Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
File:                     3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (raw, json)
Hash identifier:          Yq8Ks4j9wMdxcKEOcQIXo01Ac19KkunXRZKrsNsLi5U=
Subject key identifier:   C0:73:74:91:B9:66:1E:B0:22:69:39:72:5F:96:3A:10:90:C4:39:B2
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       5D4547733B022BE15AEB73262DBE74A72C66D25A
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
Signing time:             Tue 30 Jul 2024 02:58:28 +0000
ROA not before:           Tue 30 Jul 2024 02:53:28 +0000
ROA not after:            Tue 29 Jul 2025 02:58:28 +0000
asID:                     131117
IP address blocks:        101.50.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 24 Nov 2024 06:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:45:47:73:3b:02:2b:e1:5a:eb:73:26:2d:be:74:a7:2c:66:d2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 02:53:28 2024 GMT
            Not After : Jul 29 02:58:28 2025 GMT
        Subject: CN=C0737491B9661EB0226939725F963A1090C439B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c0:91:62:96:ed:57:e0:48:5d:74:93:99:28:
                    58:c3:df:11:1e:6c:e6:6a:b9:ae:b3:14:45:16:a9:
                    0e:2f:51:20:d9:fd:0e:ff:d3:37:1d:5f:76:1b:f6:
                    76:1a:37:88:f3:50:05:85:49:78:e2:e2:e6:2b:b1:
                    87:28:39:db:a3:2e:d5:c5:3a:d7:5b:8a:5c:60:ea:
                    11:a3:35:0c:cc:e9:84:05:e9:41:9a:3c:cc:f1:08:
                    dc:aa:c6:49:70:92:18:22:48:f0:cf:a0:42:17:17:
                    0f:55:30:74:e4:56:5e:ad:49:63:b3:e9:fc:cb:bd:
                    4d:a6:ba:5b:78:13:a3:34:6b:29:ec:92:ed:66:7a:
                    b5:69:d7:2a:63:24:e0:49:da:d5:3c:79:81:e5:b7:
                    6b:d9:c7:e4:f5:44:6d:45:fd:88:48:d8:d6:12:21:
                    c4:e2:ef:33:06:87:a3:0d:78:a4:6f:af:55:84:3f:
                    5a:7f:87:9c:ac:f5:32:76:8b:52:b1:d0:73:dd:03:
                    af:77:0d:a9:01:be:bd:86:bd:41:34:b7:2c:30:05:
                    19:f8:83:2b:e7:61:ff:41:2e:7d:d1:3a:09:2e:87:
                    22:05:1a:ce:2e:1b:3d:f5:69:b2:32:a9:8a:12:ee:
                    b0:31:65:25:d0:7a:b8:c3:f2:74:02:da:92:af:35:
                    84:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:73:74:91:B9:66:1E:B0:22:69:39:72:5F:96:3A:10:90:C4:39:B2
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         45:6f:0b:b0:62:6a:79:2b:bb:67:a7:f8:53:81:1b:38:59:c1:
         a0:4b:d2:4f:70:af:19:59:22:35:de:69:1c:36:42:35:6f:2d:
         9c:d8:ff:65:b8:d3:5b:e9:83:81:bf:76:41:fd:53:7d:a5:6e:
         59:96:de:1f:56:19:48:6d:33:21:0e:54:5b:bf:a2:87:02:e8:
         39:c0:a7:5e:fa:e0:af:1d:e1:51:a5:13:44:1a:f8:71:5d:c3:
         73:dc:99:e4:0e:15:e4:bd:72:69:bf:63:cf:db:ad:05:d7:0c:
         d7:43:ab:1f:c8:86:00:89:40:ab:7a:dd:74:05:7c:53:7e:db:
         24:c8:3d:be:3f:ad:62:ef:97:44:11:31:e4:ad:7e:22:07:7d:
         de:66:f2:db:d4:be:17:36:f2:34:c8:db:d3:02:86:88:bf:da:
         25:2a:7d:07:d5:b5:b9:f9:1b:89:27:e3:1f:4f:2f:19:34:cf:
         01:ca:7a:d7:f9:7c:d6:84:e2:e7:cb:79:34:1d:96:28:db:8a:
         b3:d7:d9:23:0f:5c:f9:5b:7c:71:74:83:ab:ed:3f:f2:29:1d:
         fa:3c:3f:f2:17:3a:16:71:13:32:76:8a:1b:df:e7:07:47:fa:
         af:62:0a:d6:66:aa:92:de:cc:36:98:c0:7e:cf:10:28:73:41:
         e3:c4:f6:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 06:48:40 2024 by rpki-client on console-fra.rpki-client.org