Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa
File:                     3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa (raw, json)
Hash identifier:          G4QnXReaEgQqWo3299blKd818TsAy9ZESDNBdTmiSCI=
Subject key identifier:   62:29:88:47:A8:A8:1F:E6:2D:A4:D4:0E:7A:F0:C7:F7:80:B6:60:DD
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       0CA4B750C6EEC63DECF1FEE34A7F8B34554AB755
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa
Signing time:             Wed 17 Apr 2024 08:00:07 +0000
ROA not before:           Wed 17 Apr 2024 07:55:07 +0000
ROA not after:            Wed 16 Apr 2025 08:00:07 +0000
asID:                     132829
IP address blocks:        103.134.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl
                          rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 Nov 2024 18:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:a4:b7:50:c6:ee:c6:3d:ec:f1:fe:e3:4a:7f:8b:34:55:4a:b7:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Apr 17 07:55:07 2024 GMT
            Not After : Apr 16 08:00:07 2025 GMT
        Subject: CN=62298847A8A81FE62DA4D40E7AF0C7F780B660DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a4:c4:61:e2:65:fb:63:5f:af:3b:58:5b:7d:
                    3f:a9:b2:33:c9:dd:ea:8a:18:e7:a4:be:6c:05:f8:
                    4a:1b:fc:4b:65:5a:99:ec:29:19:c4:60:d8:70:ea:
                    78:bc:55:a9:72:d5:eb:3a:b7:92:bb:e2:31:84:68:
                    da:52:56:61:36:80:97:7d:2a:bb:37:0d:ea:74:25:
                    a4:75:e1:35:88:3e:42:e6:36:8b:05:0a:ab:36:45:
                    c2:01:94:04:f4:0e:a2:ef:41:53:a5:5e:22:d4:11:
                    aa:30:b6:df:2a:26:af:8d:a8:d8:b9:eb:06:0e:92:
                    c3:5c:9f:51:2a:dd:95:af:f1:5f:1d:4f:a5:7c:b0:
                    7a:85:6f:5a:4e:35:97:d0:da:3d:5c:b0:9b:37:10:
                    c7:35:71:4d:68:4e:f7:6d:90:ff:a0:c7:43:dd:ac:
                    2b:16:38:de:ca:fa:46:f4:54:2f:bc:1c:1f:f6:0b:
                    7e:50:1e:8b:6f:37:47:0a:83:8b:33:92:74:6f:2f:
                    ee:50:8d:b8:cd:cb:b5:91:3c:09:82:f7:6e:a8:fb:
                    b1:52:99:f5:60:26:2e:3d:c1:ca:ce:4f:c0:fa:0e:
                    8b:0e:2c:f8:cf:10:9b:08:63:66:7e:52:45:92:e3:
                    61:0f:84:49:4f:ff:9f:ae:18:75:3e:ec:60:fa:06:
                    a1:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:29:88:47:A8:A8:1F:E6:2D:A4:D4:0E:7A:F0:C7:F7:80:B6:60:DD
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313332383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:23:fc:d3:bc:d8:1b:4a:b5:74:ca:ef:41:2f:fd:77:e7:f0:
         c4:88:ee:38:d9:df:b4:a4:4b:7b:62:81:a4:eb:0c:53:19:42:
         45:c4:e0:25:c2:08:8d:a7:b3:59:9a:3d:ee:67:69:96:bb:1c:
         d3:9a:06:b4:d5:b1:b5:b1:15:66:2c:8b:a6:fb:f9:bd:84:6b:
         ef:1b:81:d1:d3:4d:6c:b1:c2:e9:c0:0c:2b:24:8e:eb:99:2e:
         f3:b4:7c:53:b7:7e:e6:ec:a8:f3:f1:dd:42:08:8a:fc:ce:5f:
         0c:06:68:50:ae:57:d9:82:ad:54:62:c8:5a:df:f4:ea:02:9f:
         03:46:a0:16:ae:60:2f:37:b4:0f:17:4c:8c:ed:eb:e2:91:3c:
         c3:6c:3a:44:e4:a0:d3:4b:f5:11:ec:c8:02:a5:a6:35:ef:17:
         31:e5:01:88:fc:01:31:17:0c:88:af:22:e9:08:63:54:99:32:
         e3:4b:f5:3e:b8:de:a4:42:ec:2c:5b:b7:36:31:9f:d8:39:31:
         62:09:e1:c3:18:ee:4a:d7:20:6d:d9:e4:b8:75:09:b9:61:16:
         1f:60:e4:5c:4d:49:08:58:90:34:6e:b2:99:7c:e5:6d:d1:af:
         b1:b7:9b:1e:09:0b:1d:c6:67:86:3b:57:ad:a3:ed:4c:48:cb:
         d0:be:eb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 11:43:38 2024 by rpki-client on console-ams.rpki-client.org