Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa
File:                     3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa (raw, json)
Hash identifier:          u8QpcRhRG6AzLuBuqA0WN3Xn6ES6b2vvEO1yKOID70E=
Subject key identifier:   E7:21:B7:90:97:85:15:3E:71:EB:13:E5:2D:45:53:A7:77:E4:67:FC
Certificate issuer:       /CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
Certificate serial:       4AC7D087622F8E94484CB13748639093517F6D65
Authority key identifier: C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa
Signing time:             Mon 01 Jul 2024 01:04:53 +0000
ROA not before:           Mon 01 Jul 2024 00:59:53 +0000
ROA not after:            Mon 30 Jun 2025 01:04:53 +0000
asID:                     133839
IP address blocks:        103.50.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl
                          rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 Nov 2024 18:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:c7:d0:87:62:2f:8e:94:48:4c:b1:37:48:63:90:93:51:7f:6d:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C7D4D30314160FDACB9582CF972E90EC10AE206F
        Validity
            Not Before: Jul  1 00:59:53 2024 GMT
            Not After : Jun 30 01:04:53 2025 GMT
        Subject: CN=E721B7909785153E71EB13E52D4553A777E467FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:b0:02:89:5f:36:3d:51:f2:dd:48:6a:82:
                    00:3f:bc:d1:b9:34:dc:f0:f8:53:b4:9b:b0:ca:62:
                    1a:d9:67:2d:64:1c:f1:ca:ea:a4:9a:4b:c6:87:44:
                    39:15:3e:21:5a:92:15:72:d3:cb:31:f7:e3:e0:04:
                    8d:69:6b:4e:b8:0c:6b:fd:62:24:85:00:5a:b1:0d:
                    7b:f0:16:4c:bf:94:92:12:62:aa:f0:ca:a7:4c:7e:
                    57:87:c7:22:f8:a6:b5:2e:be:79:70:b5:27:f4:90:
                    b9:3f:61:5c:53:1a:74:55:fa:ca:5b:6d:4c:48:f7:
                    c3:0e:d9:95:3b:2a:4c:49:ef:9b:8a:f8:9e:a6:a0:
                    20:25:8f:8e:67:9b:98:13:ca:b6:1a:b7:59:4b:ca:
                    78:9e:68:f2:56:8f:64:6b:ac:65:7a:de:90:80:8a:
                    d8:79:a5:14:4a:dd:00:2b:c6:ad:0d:56:4a:e4:b1:
                    e2:e3:1e:76:a7:d5:e8:f0:0e:1c:25:1e:c3:ce:2c:
                    32:0d:01:cc:f2:90:18:15:11:0c:99:92:b9:c6:9a:
                    64:a4:e9:cc:c2:98:c1:b3:4d:2b:f8:af:f0:2b:a2:
                    61:92:79:ea:6f:fb:04:49:a6:0f:95:5b:9d:85:3d:
                    3c:0b:19:94:b3:c1:95:fc:7b:6d:6d:5d:2b:70:f2:
                    36:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:21:B7:90:97:85:15:3E:71:EB:13:E5:2D:45:53:A7:77:E4:67:FC
            X509v3 Authority Key Identifier:
                keyid:C7:D4:D3:03:14:16:0F:DA:CB:95:82:CF:97:2E:90:EC:10:AE:20:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/C7D4D30314160FDACB9582CF972E90EC10AE206F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7D4D30314160FDACB9582CF972E90EC10AE206F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/918ad7a6-c907-4359-aba5-d5748ba16176/0/3130332e35302e3231382e302f32342d3234203d3e20313333383339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.50.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:cd:a2:fa:1e:30:c7:d2:e5:f4:eb:4b:37:01:d4:dd:ae:1c:
