Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
File:                     3130332e33392e35302e302f32342d3234203d3e203633353031.roa (raw, json)
Hash identifier:          bzW3RG2JF3vL2qKqKSdhmutTN+wrGA8fL8X4tlKUJd0=
Subject key identifier:   66:D4:74:C1:98:D4:B9:1E:AE:1D:6D:86:61:FA:8C:28:E3:A4:2C:FA
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       23A423A99797E45572B5200C66C7BCA30705AEC0
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa
Signing time:             Sun 23 Jun 2024 18:00:02 +0000
ROA not before:           Sun 23 Jun 2024 17:55:02 +0000
ROA not after:            Sun 22 Jun 2025 18:00:02 +0000
asID:                     63501
IP address blocks:        103.39.50.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl
                          rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Mar 2025 20:47:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a4:23:a9:97:97:e4:55:72:b5:20:0c:66:c7:bc:a3:07:05:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Jun 23 17:55:02 2024 GMT
            Not After : Jun 22 18:00:02 2025 GMT
        Subject: CN=66D474C198D4B91EAE1D6D8661FA8C28E3A42CFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:93:74:b5:27:9c:11:a2:2a:a1:61:cf:d1:92:
                    7e:e6:38:f4:35:a9:21:31:7f:aa:76:57:31:90:0b:
                    e6:4f:92:61:77:aa:e2:5b:86:7d:8b:b3:20:c0:f5:
                    6b:87:d9:67:38:38:f5:ff:d0:24:7d:f9:24:20:86:
                    b6:3f:65:3f:76:6f:33:f6:61:40:74:6a:0f:8a:5e:
                    f5:6c:35:f1:3a:e0:17:5b:16:ac:30:4d:98:55:ad:
                    48:ff:3c:31:ed:72:41:c6:3b:17:84:14:90:00:ba:
                    25:e7:bb:0b:e3:6a:38:99:5b:5b:17:e6:93:09:44:
                    35:01:fa:60:95:f7:2e:f3:c8:30:39:20:46:80:99:
                    00:fd:9f:ae:c4:46:d1:f0:dd:c3:ac:c5:d6:0c:7c:
                    9c:4e:47:18:3b:36:39:6b:36:53:45:1d:77:0e:d5:
                    a0:6e:d0:da:f8:92:7d:b7:1d:c7:9e:c1:64:a0:3f:
                    e0:ef:0c:38:34:45:8a:b3:96:1b:37:32:bb:e7:59:
                    ba:9b:96:34:d7:ea:bb:b2:9f:1e:a5:bf:6c:b7:54:
                    9e:9c:83:10:c7:59:e5:32:24:83:ca:5f:89:ba:5d:
                    45:f9:81:2e:0a:59:c7:56:e2:30:1b:b5:1c:83:c6:
                    0c:32:50:c9:1f:27:b0:1c:d7:5e:9a:07:9d:9c:ac:
                    58:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:D4:74:C1:98:D4:B9:1E:AE:1D:6D:86:61:FA:8C:28:E3:A4:2C:FA
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/3130332e33392e35302e302f32342d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.39.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:1a:66:57:57:28:2c:ff:8a:0f:da:66:83:04:af:47:99:8a:
         2c:66:cc:5b:07:80:d2:ba:8f:99:f8:b2:da:a2:70:75:14:bc:
         6c:f6:c4:b6:94:17:e8:9c:45:fa:0d:da:be:47:68:85:16:90:
         a0:49:7c:e3:58:84:31:b9:34:61:ed:1e:d1:84:11:0e:96:70:
         85:9c:0f:94:4c:da:52:7f:80:72:eb:66:e3:a4:e4:3f:0f:0b:
         6a:09:80:c7:d4:e1:40:44:a4:d1:ab:ee:1e:64:fe:03:d0:55:
         c9:a9:ab:8c:9a:e8:b2:12:3a:6c:ad:ae:4b:c2:8b:c5:5d:89:
         a6:21:21:d7:b2:73:d3:fe:bb:42:c5:6e:24:38:f9:0f:da:6e:
         be:c9:87:29:02:53:27:e6:13:ba:05:ae:0b:2e:d2:8c:b6:94:
         d6:f4:b6:1a:4a:69:75:ae:5a:29:25:c7:be:15:d8:f8:ce:1d:
         80:32:89:ad:21:31:52:0e:4c:d7:b3:34:79:c7:bb:fb:82:f6:
         ee:74:a6:0f:44:b0:13:38:b4:1d:58:29:bb:83:6d:12:56:91:
         26:db:e5:10:43:1d:f0:bd:e5:b8:22:1b:18:2c:d9:e7:98:ea:
         42:49:33:c6:c5:7d:98:db:a0:0c:48:5c:a4:9d:d3:9b:88:ab:
         9d:bd:e5:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 11 05:02:16 2025 by rpki-client