Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31372e302f32342d3234203d3e20313331313138.roa
File:                     3130312e35302e31372e302f32342d3234203d3e20313331313138.roa (raw, json)
Hash identifier:          rpsXWnyYaOuBaNoBMd8dRREM/2X9KZ+/hYjJp6S0HS0=
Subject key identifier:   50:27:E7:3C:6F:98:82:E8:4E:BA:D5:1A:CA:99:90:EF:31:7C:C5:B1
Certificate issuer:       /CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
Certificate serial:       09DB3EC22838C500B286407FDA5136330A4AD466
Authority key identifier: 7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31372e302f32342d3234203d3e20313331313138.roa
Signing time:             Mon 31 Jul 2023 00:02:24 +0000
ROA not before:           Sun 30 Jul 2023 23:57:24 +0000
ROA not after:            Mon 29 Jul 2024 00:02:24 +0000
asID:                     131118
IP address blocks:        101.50.17.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl
                          rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.mft
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
                          rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Jun 2024 10:20:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:db:3e:c2:28:38:c5:00:b2:86:40:7f:da:51:36:33:0a:4a:d4:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7E2CF346D5DE840DC0EE944C918EDC5137D6998A
        Validity
            Not Before: Jul 30 23:57:24 2023 GMT
            Not After : Jul 29 00:02:24 2024 GMT
        Subject: CN=5027E73C6F9882E84EBAD51ACA9990EF317CC5B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:27:b8:9e:4a:26:9c:f9:32:0e:36:f6:99:11:
                    a4:42:60:4a:7a:5b:4e:79:d4:ff:8e:34:42:7d:3a:
                    3d:9d:f3:ff:32:e5:7d:4f:98:ae:20:dc:61:cb:df:
                    72:ff:57:7a:54:aa:98:50:be:73:76:be:8f:d2:bf:
                    ad:64:7b:dc:82:c2:1c:a8:d6:e8:f1:cb:a8:3a:90:
                    57:9f:e4:f5:a7:0c:f4:b6:20:87:6b:ba:c9:d5:11:
                    13:e9:b3:7c:f6:33:4f:2c:20:dd:fa:0f:4f:3c:91:
                    92:15:ec:16:52:17:10:e2:e1:3e:01:10:21:a3:17:
                    88:82:26:b5:0d:89:a1:d2:be:29:fe:70:06:34:65:
                    4d:bd:f7:76:67:51:6e:90:c9:08:f3:65:15:ad:d2:
                    df:13:3e:56:d3:5c:64:a5:50:04:76:db:0c:73:1f:
                    b2:d2:78:e5:0c:1c:29:8a:71:72:3f:ef:e2:2e:c5:
                    e3:04:8d:56:e0:44:e4:f1:d2:1d:77:d6:25:33:44:
                    b3:29:c5:5a:c0:2b:98:01:99:97:24:1e:df:84:9b:
                    30:89:2b:ad:1c:ae:13:12:7d:4b:e7:2c:1e:46:3c:
                    ce:b9:43:c0:f6:e1:86:95:61:10:79:85:9b:99:8c:
                    bb:f7:cb:0d:86:ec:38:20:90:a1:e9:33:7a:4c:14:
                    9c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:27:E7:3C:6F:98:82:E8:4E:BA:D5:1A:CA:99:90:EF:31:7C:C5:B1
            X509v3 Authority Key Identifier:
                keyid:7E:2C:F3:46:D5:DE:84:0D:C0:EE:94:4C:91:8E:DC:51:37:D6:99:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E2CF346D5DE840DC0EE944C918EDC5137D6998A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea702726-b2c6-46fc-8297-2dbdec6d6d5d/0/3130312e35302e31372e302f32342d3234203d3e20313331313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.50.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:1a:6f:92:51:b2:b5:ff:53:60:60:46:b3:49:aa:ae:d2:
         4f:6a:2f:ce:f0:c7:17:ee:52:b7:44:bb:10:f8:57:fd:74:ed:
         8e:b7:61:fa:5f:1e:21:9d:2b:e6:c5:19:60:d6:04:49:85:ca:
         b2:25:c6:1d:87:39:54:90:40:17:30:7e:2e:60:47:de:ad:b8:
         2b:39:a0:5d:d9:1e:a3:ac:6b:e8:87:ae:e9:6e:fb:7a:9d:d5:
         d0:61:b5:29:1e:cd:d0:d8:6d:00:e3:1a:a0:97:34:d4:c8:58:
         73:5e:e8:17:96:5a:71:3e:a0:6d:62:db:66:26:74:99:ac:a5:
         94:54:05:c5:67:df:29:19:ce:96:2e:8f:6f:a0:c0:74:54:fa:
         1e:bb:94:eb:67:8e:5e:f6:73:aa:e9:57:30:58:4e:0c:02:25:
         2a:eb:6d:56:b8:81:40:97:7c:22:4f:40:02:ac:60:a1:65:69:
         26:af:15:78:7a:3a:e1:e2:55:b4:95:e2:eb:db:91:2d:7c:9f:
         37:2f:f4:65:76:2f:12:1b:b1:07:c5:48:1b:d2:a9:8d:4e:52:
         b4:76:72:7f:45:7a:2a:bc:9e:f6:e5:c4:01:0b:94:03:52:33:
         05:6a:53:74:96:e0:3c:1f:a2:3e:f4:a6:13:03:91:90:27:f9:
         aa:12:aa:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 08:14:56 2024 by rpki-client on console-ams.rpki-client.org