         03:6b:ba:ac:3c:f3:a1:20:d8:5b:db:a8:41:ad:c8:9b:66:34:
         ff:bf:c8:3c:9b:be:8f:68:68:be:73:b3:4a:69:a4:46:ad:e4:
         db:e8:9f:a8:ed:fd:30:b0:7e:89:ad:87:25:c7:70:a1:ad:87:
         b4:ff:a6:d9:af:1f:3d:4d:19:ba:71:da:3d:21:c1:4e:82:75:
         fa:e0:ce:68:8b:47:bc:f2:57:6a:90:8b:c5:8a:2d:e2:09:91:
         ed:d0:31:e1:7f:f9:9e:d8:65:ff:28:f6:cf:89:33:99:28:b8:
         98:a6:1e:d8:c1:10:5c:c5:4c:c1:61:93:c1:26:4b:b2:0b:7a:
         f4:7d:6f:8e:34:8b:e7:36:91:11:45:2f:8d:d4:7a:85:bb:f4:
         b4:c2:35:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:52:55 2024 by rpki-client on console-ams.rpki-client.org