Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
File:                     3130332e312e35302e302f32342d3234203d3e20313432333532.roa (raw, json)
Hash identifier:          gTtjYsmInvuOko8NNEm6eGm4psDfszjAozkda1qyqEU=
Subject key identifier:   FE:55:3E:EF:81:13:31:F2:6A:85:27:90:50:F6:92:C6:24:7C:0A:98
Certificate issuer:       /CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
Certificate serial:       7FA5ACF3DB66AC55579B2179AA2DC6C45620541D
Authority key identifier: B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa
Signing time:             Tue 28 Nov 2023 09:00:01 +0000
ROA not before:           Tue 28 Nov 2023 08:55:01 +0000
ROA not after:            Tue 26 Nov 2024 09:00:01 +0000
asID:                     142352
IP address blocks:        103.1.50.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl
                          rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 27 Jun 2024 04:25:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a5:ac:f3:db:66:ac:55:57:9b:21:79:aa:2d:c6:c4:56:20:54:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B48345F7F9FB4F14FFFE8BC5B74685D2A0993094
        Validity
            Not Before: Nov 28 08:55:01 2023 GMT
            Not After : Nov 26 09:00:01 2024 GMT
        Subject: CN=FE553EEF811331F26A85279050F692C6247C0A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:18:eb:18:c3:41:3a:4f:5d:aa:98:4e:05:08:
                    c4:76:7a:64:b3:04:eb:2e:80:56:21:c7:20:50:5e:
                    17:51:b7:d8:0f:94:36:26:6c:47:d4:ca:1d:4b:8f:
                    15:40:72:e9:c7:af:f3:a1:10:d3:a2:7a:c8:51:df:
                    50:da:e0:b9:cc:37:aa:89:75:c9:41:c8:33:29:93:
                    c8:71:ab:05:0f:71:49:85:04:13:d9:01:e5:b1:72:
                    3f:ba:cf:64:0e:0a:d0:e5:9c:60:c2:20:af:5a:d1:
                    75:d5:66:2a:07:70:aa:eb:12:19:99:de:7b:48:b7:
                    58:45:5f:6c:7c:a6:d1:55:40:b3:c1:90:eb:05:49:
                    ba:d5:a8:2f:d0:1e:5b:20:13:f4:f5:d5:74:22:c5:
                    2a:2c:11:d5:a1:46:90:ca:b3:34:cd:aa:cb:fe:ab:
                    c2:6f:ca:3f:51:59:e6:67:4c:5c:ab:4b:d8:9c:fd:
                    2a:0f:6a:b6:35:77:cd:1f:a0:34:a4:ce:63:c9:5f:
                    1d:b5:19:21:ce:31:d0:c6:86:c7:0b:92:b8:56:3c:
                    85:6a:82:64:a5:11:ba:af:9a:0a:59:66:60:06:5d:
                    6e:76:4a:2b:66:9e:7d:06:74:fc:ce:cd:c7:d6:e1:
                    78:41:fc:67:bd:52:aa:9e:aa:2f:48:6e:80:dd:f8:
                    bc:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:55:3E:EF:81:13:31:F2:6A:85:27:90:50:F6:92:C6:24:7C:0A:98
            X509v3 Authority Key Identifier:
                keyid:B4:83:45:F7:F9:FB:4F:14:FF:FE:8B:C5:B7:46:85:D2:A0:99:30:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B48345F7F9FB4F14FFFE8BC5B74685D2A0993094.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b652bf9c-634b-40b9-ac0c-a87b47d59f91/0/3130332e312e35302e302f32342d3234203d3e20313432333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.1.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         54:f7:75:e7:9f:bd:b6:86:24:02:2c:88:31:eb:01:44:bf:d1:
         ea:bd:9c:c5:78:b6:c6:97:39:91:c4:5f:0d:99:3e:0a:e3:b9:
         1e:5f:ce:05:8a:84:b8:f2:e8:cd:41:c3:8a:6f:c1:c0:a4:39:
         5f:38:e2:df:79:2f:5c:16:ad:78:64:95:8e:b6:2c:ea:0a:f8:
         84:b5:20:5b:af:99:7e:6b:f9:90:f6:99:99:10:e5:06:46:39:
         62:ec:4d:06:52:15:bf:94:7b:ab:83:85:fb:c6:77:63:91:29:
         99:13:0f:fd:8f:ce:b2:ee:5b:83:03:f3:88:66:cc:1e:33:19:
         47:86:30:4e:5e:7c:0c:42:70:0b:00:46:93:a0:48:ea:aa:67:
         d2:13:1b:e5:35:60:46:1d:8c:58:96:f3:01:6d:f4:fd:4f:c1:
         95:9c:f7:71:c9:3d:f8:52:46:38:73:5e:37:98:c7:b3:d3:d4:
         31:44:c9:91:dc:8a:dc:41:9a:4c:fb:51:27:97:d3:f8:75:6f:
         cb:62:a1:40:6c:e9:f6:49:db:cb:f4:ad:2c:8c:d4:03:2e:85:
         17:33:6c:50:8e:0a:cf:54:d0:7d:33:6f:0b:54:0a:77:6e:46:
         c2:d4:d2:ff:40:d5:a9:de:0c:ca:d3:fa:01:ba:e4:9f:d8:dc:
         5f:f3:44:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:52:59 2024 by rpki-client on console-ams.rpki-client.org