Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          sl6nc3KsHsNPeCn26rSncWrqMRebiGVRwQfxM+5udOM=
Subject key identifier:   65:93:01:E1:95:2D:D6:4C:98:25:87:BB:14:1A:E4:93:04:03:CF:41
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       495BFD1F95965B039D2B7E93D2DDA6CF4F091FED
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 23 Jul 2023 17:00:03 +0000
ROA not before:           Sun 23 Jul 2023 16:55:03 +0000
ROA not after:            Sun 21 Jul 2024 17:00:03 +0000
asID:                     63501
IP address blocks:        103.39.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 05 Jun 2024 03:58:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5b:fd:1f:95:96:5b:03:9d:2b:7e:93:d2:dd:a6:cf:4f:09:1f:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jul 23 16:55:03 2023 GMT
            Not After : Jul 21 17:00:03 2024 GMT
        Subject: CN=659301E1952DD64C982587BB141AE4930403CF41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:f2:cb:5b:df:26:03:75:2f:b8:f1:6d:72:e7:
                    8d:99:48:7b:f3:01:50:17:45:59:0e:80:ce:d2:86:
                    f0:16:62:66:1b:21:0a:83:77:f4:24:64:e0:88:07:
                    81:5a:5c:42:b6:42:de:7e:2e:22:fb:8a:69:56:60:
                    61:62:08:ed:eb:65:60:51:28:01:9c:40:05:de:1d:
                    d8:c6:20:2b:20:1f:7a:2b:2a:f4:ac:7a:f6:f8:29:
                    cb:63:43:ce:44:00:0b:b9:49:9f:c9:14:2d:c5:5f:
                    0f:14:17:44:35:48:de:c3:43:ff:a2:71:c3:8a:de:
                    2e:f7:94:d3:22:7c:b8:6f:a2:49:5f:36:aa:de:43:
                    e2:b1:97:1b:87:a0:e9:21:1d:79:e8:ec:a4:dd:9d:
                    f3:21:87:83:c8:f5:2d:0c:5c:81:2b:91:c8:3f:14:
                    2c:fb:a9:20:f0:d3:d2:52:14:55:28:b8:e0:64:09:
                    e2:5e:68:e7:fd:a9:bc:c5:5d:9a:e0:cd:85:f6:38:
                    99:d7:61:b3:5e:4c:cf:89:d0:31:3f:55:16:37:3a:
                    15:26:76:be:30:e3:c0:ac:71:e4:0e:21:5f:e2:b8:
                    be:5e:af:a6:93:d7:cf:31:38:da:a7:47:35:60:7a:
                    fc:d7:7c:cd:b9:61:63:d3:9d:35:9f:b3:01:08:50:
                    05:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:93:01:E1:95:2D:D6:4C:98:25:87:BB:14:1A:E4:93:04:03:CF:41
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         de:c9:b6:b3:a8:33:dc:44:c9:9f:1a:89:71:19:df:fc:cb:3d:
         7f:19:0f:d3:1f:d8:21:92:43:55:26:a9:b0:9f:56:ef:c5:64:
         d2:0d:2b:14:a4:50:73:f7:d4:e7:09:a5:bd:46:5c:4b:15:5a:
         68:aa:28:39:dc:9d:4f:8a:42:22:ba:fb:06:d1:be:c9:93:3c:
         c3:3f:07:7d:e6:94:d1:54:07:ca:88:dd:f1:fc:41:df:00:1b:
         1a:8a:a9:42:85:06:25:df:f9:02:5d:ea:a9:05:43:9e:4e:ce:
         0e:87:dc:3a:69:75:dc:a4:60:e0:ca:fe:f0:a9:9f:e4:88:b2:
         0e:8d:17:6c:99:95:9b:d3:be:3a:72:12:8f:bd:4a:59:6b:8e:
         62:63:d4:18:8a:a7:63:30:0a:08:04:87:a7:35:0a:5d:2c:51:
         20:ac:b8:1f:e2:ce:48:db:2a:bc:1e:c4:18:43:3e:3d:91:32:
         3a:26:6c:e1:8b:1c:d2:27:1b:ca:41:ec:4b:ae:b6:0d:97:e9:
         df:fd:c3:5b:a5:54:12:0d:d0:bf:8c:80:a7:b3:da:49:81:3e:
         f9:14:c2:a0:9f:64:0b:eb:9a:75:a4:7f:77:e2:66:03:b4:f6:
         4f:20:53:ed:1a:88:f5:79:fa:1c:fa:3c:d1:d1:ca:8f:2f:ac:
         c8:c3:6c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 23:00:29 2024 by rpki-client on console-ams.rpki-client.org