Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
File:                     3130332e312e35302e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          13a296YbpXPKiDroOx9RoYtV5Gqcvos+cOx12thufiw=
Subject key identifier:   18:7A:5A:1A:95:5C:F3:E7:67:56:61:DA:15:CB:93:20:FA:F2:C0:49
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       45B3A1B54F4BDB5EA15605BEBF195751E9A2868D
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
Signing time:             Tue 29 Oct 2024 09:00:02 +0000
ROA not before:           Tue 29 Oct 2024 08:55:02 +0000
ROA not after:            Tue 28 Oct 2025 09:00:02 +0000
asID:                     142352
IP address blocks:        103.1.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 Nov 2024 21:27:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:b3:a1:b5:4f:4b:db:5e:a1:56:05:be:bf:19:57:51:e9:a2:86:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Oct 29 08:55:02 2024 GMT
            Not After : Oct 28 09:00:02 2025 GMT
        Subject: CN=187A5A1A955CF3E7675661DA15CB9320FAF2C049
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:d8:e2:90:2b:56:8b:d5:30:de:ce:61:10:01:
                    85:a2:e2:24:3b:db:97:43:9b:3b:2e:d3:da:43:b8:
                    dd:e5:ba:f3:3d:f1:96:3c:05:2e:2e:fc:89:2e:dc:
                    6f:3a:13:c9:fb:60:e8:a1:dc:42:2f:a3:e7:ab:f8:
                    2e:21:22:07:6b:67:30:1d:8d:99:df:84:0f:76:c7:
                    31:93:24:f9:b9:6d:c3:6b:f9:39:84:d4:8b:1a:e2:
                    17:dc:87:bd:01:e0:55:8b:6f:b2:aa:73:ca:6c:95:
                    c4:df:3b:8c:cf:c4:07:05:88:08:9a:93:f7:bc:6b:
                    77:be:93:a2:7b:47:95:50:07:24:24:46:f7:f9:33:
                    96:3b:ef:44:25:fd:44:ec:15:08:39:f4:26:28:2e:
                    57:ca:18:c8:e7:f6:6d:ef:d2:03:2d:83:4a:83:25:
                    dd:e5:81:08:26:62:4a:24:01:d3:bb:d5:48:f4:ed:
                    34:0f:a3:8a:30:1b:58:d0:14:eb:1f:81:f4:ee:13:
                    d5:0d:2a:4c:36:d7:c4:9b:aa:ec:27:c3:1b:19:74:
                    01:11:79:55:2a:5d:79:6a:10:47:6f:db:56:64:b3:
                    fa:01:9a:f2:a6:7c:9d:76:68:03:c1:22:ca:54:a8:
                    4c:73:d2:1d:b4:c9:ed:b8:84:a5:f2:2d:0f:a9:4d:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:5A:1A:95:5C:F3:E7:67:56:61:DA:15:CB:93:20:FA:F2:C0:49
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:89:fb:2e:15:b7:0f:24:03:45:75:fd:e5:6f:d1:36:dd:f8:
         25:f0:10:9d:6c:22:34:99:b6:52:f9:91:fe:3d:dd:be:2e:93:
         d2:72:51:23:8c:85:30:d9:9f:25:82:f2:29:06:1b:a2:55:f7:
         9f:6d:9c:50:1a:21:27:52:4f:fe:9e:b0:81:05:f6:cc:a3:62:
         1b:1d:3e:4a:c6:2f:78:16:0d:96:f8:90:27:0c:e7:31:26:c7:
         1f:bc:34:6a:1c:07:20:68:53:3e:9c:6e:b2:de:4a:34:4e:aa:
         60:9d:1b:18:db:ff:29:0c:c6:25:b2:fa:c2:95:46:a7:c1:6e:
         1b:1d:59:0c:c3:2b:71:f1:83:4a:1f:80:79:af:11:e3:00:0d:
         72:33:93:f9:31:6f:a0:07:52:49:2c:fa:8b:fa:92:ec:22:6c:
         bf:b0:a7:13:3d:90:47:d8:02:86:49:e3:bb:84:c1:5d:cb:e2:
         ef:0d:5c:bf:b4:ca:c8:f1:ac:92:de:9f:22:c2:3d:fd:68:90:
         95:96:a1:c6:33:e6:e8:96:aa:1b:a9:34:1e:07:a8:c8:96:c0:
         15:4c:cf:34:a9:c6:a8:35:ed:4c:fb:e7:0d:bf:2d:b0:60:4d:
         5b:0a:5c:46:ba:f6:67:3d:7e:41:30:d9:66:60:2e:e1:cd:d2:
         46:a6:37:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 14:55:03 2024 by rpki-client on console-fra.rpki-client.org