Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130312e35302e302e302f32322d3234203d3e203535363838.roa
File:                     3130312e35302e302e302f32322d3234203d3e203535363838.roa (raw, json)
Hash identifier:          FiQnpu5OE+HpaI42os6RcPZZIuH3AwzrGlamDj9hGqU=
Subject key identifier:   07:E2:A3:C6:8C:DB:E3:F4:D4:F7:A2:ED:5F:DD:09:85:23:A6:F5:3F
Certificate issuer:       /CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
Certificate serial:       65B3E68359AE151804E0B07D6B2C332A05FA4689
Authority key identifier: AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130312e35302e302e302f32322d3234203d3e203535363838.roa
Signing time:             Mon 31 Jul 2023 00:03:10 +0000
ROA not before:           Sun 30 Jul 2023 23:58:10 +0000
ROA not after:            Mon 29 Jul 2024 00:03:10 +0000
asID:                     55688
IP address blocks:        101.50.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl
                          rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 22:52:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b3:e6:83:59:ae:15:18:04:e0:b0:7d:6b:2c:33:2a:05:fa:46:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353
        Validity
            Not Before: Jul 30 23:58:10 2023 GMT
            Not After : Jul 29 00:03:10 2024 GMT
        Subject: CN=07E2A3C68CDBE3F4D4F7A2ED5FDD098523A6F53F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4b:34:f7:75:8f:5d:8a:12:32:b9:5e:f7:90:
                    1b:73:2d:c2:73:e5:f2:8a:20:b1:73:0b:6c:db:98:
                    67:36:0e:ed:07:ce:7e:7b:db:f8:dd:56:17:d4:18:
                    8c:27:26:9f:13:55:9d:37:20:c6:60:c0:87:2e:c1:
                    3e:ee:d8:76:11:05:bc:44:e7:fa:fb:f2:cd:e1:d2:
                    3c:92:e8:37:4c:5f:72:6d:60:01:dc:eb:f3:6c:bc:
                    b4:b4:fe:b7:80:a8:a0:b7:f2:0f:90:85:27:3c:e0:
                    6e:62:6c:c1:dd:a8:a5:ea:0b:78:80:d3:d1:ef:b2:
                    24:68:bd:6d:b5:8b:92:85:c5:1c:83:43:dc:e2:fa:
                    9c:0e:8f:e2:27:7e:32:64:f7:4a:b5:69:c1:74:47:
                    d2:4e:41:47:b5:b6:5f:08:4d:aa:cf:ea:2e:ba:11:
                    b3:62:81:75:ec:ce:53:a9:36:67:1a:14:1f:81:91:
                    6d:77:53:f7:a4:94:07:29:40:c5:61:79:5a:ee:d9:
                    87:47:55:56:85:ac:2d:04:a7:14:d0:ba:7d:0f:dc:
                    ae:84:a8:dd:b6:d7:25:7a:a0:15:6b:d5:92:4b:bc:
                    56:5e:11:cf:53:d2:30:e3:73:36:f0:c6:ef:b8:07:
                    a1:94:a0:1b:0c:e1:87:85:49:0e:2d:88:dc:d0:2c:
                    7b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E2:A3:C6:8C:DB:E3:F4:D4:F7:A2:ED:5F:DD:09:85:23:A6:F5:3F
            X509v3 Authority Key Identifier:
