Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa
File:                     3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa (raw, json)
Hash identifier:          DuPPvM0N+z/I5fh+w6ISB+swswfHuIEOv1y6nFrqj6k=
Subject key identifier:   A1:81:7A:EB:B3:8D:94:0F:B7:D9:C9:75:F8:9E:B8:6C:28:95:43:6A
Certificate issuer:       /CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
Certificate serial:       7B2DEC02B6BDCFA4FEE2368736A0A0AD807EA9E1
Authority key identifier: 63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa
Signing time:             Mon 01 Jul 2024 01:03:11 +0000
ROA not before:           Mon 01 Jul 2024 00:58:11 +0000
ROA not after:            Mon 30 Jun 2025 01:03:11 +0000
asID:                     132164
IP address blocks:        103.50.216.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl
                          rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 22:23:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:2d:ec:02:b6:bd:cf:a4:fe:e2:36:87:36:a0:a0:ad:80:7e:a9:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC
        Validity
            Not Before: Jul  1 00:58:11 2024 GMT
            Not After : Jun 30 01:03:11 2025 GMT
        Subject: CN=A1817AEBB38D940FB7D9C975F89EB86C2895436A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:99:83:8a:47:67:25:c7:86:6b:bc:47:58:5d:
                    91:5e:8e:3e:a5:d5:2d:49:41:0e:d2:ac:a2:58:de:
                    69:26:e6:b3:25:66:f7:54:bf:f3:a7:64:92:79:a0:
                    da:a7:83:d3:14:df:7a:7c:80:10:fa:45:a8:3f:de:
                    cb:4e:e9:99:3e:79:0f:ff:72:8d:52:fa:1d:a3:1b:
                    2d:5b:2d:b7:c6:c2:ea:08:78:84:11:f4:5e:25:c5:
                    c7:42:ae:79:94:67:10:17:4d:d4:5c:83:32:40:e3:
                    26:9a:39:27:8d:f9:52:24:ae:7f:50:d6:9d:9b:9d:
                    6b:ea:76:e8:fb:c1:d9:9a:41:b3:01:89:be:2b:f5:
                    8a:64:7c:eb:ce:24:89:df:da:20:99:30:b3:4f:9b:
                    62:84:b1:bb:38:72:19:7e:61:f5:0c:a1:9d:b6:83:
                    10:c3:8a:b8:92:da:47:83:21:22:76:09:90:25:1b:
                    1f:2c:fd:2a:b1:79:7d:36:a8:a8:cf:86:89:e0:26:
                    56:6c:b5:c8:d0:8a:89:f2:4e:d9:f4:9c:1a:0a:5a:
                    6a:4c:a3:c6:b3:3a:e5:f3:a6:c3:84:47:b4:79:a0:
                    1f:5a:7a:d3:aa:ef:68:93:1c:6c:21:c0:86:38:dd:
                    e7:61:ab:59:c3:91:ec:eb:93:cf:04:0e:f9:68:5b:
                    58:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:81:7A:EB:B3:8D:94:0F:B7:D9:C9:75:F8:9E:B8:6C:28:95:43:6A
            X509v3 Authority Key Identifier:
                keyid:63:FD:8D:EE:5A:44:38:A5:0F:F5:0B:6B:9B:9D:6A:3F:53:F3:48:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/63FD8DEE5A4438A50FF50B6B9B9D6A3F53F348DC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9141f884-d5c9-4336-9a5c-777419e56dce/0/3130332e35302e3231362e302f32342d3234203d3e20313332313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:83:0c:7b:fd:da:bc:44:64:93:cb:0d:a3:ba:93:c7:a5:
         f5:35:52:91:a6:0e:0c:d0:56:5d:9a:f3:2c:ab:a8:23:2d:c5:
         f0:06:35:e9:83:86:85:8f:ed:a5:3e:91:de:aa:be:dd:cd:61:
         cf:ef:67:14:b7:1d:0a:4d:97:10:d3:47:8f:8f:bf:2f:4b:0a:
         7e:3f:d1:24:02:3f:b2:1d:87:64:58:07:fb:74:f2:3c:d2:c2:
         05:57:ec:07:7c:4b:52:04:bf:1e:78:5a:b3:39:f1:85:19:16:
         62:9b:89:f1:b8:ef:fb:e7:ca:d2:fe:a2:7d:10:26:97:5d:f7:
         17:10:0e:6b:44:6a:aa:39:9b:72:3e:4b:00:e8:04:f8:87:b1:
         eb:4f:40:18:a9:c2:70:5d:2c:e0:c8:24:84:3c:60:d8:a3:23:
         e0:a2:f0:32:c0:1c:21:13:75:94:37:ca:09:8e:41:9b:fe:ea:
         51:d1:6e:8d:37:1f:ec:fb:4b:a8:7c:d3:c2:83:58:39:11:fe:
         42:60:43:1e:34:bd:68:39:e3:f0:e5:2c:90:cb:c8:9c:61:42:
         2f:eb:90:48:60:2b:fc:15:d7:ba:d7:3f:2a:40:f9:09:ef:62:
         9c:d7:ee:02:3d:51:4e:c3:c7:b2:ec:b1:bf:d3:d4:3c:1d:9e:
         39:f0:22:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 15:49:31 2024 by rpki-client on console-ams.rpki-client.org