         ca:6b:8c:f9:46:36:04:9b:04:4a:88:18:d4:2b:9e:cf:11:c0:
         83:88:b8:05:53:af:f2:fb:fd:2e:6e:0b:c7:40:0a:ea:6c:d3:
         ba:4d:b8:d1:8d:90:a9:1b:14:36:d2:fb:b4:4d:50:d0:9b:56:
         b7:31:35:17:70:ef:b2:67:5a:14:32:3f:cb:2d:15:24:11:5b:
         bd:0f:35:d7:e7:2b:dd:95:0b:f9:c6:78:7f:37:f4:6e:9c:a4:
         29:27:44:cc:8d:7e:f6:3b:d7:5d:98:38:d0:56:8d:54:da:46:
         93:1f:4b:fb:6e:c2:8a:f2:fb:01:1c:1e:5c:28:ef:db:fc:1f:
         12:ef:cc:bb:99:a5:e2:ab:70:75:5a:a7:e0:d4:dd:16:17:29:
         3e:37:cc:1d:76:c6:9a:21:49:89:e0:63:c7:9c:55:74:8e:d0:
         e7:69:1b:99:76:58:c5:2f:cb:fe:58:34:3f:fd:24:ee:8b:dd:
         fc:d1:97:35:52:ad:7a:91:5a:d0:a3:a7:07:d3:0f:9d:ff:35:
         0a:6a:fe:fb:47:b7:b0:c3:70:97:bf:42:38:d3:ca:01:9c:97:
         a2:a9:27:47:02:c2:09:93:1d:36:9f:5c:66:99:de:13:69:81:
         4a:44:2e:a0
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUSsfQh2IvjpRITLE3SGOQk1F/bWUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMx
MEFFMjA2RjAeFw0yNDA3MDEwMDU5NTNaFw0yNTA2MzAwMTA0NTNaMDMxMTAvBgNV
BAMTKEU3MjFCNzkwOTc4NTE1M0U3MUVCMTNFNTJENDU1M0E3NzdFNDY3RkMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdzbACiV82PVHy3UhqggA/vNG5
NNzw+FO0m7DKYhrZZy1kHPHK6qSaS8aHRDkVPiFakhVy08sx9+PgBI1pa064DGv9
YiSFAFqxDXvwFky/lJISYqrwyqdMfleHxyL4prUuvnlwtSf0kLk/YVxTGnRV+spb
bUxI98MO2ZU7KkxJ75uK+J6moCAlj45nm5gTyrYat1lLynieaPJWj2RrrGV63pCA
ith5pRRK3QArxq0NVkrkseLjHnan1ejwDhwlHsPOLDINAczykBgVEQyZkrnGmmSk
6czCmMGzTSv4r/AromGSeepv+wRJpg+VW52FPTwLGZSzwZX8e21tXStw8jY1AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU5yG3kJeFFT5x6xPlLUVTp3fkZ/wwHwYDVR0j
BBgwFoAUx9TTAxQWD9rLlYLPly6Q7BCuIG8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
MThhZDdhNi1jOTA3LTQzNTktYWJhNS1kNTc0OGJhMTYxNzYvMC9DN0Q0RDMwMzE0
MTYwRkRBQ0I5NTgyQ0Y5NzJFOTBFQzEwQUUyMDZGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQzdENEQzMDMxNDE2MEZEQUNCOTU4MkNGOTcyRTkwRUMxMEFF
MjA2Ri5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzkxOGFkN2E2LWM5MDctNDM1OS1h
YmE1LWQ1NzQ4YmExNjE3Ni8wLzMxMzAzMzJlMzUzMDJlMzIzMTM4MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzMzMzgzMzM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZzLaMA0GCSqG
SIb3DQEBCwUAA4IBAQA8zaL6HjDH0uX060s3AdTdrhzKa4z5RjYEmwRKiBjUK57P
EcCDiLgFU6/y+/0ubgvHQArqbNO6TbjRjZCpGxQ20vu0TVDQm1a3MTUXcO+yZ1oU
Mj/LLRUkEVu9DzXX5yvdlQv5xnh/N/RunKQpJ0TMjX72O9ddmDjQVo1U2kaTH0v7
bsKK8vsBHB5cKO/b/B8S78y7maXiq3B1Wqfg1N0WFyk+N8wddsaaIUmJ4GPHnFV0
jtDnaRuZdljFL8v+WDQ//STui9380Zc1Uq16kVrQo6cH0w+d/zUKav77R7eww3CX
v0I408oBnJeiqSdHAsIJkx02n1xmmd4TaYFKRC6g
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:31 2024 by rpki-client on console-fra.rpki-client.org