                keyid:AC:C3:D7:9A:B1:BE:F6:2B:C0:09:5B:6F:6A:C3:F3:44:6A:A9:03:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ACC3D79AB1BEF62BC0095B6F6AC3F3446AA90353.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a758c80e-a328-4f8c-a03f-91c3c26214a2/0/3130312e35302e302e302f32322d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         68:7c:ba:d4:22:f7:90:11:b4:73:5a:1a:79:84:14:68:42:b6:
         46:fe:4e:b9:f5:05:ac:8c:f4:18:fa:82:5a:15:88:85:78:1b:
         c8:c6:e6:67:97:bd:f2:c7:5c:8f:37:c2:e2:8f:ea:20:c3:fd:
         23:2d:7b:38:cf:dc:ce:c7:4b:04:c2:0f:5a:05:49:30:58:5b:
         a7:c7:42:be:8a:62:43:da:d8:e6:ad:a8:50:1b:3f:e6:24:9d:
         08:5e:68:03:4d:b2:0f:cb:2b:0d:26:e8:b1:72:84:3f:b6:f2:
         49:ab:3c:f2:92:e3:fc:7c:1a:a3:6f:17:29:77:8f:23:97:9f:
         76:da:63:d7:94:fd:f0:6d:05:c6:c7:44:3f:36:e8:39:cc:13:
         99:23:26:f2:78:bb:e0:8e:f1:af:14:0e:d0:7f:a3:d5:21:ae:
         5e:c3:58:c7:90:a4:83:19:03:92:66:b3:e6:86:02:53:a7:23:
         eb:80:24:fe:df:e0:69:c0:af:93:52:98:6e:f0:fa:a3:72:23:
         04:9a:e2:9b:be:47:b4:1a:61:43:11:ab:b7:2d:1f:8a:87:c9:
         fb:d6:14:15:54:cf:ad:78:09:c8:f4:f1:04:8e:4a:f7:59:5e:
         9f:8b:a6:a7:74:23:b6:2d:4e:cc:0d:af:15:53:bb:c9:5f:84:
         1d:11:b1:18
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUZbPmg1muFRgE4LB9aywzKgX6RokwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2
QUE5MDM1MzAeFw0yMzA3MzAyMzU4MTBaFw0yNDA3MjkwMDAzMTBaMDMxMTAvBgNV
BAMTKDA3RTJBM0M2OENEQkUzRjRENEY3QTJFRDVGREQwOTg1MjNBNkY1M0YwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgSzT3dY9dihIyuV73kBtzLcJz
5fKKILFzC2zbmGc2Du0Hzn572/jdVhfUGIwnJp8TVZ03IMZgwIcuwT7u2HYRBbxE
5/r78s3h0jyS6DdMX3JtYAHc6/NsvLS0/reAqKC38g+QhSc84G5ibMHdqKXqC3iA
09HvsiRovW21i5KFxRyDQ9zi+pwOj+InfjJk90q1acF0R9JOQUe1tl8ITarP6i66
EbNigXXszlOpNmcaFB+BkW13U/eklAcpQMVheVru2YdHVVaFrC0EpxTQun0P3K6E
qN221yV6oBVr1ZJLvFZeEc9T0jDjczbwxu+4B6GUoBsM4YeFSQ4tiNzQLHtHAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUB+Kjxozb4/TU96LtX90JhSOm9T8wHwYDVR0j
BBgwFoAUrMPXmrG+9ivACVtvasPzRGqpA1MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
NzU4YzgwZS1hMzI4LTRmOGMtYTAzZi05MWMzYzI2MjE0YTIvMC9BQ0MzRDc5QUIx
QkVGNjJCQzAwOTVCNkY2QUMzRjM0NDZBQTkwMzUzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQUNDM0Q3OUFCMUJFRjYyQkMwMDk1QjZGNkFDM0YzNDQ2QUE5
MDM1My5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTc1OGM4MGUtYTMyOC00ZjhjLWEw
M2YtOTFjM2MyNjIxNGEyLzAvMzEzMDMxMmUzNTMwMmUzMDJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDM1MzUzNjM4Mzgucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAJlMgAwDQYJKoZIhvcNAQEL
BQADggEBAGh8utQi95ARtHNaGnmEFGhCtkb+Trn1BayM9Bj6gloViIV4G8jG5meX
vfLHXI83wuKP6iDD/SMtezjP3M7HSwTCD1oFSTBYW6fHQr6KYkPa2OatqFAbP+Yk
nQheaANNsg/LKw0m6LFyhD+28kmrPPKS4/x8GqNvFyl3jyOXn3baY9eU/fBtBcbH
RD826DnME5kjJvJ4u+CO8a8UDtB/o9Uhrl7DWMeQpIMZA5Jms+aGAlOnI+uAJP7f
4GnAr5NSmG7w+qNyIwSa4pu+R7QaYUMRq7ctH4qHyfvWFBVUz614Ccj08QSOSvdZ
Xp+Lpqd0I7YtTswNrxVTu8lfhB0RsRg=
-----END CERTIFICATE-----
Generated at Sat Apr 27 10:13:17 2024 by rpki-client on console-ams.rpki-client.org