Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa
File:                     3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (raw, json)
Hash identifier:          hUeKg3+LugmGj1CuRgbNgLJP8Q7tG+9WZCUGc9Z9xKY=
Subject key identifier:   50:B4:0F:85:54:EE:AA:41:C2:DF:AB:ED:09:73:01:AF:FB:CA:10:AE
Certificate issuer:       /CN=7E9242F2F0756C1DB232479261838C3701005D48
Certificate serial:       265A1CB317A1178FCAB14CF11B996A694CAF8988
Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa
Signing time:             Tue 06 Feb 2024 04:00:00 +0000
ROA not before:           Tue 06 Feb 2024 03:55:00 +0000
ROA not after:            Tue 04 Feb 2025 04:00:00 +0000
asID:                     58820
IP address blocks:        103.185.48.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl
                          rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 09:00:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:5a:1c:b3:17:a1:17:8f:ca:b1:4c:f1:1b:99:6a:69:4c:af:89:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48
        Validity
            Not Before: Feb  6 03:55:00 2024 GMT
            Not After : Feb  4 04:00:00 2025 GMT
        Subject: CN=50B40F8554EEAA41C2DFABED097301AFFBCA10AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:e6:93:43:fb:45:b7:db:8a:b9:2b:43:b8:aa:
                    f4:e0:67:78:e5:24:3d:e1:b4:ea:89:ee:ac:c1:7f:
                    57:88:9e:1e:2c:26:14:b0:5d:bd:1e:2f:65:d4:a7:
                    91:2c:3e:05:ba:55:9b:c4:33:ee:1f:b2:86:2e:64:
                    f8:a5:52:f9:e0:f0:d5:79:f4:c7:58:29:32:f7:17:
                    4e:99:49:4d:6d:c9:83:8e:1f:e5:0b:c5:15:f4:94:
                    17:5f:7b:6e:d2:5f:44:25:84:1c:a1:8c:e2:b6:3d:
                    8b:53:27:7e:8c:5e:47:6e:db:21:25:b7:dd:a5:50:
                    bc:ab:69:c2:5b:31:3e:a0:43:90:c7:40:99:04:a5:
                    35:5a:62:2b:db:c7:cb:b3:2e:64:0f:39:76:a5:b0:
                    2a:18:2a:e4:a8:e7:06:dd:b1:74:55:07:61:ef:29:
                    21:fb:90:ee:1c:0e:3f:6d:e4:1e:1c:3c:78:ea:93:
                    ce:b4:12:0c:5a:05:5b:28:4e:1d:d4:38:8a:01:ab:
                    44:36:56:23:a0:3a:81:da:18:db:71:95:d5:94:f4:
                    89:05:3a:ad:0f:30:10:f3:05:b3:e3:11:8f:2f:2e:
                    7d:da:dd:df:14:70:ba:a6:20:53:35:dc:0e:51:f2:
                    57:6c:a9:56:2c:9f:9a:54:76:76:60:44:57:2d:fd:
                    db:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:B4:0F:85:54:EE:AA:41:C2:DF:AB:ED:09:73:01:AF:FB:CA:10:AE
            X509v3 Authority Key Identifier:
                keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/3130332e3138352e34382e302f32332d3234203d3e203538383230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7d:82:46:ea:33:88:69:35:42:6b:94:b1:af:8f:4a:cb:50:46:
         d1:30:3a:0f:f5:aa:a6:f1:de:b5:f4:cb:c7:01:31:86:93:33:
         b5:88:5e:a0:31:df:9e:04:91:c1:fa:85:be:41:5b:43:0b:3a:
         b8:06:5c:7c:8f:c2:68:41:51:a0:00:e9:25:ef:05:7d:e8:a7:
         60:22:eb:3c:25:3d:ce:05:f2:b9:ba:38:6c:d1:4a:05:0a:b2:
         fd:4c:a9:0e:bf:9b:de:cc:e4:65:90:fc:2c:33:b1:f0:b6:3c:
         15:81:f6:1c:92:fe:db:79:e1:e2:7e:2c:9f:8e:63:ca:18:77:
         e1:cd:dc:0e:08:61:5a:36:99:63:90:5c:6a:e5:76:e3:6e:7a:
         1a:71:41:bc:12:79:de:5b:4a:52:44:40:57:68:a6:35:14:7f:
         65:76:20:da:de:62:53:9e:62:6d:16:b7:ec:44:2b:97:c4:a5:
         12:44:8b:c9:50:09:89:5f:32:a4:72:ba:02:b7:e6:e1:89:84:
         88:bd:bc:73:fe:ee:3c:37:cb:9e:77:d5:c4:a1:e9:2a:cd:39:
         11:9d:5f:ed:4a:cc:21:2a:22:5c:37:b5:23:93:78:3b:1e:0b:
         58:d1:be:02:a2:ff:5c:2f:af:55:7e:36:8e:35:68:0e:51:ed:
         a1:cd:0b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:46:56 2024 by rpki-client on console-ams.rpki-client.org