Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
File:                     3130312e35302e31362e302f32342d3234203d3e20313331313137.roa (raw, json)
Hash identifier:          ZNeIPFibyRIVPbEp8ouWmuNPKorD7D4rCXQ2ykB3FSU=
Subject key identifier:   E7:09:4E:BC:5B:4C:6B:43:48:75:59:C5:26:01:0C:2D:E4:DF:08:9E
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       69CBC55DFEACF1506515EC91878FC373AC698E9E
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa
Signing time:             Mon 31 Jul 2023 00:02:27 +0000
ROA not before:           Sun 30 Jul 2023 23:57:27 +0000
ROA not after:            Mon 29 Jul 2024 00:02:27 +0000
asID:                     131117
IP address blocks:        101.50.16.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:cb:c5:5d:fe:ac:f1:50:65:15:ec:91:87:8f:c3:73:ac:69:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:27 2023 GMT
            Not After : Jul 29 00:02:27 2024 GMT
        Subject: CN=E7094EBC5B4C6B43487559C526010C2DE4DF089E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d6:13:ac:37:31:cf:9a:a7:fe:35:ff:5f:31:
                    a6:34:af:2a:36:43:87:e2:08:1a:ce:b6:88:05:39:
                    78:bc:df:6a:de:50:50:10:46:a8:2f:a3:b9:2d:62:
                    a2:6d:4d:80:09:d4:9e:21:9c:99:4a:46:a9:e8:5a:
                    81:17:13:c0:1f:b6:b4:45:44:e8:46:2e:37:ab:1c:
                    24:1a:1f:36:c4:1c:98:ab:fd:7a:26:e1:55:b1:8d:
                    43:1b:97:71:67:9c:ce:8a:f7:75:9d:28:a9:f0:a1:
                    64:16:3b:ca:6a:86:1b:5a:87:87:59:b4:d0:11:67:
                    01:0d:aa:73:e4:d7:e9:4c:3a:66:94:18:f8:9a:4e:
                    7a:2b:08:b2:57:5d:ce:31:71:4f:8d:34:3e:d4:40:
                    c0:19:c1:28:ed:a7:e6:d6:3d:8c:17:79:02:c1:ac:
                    3b:cb:1c:e1:22:87:67:95:3c:68:fa:ad:3a:82:04:
                    40:4e:63:e3:40:bf:36:7b:5e:fe:21:bc:f4:74:34:
                    7e:b7:39:35:ee:28:11:20:9a:ed:c6:36:3b:b5:c2:
                    a5:6c:80:76:ee:4e:b4:ca:62:1c:bc:7d:81:3e:c9:
                    39:18:58:79:36:8e:2e:b6:2d:d8:dd:a1:f3:a4:74:
                    4c:49:51:6b:74:b6:e2:88:3a:cd:ec:c3:8a:93:07:
                    47:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:09:4E:BC:5B:4C:6B:43:48:75:59:C5:26:01:0C:2D:E4:DF:08:9E
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31362e302f32342d3234203d3e20313331313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:97:37:02:e5:81:bc:13:27:40:94:79:b0:65:29:e6:61:8d:
         3c:df:a6:88:9e:ef:c7:51:d4:15:a9:bd:e4:fb:5e:28:fe:de:
         2d:8d:7d:71:c9:60:af:1a:ab:a1:4b:f1:c7:29:bd:39:c1:37:
         4c:7e:d5:0f:aa:bb:25:e6:b9:55:bb:2f:2d:0f:ba:0b:0e:a9:
         81:6a:93:4f:40:9f:8d:bc:3a:7c:08:e6:be:b1:1e:8a:e6:c6:
         75:e6:ad:68:b6:17:ec:c5:59:7a:12:c4:f5:19:df:2d:5b:53:
         d6:1b:de:90:cb:69:38:9c:90:60:ad:93:65:17:32:f6:e7:ee:
         0c:06:ee:67:c2:50:50:24:2a:fd:4b:77:27:e6:5f:ea:db:1e:
         19:17:af:eb:55:41:b0:37:48:ae:18:a9:a5:83:a4:99:3e:8d:
         f2:16:4d:ae:c5:c4:ab:f1:16:9f:63:f3:4e:f8:d4:21:d6:b2:
         bb:9b:62:6c:0c:ba:68:46:46:3d:67:82:50:65:59:96:03:0f:
         e3:02:e4:fe:ec:36:7d:62:9b:1e:c3:d0:2b:12:79:a9:2b:74:
         05:6b:16:83:a0:09:13:97:c0:4b:48:20:c1:fa:6a:84:52:f1:
         fa:d1:fb:88:3c:12:fa:a7:1a:da:81:3a:8a:ea:df:8e:eb:fa:
         87:2e:39:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 09:09:44 2024 by rpki-client on console-fra.rpki-client.org